$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f43141e9-25a5-3ddc-aa4d-14ab3aa9908b.roa File: f43141e9-25a5-3ddc-aa4d-14ab3aa9908b.roa (raw, json) Hash identifier: Yiuxg+dTZXLGIe7p91yNdy3pf6qKXnN1c3U2oW2Q6uk= Subject key identifier: 01:6F:3B:92:70:A8:60:7D:26:D2:F2:93:0B:26:CA:49:03:54:28:73 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C3B30B0FF01AF5ADAFDC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f43141e9-25a5-3ddc-aa4d-14ab3aa9908b.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7015 IP address blocks: 2001:559:87e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:3b:30:b0:ff:01:af:5a:da:fd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=8e7daa31-c13b-4be4-8c74-3bcea2d7f032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c0:9f:98:5e:cb:42:87:89:5c:12:f9:e7:bf: 7d:75:88:e7:f1:f8:e7:e9:b0:6b:36:dd:c9:0b:e8: 34:c8:b2:d3:ed:e5:00:0e:02:13:9d:61:c1:59:ed: 17:56:98:c5:c4:88:20:59:9c:4c:69:98:a9:27:bb: 2f:1e:be:69:ac:3e:67:c3:09:fa:71:7d:0c:4e:0f: 9d:ef:f2:20:4a:a6:c5:78:ad:ec:90:bf:94:d2:41: c7:e5:a4:6d:69:30:42:7b:90:38:4e:25:95:a6:04: a3:89:d0:66:b6:df:8a:f0:c9:fb:00:76:d0:1a:51: 8b:61:45:28:c3:2c:c7:6f:b5:43:9e:cc:07:c1:6e: 7c:89:1e:22:03:6a:d8:ef:5e:12:7f:e2:4b:64:b7: 0e:52:58:45:74:b0:da:bb:e9:ad:7e:d8:d8:7d:86: 8c:ed:98:d8:c9:90:50:ba:43:a9:f1:7f:9f:b9:d0: da:db:8f:9a:24:63:70:02:b1:77:0d:d9:00:29:27: a6:db:b8:00:77:96:f8:6f:5d:0b:0b:01:ab:00:17: c2:0e:51:56:37:d9:6d:9e:90:21:55:67:3f:2f:d2: 64:4e:32:8e:53:c9:01:c8:19:85:33:08:48:ee:7b: b7:51:0e:00:1d:00:24:94:56:51:06:85:d1:b8:eb: a0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:6F:3B:92:70:A8:60:7D:26:D2:F2:93:0B:26:CA:49:03:54:28:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f43141e9-25a5-3ddc-aa4d-14ab3aa9908b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:87e0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:f0:cb:bf:7d:ce:b0:49:6f:43:e6:d3:67:62:7b:e8:99:5a: e1:03:d5:2f:d0:a4:ea:29:e1:55:d9:4a:26:8d:92:3a:df:ec: 37:cc:99:0f:05:70:a8:c5:7b:57:42:06:06:28:ed:d7:53:ba: 1a:6f:f5:99:15:7a:91:27:c4:81:49:b3:2a:1d:d1:0a:da:89: 4c:a7:24:db:25:2d:76:29:68:0d:3a:ba:fe:c6:47:16:e4:02: cc:1f:d4:f0:60:6c:b3:3d:c1:3c:b7:08:75:a3:6d:8d:d3:50: 88:b9:64:29:8b:9b:ed:3a:27:24:97:46:67:93:01:ec:0b:66: be:99:ae:50:24:59:fe:76:ca:e2:72:b6:59:18:b8:bc:2b:10: cc:c9:f1:fb:13:97:26:08:7a:4f:e1:06:60:be:ad:2b:23:b5: ec:6c:86:34:13:af:94:a9:60:b5:7d:ab:9c:df:17:32:be:60: 63:70:c2:9f:2a:76:a7:e7:44:02:ef:49:62:fe:ea:ba:85:29: 8d:04:8c:14:73:2e:a2:a2:30:8b:d5:67:1a:4c:37:ad:04:f7: 25:eb:30:8a:88:bb:08:f9:9c:59:43:75:2f:22:1f:7e:3f:dd: 35:0f:36:71:18:df:00:c2:91:8d:b3:d2:98:cc:29:f8:f8:c2: c1:56:24:b4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebDswsP8Br1ra/cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk OGU3ZGFhMzEtYzEzYi00YmU0LThjNzQtM2JjZWEyZDdmMDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcCfmF7LQoeJXBL55799dYjn8fjn6bBrNt3J C+g0yLLT7eUADgITnWHBWe0XVpjFxIggWZxMaZipJ7svHr5prD5nwwn6cX0MTg+d 7/IgSqbFeK3skL+U0kHH5aRtaTBCe5A4TiWVpgSjidBmtt+K8Mn7AHbQGlGLYUUo wyzHb7VDnswHwW58iR4iA2rY714Sf+JLZLcOUlhFdLDau+mtftjYfYaM7ZjYyZBQ ukOp8X+fudDa24+aJGNwArF3DdkAKSem27gAd5b4b10LCwGrABfCDlFWN9ltnpAh VWc/L9JkTjKOU8kByBmFMwhI7nu3UQ4AHQAklFZRBoXRuOugWwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAFvO5JwqGB9JtLykwsmykkDVChzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjQzMTQxZTktMjVhNS0z ZGRjLWFhNGQtMTRhYjNhYTk5MDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYfg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAM3wy799zrBJb0Pm02die+iZWuED1S/QpOop4VXZSiaNkjrf7DfM mQ8FcKjFe1dCBgYo7ddTuhpv9ZkVepEnxIFJsyod0QraiUynJNslLXYpaA06uv7G RxbkAswf1PBgbLM9wTy3CHWjbY3TUIi5ZCmLm+06JySXRmeTAewLZr6ZrlAkWf52 yuJytlkYuLwrEMzJ8fsTlyYIek/hBmC+rSsjtexshjQTr5SpYLV9q5zfFzK+YGNw wp8qdqfnRALvSWL+6rqFKY0EjBRzLqKiMIvVZxpMN60E9yXrMIqIuwj5nFlDdS8i H34/3TUPNnEY3wDCkY2z0pjMKfj4wsFWJLQ= -----END CERTIFICATE-----Generated at Sun Apr 6 11:47:11 2025 by rpki-client