$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f486c1c1-66bd-3cdf-b37f-956cf2f3e98d.roa File: f486c1c1-66bd-3cdf-b37f-956cf2f3e98d.roa (raw, json) Hash identifier: Ecm9tS1mqFw+AmMOJNiuDBuIBGf14tG3DBy4qDHC5o0= Subject key identifier: 03:22:DA:A1:C9:2A:AF:7D:6E:E5:6C:06:4F:44:54:E8:CA:95:64:05 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6D6C9D05AC21363B1E6C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f486c1c1-66bd-3cdf-b37f-956cf2f3e98d.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33651 IP address blocks: 2001:559:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:6c:9d:05:ac:21:36:3b:1e:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=bcba5795-e598-4330-9197-d425dbed7e47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ba:72:0d:e5:54:89:d1:6d:45:c1:ae:8b:6e: 5d:35:a7:fc:12:dd:16:1d:16:2b:c4:2d:bc:46:7e: bb:04:d7:44:80:5c:cb:a4:a4:fc:64:87:da:70:97: d0:ea:27:f3:73:5b:74:ec:c9:55:6e:71:8d:fe:89: 73:da:4b:e3:1e:14:da:a8:71:15:c7:67:5a:ce:5f: 8f:e3:b5:1d:7f:37:eb:a4:83:a0:b1:2b:71:b2:24: 19:cd:75:a2:d9:30:97:b5:3e:4e:42:64:26:9e:c2: ab:a6:d1:f0:cc:97:97:cc:3b:0e:26:16:04:7c:bf: 67:d2:99:aa:6e:61:31:f6:b1:9c:9c:84:ac:0f:37: dd:d3:91:0d:6e:0e:36:46:bb:b8:73:85:ad:5b:8b: 1a:ba:d2:77:8c:9c:f0:c4:54:c2:14:6f:0c:7a:47: 92:56:b1:a8:0d:6f:b0:53:8d:47:79:0d:a5:94:6f: 43:ff:95:6d:91:da:ef:3d:53:16:f4:36:4f:5d:78: c4:18:7b:49:14:b8:1d:86:2c:ba:5d:13:42:94:fd: aa:51:70:0a:e6:77:d1:26:e4:32:d2:ca:79:0c:8e: 41:5d:ff:de:84:93:83:7a:b5:25:d9:05:8a:4d:3a: 81:95:15:bb:76:90:29:11:b5:d5:a8:1b:f0:80:e6: b5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:22:DA:A1:C9:2A:AF:7D:6E:E5:6C:06:4F:44:54:E8:CA:95:64:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f486c1c1-66bd-3cdf-b37f-956cf2f3e98d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:c8:7f:d7:b3:00:94:0f:7a:55:f4:bd:b5:c9:0b:aa:8f:58: 58:7b:46:d8:46:5f:3e:03:c1:5a:eb:ca:8b:9b:a0:98:ad:81: aa:26:ac:8c:55:b2:14:b7:89:7b:a8:61:1e:a9:fb:74:06:b9: 38:1c:cf:09:08:ff:15:d5:26:43:1d:66:ee:72:0d:bc:03:fb: 15:7c:d8:8a:e8:32:b2:14:dd:c1:c2:d4:45:54:e6:b9:18:20: 57:9b:b7:ed:80:ff:91:cc:84:54:fd:72:94:0c:ff:7f:5d:1d: 1a:3a:15:8e:d7:5d:ef:14:37:dc:38:e6:6b:65:a8:01:b3:0b: 13:9e:bd:8f:42:37:11:f0:1e:70:e5:f8:90:ea:c0:53:d7:9b: 87:7a:7b:b8:74:61:75:83:e4:ac:e7:3e:26:e4:af:09:52:d0: 9e:10:32:7c:a1:a8:26:b8:b6:6e:1e:d3:80:e9:56:69:cc:4e: 13:e1:57:d5:7e:6d:2d:a8:a3:d6:f6:93:16:87:77:b1:60:36: 85:e2:f3:08:fb:23:c8:c5:fd:22:e5:c3:0f:e1:fc:ed:6e:10: a4:3f:3f:75:b8:6f:ff:3d:73:59:71:0c:10:54:d8:42:6e:97: 07:38:ea:c9:de:b7:89:34:b6:f5:ae:c9:24:19:17:f9:fe:cc: 73:6f:13:e1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebWydBawhNjsebIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk YmNiYTU3OTUtZTU5OC00MzMwLTkxOTctZDQyNWRiZWQ3ZTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrpyDeVUidFtRcGui25dNaf8Et0WHRYrxC28 Rn67BNdEgFzLpKT8ZIfacJfQ6ifzc1t07MlVbnGN/olz2kvjHhTaqHEVx2dazl+P 47UdfzfrpIOgsStxsiQZzXWi2TCXtT5OQmQmnsKrptHwzJeXzDsOJhYEfL9n0pmq bmEx9rGcnISsDzfd05ENbg42Rru4c4WtW4sautJ3jJzwxFTCFG8MekeSVrGoDW+w U41HeQ2llG9D/5VtkdrvPVMW9DZPXXjEGHtJFLgdhiy6XRNClP2qUXAK5nfRJuQy 0sp5DI5BXf/ehJODerUl2QWKTTqBlRW7dpApEbXVqBvwgOa1DwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAMi2qHJKq99buVsBk9EVOjKlWQFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjQ4NmMxYzEtNjZiZC0z Y2RmLWIzN2YtOTU2Y2YyZjNlOThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKTIf9ezAJQPelX0vbXJC6qPWFh7RthGXz4DwVrryouboJitgaom rIxVshS3iXuoYR6p+3QGuTgczwkI/xXVJkMdZu5yDbwD+xV82IroMrIU3cHC1EVU 5rkYIFebt+2A/5HMhFT9cpQM/39dHRo6FY7XXe8UN9w45mtlqAGzCxOevY9CNxHw HnDl+JDqwFPXm4d6e7h0YXWD5KznPibkrwlS0J4QMnyhqCa4tm4e04DpVmnMThPh V9V+bS2oo9b2kxaHd7FgNoXi8wj7I8jF/SLlww/h/O1uEKQ/P3W4b/89c1lxDBBU 2EJulwc46snet4k0tvWuySQZF/n+zHNvE+E= -----END CERTIFICATE-----Generated at Mon Apr 7 06:08:40 2025 by rpki-client