$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4d12f9e-4c31-386c-83a0-2af8f278173d.roa File: f4d12f9e-4c31-386c-83a0-2af8f278173d.roa (raw, json) Hash identifier: 8FobYfHdMwH9Ww39xVlzwvGoODtQ2ZajIdp9zYYy1eo= Subject key identifier: CF:BF:44:B0:7D:34:AD:C9:F4:F9:80:D2:CC:49:36:C7:65:63:B2:AE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6BA64D8BD341B6524EF400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4d12f9e-4c31-386c-83a0-2af8f278173d.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 22909 IP address blocks: 2001:559:c3d7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:a6:4d:8b:d3:41:b6:52:4e:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=7af2ba4c-2c94-4802-82eb-40cf98f566c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:cf:60:49:42:ae:e3:eb:44:43:e1:4b:2c:b8: 3e:c8:f6:76:9a:69:11:82:1a:37:96:3c:0e:4c:2a: 11:4f:73:cd:b5:90:53:45:b7:0e:9e:01:47:89:06: e9:f9:32:2b:8b:7a:2d:0f:9d:aa:29:ea:89:be:c3: 8f:71:52:10:49:d4:87:f5:eb:47:cf:b3:31:e5:55: 0a:8b:bc:36:96:05:1c:d2:68:8c:0c:09:b6:81:c9: fe:7d:e5:ec:15:09:a8:d4:16:c5:20:14:96:75:d2: f3:47:81:ec:72:c4:89:69:df:2b:62:76:30:a6:50: 87:c5:a4:11:58:4a:e4:cc:99:3a:9c:5e:9e:fb:05: 19:23:76:67:ac:b3:28:9b:55:14:35:cd:74:24:bb: 2e:93:1b:73:37:c1:1a:c3:8e:e6:a8:f8:7e:eb:3d: e8:4a:41:ca:cd:f1:9b:ae:0e:8f:0b:37:5c:48:05: 7f:c2:d8:5e:5a:75:7f:a4:f0:72:a4:fd:dd:4f:5d: ae:a2:12:99:2f:bb:f5:1f:7f:4a:a4:d2:19:5c:b4: 8c:f8:3e:b3:e1:cf:78:ea:e1:1a:d7:8e:05:cd:c1: ec:72:a0:85:67:89:4d:52:70:35:7c:ee:31:f7:35: 82:c2:e9:76:80:a1:ca:86:fa:d3:d6:dd:65:7e:2a: d5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:BF:44:B0:7D:34:AD:C9:F4:F9:80:D2:CC:49:36:C7:65:63:B2:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4d12f9e-4c31-386c-83a0-2af8f278173d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c3d7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:fb:b6:3e:76:1e:98:f3:11:53:e7:c4:97:82:98:70:e1:a9: f4:a5:a4:83:06:23:23:04:53:46:5e:b5:b5:c7:45:c6:f4:fe: 65:f3:54:88:af:6e:af:b3:c3:c5:8f:05:6a:fd:70:73:51:2d: 6b:49:5c:3b:10:54:5f:62:e8:ef:f5:bf:cb:2d:21:7d:b0:1e: 04:3c:a8:f4:66:e7:1d:27:01:55:a9:c4:b9:7b:28:e9:7a:3c: 14:74:b9:95:a5:cd:6f:99:96:d2:33:ca:c4:51:5b:74:70:3f: bf:95:9d:c1:be:3e:0e:34:10:a2:da:2a:fd:fe:36:55:4f:67: 54:b5:63:e5:9f:66:b5:39:fa:2d:61:3f:a8:ba:4b:c7:16:51: eb:66:50:1d:c2:b2:65:ce:4f:e2:6f:de:e2:0f:f1:28:ac:cc: 9d:a3:93:68:7e:54:e6:a5:b3:2c:ce:76:15:00:e5:48:ae:41: 37:d6:e4:23:30:3e:91:97:08:9e:3b:b0:ad:35:cc:ab:3a:e3: 09:a9:5a:2b:df:5e:2e:3a:9f:7d:2f:69:74:13:67:99:a4:52: 2d:62:11:b8:dc:04:c1:02:18:59:68:be:28:74:d8:bf:df:d9: aa:b3:bb:1f:82:0d:28:e7:56:8f:f1:9b:3a:c8:2d:a2:95:b1: c6:c0:dc:51 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiea6ZNi9NBtlJO9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk N2FmMmJhNGMtMmM5NC00ODAyLTgyZWItNDBjZjk4ZjU2NmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg89gSUKu4+tEQ+FLLLg+yPZ2mmkRgho3ljwO TCoRT3PNtZBTRbcOngFHiQbp+TIri3otD52qKeqJvsOPcVIQSdSH9etHz7Mx5VUK i7w2lgUc0miMDAm2gcn+feXsFQmo1BbFIBSWddLzR4HscsSJad8rYnYwplCHxaQR WErkzJk6nF6e+wUZI3ZnrLMom1UUNc10JLsukxtzN8Eaw47mqPh+6z3oSkHKzfGb rg6PCzdcSAV/wtheWnV/pPBypP3dT12uohKZL7v1H39KpNIZXLSM+D6z4c946uEa 144FzcHscqCFZ4lNUnA1fO4x9zWCwul2gKHKhvrT1t1lfirV1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM+/RLB9NK3J9PmA0sxJNsdlY7KuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjRkMTJmOWUtNGMzMS0z ODZjLTgzYTAtMmFmOGYyNzgxNzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcPX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAET7tj52HpjzEVPnxJeCmHDhqfSlpIMGIyMEU0ZetbXHRcb0/mXz VIivbq+zw8WPBWr9cHNRLWtJXDsQVF9i6O/1v8stIX2wHgQ8qPRm5x0nAVWpxLl7 KOl6PBR0uZWlzW+ZltIzysRRW3RwP7+VncG+Pg40EKLaKv3+NlVPZ1S1Y+WfZrU5 +i1hP6i6S8cWUetmUB3CsmXOT+Jv3uIP8SiszJ2jk2h+VOalsyzOdhUA5UiuQTfW 5CMwPpGXCJ47sK01zKs64wmpWivfXi46n30vaXQTZ5mkUi1iEbjcBMECGFlovih0 2L/f2aqzux+CDSjnVo/xmzrILaKVscbA3FE= -----END CERTIFICATE-----Generated at Mon Apr 7 06:17:27 2025 by rpki-client