$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f72faa09-a2e2-3ad0-a5bb-bd3f68e04b4b.roa File: f72faa09-a2e2-3ad0-a5bb-bd3f68e04b4b.roa (raw, json) Hash identifier: CFPcoN4XFO9+1o/ggXlom6EJTQRh583Z1BDLpliN+GU= Subject key identifier: 2A:0F:4E:0A:17:75:15:C1:9F:70:40:E4:84:44:83:64:17:EE:28:88 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6CAC9EE735283F55A58180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f72faa09-a2e2-3ad0-a5bb-bd3f68e04b4b.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33657 IP address blocks: 2001:559:1e7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:ac:9e:e7:35:28:3f:55:a5:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=204c25aa-f867-484f-b7af-dbdd7784bcf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9e:3c:c3:4e:05:e5:13:52:ff:d4:01:65:9c: 9e:bd:44:22:a8:ef:ba:84:36:7f:f9:b7:58:9b:4b: 57:56:4b:3e:03:dd:c7:1a:89:32:3c:1a:db:78:f9: 65:e5:40:00:4d:24:05:02:57:73:7b:4d:53:a4:74: a4:3b:c5:57:0f:57:9f:62:fc:cb:f0:fd:35:4d:91: 52:ad:88:1b:18:a8:ff:3e:fb:65:6d:e4:7b:5c:d1: 81:d2:fc:01:67:d5:b6:64:87:b7:e6:db:a1:d8:aa: cd:ed:34:06:2c:3f:6b:b2:46:c5:f8:43:8d:ca:45: 48:3c:11:3b:04:2b:99:23:6c:96:7c:ec:1c:3a:5f: 43:91:36:80:db:46:fc:58:72:55:e0:47:9c:3b:7f: c7:95:7e:2a:96:15:a9:b6:2f:56:4d:3c:f9:a5:63: 07:16:b5:1b:5b:48:36:1e:01:7a:77:47:a8:83:62: 65:28:01:36:65:83:fd:cf:5c:28:e8:e4:f0:cb:8c: 52:a9:60:47:d7:4e:c1:42:e0:94:ed:e9:bb:9a:e6: f3:17:3c:14:27:b9:cc:bf:ad:c3:8f:66:19:37:e3: b7:cc:9b:69:b2:e3:ca:00:41:f0:2a:06:73:a9:e9: 00:6a:62:49:7a:87:07:c7:31:1a:9e:43:7e:7b:34: 70:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:0F:4E:0A:17:75:15:C1:9F:70:40:E4:84:44:83:64:17:EE:28:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f72faa09-a2e2-3ad0-a5bb-bd3f68e04b4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:1e7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:c0:7a:e6:c3:73:89:cd:c5:15:a7:f5:d6:14:a0:3b:ae:35: c9:66:f6:ae:f1:90:83:f8:3c:31:03:c9:12:47:9a:55:9a:fb: c6:a3:7b:fb:59:30:57:3d:2c:c4:51:3d:b1:71:88:eb:2d:93: 4e:29:18:56:d7:d2:76:aa:f6:63:31:d0:71:d9:6f:1c:eb:31: 5d:55:7f:36:c4:e0:eb:8a:e4:88:b6:0f:9e:76:c7:39:d9:8e: 9e:6c:80:63:45:2d:75:4a:85:c8:13:b1:d9:0d:f3:6e:27:3f: 85:d5:7b:87:19:fa:ed:db:9e:f2:56:e7:ba:fd:fd:95:1e:c1: 1f:d2:84:a1:ca:5e:c6:0b:f0:39:34:72:fb:9c:37:61:18:1c: a7:8e:96:ed:ae:41:47:a7:c9:78:08:a1:08:86:5d:2d:dd:c6: 1c:72:c8:27:16:01:e7:8c:15:1d:dc:96:4c:05:ad:76:d4:b1: fa:31:a0:36:44:b3:cf:63:3e:55:08:6a:af:c8:a2:44:02:fb: a9:ae:05:74:8c:d6:78:09:0b:5f:c5:39:d6:41:9e:1b:01:f9: 94:e2:85:4c:39:3b:43:94:b7:1b:93:46:b2:3b:a3:ea:be:fb: f6:0c:90:1a:1a:e6:02:6b:3b:13:99:54:9c:a4:dd:35:4c:21: d4:15:a8:f3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebKye5zUoP1WlgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk MjA0YzI1YWEtZjg2Ny00ODRmLWI3YWYtZGJkZDc3ODRiY2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu548w04F5RNS/9QBZZyevUQiqO+6hDZ/+bdY m0tXVks+A93HGokyPBrbePll5UAATSQFAldze01TpHSkO8VXD1efYvzL8P01TZFS rYgbGKj/PvtlbeR7XNGB0vwBZ9W2ZIe35tuh2KrN7TQGLD9rskbF+EONykVIPBE7 BCuZI2yWfOwcOl9DkTaA20b8WHJV4EecO3/HlX4qlhWpti9WTTz5pWMHFrUbW0g2 HgF6d0eog2JlKAE2ZYP9z1wo6OTwy4xSqWBH107BQuCU7em7mubzFzwUJ7nMv63D j2YZN+O3zJtpsuPKAEHwKgZzqekAamJJeocHxzEankN+ezRw5wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCoPTgoXdRXBn3BA5IREg2QX7iiIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjcyZmFhMDktYTJlMi0z YWQwLWE1YmItYmQzZjY4ZTA0YjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQHn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG3AeubDc4nNxRWn9dYUoDuuNclm9q7xkIP4PDEDyRJHmlWa+8aj e/tZMFc9LMRRPbFxiOstk04pGFbX0naq9mMx0HHZbxzrMV1VfzbE4OuK5Ii2D552 xznZjp5sgGNFLXVKhcgTsdkN824nP4XVe4cZ+u3bnvJW57r9/ZUewR/ShKHKXsYL 8Dk0cvucN2EYHKeOlu2uQUenyXgIoQiGXS3dxhxyyCcWAeeMFR3clkwFrXbUsfox oDZEs89jPlUIaq/IokQC+6muBXSM1ngJC1/FOdZBnhsB+ZTihUw5O0OUtxuTRrI7 o+q++/YMkBoa5gJrOxOZVJyk3TVMIdQVqPM= -----END CERTIFICATE-----Generated at Mon Apr 7 05:46:16 2025 by rpki-client