$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f82fb883-7400-3fa3-8a7a-94ee621835a5.roa File: f82fb883-7400-3fa3-8a7a-94ee621835a5.roa (raw, json) Hash identifier: q6wknr87IueeVhs54sZ/n6Jd7mUkHRTB8OgJWsB2l4g= Subject key identifier: 8F:72:5C:9C:EE:A3:B8:4E:24:40:5B:AB:AA:F8:C3:E0:3B:AF:8B:6C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C01063C331D7DAF8F9FB0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f82fb883-7400-3fa3-8a7a-94ee621835a5.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33651 IP address blocks: 2001:559:c55f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:01:06:3c:33:1d:7d:af:8f:9f:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=e4526e5b-bb36-4288-b33c-0e4264bf930f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:79:ab:b6:b4:97:87:1c:56:da:b9:df:01:7d: 2d:68:d4:fb:fb:15:55:e4:f2:b7:2f:eb:55:b3:5d: fb:37:91:c5:09:37:0e:a2:93:7e:1f:f1:32:9a:2c: 80:c1:a6:e4:65:9f:cb:84:72:2d:54:13:23:a3:b8: d3:7d:5a:68:cd:2a:a0:28:b4:b0:01:47:0a:3d:ba: 63:3a:47:c4:a3:58:62:69:0a:e5:87:c4:27:3b:d6: 89:7f:02:e2:ea:f3:a7:26:55:5d:82:d7:3c:f3:4d: dd:51:81:d3:be:32:10:d2:42:5b:bc:4a:82:c2:61: 1e:1c:c6:83:c3:3c:c4:2e:3a:ca:73:32:5f:70:60: 92:ed:8c:6f:af:42:71:e2:fd:b3:81:c9:e0:f6:cc: 20:bf:f0:41:ab:a1:0c:f3:bf:2a:49:04:8e:30:ea: 18:86:e1:aa:6b:a9:28:48:3f:fb:4a:5b:c5:23:41: 0d:84:c7:d2:e1:51:50:ae:b9:69:63:c2:ff:58:26: b7:d8:5a:e9:09:cc:7a:40:ae:87:eb:42:df:ff:46: 6f:ce:c0:da:90:12:a6:4a:2c:82:25:ef:0c:04:4d: 00:e8:0e:24:3e:80:50:88:5f:ef:5c:32:fb:9a:4c: b1:78:a9:a7:cc:e9:c7:b6:77:a6:15:0f:d0:09:21: b4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:72:5C:9C:EE:A3:B8:4E:24:40:5B:AB:AA:F8:C3:E0:3B:AF:8B:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f82fb883-7400-3fa3-8a7a-94ee621835a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c55f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:e2:00:a8:04:f8:f1:cc:74:7a:2e:11:43:95:63:81:6a:08: 9d:2f:81:fe:a2:50:62:25:6d:53:47:0c:19:54:20:fe:4e:92: f5:b0:1b:96:40:05:11:f6:71:53:a3:04:b4:1e:57:24:38:94: 9c:7d:60:a9:77:16:2a:9d:73:47:98:a9:0a:a5:2e:38:34:ec: 36:24:ee:1c:f2:fb:1a:49:b8:02:cc:af:e5:b6:9f:1c:80:c0: 98:9c:7e:33:af:a6:cd:c5:25:aa:26:c9:47:1c:35:32:35:82: 6e:31:49:dd:25:31:25:e0:70:0c:ca:a2:d0:3f:bb:8d:99:d1: 34:f8:1f:c2:d1:d5:ec:bf:07:5a:24:16:52:04:90:5d:bd:32: d8:09:70:22:e3:7f:a0:77:5f:a0:82:8c:27:bd:50:f2:d5:72: bf:f1:85:5a:18:88:38:cd:f9:90:83:2d:0f:02:06:e7:1f:2c: 73:49:12:7a:47:77:cf:67:45:cc:d9:d6:06:8e:06:1a:bd:49: 2e:ca:c1:e8:4c:5c:c2:7c:2a:6c:be:4c:34:df:b8:f5:2a:1a: f0:65:d5:a0:3c:71:98:37:51:36:38:29:61:a3:1c:75:02:96: 90:73:d9:17:d8:88:f8:a4:ed:5b:46:4f:62:5b:28:01:6c:0d: d0:00:1b:c2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebAEGPDMdfa+Pn7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZTQ1MjZlNWItYmIzNi00Mjg4LWIzM2MtMGU0MjY0YmY5MzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnmrtrSXhxxW2rnfAX0taNT7+xVV5PK3L+tV s137N5HFCTcOopN+H/EymiyAwabkZZ/LhHItVBMjo7jTfVpozSqgKLSwAUcKPbpj OkfEo1hiaQrlh8QnO9aJfwLi6vOnJlVdgtc8803dUYHTvjIQ0kJbvEqCwmEeHMaD wzzELjrKczJfcGCS7Yxvr0Jx4v2zgcng9swgv/BBq6EM878qSQSOMOoYhuGqa6ko SD/7SlvFI0ENhMfS4VFQrrlpY8L/WCa32FrpCcx6QK6H60Lf/0ZvzsDakBKmSiyC Je8MBE0A6A4kPoBQiF/vXDL7mkyxeKmnzOnHtnemFQ/QCSG0xwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI9yXJzuo7hOJEBbq6r4w+A7r4tsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjgyZmI4ODMtNzQwMC0z ZmEzLThhN2EtOTRlZTYyMTgzNWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcVf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKDiAKgE+PHMdHouEUOVY4FqCJ0vgf6iUGIlbVNHDBlUIP5OkvWw G5ZABRH2cVOjBLQeVyQ4lJx9YKl3Fiqdc0eYqQqlLjg07DYk7hzy+xpJuALMr+W2 nxyAwJicfjOvps3FJaomyUccNTI1gm4xSd0lMSXgcAzKotA/u42Z0TT4H8LR1ey/ B1okFlIEkF29MtgJcCLjf6B3X6CCjCe9UPLVcr/xhVoYiDjN+ZCDLQ8CBucfLHNJ EnpHd89nRczZ1gaOBhq9SS7KwehMXMJ8Kmy+TDTfuPUqGvBl1aA8cZg3UTY4KWGj HHUClpBz2RfYiPik7VtGT2JbKAFsDdAAG8I= -----END CERTIFICATE-----Generated at Mon Apr 7 06:32:08 2025 by rpki-client