$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f912b59e-4a6d-3bac-a682-dde419d27820.roa File: f912b59e-4a6d-3bac-a682-dde419d27820.roa (raw, json) Hash identifier: tVCPEfBetUMOAmQ6vcO5oqh0rlrvrldsLJ8WnkiTfsQ= Subject key identifier: 30:2D:12:00:77:24:11:D0:58:8E:AC:70:C1:64:6C:16:F6:B3:2E:BF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F7D8601D5EC7047EBC5880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f912b59e-4a6d-3bac-a682-dde419d27820.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33662 IP address blocks: 2001:559:c020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:d8:60:1d:5e:c7:04:7e:bc:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=970f592c-701b-4c22-832a-08742afb11ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fe:ba:0a:81:b1:98:e0:68:81:dd:d5:f5:bf: 98:8e:3a:e5:f8:8f:4f:d4:d2:f1:bf:59:a5:46:06: 42:59:c0:05:8d:a8:49:ed:33:cc:c1:31:71:42:f5: 13:65:3a:2e:59:2b:fe:39:a1:df:e9:55:de:c8:a6: c1:63:f8:dc:a2:3a:c6:69:ba:67:63:8a:fc:b5:88: dc:05:bf:52:c4:51:11:7b:0d:0d:9c:32:93:1d:e4: d5:c3:df:f4:c0:cd:e5:0f:fe:ee:92:89:0e:7d:0b: 4b:98:52:06:be:55:f8:64:77:ab:b6:ab:e4:da:75: ea:26:ad:20:1b:4d:7a:64:9c:df:80:ba:73:05:27: 98:86:2d:c8:25:4e:0a:ae:cf:ff:5e:e6:15:fb:08: 13:70:1c:ad:8a:46:2c:eb:3b:fd:2e:49:40:c9:60: a7:a9:c3:bb:0f:f0:ec:a6:af:2f:5d:c8:8e:b1:98: 0b:89:76:d5:0f:e6:2e:e9:a7:4e:3b:d4:f9:7d:37: 48:21:a0:23:25:ff:61:25:75:4c:89:2b:b7:74:8a: d3:f4:ea:33:fd:0a:20:80:cf:9e:85:df:4a:69:44: 3d:9b:1b:ea:ba:6e:14:a3:42:a9:d9:4a:27:58:81: f8:22:02:be:78:32:81:3d:20:f1:3b:f2:a9:28:cd: d7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:2D:12:00:77:24:11:D0:58:8E:AC:70:C1:64:6C:16:F6:B3:2E:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f912b59e-4a6d-3bac-a682-dde419d27820.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c020::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:4c:51:6e:1a:f8:3d:60:03:ae:33:1b:17:31:c1:77:11:49: 21:1f:85:d9:50:a8:63:25:38:86:25:72:d9:70:96:56:c6:99: 69:d8:03:52:5b:3c:39:5f:15:e9:6e:c4:29:48:44:b9:87:81: 66:8e:4c:df:86:26:88:69:51:2d:f1:dc:46:f5:59:3a:1d:5b: b2:22:e9:c2:3f:fe:0f:18:9d:f9:10:5b:18:ff:5f:cf:54:c3: 5c:83:38:9f:59:25:26:ef:76:e4:3b:a9:1a:f0:b9:3b:d2:4d: d2:fc:1b:ac:21:92:13:e3:18:58:0b:fd:1d:64:a8:c7:11:52: 2a:d3:a1:c9:cb:89:e0:af:8f:2f:07:78:5c:12:77:b8:c7:5f: e3:b7:a8:47:66:9a:fc:fd:0a:f8:ee:52:fa:7f:75:8c:b3:9a: b0:9e:82:ae:ac:19:d1:32:6c:6a:ea:c6:75:52:12:96:34:ee: 15:a2:02:1b:a9:65:7d:b9:ca:50:3c:ea:76:a9:85:55:1f:15: 25:b8:c2:5f:9e:52:30:c4:bb:d3:2c:ac:e5:ee:69:c3:9d:76: b0:ca:8d:54:79:5e:23:cc:fc:39:ba:fc:69:95:5b:fd:f5:5d: 34:6a:74:e2:3e:fe:13:6f:84:cc:aa:35:3d:59:3b:33:15:f7: 19:19:01:28 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj099hgHV7HBH68WIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk OTcwZjU5MmMtNzAxYi00YzIyLTgzMmEtMDg3NDJhZmIxMWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyf66CoGxmOBogd3V9b+Yjjrl+I9P1NLxv1ml RgZCWcAFjahJ7TPMwTFxQvUTZTouWSv+OaHf6VXeyKbBY/jcojrGabpnY4r8tYjc Bb9SxFERew0NnDKTHeTVw9/0wM3lD/7ukokOfQtLmFIGvlX4ZHertqvk2nXqJq0g G016ZJzfgLpzBSeYhi3IJU4Krs//XuYV+wgTcBytikYs6zv9LklAyWCnqcO7D/Ds pq8vXciOsZgLiXbVD+Yu6adOO9T5fTdIIaAjJf9hJXVMiSu3dIrT9Ooz/QoggM+e hd9KaUQ9mxvqum4Uo0Kp2UonWIH4IgK+eDKBPSDxO/KpKM3XwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDAtEgB3JBHQWI6scMFkbBb2sy6/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjkxMmI1OWUtNGE2ZC0z YmFjLWE2ODItZGRlNDE5ZDI3ODIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJVMUW4a+D1gA64zGxcxwXcRSSEfhdlQqGMlOIYlctlwllbGmWnY A1JbPDlfFeluxClIRLmHgWaOTN+GJohpUS3x3Eb1WTodW7Ii6cI//g8YnfkQWxj/ X89Uw1yDOJ9ZJSbvduQ7qRrwuTvSTdL8G6whkhPjGFgL/R1kqMcRUirTocnLieCv jy8HeFwSd7jHX+O3qEdmmvz9CvjuUvp/dYyzmrCegq6sGdEybGrqxnVSEpY07hWi AhupZX25ylA86naphVUfFSW4wl+eUjDEu9MsrOXuacOddrDKjVR5XiPM/Dm6/GmV W/31XTRqdOI+/hNvhMyqNT1ZOzMV9xkZASg= -----END CERTIFICATE-----Generated at Mon Apr 7 06:06:21 2025 by rpki-client