$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa214c61-bda9-3074-81ef-510417464071.roa File: fa214c61-bda9-3074-81ef-510417464071.roa (raw, json) Hash identifier: /zrC5fzORhP+yLKBEPmNIQssbfBiSlhv4j+VxoZ4sL4= Subject key identifier: 66:5B:32:2E:9B:C9:48:C8:29:C5:26:18:22:9A:C0:1F:3C:F7:F2:C9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6E2D45E83CFD65B0AF2580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa214c61-bda9-3074-81ef-510417464071.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33659 IP address blocks: 2001:559:c300::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6e:2d:45:e8:3c:fd:65:b0:af:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=0ff0b642-34d6-4280-a3c0-d1baf1b4b15d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e2:04:06:25:68:b0:71:ab:6f:81:ab:89:54: ee:6d:1f:e2:11:4b:01:6a:00:01:a8:fc:64:de:8d: e6:4c:4a:52:36:d5:21:05:3c:e4:91:35:f4:f2:3d: 27:9b:a7:1d:1c:4a:5d:2e:b3:b2:e5:d6:2f:ab:4e: 74:3e:69:15:65:df:2c:a8:0b:c1:9c:0a:c8:d2:42: 8c:5a:ed:1a:26:f7:06:27:3e:93:d2:0e:5c:12:68: 58:9e:02:5c:aa:39:29:91:e5:85:34:4a:de:49:c9: de:fe:b9:2c:c3:25:cb:ce:d8:04:e0:c6:e6:25:dd: ef:4a:5e:d8:2d:82:58:af:8d:fa:63:42:d3:c1:42: 56:27:6b:86:0f:2f:19:d8:94:fa:29:f8:00:d5:4b: 37:cf:ad:c9:c0:15:fb:0a:b1:4b:0c:03:7e:a3:d0: 1f:fd:c1:cd:52:46:d1:80:3f:9b:d6:c4:91:65:a7: 20:53:a0:c6:96:c5:17:5b:41:f2:4a:1b:e6:75:78: da:5c:37:de:2a:8c:9f:8c:72:44:b2:d8:35:c4:de: 06:65:3a:1a:c1:a9:00:85:d8:68:36:b3:44:98:97: 17:fc:af:0e:2a:f4:45:f0:a4:84:ae:6e:25:3c:8e: a9:49:35:fc:b1:33:a6:c3:24:1a:3d:25:dd:41:57: d1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:5B:32:2E:9B:C9:48:C8:29:C5:26:18:22:9A:C0:1F:3C:F7:F2:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa214c61-bda9-3074-81ef-510417464071.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c300::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:c5:44:99:e8:bd:38:ab:13:a5:de:75:7c:75:19:f5:76:71: 05:ca:99:f9:ba:1b:e7:73:e3:97:82:32:54:70:c8:19:ef:b5: 6b:19:72:ef:ed:b7:d7:b7:76:8d:78:1a:3a:56:52:67:2c:25: 7e:b4:35:5e:41:6c:f4:32:43:e4:73:84:2e:22:cc:b9:a4:df: 63:04:4b:df:18:d7:45:47:10:2b:fe:e1:db:fd:1e:af:13:43: f8:ad:8b:fe:26:af:64:6f:7a:ab:18:07:ff:65:93:f8:fb:e6: 28:0d:0f:af:b9:19:37:f5:1d:ae:57:2e:76:49:db:0e:11:2e: de:24:a9:2a:4d:d8:ea:78:38:78:0c:ad:f6:aa:f6:3b:39:a7: 02:f0:31:f4:0c:c0:3d:08:ec:33:dc:37:87:1c:0a:37:10:91: 1c:fe:09:09:8c:45:ad:1f:a6:92:70:69:ba:99:23:4f:8b:82: 1c:49:d6:33:e5:b8:00:70:4f:47:64:f0:dc:1b:ff:02:5c:e5: eb:05:f6:54:4b:1f:dc:37:1c:9c:f4:32:d5:5a:5d:13:60:be: f8:10:25:d0:e7:dd:99:aa:37:18:1f:e8:f6:a8:b8:79:b1:4b: bd:60:c2:f3:21:78:8f:5e:9d:e7:9c:5b:3b:9e:ee:85:ab:9e: 1c:75:2a:1c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebi1F6Dz9ZbCvJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk MGZmMGI2NDItMzRkNi00MjgwLWEzYzAtZDFiYWYxYjRiMTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOIEBiVosHGrb4GriVTubR/iEUsBagABqPxk 3o3mTEpSNtUhBTzkkTX08j0nm6cdHEpdLrOy5dYvq050PmkVZd8sqAvBnArI0kKM Wu0aJvcGJz6T0g5cEmhYngJcqjkpkeWFNEreScne/rkswyXLztgE4MbmJd3vSl7Y LYJYr436Y0LTwUJWJ2uGDy8Z2JT6KfgA1Us3z63JwBX7CrFLDAN+o9Af/cHNUkbR gD+b1sSRZacgU6DGlsUXW0HyShvmdXjaXDfeKoyfjHJEstg1xN4GZToawakAhdho NrNEmJcX/K8OKvRF8KSErm4lPI6pSTX8sTOmwyQaPSXdQVfRfwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGZbMi6byUjIKcUmGCKawB889/LJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmEyMTRjNjEtYmRhOS0z MDc0LTgxZWYtNTEwNDE3NDY0MDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcMA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADfFRJnovTirE6XedXx1GfV2cQXKmfm6G+dz45eCMlRwyBnvtWsZ cu/tt9e3do14GjpWUmcsJX60NV5BbPQyQ+RzhC4izLmk32MES98Y10VHECv+4dv9 Hq8TQ/iti/4mr2RveqsYB/9lk/j75igND6+5GTf1Ha5XLnZJ2w4RLt4kqSpN2Op4 OHgMrfaq9js5pwLwMfQMwD0I7DPcN4ccCjcQkRz+CQmMRa0fppJwabqZI0+LghxJ 1jPluABwT0dk8Nwb/wJc5esF9lRLH9w3HJz0MtVaXRNgvvgQJdDn3ZmqNxgf6Pao uHmxS71gwvMheI9eneecWzue7oWrnhx1Khw= -----END CERTIFICATE-----Generated at Sun Apr 6 21:35:56 2025 by rpki-client