$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa36f534-e2de-3f6e-916a-44e2aee2a6f1.roa File: fa36f534-e2de-3f6e-916a-44e2aee2a6f1.roa (raw, json) Hash identifier: TOziM03zKDCSu+9eXKvGSeQHstiKLoAcl5RBn0LLwaI= Subject key identifier: 64:99:BB:74:33:FD:F3:09:B2:95:2D:24:7B:73:22:64:6B:FF:FA:EA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584921841A03CD8C80543E7FDD80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa36f534-e2de-3f6e-916a-44e2aee2a6f1.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 20214 IP address blocks: 2001:558:72::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:1a:03:cd:8c:80:54:3e:7f:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=9a4ec14f-91d6-4aa6-bc2e-a5f5b7dec0e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:07:aa:e1:ef:40:74:0c:b2:17:4c:f7:94:fe: 29:ac:71:b0:74:b0:e3:44:bd:7d:31:10:33:6a:e8: dc:c2:99:92:0c:d8:d2:9a:bb:82:eb:cf:b2:d0:7c: be:94:6c:2e:6c:9a:54:bd:ff:e2:ce:40:cf:f8:e0: f1:30:eb:27:08:83:a5:a4:1e:ba:4c:67:e0:74:4b: ca:44:bb:c9:6d:51:6d:d6:78:bc:e1:e9:30:3a:82: 6e:c7:93:90:14:f1:1f:33:12:e7:0c:7d:e7:17:c2: 95:16:d6:1f:d9:93:13:f5:56:24:40:54:dd:78:fb: 75:f0:2d:56:ee:95:6e:11:48:25:7b:e4:19:7a:b7: 09:9c:dd:d2:84:d0:46:41:6d:89:d0:9f:b0:35:60: 1e:77:9c:7c:b1:50:1f:a0:f6:4d:1a:1b:34:92:60: 40:86:11:51:64:57:88:73:01:66:b8:f7:b1:d0:b1: d7:7b:2d:d3:22:09:13:5e:68:c4:39:5c:45:98:2d: 81:56:1f:0e:43:02:e8:51:10:43:10:0b:2f:b6:cc: fd:6e:0f:2a:d1:a3:a9:c5:a7:75:25:1c:97:0d:69: a3:e9:c7:18:ab:58:ba:24:d6:96:4f:9c:9a:7e:6a: cf:b0:ad:ea:34:7a:42:90:0e:bb:ae:88:b5:1a:9b: 5f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:99:BB:74:33:FD:F3:09:B2:95:2D:24:7B:73:22:64:6B:FF:FA:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa36f534-e2de-3f6e-916a-44e2aee2a6f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:558:72::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:3a:0f:43:dc:56:4f:74:96:11:e8:d0:2e:40:8c:60:46:73: d7:06:5e:4c:2a:02:01:38:25:2b:41:91:18:d0:a8:0b:9f:bd: 8c:a8:16:dd:38:aa:f4:71:8f:3a:31:9a:ff:aa:9f:fe:fa:29: 69:98:47:26:36:29:6b:73:11:00:3a:76:0c:99:e2:e1:8c:5b: 57:06:50:71:ab:52:b8:70:bc:f6:f7:2e:d8:2e:28:78:fb:65: 61:a3:99:8a:6a:b9:c5:c5:9e:df:b6:ad:53:34:2f:f7:fe:12: 8e:a6:18:95:36:57:3f:fc:64:07:2c:fb:f8:04:f5:35:4d:dc: b3:91:5a:45:62:fe:da:9a:1c:c4:8a:8e:9f:51:33:36:b1:90: 21:6f:c7:36:41:43:7c:5d:80:a2:eb:05:eb:d0:dd:b9:44:81: a2:1c:f6:88:5c:5e:c8:32:47:dd:86:7c:51:07:ea:b2:61:ff: 42:fa:75:6b:a9:11:30:ff:dd:02:d5:3e:97:1b:b0:3e:eb:37: bd:2b:82:24:57:f4:18:cf:5e:f8:41:fa:53:15:c2:0b:ff:a3: 4f:ec:d2:5c:81:16:9a:bc:cc:c8:5f:64:1b:0d:4d:de:39:59: 9b:66:0a:7c:17:00:93:c5:bf:3a:04:3e:57:11:ae:18:22:9b: a7:0b:23:ce -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkhhBoDzYyAVD5/3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk OWE0ZWMxNGYtOTFkNi00YWE2LWJjMmUtYTVmNWI3ZGVjMGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnweq4e9AdAyyF0z3lP4prHGwdLDjRL19MRAz aujcwpmSDNjSmruC68+y0Hy+lGwubJpUvf/izkDP+ODxMOsnCIOlpB66TGfgdEvK RLvJbVFt1ni84ekwOoJux5OQFPEfMxLnDH3nF8KVFtYf2ZMT9VYkQFTdePt18C1W 7pVuEUgle+QZercJnN3ShNBGQW2J0J+wNWAed5x8sVAfoPZNGhs0kmBAhhFRZFeI cwFmuPex0LHXey3TIgkTXmjEOVxFmC2BVh8OQwLoURBDEAsvtsz9bg8q0aOpxad1 JRyXDWmj6ccYq1i6JNaWT5yafmrPsK3qNHpCkA67roi1Gptf9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGSZu3Qz/fMJspUtJHtzImRr//rqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmEzNmY1MzQtZTJkZS0z ZjZlLTkxNmEtNDRlMmFlZTJhNmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWABy MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAc6D0PcVk90lhHo0C5AjGBGc9cGXkwqAgE4JStBkRjQqAufvYyo Ft04qvRxjzoxmv+qn/76KWmYRyY2KWtzEQA6dgyZ4uGMW1cGUHGrUrhwvPb3Ltgu KHj7ZWGjmYpqucXFnt+2rVM0L/f+Eo6mGJU2Vz/8ZAcs+/gE9TVN3LORWkVi/tqa HMSKjp9RMzaxkCFvxzZBQ3xdgKLrBevQ3blEgaIc9ohcXsgyR92GfFEH6rJh/0L6 dWupETD/3QLVPpcbsD7rN70rgiRX9BjPXvhB+lMVwgv/o0/s0lyBFpq8zMhfZBsN Td45WZtmCnwXAJPFvzoEPlcRrhgim6cLI84= -----END CERTIFICATE-----Generated at Mon Apr 7 06:07:57 2025 by rpki-client