$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc8c3a09-212f-3720-a22d-299db89e1101.roa File: fc8c3a09-212f-3720-a22d-299db89e1101.roa (raw, json) Hash identifier: msaTPwKJ+xeJR0glxsaGqY5NLGKn8sJYEWtm3ZcNjhY= Subject key identifier: 28:19:17:D0:45:A2:75:E8:48:75:3E:32:3F:B1:69:98:FB:DC:B1:66 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6DA71DA310820B53BFE5C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc8c3a09-212f-3720-a22d-299db89e1101.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7015 IP address blocks: 2001:559:513::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:a7:1d:a3:10:82:0b:53:bf:e5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=a73554da-8ad2-4b11-90e0-f1e0d566caf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:fe:66:12:cc:c4:70:ad:0b:fb:30:fe:98:4a: 9a:02:cd:57:d8:34:d5:79:7f:af:62:62:6c:31:e0: 52:02:3f:22:dd:0c:1d:2c:ef:f1:f8:64:2e:e4:32: 59:a7:f8:4d:ce:7f:65:db:82:90:3e:89:da:00:00: ff:40:b2:d5:13:2f:51:d8:eb:6d:41:42:54:60:be: 02:f0:ec:f7:15:7a:2f:92:35:1d:ee:c9:cc:a7:97: 79:d3:5c:91:6b:a0:1b:17:f2:c8:7e:b4:b1:a8:99: da:76:92:c2:bd:b2:2d:43:dc:85:df:07:72:6f:66: 4e:cd:7b:62:10:9c:b5:d6:93:0f:06:a1:20:a2:a3: d2:14:99:f9:ba:23:30:6a:10:d5:e8:59:e3:25:78: 3f:7f:80:25:67:80:45:88:0a:e8:15:11:4e:80:41: 12:f7:54:4a:07:7e:ac:05:7a:e3:de:d6:f5:0d:72: aa:2a:a7:9a:d2:66:c4:f0:a1:b9:db:2f:24:0c:89: b6:e3:33:84:00:f5:b4:e7:59:e3:48:b7:ee:e7:74: 87:c7:48:b9:03:33:25:7c:7c:32:e9:82:46:8b:90: 82:61:20:2e:31:70:e8:bf:5a:9d:50:b0:ce:57:3a: 94:6f:09:e5:db:07:59:47:c9:ef:92:43:e8:32:8c: 04:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:19:17:D0:45:A2:75:E8:48:75:3E:32:3F:B1:69:98:FB:DC:B1:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc8c3a09-212f-3720-a22d-299db89e1101.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:513::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:7a:c8:07:e4:66:5a:f7:f9:61:6b:5f:5a:85:e8:6f:f8:00: f8:5b:d1:48:b9:fc:73:c7:da:10:5c:1d:42:d9:a3:4a:b7:0d: 7b:40:f2:29:aa:bd:7f:e7:d2:1f:72:43:2c:4f:89:f3:96:e6: 6b:5e:0a:3f:4b:a1:af:9a:9a:a6:64:3e:ca:5a:58:4b:55:23: f9:f7:88:ff:ad:cc:e9:3d:fe:b4:3b:cd:a7:02:b7:3e:aa:12: 34:3c:5f:87:f3:dd:e4:2b:9b:11:b9:40:aa:7c:aa:ad:e6:48: 2e:3f:41:16:86:4a:2e:86:6f:3d:19:64:69:4f:f0:f4:d8:98: f4:10:31:33:f7:d3:c7:8a:87:f1:e4:39:49:35:b4:da:3c:b4: fb:11:c4:b5:30:fd:58:95:b0:24:bc:3a:ce:4a:e7:2a:b5:e5: a9:4b:6c:2e:05:b3:df:ef:4b:25:0b:1e:0d:d1:ce:dc:1e:d8: 06:59:ed:ff:bb:d1:ca:43:0e:6b:61:86:51:de:b0:64:26:71: 4b:38:bb:65:4a:d1:9d:04:b7:1f:42:43:05:80:26:89:c0:19: 61:90:22:9b:70:af:fc:7c:ed:72:b1:92:c1:5c:75:54:70:67: 46:98:28:f3:58:b3:30:51:d3:81:d1:dc:78:e4:a5:0a:c4:95: 39:a1:66:37 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebacdoxCCC1O/5cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk YTczNTU0ZGEtOGFkMi00YjExLTkwZTAtZjFlMGQ1NjZjYWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiP5mEszEcK0L+zD+mEqaAs1X2DTVeX+vYmJs MeBSAj8i3QwdLO/x+GQu5DJZp/hNzn9l24KQPonaAAD/QLLVEy9R2OttQUJUYL4C 8Oz3FXovkjUd7snMp5d501yRa6AbF/LIfrSxqJnadpLCvbItQ9yF3wdyb2ZOzXti EJy11pMPBqEgoqPSFJn5uiMwahDV6FnjJXg/f4AlZ4BFiAroFRFOgEES91RKB36s BXrj3tb1DXKqKqea0mbE8KG52y8kDIm24zOEAPW051njSLfu53SHx0i5AzMlfHwy 6YJGi5CCYSAuMXDov1qdULDOVzqUbwnl2wdZR8nvkkPoMowEiQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCgZF9BFonXoSHU+Mj+xaZj73LFmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmM4YzNhMDktMjEyZi0z NzIwLWEyMmQtMjk5ZGI4OWUxMTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQUT MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFt6yAfkZlr3+WFrX1qF6G/4APhb0Ui5/HPH2hBcHULZo0q3DXtA 8imqvX/n0h9yQyxPifOW5mteCj9Loa+amqZkPspaWEtVI/n3iP+tzOk9/rQ7zacC tz6qEjQ8X4fz3eQrmxG5QKp8qq3mSC4/QRaGSi6Gbz0ZZGlP8PTYmPQQMTP308eK h/HkOUk1tNo8tPsRxLUw/ViVsCS8Os5K5yq15alLbC4Fs9/vSyULHg3Rztwe2AZZ 7f+70cpDDmthhlHesGQmcUs4u2VK0Z0Etx9CQwWAJonAGWGQIptwr/x87XKxksFc dVRwZ0aYKPNYszBR04HR3HjkpQrElTmhZjc= -----END CERTIFICATE-----Generated at Sun Apr 6 11:46:53 2025 by rpki-client