$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/060ab2f7-c562-3a7e-9d7d-d2aeee7a90f8.roa File: 060ab2f7-c562-3a7e-9d7d-d2aeee7a90f8.roa (raw, json) Hash identifier: Ou3GAs06KXRNyUoMNVlRP7qL5TotUOFLDyIuKlhhOxs= Subject key identifier: A7:7E:80:95:88:57:3C:6B:23:F6:CE:8B:22:49:92:92:04:E2:CD:C6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA4D45378D7C68F07B05E00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/060ab2f7-c562-3a7e-9d7d-d2aeee7a90f8.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 21508 IP address blocks: 2001:559:c3cf::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:d4:53:78:d7:c6:8f:07:b0:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=30a3d3d4-2652-4a49-8c7d-1522ec8f4511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f3:f0:c7:17:e0:24:a0:07:c2:fb:93:eb:b5: e4:54:c1:1a:30:82:e2:ab:9b:3a:87:a3:50:02:1a: a2:4c:48:5f:b8:89:68:b1:3f:58:66:e8:49:84:e4: 99:32:f5:d2:66:ac:70:14:50:2c:64:64:01:c6:02: 3a:c4:c2:83:0f:28:41:34:c0:99:7d:44:38:fc:22: 83:83:1d:7b:8c:99:34:dc:79:ca:b7:70:18:a3:54: c6:ca:ea:55:fe:fb:ba:b9:c6:2a:08:2d:fd:35:57: 87:9e:cf:20:0f:1f:8a:9e:41:a8:98:57:da:a6:a8: 6b:41:be:99:e8:aa:0a:f9:70:63:b3:d5:e9:46:93: 22:b8:31:45:67:02:9d:cc:8e:42:96:0a:58:f9:23: a0:1b:ad:08:51:0f:1d:2b:72:2c:87:99:98:63:83: 1e:ab:9a:c4:25:89:ee:5e:b7:bb:04:7d:dc:d4:38: 6f:bf:6f:d1:cb:6a:61:59:c5:dc:63:5c:4e:a3:84: 60:a9:5f:62:52:5d:f1:d8:a9:a9:38:f1:75:2b:a5: cb:38:69:14:83:32:d0:e2:88:52:b6:cd:11:f7:a4: 7b:6a:9f:c6:1f:eb:47:11:79:87:5b:26:d3:c9:8b: 72:af:4d:45:43:f9:64:8b:33:76:66:e4:40:fd:4d: d4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:7E:80:95:88:57:3C:6B:23:F6:CE:8B:22:49:92:92:04:E2:CD:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/060ab2f7-c562-3a7e-9d7d-d2aeee7a90f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c3cf::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:92:00:30:eb:10:bb:fe:b3:cc:fc:89:82:16:df:02:b9:6c: 26:e0:37:89:ce:42:58:0a:36:b7:e5:d4:be:11:be:95:22:d1: a9:73:e9:f9:3f:bb:72:db:5b:1b:d0:70:51:38:b3:37:aa:c8: 0e:74:86:e7:85:ae:8f:00:59:dc:be:c0:c3:e5:78:58:62:f5: 70:ae:17:2d:32:2b:35:bc:3f:6e:98:c3:90:0c:eb:58:cf:d3: c4:f0:ba:0c:50:35:dc:31:0d:42:c9:5b:df:19:c9:76:3b:36: a6:69:24:4e:1c:13:e9:84:85:29:01:47:b4:a9:47:78:5c:c8: 36:33:fc:0d:fb:68:c2:bb:be:42:bb:2e:a1:2f:ed:d7:67:5d: c6:8d:da:3b:c8:4d:6f:f4:5d:ce:de:65:27:70:33:52:97:a4: 6c:e7:41:ce:a0:67:3b:8c:54:d8:6d:fe:e5:a6:09:2d:90:6d: f1:b4:8f:3e:ef:3f:39:33:14:37:7c:9c:58:3c:d1:2b:59:8d: 80:ef:3c:c0:13:04:ff:84:ef:50:58:b8:2d:46:f2:a5:2d:08: 19:31:ad:df:3e:18:78:27:5d:0a:15:3a:90:a3:55:69:0b:c0: 9d:4e:56:38:d0:0a:a2:b2:1d:f8:10:f6:98:c6:74:31:76:ee: fd:5a:20:bd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9pNRTeNfGjwewXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk MzBhM2QzZDQtMjY1Mi00YTQ5LThjN2QtMTUyMmVjOGY0NTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7fPwxxfgJKAHwvuT67XkVMEaMILiq5s6h6NQ AhqiTEhfuIlosT9YZuhJhOSZMvXSZqxwFFAsZGQBxgI6xMKDDyhBNMCZfUQ4/CKD gx17jJk03HnKt3AYo1TGyupV/vu6ucYqCC39NVeHns8gDx+KnkGomFfapqhrQb6Z 6KoK+XBjs9XpRpMiuDFFZwKdzI5ClgpY+SOgG60IUQ8dK3Ish5mYY4Meq5rEJYnu Xre7BH3c1Dhvv2/Ry2phWcXcY1xOo4RgqV9iUl3x2KmpOPF1K6XLOGkUgzLQ4ohS ts0R96R7ap/GH+tHEXmHWybTyYtyr01FQ/lkizN2ZuRA/U3UswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKd+gJWIVzxrI/bOiyJJkpIE4s3GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDYwYWIyZjctYzU2Mi0z YTdlLTlkN2QtZDJhZWVlN2E5MGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcPP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADSSADDrELv+s8z8iYIW3wK5bCbgN4nOQlgKNrfl1L4RvpUi0alz 6fk/u3LbWxvQcFE4szeqyA50hueFro8AWdy+wMPleFhi9XCuFy0yKzW8P26Yw5AM 61jP08TwugxQNdwxDULJW98ZyXY7NqZpJE4cE+mEhSkBR7SpR3hcyDYz/A37aMK7 vkK7LqEv7ddnXcaN2jvITW/0Xc7eZSdwM1KXpGznQc6gZzuMVNht/uWmCS2QbfG0 jz7vPzkzFDd8nFg80StZjYDvPMATBP+E71BYuC1G8qUtCBkxrd8+GHgnXQoVOpCj VWkLwJ1OVjjQCqKyHfgQ9pjGdDF27v1aIL0= -----END CERTIFICATE-----Generated at Mon Apr 28 08:27:55 2025 by rpki-client