$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0fa347c9-f83d-3ae9-9374-568d64a50871.roa File: 0fa347c9-f83d-3ae9-9374-568d64a50871.roa (raw, json) Hash identifier: ScZfR42+T9Jt/AppsJDX1Wcn7x9h/rZWhGKu1Qltr4M= Subject key identifier: 4D:CF:E9:63:7F:41:D3:69:87:88:06:28:6C:91:4B:92:6A:A3:F5:F4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA670240E430AC7D2C35A00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0fa347c9-f83d-3ae9-9374-568d64a50871.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 7015 IP address blocks: 2001:559:c2bb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a6:70:24:0e:43:0a:c7:d2:c3:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=876a7a4f-4df5-4c90-b5fe-9e2bce124b3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6d:b6:2a:2b:16:ad:d1:88:52:6f:51:4d:7c: b6:6f:c5:ae:c3:20:0a:14:bd:bb:e9:13:4c:76:66: 4b:bb:37:64:e3:5c:79:13:f8:06:b7:24:55:a5:57: ef:3c:3f:44:3c:89:b6:75:f8:ad:fd:d3:ab:0f:cd: 80:9f:1c:16:8f:ef:b2:ac:c2:1d:b4:77:21:b3:57: d7:bc:0c:e2:b4:92:b8:38:33:77:ab:80:40:97:26: 30:12:3b:08:48:0a:e9:25:cf:7f:bf:cd:94:16:d2: 97:26:1d:bb:3d:e5:a7:9f:85:7b:f2:29:98:46:b8: 95:19:2b:a6:d3:2b:4a:e0:73:64:98:2e:1c:57:af: 8d:89:97:7b:58:c8:cb:de:10:e6:7c:f8:bb:67:39: 3e:f8:bf:9d:e9:50:ac:d6:66:b6:83:0a:31:48:d7: be:a9:6f:b5:d5:c8:98:cd:2b:95:a3:d3:24:e8:62: 0b:26:7f:3f:18:9b:29:e3:28:22:81:43:25:e0:a5: d4:ae:2d:be:b2:e7:6e:ca:23:8e:a9:41:26:d3:e1: f2:1c:a9:07:2f:b4:70:e5:0c:a1:58:5c:b5:97:05: 66:42:4a:4a:d5:66:52:47:ee:da:65:8f:0f:7e:89: 2e:69:67:2e:91:df:9e:8b:c1:66:22:ad:1d:56:70: d0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:CF:E9:63:7F:41:D3:69:87:88:06:28:6C:91:4B:92:6A:A3:F5:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0fa347c9-f83d-3ae9-9374-568d64a50871.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c2bb::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:9c:ff:b9:bb:34:e1:a8:e3:70:49:7b:ba:48:0b:f9:f6:77: 0c:22:7e:58:db:21:9e:f3:31:84:92:43:fb:23:5b:19:5b:5e: 18:7d:13:4d:ff:7d:99:e3:30:17:4d:b7:49:f6:f3:b3:4c:9a: ec:06:6e:d2:0c:93:ed:83:96:d4:4d:13:6f:a8:66:05:f6:ed: f5:6e:7b:ef:2a:e9:8c:b8:d1:8e:cd:8b:54:13:49:e6:28:04: d4:e8:cf:1a:ee:35:49:a7:c7:a4:df:50:37:70:98:06:1e:03: 58:fa:06:73:91:82:fc:58:ad:35:91:30:85:95:be:e9:7b:f5: 84:c5:36:b5:1f:89:2f:e2:c9:0f:8c:89:17:47:69:99:98:b3: 25:21:c3:76:aa:b5:02:34:a5:e0:34:63:8d:cb:8f:da:db:90: 6b:5e:72:66:07:dd:09:c6:04:36:72:02:8c:65:76:2d:52:ec: a3:5b:53:e0:8a:70:59:1f:48:e4:98:ac:d0:54:8c:99:35:5c: b6:f6:fa:b2:42:8b:c3:56:00:7b:ae:a3:7b:53:b1:73:5f:c9: 7c:69:d2:a0:20:1e:b0:35:5f:90:a3:f7:5c:a7:a5:36:d9:65: a6:b7:b7:2e:c6:81:fd:4d:61:06:6d:51:25:e3:04:43:5d:b3: d0:1c:69:5b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9pnAkDkMKx9LDWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk ODc2YTdhNGYtNGRmNS00YzkwLWI1ZmUtOWUyYmNlMTI0YjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl222KisWrdGIUm9RTXy2b8WuwyAKFL276RNM dmZLuzdk41x5E/gGtyRVpVfvPD9EPIm2dfit/dOrD82AnxwWj++yrMIdtHchs1fX vAzitJK4ODN3q4BAlyYwEjsISArpJc9/v82UFtKXJh27PeWnn4V78imYRriVGSum 0ytK4HNkmC4cV6+NiZd7WMjL3hDmfPi7Zzk++L+d6VCs1ma2gwoxSNe+qW+11ciY zSuVo9Mk6GILJn8/GJsp4ygigUMl4KXUri2+suduyiOOqUEm0+HyHKkHL7Rw5Qyh WFy1lwVmQkpK1WZSR+7aZY8PfokuaWcukd+ei8FmIq0dVnDQ/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE3P6WN/QdNph4gGKGyRS5Jqo/X0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGZhMzQ3YzktZjgzZC0z YWU5LTkzNzQtNTY4ZDY0YTUwODcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcK7 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAM+c/7m7NOGo43BJe7pIC/n2dwwifljbIZ7zMYSSQ/sjWxlbXhh9 E03/fZnjMBdNt0n287NMmuwGbtIMk+2DltRNE2+oZgX27fVue+8q6Yy40Y7Ni1QT SeYoBNTozxruNUmnx6TfUDdwmAYeA1j6BnORgvxYrTWRMIWVvul79YTFNrUfiS/i yQ+MiRdHaZmYsyUhw3aqtQI0peA0Y43Lj9rbkGtecmYH3QnGBDZyAoxldi1S7KNb U+CKcFkfSOSYrNBUjJk1XLb2+rJCi8NWAHuuo3tTsXNfyXxp0qAgHrA1X5Cj91yn pTbZZaa3ty7Ggf1NYQZtUSXjBENds9AcaVs= -----END CERTIFICATE-----Generated at Sun Apr 27 13:26:30 2025 by rpki-client