$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/14f7bc3c-5ff1-307c-973a-d065e2100931.roa File: 14f7bc3c-5ff1-307c-973a-d065e2100931.roa (raw, json) Hash identifier: 98F/jCvnzJLTZqA4GFoA8qsFBqlaS2EaFS9IlsykKBM= Subject key identifier: 3E:5D:5B:A1:96:28:BB:1F:F9:3C:EC:FF:CA:8E:A3:66:A9:94:E6:F3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA605DD10A6A07FDFA6C9A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/14f7bc3c-5ff1-307c-973a-d065e2100931.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 7016 IP address blocks: 2001:559:c114::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a6:05:dd:10:a6:a0:7f:df:a6:c9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=ea4f2a23-4586-4185-ba8a-f0ba75e1b66a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:28:e9:95:07:5e:9d:10:0f:1d:ae:e3:13:96: 82:eb:92:e9:fd:23:57:16:ac:6f:51:3d:2b:89:b2: 74:c7:49:9c:b7:43:1f:96:95:11:d2:d4:11:5e:02: 1f:5f:62:84:92:47:33:b7:83:17:db:d6:a6:34:42: f9:eb:fb:30:3f:66:1b:cf:37:78:2b:4d:9e:a3:65: 80:65:c6:b5:3b:fe:1a:c9:0f:e4:f7:f8:1a:b9:a1: bc:3a:31:ff:89:95:77:12:42:46:14:69:e3:13:98: 26:0a:6e:bd:f0:54:7e:40:77:a8:23:2f:67:f3:2b: ca:8e:6d:cc:96:f2:82:72:1d:f0:05:02:72:43:ad: cd:aa:55:cf:49:f0:e5:5e:ac:97:10:ce:0c:95:e4: 87:32:f7:c5:14:c2:82:67:5a:d4:0a:50:89:86:68: d9:47:7d:c8:71:5e:5c:af:5b:ca:f2:98:36:f3:6d: 32:5c:a1:e0:74:80:cf:e8:c3:f5:22:5c:56:3c:69: dd:2a:85:03:0d:e9:a7:7c:0b:08:57:79:2b:a0:fb: 1a:c5:b6:88:87:18:ea:0c:2f:2f:b1:c5:f0:8b:59: 77:1f:0a:3e:31:dc:04:5d:60:32:cb:19:3b:0b:b5: 28:b5:f0:f7:7c:da:ea:1c:2a:59:34:40:b7:3a:77: 33:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:5D:5B:A1:96:28:BB:1F:F9:3C:EC:FF:CA:8E:A3:66:A9:94:E6:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/14f7bc3c-5ff1-307c-973a-d065e2100931.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c114::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:ce:6f:f0:40:8c:01:b0:2a:a4:dd:8b:42:7a:f3:a3:d3:6e: 4b:63:e0:be:45:44:8d:d7:08:72:60:0f:f8:a0:84:37:f0:6c: 74:41:3f:af:e8:24:4d:67:16:d2:9b:a7:9e:d7:4e:a5:aa:c9: ba:a0:ae:2d:d9:3d:03:fd:95:28:0e:93:30:7c:56:fc:a8:a5: 94:18:92:c6:06:ed:84:d4:e1:11:7c:68:cf:05:f4:43:03:aa: 2e:f9:de:44:be:02:7c:8f:99:75:93:e0:b5:0f:e4:de:4c:2e: 3f:95:97:1b:57:f1:c2:2f:60:6d:6c:5b:94:19:cf:4b:e9:5d: 5f:e6:bf:07:1e:1c:c4:ec:e7:aa:a1:b2:07:14:13:48:7b:0f: fd:00:c5:92:2d:7b:08:0b:29:51:cf:f9:5e:40:8d:44:b4:17: 21:4f:ee:35:bc:c0:6c:3b:dc:a2:78:dc:6d:fb:b2:58:42:ad: d3:51:32:93:a1:24:a1:eb:d0:6c:ac:9c:8c:2c:66:44:52:69: 87:08:4c:82:5f:5f:8c:28:e7:c4:05:44:16:48:ce:78:e4:91: d1:4a:c5:f4:b8:5e:1b:bb:d1:ff:9e:1f:ed:40:21:1d:74:82: 36:53:03:55:67:bf:a3:97:5d:7c:5c:2e:24:e5:80:43:ba:67: 70:c3:f6:fe -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9pgXdEKagf9+myaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZWE0ZjJhMjMtNDU4Ni00MTg1LWJhOGEtZjBiYTc1ZTFiNjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ijplQdenRAPHa7jE5aC65Lp/SNXFqxvUT0r ibJ0x0mct0MflpUR0tQRXgIfX2KEkkczt4MX29amNEL56/swP2Ybzzd4K02eo2WA Zca1O/4ayQ/k9/gauaG8OjH/iZV3EkJGFGnjE5gmCm698FR+QHeoIy9n8yvKjm3M lvKCch3wBQJyQ63NqlXPSfDlXqyXEM4MleSHMvfFFMKCZ1rUClCJhmjZR33IcV5c r1vK8pg2820yXKHgdIDP6MP1IlxWPGndKoUDDemnfAsIV3kroPsaxbaIhxjqDC8v scXwi1l3Hwo+MdwEXWAyyxk7C7UotfD3fNrqHCpZNEC3Oncz1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD5dW6GWKLsf+Tzs/8qOo2aplObzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTRmN2JjM2MtNWZmMS0z MDdjLTk3M2EtZDA2NWUyMTAwOTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcEU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKXOb/BAjAGwKqTdi0J686PTbktj4L5FRI3XCHJgD/ighDfwbHRB P6/oJE1nFtKbp57XTqWqybqgri3ZPQP9lSgOkzB8VvyopZQYksYG7YTU4RF8aM8F 9EMDqi753kS+AnyPmXWT4LUP5N5MLj+VlxtX8cIvYG1sW5QZz0vpXV/mvwceHMTs 56qhsgcUE0h7D/0AxZItewgLKVHP+V5AjUS0FyFP7jW8wGw73KJ43G37slhCrdNR MpOhJKHr0GysnIwsZkRSaYcITIJfX4wo58QFRBZIznjkkdFKxfS4Xhu70f+eH+1A IR10gjZTA1Vnv6OXXXxcLiTlgEO6Z3DD9v4= -----END CERTIFICATE-----Generated at Sun Apr 27 12:53:35 2025 by rpki-client