$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20a11587-fd83-371d-95dd-2487b78effb4.roa File: 20a11587-fd83-371d-95dd-2487b78effb4.roa (raw, json) Hash identifier: J8k0o4NSX1XxBtpyGQAfu2HTlrWPn7DeFALh4fPx/mw= Subject key identifier: E3:CA:54:FD:6D:C7:E6:B0:80:A7:AD:05:EE:D7:DC:6B:24:41:97:E7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA5A7CE0E0E549336C67A00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20a11587-fd83-371d-95dd-2487b78effb4.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 33659 IP address blocks: 2001:559:c3fe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a5:a7:ce:0e:0e:54:93:36:c6:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=89b6e763-060c-42bd-a2a0-b79620258851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f4:d4:74:ad:26:04:59:eb:2a:92:c6:61:41: ac:be:dd:db:a3:2c:96:b2:35:7e:5c:7c:6d:ad:bf: 65:0d:57:b5:26:fd:27:e0:dd:25:b7:6a:ce:3c:ed: b2:cb:93:4c:85:34:25:ba:fe:8f:53:84:6a:52:a6: b7:e1:93:8b:93:33:3e:2e:56:9c:97:71:69:e2:1e: 9b:2c:6b:f2:fe:07:20:f7:48:c1:d1:c7:be:e3:d1: e3:e7:ea:e9:47:5c:76:a4:5a:00:8b:a1:df:63:eb: a5:b8:b2:c4:06:b1:80:4a:5f:15:f9:f8:b5:f8:bb: d9:93:4d:34:02:bc:d9:44:89:9f:3a:d4:47:bc:6b: 6c:9d:48:c9:b6:54:9a:34:ca:fd:2c:9f:b6:4f:71: 34:e1:c5:12:6c:81:a8:64:14:21:8e:d9:2b:21:fe: 89:2c:04:4f:57:22:45:23:41:5b:85:0c:ff:56:05: 1d:25:cb:22:d9:54:0a:21:ee:f7:c7:18:3a:c4:bc: 6a:ff:c5:8d:b6:ac:b0:01:59:90:50:9e:74:aa:11: 77:3d:c6:c5:6b:53:5d:e6:79:9f:52:43:78:42:21: 6f:3a:b3:9d:92:ba:d8:95:db:9a:2f:68:8d:67:81: f1:3f:c7:12:f8:8c:d8:5f:36:4d:98:bc:69:a8:c6: 39:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:CA:54:FD:6D:C7:E6:B0:80:A7:AD:05:EE:D7:DC:6B:24:41:97:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20a11587-fd83-371d-95dd-2487b78effb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c3fe::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:ed:1c:b9:2e:52:26:f0:dc:38:27:4a:b3:2c:5a:7f:7b:7a: ad:41:f1:11:6e:38:a4:3d:47:79:bd:76:3a:8d:69:05:20:b7: 92:8b:71:65:91:d1:d5:2f:66:bb:df:67:8f:aa:ce:d2:d6:34: e2:70:c0:fb:84:4d:35:c0:cd:50:4d:a4:eb:7f:0c:3b:43:3c: a4:1a:da:1f:e7:6b:35:d9:d1:e7:3a:68:7d:cd:aa:1f:63:e8: 31:85:99:0b:9f:d9:e8:36:ea:69:b4:bf:8c:b2:48:da:76:e6: b9:57:e9:5f:12:73:ea:b8:37:b9:81:53:a6:10:bf:3e:d8:6c: 5d:63:b1:92:e5:96:e6:30:63:72:dc:71:f5:a5:84:0d:48:fd: d2:03:cd:b1:08:91:65:e9:4e:3e:c5:55:74:d5:09:27:2b:0c: 60:79:9b:ef:a1:7b:5a:ee:47:27:d4:33:76:71:1a:78:63:4a: 9d:39:1a:de:7e:35:7d:59:fb:98:7e:20:73:6c:59:65:60:17: ce:73:69:dd:76:5e:0c:b9:bb:a5:2f:ae:63:e2:5a:e3:e9:9f: 61:05:b2:dc:81:90:b8:b3:23:d1:07:aa:c6:0b:3d:a2:56:20: a4:da:84:57:f4:11:2d:89:1c:67:61:fe:50:20:9d:27:6b:9c: 4c:ce:a4:7b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9pafODg5UkzbGegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk ODliNmU3NjMtMDYwYy00MmJkLWEyYTAtYjc5NjIwMjU4ODUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPTUdK0mBFnrKpLGYUGsvt3boyyWsjV+XHxt rb9lDVe1Jv0n4N0lt2rOPO2yy5NMhTQluv6PU4RqUqa34ZOLkzM+Llacl3Fp4h6b LGvy/gcg90jB0ce+49Hj5+rpR1x2pFoAi6HfY+uluLLEBrGASl8V+fi1+LvZk000 ArzZRImfOtRHvGtsnUjJtlSaNMr9LJ+2T3E04cUSbIGoZBQhjtkrIf6JLARPVyJF I0FbhQz/VgUdJcsi2VQKIe73xxg6xLxq/8WNtqywAVmQUJ50qhF3PcbFa1Nd5nmf UkN4QiFvOrOdkrrYlduaL2iNZ4HxP8cS+IzYXzZNmLxpqMY5WQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOPKVP1tx+awgKetBe7X3GskQZfnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjBhMTE1ODctZmQ4My0z NzFkLTk1ZGQtMjQ4N2I3OGVmZmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcP+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEDtHLkuUibw3DgnSrMsWn97eq1B8RFuOKQ9R3m9djqNaQUgt5KL cWWR0dUvZrvfZ4+qztLWNOJwwPuETTXAzVBNpOt/DDtDPKQa2h/nazXZ0ec6aH3N qh9j6DGFmQuf2eg26mm0v4yySNp25rlX6V8Sc+q4N7mBU6YQvz7YbF1jsZLlluYw Y3LccfWlhA1I/dIDzbEIkWXpTj7FVXTVCScrDGB5m++he1ruRyfUM3ZxGnhjSp05 Gt5+NX1Z+5h+IHNsWWVgF85zad12Xgy5u6UvrmPiWuPpn2EFstyBkLizI9EHqsYL PaJWIKTahFf0ES2JHGdh/lAgnSdrnEzOpHs= -----END CERTIFICATE-----Generated at Sun Apr 27 16:31:01 2025 by rpki-client