$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/22753c7c-1a76-32c3-bcaf-b8a2a508c9de.roa File: 22753c7c-1a76-32c3-bcaf-b8a2a508c9de.roa (raw, json) Hash identifier: IvpQsEnT9AIHeT8RldYx9dZiW6y5dXVVtvpdRLyhR7o= Subject key identifier: 49:E1:1C:3E:9B:C8:BE:BC:DA:75:A8:C1:FD:23:C0:C3:56:27:B1:E0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA66933974E8CE961D6B500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/22753c7c-1a76-32c3-bcaf-b8a2a508c9de.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 7015 IP address blocks: 2001:559:84d9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a6:69:33:97:4e:8c:e9:61:d6:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=bfb729c4-8f5f-4d23-a985-c47fc601200f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:08:d6:9a:81:91:fc:a9:41:2f:5d:93:31:ee: 2a:26:26:1f:55:83:4e:d0:00:1d:c2:35:d8:b9:05: bc:b4:ac:c3:c0:3e:c4:8a:95:5c:39:e7:7a:91:ad: ec:a2:a4:3b:d5:2f:a0:ef:20:57:13:aa:9b:43:1a: f5:a7:ba:d3:41:b6:42:50:f7:d5:77:12:07:c2:62: 14:bb:0c:7f:f7:33:86:5d:25:30:e1:74:57:ff:b5: 80:01:ab:6f:5a:2d:dd:90:eb:64:62:88:22:2d:e5: 3a:10:b8:49:0c:aa:11:d0:12:b7:4b:db:f2:6f:04: 83:02:12:17:2d:a5:4b:26:9f:97:7d:b3:95:6f:88: ca:81:e4:89:ba:f0:b1:fa:91:92:d3:67:68:6a:f8: 81:fb:64:48:d2:93:22:28:bd:9d:d4:3a:be:d6:ed: b5:a8:52:a8:2a:79:79:14:15:05:53:b3:88:0a:ed: 2c:a5:2c:18:3c:b4:47:cc:1d:f2:82:4f:b6:87:82: 29:ea:cc:ba:98:b8:cc:9c:e8:37:a5:33:95:e1:76: 16:be:c1:fc:6d:f6:6f:2a:4c:06:7a:2e:c5:4d:00: d4:5d:50:2e:2e:4e:85:ba:54:7e:ca:60:81:4b:c8: 43:84:cc:03:bb:3a:c0:ef:39:3d:25:2e:2b:7d:e4: 18:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E1:1C:3E:9B:C8:BE:BC:DA:75:A8:C1:FD:23:C0:C3:56:27:B1:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/22753c7c-1a76-32c3-bcaf-b8a2a508c9de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:84d9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:55:2c:6a:5c:1c:ba:cf:c1:70:f9:3e:37:22:23:2a:95:d6: 18:18:0d:8f:30:b6:53:03:91:e3:e4:63:b7:99:41:fc:22:e0: d0:54:a7:d0:99:e3:6e:89:03:cf:6f:8c:15:e8:fc:bf:eb:90: 14:a3:b3:aa:96:26:2b:1b:32:96:a4:56:a9:fb:c3:fa:30:ce: 72:ac:02:e5:d4:15:ce:05:44:cb:ec:b7:08:c4:28:aa:1c:77: 68:0b:0c:61:3e:20:a4:1f:a1:c6:2b:0e:27:57:4e:63:a9:36: e1:f5:82:3d:c8:a8:1c:80:62:23:7f:2e:86:0f:45:58:cb:b5: a3:5e:55:5a:f9:44:cc:ee:37:ae:bf:85:04:79:83:8f:80:07: 20:b7:a2:1c:e8:cc:99:c6:c0:1d:51:9d:f0:30:e9:d6:11:2c: f6:99:96:95:75:fa:fa:89:40:71:51:1e:b6:8a:33:39:c3:e1: 77:28:8c:71:4a:ee:6a:f5:1a:99:39:5d:86:fb:a0:87:ce:03: 8a:e8:da:b7:28:5e:89:8e:3f:b0:19:b6:c0:72:26:90:7b:d0: 01:90:75:11:12:c4:6d:a8:0b:33:8d:63:91:17:df:91:5b:6c: 14:02:dd:b2:29:56:84:19:3f:e7:99:66:72:29:78:80:34:0d: db:d1:66:c6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9pmkzl06M6WHWtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk YmZiNzI5YzQtOGY1Zi00ZDIzLWE5ODUtYzQ3ZmM2MDEyMDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAjWmoGR/KlBL12TMe4qJiYfVYNO0AAdwjXY uQW8tKzDwD7EipVcOed6ka3soqQ71S+g7yBXE6qbQxr1p7rTQbZCUPfVdxIHwmIU uwx/9zOGXSUw4XRX/7WAAatvWi3dkOtkYogiLeU6ELhJDKoR0BK3S9vybwSDAhIX LaVLJp+XfbOVb4jKgeSJuvCx+pGS02doaviB+2RI0pMiKL2d1Dq+1u21qFKoKnl5 FBUFU7OICu0spSwYPLRHzB3ygk+2h4Ip6sy6mLjMnOg3pTOV4XYWvsH8bfZvKkwG ei7FTQDUXVAuLk6FulR+ymCBS8hDhMwDuzrA7zk9JS4rfeQY+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEnhHD6byL682nWowf0jwMNWJ7HgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjI3NTNjN2MtMWE3Ni0z MmMzLWJjYWYtYjhhMmE1MDhjOWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYTZ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEBVLGpcHLrPwXD5PjciIyqV1hgYDY8wtlMDkePkY7eZQfwi4NBU p9CZ426JA89vjBXo/L/rkBSjs6qWJisbMpakVqn7w/owznKsAuXUFc4FRMvstwjE KKocd2gLDGE+IKQfocYrDidXTmOpNuH1gj3IqByAYiN/LoYPRVjLtaNeVVr5RMzu N66/hQR5g4+AByC3ohzozJnGwB1RnfAw6dYRLPaZlpV1+vqJQHFRHraKMznD4Xco jHFK7mr1Gpk5XYb7oIfOA4ro2rcoXomOP7AZtsByJpB70AGQdRESxG2oCzONY5EX 35FbbBQC3bIpVoQZP+eZZnIpeIA0DdvRZsY= -----END CERTIFICATE-----Generated at Sun Apr 27 12:59:26 2025 by rpki-client