$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48ed1ba7-0084-35c2-900b-3a33e7232430.roa File: 48ed1ba7-0084-35c2-900b-3a33e7232430.roa (raw, json) Hash identifier: XroAO2hQbaRwcz+JhUSXFqwsZM+lRq4VCrhuDcpj/6A= Subject key identifier: FD:FC:18:F0:10:BC:3F:FB:3F:BB:81:84:01:9A:2C:06:F3:BC:F2:4B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA4ECCC04C189BDABB1F480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48ed1ba7-0084-35c2-900b-3a33e7232430.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 33651 IP address blocks: 2001:559:846f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:ec:cc:04:c1:89:bd:ab:b1:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=b5eafef8-16ad-491d-b648-6aa296dc5b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d1:1f:bf:82:8e:9d:db:b2:e3:48:ed:4e:47: 0b:bf:59:b9:c9:4c:fb:af:a7:29:67:a7:ff:e8:d7: f7:2c:f2:d5:f5:85:8c:21:60:9f:7a:38:8b:ff:9f: 76:3d:5c:b1:6e:cc:d6:a5:58:a0:e0:46:54:c1:9c: e9:ea:de:5f:92:aa:52:e1:29:93:93:30:6f:8d:5e: b7:d9:dd:4b:10:81:c1:32:0a:31:93:b6:c4:39:69: 09:e4:fc:49:4c:6c:c8:f2:fa:60:fe:4f:94:72:3f: 09:f1:ea:38:cd:de:a4:f7:8f:bd:13:20:a0:81:8b: f4:c4:f3:b5:a6:79:14:c5:88:7f:dd:db:80:a1:f5: 6d:84:05:ab:f9:cf:df:9e:e9:6f:8c:86:10:c6:8a: 23:84:2e:0a:cd:33:5e:a1:82:95:14:2d:23:f6:4d: 1f:a6:00:1a:3d:c7:ce:db:13:4d:88:28:8e:ff:92: cf:96:ac:76:dc:05:16:94:4b:b1:e9:ed:7b:74:66: 6b:b1:92:fc:d7:49:ca:1f:56:97:4a:3c:b8:d2:35: c7:e2:80:70:75:85:df:56:99:f9:8a:c1:24:0f:70: 48:38:03:e3:e1:b3:a3:1b:31:76:02:aa:6c:62:f2: cd:a5:b7:5e:53:f8:02:06:b8:61:f2:78:65:e1:bc: 5d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:FC:18:F0:10:BC:3F:FB:3F:BB:81:84:01:9A:2C:06:F3:BC:F2:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48ed1ba7-0084-35c2-900b-3a33e7232430.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:846f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:b1:9c:da:0d:aa:d2:96:3f:cb:4b:96:8a:20:76:7b:00:71: cd:0c:06:42:16:02:6e:97:bd:40:97:4a:88:19:5f:38:9a:0b: 67:e2:4c:64:72:1c:31:e3:87:2e:f7:4c:7b:d6:04:99:d1:3f: 95:07:0b:58:7d:74:98:c3:a0:ef:cd:e6:d7:29:6f:c0:ca:32: 66:e3:04:a1:94:28:90:ec:83:09:48:69:bf:b3:0c:20:96:be: 8a:e8:f7:ac:db:83:4d:73:7d:a1:70:2c:61:bb:46:6a:80:88: 18:74:06:69:0d:89:13:76:b7:4d:ab:c5:0d:f1:1c:f7:fb:e1: e4:5f:c1:93:7e:a4:83:5f:21:e0:54:4b:0d:52:b2:2f:eb:6b: ac:ad:91:4d:15:f1:7d:4f:6c:35:e5:94:9b:76:18:7d:10:7d: 39:fe:d2:56:bd:9d:96:a6:9b:31:c9:3e:dc:b5:69:61:3a:30: 70:6b:cc:f3:91:31:f0:46:75:7f:81:f7:f0:ad:a8:ac:fa:bc: 47:3d:9d:21:b0:22:9c:8f:68:70:21:5d:56:08:0b:78:27:fa: a2:64:a5:02:35:15:d3:7b:01:c9:81:91:b2:40:54:d1:00:e5: 2a:38:03:12:bd:06:95:3d:32:95:ef:43:d1:9b:55:b1:bf:92: c1:81:6d:a4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9pOzMBMGJvaux9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk YjVlYWZlZjgtMTZhZC00OTFkLWI2NDgtNmFhMjk2ZGM1YjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9Efv4KOnduy40jtTkcLv1m5yUz7r6cpZ6f/ 6Nf3LPLV9YWMIWCfejiL/592PVyxbszWpVig4EZUwZzp6t5fkqpS4SmTkzBvjV63 2d1LEIHBMgoxk7bEOWkJ5PxJTGzI8vpg/k+Ucj8J8eo4zd6k94+9EyCggYv0xPO1 pnkUxYh/3duAofVthAWr+c/fnulvjIYQxoojhC4KzTNeoYKVFC0j9k0fpgAaPcfO 2xNNiCiO/5LPlqx23AUWlEux6e17dGZrsZL810nKH1aXSjy40jXH4oBwdYXfVpn5 isEkD3BIOAPj4bOjGzF2AqpsYvLNpbdeU/gCBrhh8nhl4bxdJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP38GPAQvD/7P7uBhAGaLAbzvPJLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDhlZDFiYTctMDA4NC0z NWMyLTkwMGItM2EzM2U3MjMyNDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYRv MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKCxnNoNqtKWP8tLloogdnsAcc0MBkIWAm6XvUCXSogZXziaC2fi TGRyHDHjhy73THvWBJnRP5UHC1h9dJjDoO/N5tcpb8DKMmbjBKGUKJDsgwlIab+z DCCWvoro96zbg01zfaFwLGG7RmqAiBh0BmkNiRN2t02rxQ3xHPf74eRfwZN+pINf IeBUSw1Ssi/ra6ytkU0V8X1PbDXllJt2GH0QfTn+0la9nZammzHJPty1aWE6MHBr zPORMfBGdX+B9/CtqKz6vEc9nSGwIpyPaHAhXVYIC3gn+qJkpQI1FdN7AcmBkbJA VNEA5So4AxK9BpU9MpXvQ9GbVbG/ksGBbaQ= -----END CERTIFICATE-----Generated at Sun Apr 27 10:42:08 2025 by rpki-client