$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a33a874-5399-3fbd-a7f3-c2bc3d7d8794.roa File: 5a33a874-5399-3fbd-a7f3-c2bc3d7d8794.roa (raw, json) Hash identifier: 2ddm5G+LsVRxV+8KATyFQKpkLtQ8uOpZd94UtX2jRds= Subject key identifier: 1D:57:16:D9:A1:DE:B1:A0:1A:85:28:61:A7:E5:BD:5A:63:17:A3:7D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA600A3310258645D3C3F00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a33a874-5399-3fbd-a7f3-c2bc3d7d8794.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 7016 IP address blocks: 2001:559:84::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a6:00:a3:31:02:58:64:5d:3c:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=ea4c0a6c-3031-4b52-9e1d-c7bafaa6ec5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:77:38:d0:37:91:dc:ff:6e:c7:12:45:c4:82: b0:ed:e1:6c:ab:77:18:58:48:f7:18:e9:83:ba:aa: 66:a4:3f:6e:61:f4:ad:54:cf:ab:f1:8c:4f:6f:97: 0f:3c:d7:1c:b1:f8:7f:a1:2f:cd:e6:5e:4f:48:1f: 68:34:77:94:1f:d5:6d:c0:1e:33:3f:4c:27:7e:16: 31:c1:87:08:61:f7:ff:6a:16:48:cf:cd:42:35:c1: 13:a3:a9:7b:73:97:92:c7:ff:21:d3:99:44:5a:a9: b5:5a:e5:9f:81:d5:15:41:4e:2a:7b:31:08:d6:8d: 44:40:5d:7c:c4:14:84:14:83:c3:8b:14:c6:ff:22: 43:52:24:c7:81:26:5a:70:03:f0:8c:f7:a2:79:b9: 82:66:97:dc:4c:34:10:fa:9f:a2:f8:0e:1e:4d:11: 8a:bc:2a:fe:29:3d:ca:da:ca:e7:e7:df:12:87:2d: bb:e3:0e:8e:e2:e7:97:19:e3:4d:69:c5:31:1e:b5: 66:d7:9c:cd:37:55:07:5e:08:01:20:56:6e:d1:e4: fb:53:fe:1d:96:bf:44:dd:54:bb:97:61:2f:b5:e9: b7:a7:75:86:45:ad:69:5c:b4:56:de:6a:3b:a0:89: 89:23:37:21:72:46:68:bb:cf:63:3b:a5:c8:96:f7: 74:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:57:16:D9:A1:DE:B1:A0:1A:85:28:61:A7:E5:BD:5A:63:17:A3:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a33a874-5399-3fbd-a7f3-c2bc3d7d8794.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:84::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:c6:cc:5b:19:a9:04:9b:40:db:17:10:46:22:3e:7e:07:3b: a6:f6:87:f9:81:1d:95:7f:af:32:eb:50:19:c0:97:76:dc:c6: 99:93:7e:91:ff:45:73:8a:2f:07:62:78:b4:c4:6d:8a:24:b5: ec:6d:89:ac:45:3a:ba:fa:09:03:fd:ef:33:34:84:5d:83:04: e5:e1:38:f5:db:6d:f2:3f:4e:44:c9:bb:cb:8b:43:4c:db:0d: 81:a5:52:5d:75:2b:c7:23:a9:b5:8b:b1:36:25:f3:be:ff:10: f1:88:49:55:8a:79:d7:f3:82:83:e3:8a:ce:ec:2f:75:3c:68: 7a:43:03:26:3d:00:cd:d8:bb:60:56:3c:c2:c0:66:4f:fd:5a: 36:ee:79:25:f0:33:50:17:42:81:71:05:5f:a4:b9:9b:12:09: 61:31:70:19:ba:aa:8f:2f:da:b5:20:de:f7:c6:ba:ec:df:7a: 80:4c:6b:ef:56:2f:d2:88:8d:3f:53:0c:6c:20:55:cf:8e:4c: 13:42:7d:35:5c:00:31:89:6b:1d:a9:1e:71:53:e9:52:1c:83: 7d:4a:96:7f:cd:cd:fa:8c:14:f5:45:36:ee:50:1d:5d:17:19: d0:eb:15:3d:06:bd:77:a6:12:a6:3e:32:34:42:b5:ba:4e:92: ee:d7:96:b4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9pgCjMQJYZF08PwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZWE0YzBhNmMtMzAzMS00YjUyLTllMWQtYzdiYWZhYTZlYzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHc40DeR3P9uxxJFxIKw7eFsq3cYWEj3GOmD uqpmpD9uYfStVM+r8YxPb5cPPNccsfh/oS/N5l5PSB9oNHeUH9VtwB4zP0wnfhYx wYcIYff/ahZIz81CNcETo6l7c5eSx/8h05lEWqm1WuWfgdUVQU4qezEI1o1EQF18 xBSEFIPDixTG/yJDUiTHgSZacAPwjPeiebmCZpfcTDQQ+p+i+A4eTRGKvCr+KT3K 2srn598Shy274w6O4ueXGeNNacUxHrVm15zNN1UHXggBIFZu0eT7U/4dlr9E3VS7 l2Evtem3p3WGRa1pXLRW3mo7oImJIzchckZou89jO6XIlvd0YQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB1XFtmh3rGgGoUoYaflvVpjF6N9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWEzM2E4NzQtNTM5OS0z ZmJkLWE3ZjMtYzJiYzNkN2Q4Nzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQCE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAnGzFsZqQSbQNsXEEYiPn4HO6b2h/mBHZV/rzLrUBnAl3bcxpmT fpH/RXOKLwdieLTEbYoktextiaxFOrr6CQP97zM0hF2DBOXhOPXbbfI/TkTJu8uL Q0zbDYGlUl11K8cjqbWLsTYl877/EPGISVWKedfzgoPjis7sL3U8aHpDAyY9AM3Y u2BWPMLAZk/9WjbueSXwM1AXQoFxBV+kuZsSCWExcBm6qo8v2rUg3vfGuuzfeoBM a+9WL9KIjT9TDGwgVc+OTBNCfTVcADGJax2pHnFT6VIcg31Kln/NzfqMFPVFNu5Q HV0XGdDrFT0GvXemEqY+MjRCtbpOku7XlrQ= -----END CERTIFICATE-----Generated at Sun Apr 27 22:21:01 2025 by rpki-client