$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6435f2be-70f4-3569-a8cd-9c613f5a5894.roa File: 6435f2be-70f4-3569-a8cd-9c613f5a5894.roa (raw, json) Hash identifier: vxkECvIB3eSKe/N5qYNDLxZEZgSlTBhK4melWYLwn2w= Subject key identifier: 5B:7F:B0:ED:A1:45:55:B3:B5:88:F3:F4:BF:23:C6:06:7C:70:94:96 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA6BB05CDD0FA9A18695B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6435f2be-70f4-3569-a8cd-9c613f5a5894.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 33657 IP address blocks: 2001:559:588::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a6:bb:05:cd:d0:fa:9a:18:69:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=10ea26d2-a92c-4306-bcc0-8bd483140d15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b6:19:9b:5b:35:9e:3b:0b:2a:16:f6:97:c0: f6:71:09:b0:c5:ef:27:cb:3c:82:b5:58:6d:5a:74: 6e:3e:1e:6b:2a:db:04:06:70:4a:7a:14:cd:73:2d: 61:63:cc:a9:58:44:b8:7f:50:63:43:ee:86:04:bf: 48:9d:8f:10:2e:a5:26:bd:23:64:a1:38:20:59:a1: 31:2c:37:80:ff:e7:52:7d:ad:03:a4:a6:4e:e8:bb: a2:12:a2:4f:87:3f:82:d3:88:15:ac:95:7d:ba:58: 68:0a:1b:3e:03:bb:e7:9b:e9:09:65:d9:b8:b0:d4: 69:b1:94:c9:b2:1b:0a:7c:18:4c:dc:75:e2:da:6e: 89:a8:79:41:f2:66:48:5e:6c:39:1a:8d:29:59:e7: 4d:18:04:99:b1:f3:b8:f8:e5:87:98:9f:99:11:ad: ef:09:8d:42:d1:9c:75:97:e6:87:bc:04:32:0e:b7: b0:3f:3e:31:4a:e4:31:20:b4:49:83:47:d8:ec:73: f1:1f:fb:c1:f4:d8:41:6b:02:56:11:f2:d7:01:2e: e2:af:c4:1c:2a:99:f5:a5:eb:cc:07:34:8f:db:f9: 60:1f:e7:56:0a:ed:60:d7:a1:cc:21:74:70:35:7b: 4f:5e:9f:44:a4:5b:09:a9:e5:a0:81:fc:1e:d5:2a: 8f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:7F:B0:ED:A1:45:55:B3:B5:88:F3:F4:BF:23:C6:06:7C:70:94:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6435f2be-70f4-3569-a8cd-9c613f5a5894.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:588::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:f5:08:80:d2:92:cf:8f:a0:01:e4:6f:e0:42:7d:54:cd:69: 98:91:47:cc:df:4a:9e:d9:bd:2d:cd:39:cc:4a:31:f6:c4:8e: fd:1d:51:d0:15:dc:ba:f7:1e:8d:f7:9d:36:1b:ed:17:79:17: cb:b6:25:94:2e:3e:36:f5:aa:7f:bb:a8:ef:29:94:2c:65:c8: 5f:25:09:0a:97:39:49:e2:b6:de:28:0f:2e:af:1b:f4:08:16: b6:07:1c:ad:e5:27:81:b4:ec:56:24:0b:d0:b0:17:d3:75:21: 88:23:08:04:3b:30:08:d1:75:36:b1:1d:44:68:c0:71:5d:70: c1:d0:76:02:40:e5:52:99:7d:f0:8f:8b:3c:be:73:0c:64:0c: 68:14:bc:5e:49:80:f7:12:eb:99:5e:9a:f0:c6:01:e0:23:d9: 1e:23:4b:1a:3e:3f:7a:97:b9:99:35:16:49:60:ef:5b:f0:73: 9e:64:57:7d:54:76:3b:18:5c:25:71:28:25:84:05:c9:96:d4: 7e:13:8d:dd:19:21:fa:c7:aa:bb:0f:d4:7c:d4:9e:ad:5b:3b: 25:ca:b4:3e:ab:56:c4:6c:53:d4:2e:7b:ef:ea:ba:27:84:2b: 64:c9:a9:19:8b:54:e7:83:ac:2f:09:c5:57:da:ab:fb:55:c5: fe:aa:d8:e1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9prsFzdD6mhhpWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk MTBlYTI2ZDItYTkyYy00MzA2LWJjYzAtOGJkNDgzMTQwZDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrYZm1s1njsLKhb2l8D2cQmwxe8nyzyCtVht WnRuPh5rKtsEBnBKehTNcy1hY8ypWES4f1BjQ+6GBL9InY8QLqUmvSNkoTggWaEx LDeA/+dSfa0DpKZO6LuiEqJPhz+C04gVrJV9ulhoChs+A7vnm+kJZdm4sNRpsZTJ shsKfBhM3HXi2m6JqHlB8mZIXmw5Go0pWedNGASZsfO4+OWHmJ+ZEa3vCY1C0Zx1 l+aHvAQyDrewPz4xSuQxILRJg0fY7HPxH/vB9NhBawJWEfLXAS7ir8QcKpn1pevM BzSP2/lgH+dWCu1g16HMIXRwNXtPXp9EpFsJqeWggfwe1SqPVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFt/sO2hRVWztYjz9L8jxgZ8cJSWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjQzNWYyYmUtNzBmNC0z NTY5LWE4Y2QtOWM2MTNmNWE1ODk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQWI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF71CIDSks+PoAHkb+BCfVTNaZiRR8zfSp7ZvS3NOcxKMfbEjv0d UdAV3Lr3Ho33nTYb7Rd5F8u2JZQuPjb1qn+7qO8plCxlyF8lCQqXOUnitt4oDy6v G/QIFrYHHK3lJ4G07FYkC9CwF9N1IYgjCAQ7MAjRdTaxHURowHFdcMHQdgJA5VKZ ffCPizy+cwxkDGgUvF5JgPcS65lemvDGAeAj2R4jSxo+P3qXuZk1Fklg71vwc55k V31UdjsYXCVxKCWEBcmW1H4Tjd0ZIfrHqrsP1HzUnq1bOyXKtD6rVsRsU9Que+/q uieEK2TJqRmLVOeDrC8JxVfaq/tVxf6q2OE= -----END CERTIFICATE-----Generated at Sun Apr 27 10:36:28 2025 by rpki-client