$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64f4e468-d0ed-362f-acd7-9d7c2db184f7.roa File: 64f4e468-d0ed-362f-acd7-9d7c2db184f7.roa (raw, json) Hash identifier: ZJMj2RJFc2yJdOvGRKLioF84Q3kOe57gdzY+fyzIfT8= Subject key identifier: 2D:8A:F9:AE:97:54:29:1B:AD:E0:64:56:0E:A2:5E:5F:33:C2:09:13 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA4FD7A1C7C5763F4371768 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64f4e468-d0ed-362f-acd7-9d7c2db184f7.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 33662 IP address blocks: 2001:559:82da::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:fd:7a:1c:7c:57:63:f4:37:17:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=cf2f798e-6960-4849-b451-16553288768a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6b:0b:ea:23:40:7f:22:ba:29:7e:3f:38:d6: 47:a2:bd:a4:16:0b:a8:e1:20:cb:a9:75:0a:d4:1f: 71:9d:ad:d3:fc:c8:59:0b:12:b3:b8:ab:9e:f1:04: f7:da:cb:b2:b4:c6:c2:b6:5e:a7:cf:90:7e:fd:12: 0d:49:30:7e:c4:b0:fb:be:44:01:65:79:1b:f7:92: 03:54:d6:b0:8c:2e:be:5c:61:f7:7a:17:c9:06:23: 6f:b6:d0:4c:19:8a:22:05:d1:94:10:c4:7b:5f:7b: 2a:9b:bb:27:c3:14:a5:f6:0b:3e:be:e0:05:41:47: 69:89:66:71:c5:d4:f2:4a:c3:ec:9f:f3:91:3b:e9: 9f:08:e1:e7:de:be:bd:72:0d:c5:d1:75:ff:35:da: da:7e:4d:f4:30:5d:0f:cc:c0:7c:99:96:17:2c:14: 96:a1:38:e3:ca:8c:7b:64:ce:1c:cc:f2:c8:2f:06: 42:f9:2e:5f:ab:b3:39:4b:a0:c8:29:b4:1e:6d:6a: d9:06:6c:0f:d1:fe:dc:f2:87:60:b5:12:f3:3a:d2: 66:8b:6f:21:c8:f2:3c:57:7a:5c:94:59:0b:c8:7a: af:38:5a:77:38:fc:e0:a0:ed:5d:f3:de:0e:2e:4f: 44:28:df:f1:30:10:8b:d6:15:a6:79:2d:23:f2:f3: 78:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:8A:F9:AE:97:54:29:1B:AD:E0:64:56:0E:A2:5E:5F:33:C2:09:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64f4e468-d0ed-362f-acd7-9d7c2db184f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:82da::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:df:da:bd:9d:ec:88:51:44:48:c3:dd:69:92:72:41:90:fb: e4:ad:f5:b8:ff:5d:fd:a7:01:fc:a6:37:f6:67:78:49:32:81: 42:2e:8b:2a:27:52:1b:6a:60:ed:50:c7:ee:1b:54:f2:b5:16: c8:ac:d1:3c:b6:81:96:a8:45:76:2e:88:a9:6b:fc:a3:0b:27: 42:9b:fb:7d:76:3c:ba:a2:44:33:ad:5c:43:38:a2:cc:42:ef: 3c:ee:85:6f:af:bc:cc:23:0a:e8:ea:14:27:8a:84:c0:96:9d: 77:e8:a0:b9:ed:15:9b:93:a3:40:f4:35:92:9a:28:44:dc:31: 84:ae:30:08:f1:f3:34:8f:46:43:2f:8c:21:ea:4f:39:ce:e8: a1:88:bc:14:5d:b9:31:04:07:e0:e1:e2:58:e9:60:5b:e6:d1: 3a:d0:9f:34:31:e9:a6:33:be:11:5a:d2:ba:2f:54:9d:5f:a6: 07:0a:1d:bf:00:dc:37:c9:50:c7:c9:26:cb:21:30:7d:57:22: 56:4a:7f:24:52:2c:57:a9:cf:1a:5c:87:52:34:41:0b:db:f3: e3:0b:91:00:01:1e:02:27:7a:e2:0f:c8:08:1b:3a:ad:e5:f8: 26:a4:ec:2e:d6:b6:84:df:d7:fe:e8:21:d9:b2:14:3d:43:d4: a0:8c:77:d0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9pP16HHxXY/Q3F2gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk Y2YyZjc5OGUtNjk2MC00ODQ5LWI0NTEtMTY1NTMyODg3NjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWsL6iNAfyK6KX4/ONZHor2kFguo4SDLqXUK 1B9xna3T/MhZCxKzuKue8QT32suytMbCtl6nz5B+/RINSTB+xLD7vkQBZXkb95ID VNawjC6+XGH3ehfJBiNvttBMGYoiBdGUEMR7X3sqm7snwxSl9gs+vuAFQUdpiWZx xdTySsPsn/ORO+mfCOHn3r69cg3F0XX/Ndrafk30MF0PzMB8mZYXLBSWoTjjyox7 ZM4czPLILwZC+S5fq7M5S6DIKbQebWrZBmwP0f7c8odgtRLzOtJmi28hyPI8V3pc lFkLyHqvOFp3OPzgoO1d894OLk9EKN/xMBCL1hWmeS0j8vN4aQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC2K+a6XVCkbreBkVg6iXl8zwgkTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjRmNGU0NjgtZDBlZC0z NjJmLWFjZDctOWQ3YzJkYjE4NGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYLa MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAHf2r2d7IhRREjD3WmSckGQ++St9bj/Xf2nAfymN/ZneEkygUIu iyonUhtqYO1Qx+4bVPK1Fsis0Ty2gZaoRXYuiKlr/KMLJ0Kb+312PLqiRDOtXEM4 osxC7zzuhW+vvMwjCujqFCeKhMCWnXfooLntFZuTo0D0NZKaKETcMYSuMAjx8zSP RkMvjCHqTznO6KGIvBRduTEEB+Dh4ljpYFvm0TrQnzQx6aYzvhFa0rovVJ1fpgcK Hb8A3DfJUMfJJsshMH1XIlZKfyRSLFepzxpch1I0QQvb8+MLkQABHgIneuIPyAgb Oq3l+Cak7C7WtoTf1/7oIdmyFD1D1KCMd9A= -----END CERTIFICATE-----Generated at Mon Apr 28 01:15:55 2025 by rpki-client