$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a71eded-cf25-3ae1-8271-1a78b5043025.roa File: 7a71eded-cf25-3ae1-8271-1a78b5043025.roa (raw, json) Hash identifier: ULpzLDIM95QjFBgp+P42FVeBK+v/MLXx5V925yw96gI= Subject key identifier: 25:19:C5:EA:C6:A7:46:E5:3A:6D:F5:DC:EC:C4:9F:84:7B:E9:66:DB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA55C8BC0ED8AB5E43CCA40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a71eded-cf25-3ae1-8271-1a78b5043025.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 33287 IP address blocks: 2001:559:437::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a5:5c:8b:c0:ed:8a:b5:e4:3c:ca:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=107040ca-7eb8-49a0-9374-86f64a2001f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:09:a1:a3:ef:88:a9:e7:d7:73:51:b4:a4:c0: c6:2f:fb:9b:1b:27:94:30:15:d0:f2:95:5e:2c:3a: f0:b1:f8:23:a9:cb:f4:9a:24:62:fe:d5:5c:86:fc: 4d:50:14:ea:c9:15:7e:7c:8a:65:13:d6:6d:54:86: bf:d8:62:de:58:99:60:c4:c8:dd:c0:c0:32:b1:04: c9:20:46:8f:51:0d:c8:d1:65:ef:fd:74:e0:08:64: 74:44:11:74:c2:1f:08:98:38:ba:a9:fb:0e:5d:c0: 6d:d2:4f:0f:82:71:bc:a7:95:0e:20:a5:63:b3:f1: 66:1c:fa:72:2b:ab:18:76:a9:d0:fc:9b:13:cf:51: 24:e9:64:db:0c:95:6c:eb:9f:12:85:fd:94:7a:62: ad:7c:a0:16:c2:32:bf:73:2c:40:41:a5:b3:85:db: 7c:fb:f6:56:75:ae:0a:c3:ee:7d:4a:80:99:0f:2e: a7:b5:33:5a:c4:73:e3:65:26:72:f7:c0:7b:3a:c3: 77:34:54:e9:69:1a:db:50:d8:6b:28:48:33:b6:40: 03:3f:d1:fc:28:a9:72:d9:31:80:10:59:c4:02:86: 23:78:b6:74:f4:41:97:67:f5:43:8e:a8:f7:95:76: a1:6a:f8:20:88:bd:ae:38:7e:0f:c4:a2:65:49:2a: ab:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:19:C5:EA:C6:A7:46:E5:3A:6D:F5:DC:EC:C4:9F:84:7B:E9:66:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a71eded-cf25-3ae1-8271-1a78b5043025.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:437::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:e2:ed:e2:6c:5a:6c:e4:e3:33:0e:16:92:54:f7:b2:aa:48: 29:00:07:a4:31:45:95:89:0d:c2:c3:41:e9:ec:c5:a4:44:5d: 50:7d:bb:49:b2:cf:51:6d:b6:2f:62:b2:f1:76:36:b4:fe:2e: da:55:4b:e0:15:00:53:b8:98:e7:21:72:1c:7a:18:ec:a5:c8: cf:26:b0:f8:cb:70:82:73:a0:99:90:24:4c:67:22:57:3f:f0: 5d:b0:16:9e:9f:57:d3:98:e6:1c:5e:78:97:02:34:32:65:5a: 52:69:40:26:2f:4f:3e:12:60:f5:15:0f:1f:af:0d:e4:91:d3: 28:88:0c:26:be:d3:a2:21:0f:9f:7f:87:aa:83:8a:6f:83:9f: 20:93:f3:5d:23:33:54:02:27:bb:3e:c5:44:e4:c0:89:a3:fc: b6:76:14:e0:cb:71:ae:34:6d:cc:4a:b8:d6:50:f8:b6:18:fd: e8:42:d7:58:31:f1:40:f6:7a:4b:01:7b:12:a6:3e:57:ce:29: e0:b1:6e:7d:f8:af:90:1c:2b:8c:74:01:be:bd:cb:99:0d:1c: d5:ec:86:80:6f:03:7a:39:89:a8:2a:8f:e2:13:9a:ba:d0:47: 0f:7d:50:97:ab:10:31:d8:b9:60:81:02:3d:9f:66:59:43:37: c8:cb:87:b3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9pVyLwO2KteQ8ykAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk MTA3MDQwY2EtN2ViOC00OWEwLTkzNzQtODZmNjRhMjAwMWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwmho++IqefXc1G0pMDGL/ubGyeUMBXQ8pVe LDrwsfgjqcv0miRi/tVchvxNUBTqyRV+fIplE9ZtVIa/2GLeWJlgxMjdwMAysQTJ IEaPUQ3I0WXv/XTgCGR0RBF0wh8ImDi6qfsOXcBt0k8PgnG8p5UOIKVjs/FmHPpy K6sYdqnQ/JsTz1Ek6WTbDJVs658Shf2UemKtfKAWwjK/cyxAQaWzhdt8+/ZWda4K w+59SoCZDy6ntTNaxHPjZSZy98B7OsN3NFTpaRrbUNhrKEgztkADP9H8KKly2TGA EFnEAoYjeLZ09EGXZ/VDjqj3lXahavggiL2uOH4PxKJlSSqrZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCUZxerGp0blOm313OzEn4R76WbbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2E3MWVkZWQtY2YyNS0z YWUxLTgyNzEtMWE3OGI1MDQzMDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQQ3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEji7eJsWmzk4zMOFpJU97KqSCkAB6QxRZWJDcLDQensxaREXVB9 u0myz1Ftti9isvF2NrT+LtpVS+AVAFO4mOchchx6GOylyM8msPjLcIJzoJmQJExn Ilc/8F2wFp6fV9OY5hxeeJcCNDJlWlJpQCYvTz4SYPUVDx+vDeSR0yiIDCa+06Ih D59/h6qDim+DnyCT810jM1QCJ7s+xUTkwImj/LZ2FODLca40bcxKuNZQ+LYY/ehC 11gx8UD2eksBexKmPlfOKeCxbn34r5AcK4x0Ab69y5kNHNXshoBvA3o5iagqj+IT mrrQRw99UJerEDHYuWCBAj2fZllDN8jLh7M= -----END CERTIFICATE-----Generated at Sun Apr 27 20:37:36 2025 by rpki-client