$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e6f76d6-bb7f-3d58-b060-50546e3f5e10.roa File: 7e6f76d6-bb7f-3d58-b060-50546e3f5e10.roa (raw, json) Hash identifier: 52xy9ndqUz8MIZRdI0pTfXonf5YZzkXelZ7Q3iyTgZs= Subject key identifier: 9B:95:92:A6:6D:F1:D9:48:3B:BC:5F:53:69:7B:39:19:63:5A:D8:B2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA6C9C5072BD2E7B4AC2D80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e6f76d6-bb7f-3d58-b060-50546e3f5e10.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 33659 IP address blocks: 2001:559:70c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a6:c9:c5:07:2b:d2:e7:b4:ac:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=5aab7805-4d5e-4ab5-9587-52ffc2dc0126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0e:0f:30:15:27:22:75:b1:66:7a:ff:f3:25: 09:e0:8f:0c:9c:58:85:ad:9e:3b:a3:03:ca:54:28: 16:cd:1f:fa:32:2e:b5:51:4b:9b:17:7c:bc:be:13: 15:3f:f2:c6:71:8c:0d:1e:d0:e1:73:d6:89:fc:59: 28:cf:87:ea:8d:ca:31:78:e5:7a:8c:5e:9f:1b:29: 45:b7:81:24:76:4d:59:a1:37:f4:5e:9d:63:45:71: 08:59:ec:69:d7:41:db:c1:e2:b9:92:fa:18:26:aa: 36:e6:13:e8:c4:20:3e:c1:af:63:6a:d2:a4:86:16: 40:2b:ff:df:ec:00:8d:b4:8a:c7:26:18:ab:cf:13: 59:ae:67:3a:25:c2:f2:80:93:5a:89:0a:b5:72:05: 48:d0:46:68:c8:09:65:5e:2c:30:f8:6b:eb:80:78: ff:96:a8:63:63:2b:98:b2:d1:47:22:d9:1c:96:3f: 24:14:d4:53:5c:7d:8c:63:91:b8:0c:d6:dd:85:e3: 80:de:3d:97:15:4f:02:55:6d:a3:16:a4:18:0a:35: ba:cc:0e:84:7e:7e:a0:28:67:b7:ec:61:ff:6a:34: 9b:01:bd:79:60:ee:34:e2:f1:dd:d8:23:32:e4:5f: c6:84:4f:ac:6c:1e:44:db:a3:58:68:ba:bd:48:53: 6b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:95:92:A6:6D:F1:D9:48:3B:BC:5F:53:69:7B:39:19:63:5A:D8:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e6f76d6-bb7f-3d58-b060-50546e3f5e10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:70c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:d2:4a:b2:79:db:4c:31:b9:c0:16:c8:05:aa:bb:ee:9c:07: 05:5e:bc:cd:4c:e0:42:cd:be:f3:2d:fc:ac:ae:96:f8:19:25: fc:56:f5:7e:8c:0e:fc:0d:8d:c5:3c:7c:c3:d1:b9:c8:f6:ac: b6:d2:56:4a:9c:c8:31:25:ac:c1:cf:4c:14:34:e9:8c:fc:cb: 48:6a:6c:6f:fd:ae:f4:a6:79:60:9d:23:74:69:c4:8b:d9:fe: be:31:0c:9d:ee:99:72:a0:3c:36:a0:7c:cd:d3:4b:ca:f2:6d: 7e:3e:d4:0a:c1:32:0b:04:bd:d3:7c:f5:66:f9:27:31:02:80: 86:21:cc:88:e4:6e:b6:08:71:11:6e:80:44:7e:53:26:bc:be: 7f:72:c2:b0:e5:00:37:8b:a9:4f:c4:c6:7d:11:9e:88:7d:19: 24:1d:2f:03:80:f6:dc:20:91:d1:a6:43:2b:cf:c7:00:1b:db: d6:2b:e6:16:a4:f5:de:f1:00:52:09:0b:4d:f3:7d:0a:7b:6a: 28:11:29:fa:ae:34:8a:a6:0e:3a:d6:61:ce:26:49:37:7e:aa: 7b:3d:c5:5a:7b:5e:0d:1e:f6:05:3b:69:42:7a:5f:a5:21:2f: 5e:29:7a:ee:20:a4:f6:94:a1:24:67:ad:db:ed:f2:47:ab:07: 13:04:3b:fe -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9psnFByvS57SsLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk NWFhYjc4MDUtNGQ1ZS00YWI1LTk1ODctNTJmZmMyZGMwMTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ4PMBUnInWxZnr/8yUJ4I8MnFiFrZ47owPK VCgWzR/6Mi61UUubF3y8vhMVP/LGcYwNHtDhc9aJ/Fkoz4fqjcoxeOV6jF6fGylF t4Ekdk1ZoTf0Xp1jRXEIWexp10HbweK5kvoYJqo25hPoxCA+wa9jatKkhhZAK//f 7ACNtIrHJhirzxNZrmc6JcLygJNaiQq1cgVI0EZoyAllXiww+GvrgHj/lqhjYyuY stFHItkclj8kFNRTXH2MY5G4DNbdheOA3j2XFU8CVW2jFqQYCjW6zA6Efn6gKGe3 7GH/ajSbAb15YO404vHd2CMy5F/GhE+sbB5E26NYaLq9SFNrLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJuVkqZt8dlIO7xfU2l7ORljWtiyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2U2Zjc2ZDYtYmI3Zi0z ZDU4LWIwNjAtNTA1NDZlM2Y1ZTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQcM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD7SSrJ520wxucAWyAWqu+6cBwVevM1M4ELNvvMt/KyulvgZJfxW 9X6MDvwNjcU8fMPRucj2rLbSVkqcyDElrMHPTBQ06Yz8y0hqbG/9rvSmeWCdI3Rp xIvZ/r4xDJ3umXKgPDagfM3TS8rybX4+1ArBMgsEvdN89Wb5JzECgIYhzIjkbrYI cRFugER+Uya8vn9ywrDlADeLqU/Exn0Rnoh9GSQdLwOA9twgkdGmQyvPxwAb29Yr 5hak9d7xAFIJC03zfQp7aigRKfquNIqmDjrWYc4mSTd+qns9xVp7Xg0e9gU7aUJ6 X6UhL14peu4gpPaUoSRnrdvt8kerBxMEO/4= -----END CERTIFICATE-----Generated at Mon Apr 28 01:21:56 2025 by rpki-client