$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7fc503aa-92b1-3bd4-b2e3-b15fa8e1ed7d.roa File: 7fc503aa-92b1-3bd4-b2e3-b15fa8e1ed7d.roa (raw, json) Hash identifier: jD2lejwXdvBilwuhY7GhkQ4Zz5q9xmL/OJwC/KxaobM= Subject key identifier: 14:4C:21:E1:B9:71:CC:3C:F2:1E:ED:BF:76:96:99:F2:51:6E:BB:47 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA5F1064587272926394000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7fc503aa-92b1-3bd4-b2e3-b15fa8e1ed7d.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 22909 IP address blocks: 2001:559:779::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a5:f1:06:45:87:27:29:26:39:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=d293b11b-2a75-4a46-aca5-91b3959c4185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:68:a5:75:c4:f8:0a:5b:03:99:c7:40:55:74: 0d:db:d6:b0:4e:d9:fb:72:54:42:cb:21:f0:c8:58: b8:bb:17:b8:e5:37:6e:40:5b:b8:ed:ab:53:83:c4: 50:03:44:a3:e2:e3:c1:d6:cc:ca:b4:61:c9:a7:2b: c4:78:cb:d2:52:32:0e:34:c2:ff:a2:e3:fe:5d:87: 2f:1f:0c:18:4b:fa:f7:dd:55:16:96:77:40:11:17: 36:e7:34:71:27:e7:79:47:53:13:71:0b:14:18:30: f4:83:7e:42:0d:32:88:90:9a:91:03:3b:0b:de:22: 1e:6e:18:f1:00:e2:c2:f8:70:78:19:36:54:26:95: 3a:50:0c:59:77:20:c7:3f:eb:1a:81:b9:3c:ad:bb: e8:13:fe:58:9e:5b:08:0c:88:a6:e0:1d:5c:26:d8: d9:78:cc:0d:a1:ee:94:b5:a8:76:37:a1:66:9d:67: b8:bf:bf:13:6a:66:b9:ac:ad:2f:ac:00:62:3e:00: 86:75:cf:ab:1a:67:db:29:e9:65:5a:3f:aa:83:45: 07:71:fe:bf:73:65:b1:36:ef:08:93:3a:da:3c:c2: 3d:f0:99:68:f3:fe:dc:ad:a7:a3:a6:88:eb:2b:78: 7a:9d:9a:60:06:42:c8:20:bd:b1:d0:b2:32:50:12: 7c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:4C:21:E1:B9:71:CC:3C:F2:1E:ED:BF:76:96:99:F2:51:6E:BB:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7fc503aa-92b1-3bd4-b2e3-b15fa8e1ed7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:779::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:50:6f:78:df:d9:0d:c8:cd:a2:c2:6f:6c:3d:eb:e7:d0:1d: 93:12:26:60:eb:fe:2d:43:be:8a:c8:c4:55:da:6e:2b:0d:9d: 98:9b:59:1b:b8:33:1e:39:62:dd:03:a0:b9:fa:7e:34:ab:5b: ed:e6:67:d5:ec:dc:08:16:bc:ba:55:fb:25:48:b6:12:af:b1: d8:12:08:2b:62:1a:cb:d0:ae:00:77:48:df:11:a1:aa:85:ba: bf:77:ba:bf:60:0d:63:97:0e:ee:c4:e1:e4:5d:26:28:5a:80: 5a:9a:cc:f3:e0:42:1d:f7:e0:23:2b:18:ec:64:24:09:13:18: 84:b4:90:bd:ac:d8:cd:2c:53:5f:e6:f6:01:73:37:16:69:fc: 54:30:27:0f:b1:fa:4a:9e:4d:5d:78:64:b6:83:51:40:9b:6f: 9f:58:62:b2:5d:91:51:2e:51:db:be:9f:5b:c0:94:09:fb:76: f8:e2:79:f6:30:57:2a:fc:92:b6:e7:e3:2c:7e:45:01:9a:47: 3f:96:b9:dd:4a:ab:17:bc:cc:aa:81:03:73:76:d7:7c:a0:60: 44:05:80:d5:7e:f3:fe:c3:fa:19:93:d5:1a:a9:0e:b8:1f:c3: 59:b3:fb:39:2b:9d:15:01:18:18:81:85:8a:71:92:5a:9e:9e: dd:49:b6:20 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9pfEGRYcnKSY5QAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZDI5M2IxMWItMmE3NS00YTQ2LWFjYTUtOTFiMzk1OWM0MTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2ildcT4ClsDmcdAVXQN29awTtn7clRCyyHw yFi4uxe45TduQFu47atTg8RQA0Sj4uPB1szKtGHJpyvEeMvSUjIONML/ouP+XYcv HwwYS/r33VUWlndAERc25zRxJ+d5R1MTcQsUGDD0g35CDTKIkJqRAzsL3iIebhjx AOLC+HB4GTZUJpU6UAxZdyDHP+sagbk8rbvoE/5YnlsIDIim4B1cJtjZeMwNoe6U tah2N6FmnWe4v78Tama5rK0vrABiPgCGdc+rGmfbKellWj+qg0UHcf6/c2WxNu8I kzraPMI98Jlo8/7craejpojrK3h6nZpgBkLIIL2x0LIyUBJ8cQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBRMIeG5ccw88h7tv3aWmfJRbrtHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2ZjNTAzYWEtOTJiMS0z YmQ0LWIyZTMtYjE1ZmE4ZTFlZDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQd5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBANNQb3jf2Q3IzaLCb2w96+fQHZMSJmDr/i1DvorIxFXabisNnZib WRu4Mx45Yt0DoLn6fjSrW+3mZ9Xs3AgWvLpV+yVIthKvsdgSCCtiGsvQrgB3SN8R oaqFur93ur9gDWOXDu7E4eRdJihagFqazPPgQh334CMrGOxkJAkTGIS0kL2s2M0s U1/m9gFzNxZp/FQwJw+x+kqeTV14ZLaDUUCbb59YYrJdkVEuUdu+n1vAlAn7dvji efYwVyr8krbn4yx+RQGaRz+Wud1Kqxe8zKqBA3N213ygYEQFgNV+8/7D+hmT1Rqp Drgfw1mz+zkrnRUBGBiBhYpxklqent1JtiA= -----END CERTIFICATE-----Generated at Sun Apr 27 13:07:03 2025 by rpki-client