$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a66f4c5-9623-3f1a-85fa-bcd308edeb93.roa File: 9a66f4c5-9623-3f1a-85fa-bcd308edeb93.roa (raw, json) Hash identifier: f9NtNVIwkm8k7qCkzevwp8zR858LrnxuH9daVARaKaw= Subject key identifier: CA:B9:E6:73:34:93:A9:3C:20:10:40:D5:83:D5:73:A1:87:78:FF:46 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA6A47AA2818476AAFBB580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a66f4c5-9623-3f1a-85fa-bcd308edeb93.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 33287 IP address blocks: 2001:559:846d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a6:a4:7a:a2:81:84:76:aa:fb:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=3688f6e4-e640-470d-82cf-09314b2004a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f5:7d:4e:b4:41:c6:85:e1:54:c7:08:00:14: 7d:04:1f:d4:e6:b9:54:84:c7:23:05:bc:42:30:18: 00:80:b1:24:20:b2:fc:c7:bc:e8:56:19:3d:f7:89: cc:e8:5c:88:48:74:7b:b8:75:00:65:1f:b8:28:a0: 2b:2d:eb:9c:ff:c3:80:d7:fd:0c:9e:81:7e:5f:b0: ce:3e:7f:fc:83:91:40:73:38:42:91:ed:97:54:a3: 60:c0:76:3d:b8:d1:0f:96:06:8b:d6:00:2c:96:2b: e8:4f:21:a0:c8:2c:ff:ca:f9:6a:6a:91:8b:7c:e2: e3:ed:28:96:39:61:f8:d8:53:40:1e:fc:ba:24:be: 4d:cb:3b:78:bf:df:95:8c:ec:4d:bb:cb:cf:be:1f: ee:7b:ea:2e:80:62:5a:c0:ed:71:11:b8:9f:dd:ee: 2f:02:45:12:c1:cc:6c:34:12:d1:66:7f:dd:aa:00: 28:e5:4a:ea:a6:01:67:6f:2b:cc:7c:f1:79:3e:69: ad:99:0a:fe:16:48:da:2f:51:b5:ea:23:e8:eb:2c: cf:ef:e5:d9:28:f3:e2:a8:e6:91:0a:04:eb:ad:f5: 1e:50:37:bb:0d:c5:e6:6e:52:ff:3d:ee:c8:3d:e2: 9b:f1:b9:df:fd:04:d5:c9:cf:23:71:c5:34:18:0e: 77:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B9:E6:73:34:93:A9:3C:20:10:40:D5:83:D5:73:A1:87:78:FF:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a66f4c5-9623-3f1a-85fa-bcd308edeb93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:846d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:02:a1:af:59:c8:fa:3a:84:f8:4e:ca:4c:ee:0e:2b:88:2e: ed:0e:f6:75:d4:32:3d:97:ff:b0:e6:f9:28:d0:56:c9:47:fe: db:f3:53:76:05:cb:87:69:21:2b:73:8c:56:9f:06:40:18:48: 89:03:9a:7a:aa:2f:36:43:86:ab:33:d8:76:82:68:54:1f:9a: 95:42:16:56:47:b6:92:26:26:a7:cf:2a:40:87:c5:95:8e:01: 30:86:6f:56:1b:c8:8a:6a:c9:9d:07:1a:56:c4:50:20:1f:d3: a6:17:06:ad:3a:9a:49:55:db:38:2b:22:83:1d:fb:1f:6e:4e: b2:53:b4:84:a4:f9:61:8b:13:83:67:ba:e9:e6:c5:df:a6:d2: d6:43:55:cd:56:63:09:7e:a8:6e:d3:19:ab:15:32:14:36:2e: 29:82:e6:49:30:16:1c:45:88:4a:c9:73:56:9a:ea:a0:37:86: 56:5c:01:fa:46:42:04:53:e3:2b:ec:79:7f:cd:52:dc:d7:90: 29:4c:66:cd:90:f9:a7:24:bb:18:5a:2b:3b:16:95:5d:c6:1b: ed:b6:a4:97:59:91:3d:6f:c0:0e:85:b2:44:0f:4c:ce:e1:e2: 62:c8:de:bb:4e:85:30:90:61:5f:cb:b5:80:31:4e:c3:8a:72: f3:5b:80:12 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9pqR6ooGEdqr7tYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk MzY4OGY2ZTQtZTY0MC00NzBkLTgyY2YtMDkzMTRiMjAwNGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/V9TrRBxoXhVMcIABR9BB/U5rlUhMcjBbxC MBgAgLEkILL8x7zoVhk994nM6FyISHR7uHUAZR+4KKArLeuc/8OA1/0MnoF+X7DO Pn/8g5FAczhCke2XVKNgwHY9uNEPlgaL1gAslivoTyGgyCz/yvlqapGLfOLj7SiW OWH42FNAHvy6JL5Nyzt4v9+VjOxNu8vPvh/ue+ougGJawO1xEbif3e4vAkUSwcxs NBLRZn/dqgAo5UrqpgFnbyvMfPF5PmmtmQr+FkjaL1G16iPo6yzP7+XZKPPiqOaR CgTrrfUeUDe7DcXmblL/Pe7IPeKb8bnf/QTVyc8jccU0GA53XQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMq55nM0k6k8IBBA1YPVc6GHeP9GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWE2NmY0YzUtOTYyMy0z ZjFhLTg1ZmEtYmNkMzA4ZWRlYjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYRt MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHUCoa9ZyPo6hPhOykzuDiuILu0O9nXUMj2X/7Dm+SjQVslH/tvz U3YFy4dpIStzjFafBkAYSIkDmnqqLzZDhqsz2HaCaFQfmpVCFlZHtpImJqfPKkCH xZWOATCGb1YbyIpqyZ0HGlbEUCAf06YXBq06mklV2zgrIoMd+x9uTrJTtISk+WGL E4Nnuunmxd+m0tZDVc1WYwl+qG7TGasVMhQ2LimC5kkwFhxFiErJc1aa6qA3hlZc AfpGQgRT4yvseX/NUtzXkClMZs2Q+ackuxhaKzsWlV3GG+22pJdZkT1vwA6FskQP TM7h4mLI3rtOhTCQYV/LtYAxTsOKcvNbgBI= -----END CERTIFICATE-----Generated at Sun Apr 27 12:51:43 2025 by rpki-client