$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1c5aab9-2d45-3847-b156-2bcf0710f383.roa File: a1c5aab9-2d45-3847-b156-2bcf0710f383.roa (raw, json) Hash identifier: IKXG7YeMkBcMvW0U7zXbxsYFkVBJLbiY6N3etHuhB8s= Subject key identifier: 2C:B7:BA:A8:99:5C:80:88:72:6D:B0:78:87:59:D0:31:ED:B5:3D:E8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858495ABEEC145B451467D3F53DC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1c5aab9-2d45-3847-b156-2bcf0710f383.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 7016 IP address blocks: 2001:559:400e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:ec:14:5b:45:14:67:d3:f5:3d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=7da74ac9-5e31-458a-a5a7-9d3ad99c88b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:3e:7a:8a:7b:ae:3f:8b:33:83:f9:4a:4b:b5: 18:ae:77:f4:43:48:9e:f9:3d:5b:d3:87:9c:b6:ea: dc:95:b7:65:15:aa:e7:6e:e9:26:24:0a:91:bb:3f: 41:f7:80:47:33:0f:d7:04:65:66:24:e8:2d:9b:5a: d9:e9:ac:b5:49:59:43:34:d7:d9:b5:7c:0b:c7:29: 34:3d:52:fd:26:f0:16:b9:38:a9:9d:15:a5:21:da: 9a:0a:06:4c:7a:76:26:1f:38:91:28:5e:0e:80:16: ff:81:9d:80:36:33:a1:5c:58:85:34:a4:fa:07:ab: 01:67:d5:af:1b:03:28:26:d7:4d:30:41:80:0a:ce: ba:f2:29:cf:a6:eb:37:cb:1f:57:de:63:73:e8:bb: 53:e0:d5:0d:c4:ce:d0:cd:e8:20:ee:7a:d5:16:9f: 63:b1:8f:b8:74:10:b4:65:2d:a1:f9:fa:5a:b2:40: f1:52:1d:74:d4:d4:7b:32:c9:8b:1e:3a:e2:e0:26: f5:52:74:c0:a8:97:3f:ff:07:4b:da:37:3e:a2:64: db:c5:51:07:d9:66:2f:64:ce:64:18:38:fc:a4:98: 5e:86:4a:5b:62:99:db:41:55:f3:4f:58:1b:32:f3: 31:af:81:78:ec:63:79:ee:e4:bf:02:c4:0c:fc:7b: 19:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:B7:BA:A8:99:5C:80:88:72:6D:B0:78:87:59:D0:31:ED:B5:3D:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1c5aab9-2d45-3847-b156-2bcf0710f383.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:400e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:ab:26:70:b5:fa:a8:ed:8a:50:01:7b:68:f6:ce:68:a3:31: 3e:e7:b0:68:20:11:95:88:c0:69:d2:62:7a:96:82:c9:f9:56: f3:4e:50:be:87:54:d1:31:5b:7f:c5:8b:93:04:8d:6b:1d:d7: 0b:04:96:47:43:c7:5b:58:7d:7e:b7:e0:2f:19:e1:d5:b8:60: 4b:a7:97:44:14:52:d6:54:63:45:51:5b:1c:de:80:d3:6f:b1: 81:74:af:ec:b9:b6:59:5e:89:c9:a9:46:4d:84:34:e4:6e:93: 5f:b9:66:4c:6d:06:75:7f:1d:23:c4:85:c6:27:96:b8:a1:19: ed:90:4f:ae:fd:de:e7:09:d8:b6:4f:d2:cb:43:7e:7e:99:04: f6:db:5d:dd:f9:4d:8f:eb:72:a8:8c:ce:34:c7:3f:b1:e9:2a: ae:ab:a9:43:10:8e:89:9c:b2:cc:c8:e1:aa:8f:a2:b5:52:ca: 96:37:df:c9:d7:fc:94:85:75:c8:a7:bd:c9:64:ea:c5:5f:55: 5d:8b:a0:13:98:74:c8:85:7f:69:b1:cc:36:4c:e6:5f:bd:7a: d8:bd:16:9f:87:c4:a2:e5:4b:07:39:3e:27:a6:7e:1a:c8:8f: e4:b8:99:e9:15:dc:ea:03:2c:1f:7d:4c:3e:ff:b0:32:5f:b5: eb:e9:dd:df -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElavuwUW0UUZ9P1PcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk N2RhNzRhYzktNWUzMS00NThhLWE1YTctOWQzYWQ5OWM4OGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgz56inuuP4szg/lKS7UYrnf0Q0ie+T1b04ec turclbdlFarnbukmJAqRuz9B94BHMw/XBGVmJOgtm1rZ6ay1SVlDNNfZtXwLxyk0 PVL9JvAWuTipnRWlIdqaCgZMenYmHziRKF4OgBb/gZ2ANjOhXFiFNKT6B6sBZ9Wv GwMoJtdNMEGACs668inPpus3yx9X3mNz6LtT4NUNxM7Qzegg7nrVFp9jsY+4dBC0 ZS2h+fpaskDxUh101NR7MsmLHjri4Cb1UnTAqJc//wdL2jc+omTbxVEH2WYvZM5k GDj8pJhehkpbYpnbQVXzT1gbMvMxr4F47GN57uS/AsQM/HsZcQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCy3uqiZXICIcm2weIdZ0DHttT3oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTFjNWFhYjktMmQ0NS0z ODQ3LWIxNTYtMmJjZjA3MTBmMzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWUAO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC2rJnC1+qjtilABe2j2zmijMT7nsGggEZWIwGnSYnqWgsn5VvNO UL6HVNExW3/Fi5MEjWsd1wsElkdDx1tYfX634C8Z4dW4YEunl0QUUtZUY0VRWxze gNNvsYF0r+y5tlleicmpRk2ENORuk1+5ZkxtBnV/HSPEhcYnlrihGe2QT6793ucJ 2LZP0stDfn6ZBPbbXd35TY/rcqiMzjTHP7HpKq6rqUMQjomcsszI4aqPorVSypY3 38nX/JSFdcinvclk6sVfVV2LoBOYdMiFf2mxzDZM5l+9eti9Fp+HxKLlSwc5Piem fhrIj+S4mekV3OoDLB99TD7/sDJftevp3d8= -----END CERTIFICATE-----Generated at Sun Apr 27 10:41:36 2025 by rpki-client