$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afe9b423-ea41-3438-a45c-1dc390b0b385.roa File: afe9b423-ea41-3438-a45c-1dc390b0b385.roa (raw, json) Hash identifier: 9WB5QjbsCo+IMfkx56gvMP1rcHzdYvC/2LZLrsdSaOw= Subject key identifier: B7:93:63:D4:64:D9:98:18:1C:99:17:33:FD:57:44:69:92:78:3F:07 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA5590A9212020A14622C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afe9b423-ea41-3438-a45c-1dc390b0b385.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 33287 IP address blocks: 2001:559:111::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a5:59:0a:92:12:02:0a:14:62:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=1bb88742-e9bf-4a42-bb7d-d88a1458cb09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ff:64:ab:a4:be:7a:49:4a:77:b5:35:61:05: ae:cf:a0:89:fe:1d:5d:0e:d4:2b:bb:f1:8a:97:ad: 7f:a7:e3:e1:67:c6:8e:64:25:e5:f6:8d:23:48:33: f8:0f:76:0b:a8:57:38:0d:02:2b:75:46:e1:cc:b2: f4:b4:dc:40:b3:2d:a8:f6:97:f1:dc:a8:1c:4b:5c: 45:ba:56:33:98:34:45:3f:98:0d:5a:fb:18:fd:e3: 2c:0f:a4:e6:76:39:43:93:d8:5d:9c:c5:79:ba:c5: 4f:97:65:da:d2:69:a0:3e:5a:39:04:70:29:fe:c8: 51:03:19:ae:6a:7e:e4:c6:94:5f:bd:99:2e:f1:ed: 4f:47:9a:d1:98:ae:71:53:b5:c0:7f:01:b6:be:a8: 64:30:22:e6:28:17:92:15:cf:a7:a6:a1:89:b0:c0: ed:2b:d3:c9:2e:74:69:be:53:58:12:c7:ac:16:0a: 1a:8d:69:35:d6:0f:c2:09:6c:7a:fa:be:a7:d4:a8: cf:a3:fd:cd:1c:9f:bb:61:13:e7:e3:c3:aa:1c:8d: dd:f0:f8:be:86:6e:5c:48:bb:c8:09:79:6d:7e:d4: 1f:ec:c3:96:c7:b5:65:f3:10:1a:d5:a7:9a:c1:2e: 41:44:b3:67:90:ca:85:dd:d5:8e:9b:03:76:e5:d5: 4d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:93:63:D4:64:D9:98:18:1C:99:17:33:FD:57:44:69:92:78:3F:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afe9b423-ea41-3438-a45c-1dc390b0b385.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:111::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:72:d8:05:1d:25:65:9a:17:fb:ad:75:7c:f2:dd:d5:10:d9: 95:ae:32:0d:0e:56:8c:aa:62:cd:36:02:db:37:99:45:79:b4: f3:f0:c9:3f:e2:43:a1:b4:e7:bf:0a:f1:ca:31:b2:9b:15:da: 40:dc:31:ea:ea:d6:f8:8f:60:70:24:ff:8a:67:4c:70:5f:5d: 32:3a:c0:9d:a0:2e:52:f5:92:3b:e8:ff:3f:32:74:e3:4d:24: 36:d9:79:c1:21:2f:60:f2:40:07:69:70:40:6b:b6:6d:6a:b6: 5c:20:d7:e7:2d:ea:d7:f1:28:40:de:2b:f4:0c:de:96:e8:1e: 6a:ac:2d:cc:8d:72:fb:11:81:12:5b:ee:3d:1b:79:68:09:c9: 26:91:94:01:cf:4d:06:47:99:a2:d4:30:66:6c:c2:67:f8:d9: b6:24:d3:9f:d3:57:5f:50:b0:5e:9b:e4:6c:68:b3:81:f1:6b: 68:39:b9:6d:d8:6c:79:95:7f:a9:86:52:72:d3:4f:56:7d:04: a3:5b:74:4a:b6:3b:e1:59:92:6f:2e:dd:0b:68:25:41:c8:a8: aa:cf:55:61:62:ff:5d:8b:58:13:c3:97:dc:e2:1e:78:98:6c: 0c:d6:db:4d:69:85:5a:12:ed:e9:d9:8d:81:48:81:30:50:6b: c8:88:85:a4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9pVkKkhICChRiLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk MWJiODg3NDItZTliZi00YTQyLWJiN2QtZDg4YTE0NThjYjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzP9kq6S+eklKd7U1YQWuz6CJ/h1dDtQru/GK l61/p+PhZ8aOZCXl9o0jSDP4D3YLqFc4DQIrdUbhzLL0tNxAsy2o9pfx3KgcS1xF ulYzmDRFP5gNWvsY/eMsD6TmdjlDk9hdnMV5usVPl2Xa0mmgPlo5BHAp/shRAxmu an7kxpRfvZku8e1PR5rRmK5xU7XAfwG2vqhkMCLmKBeSFc+npqGJsMDtK9PJLnRp vlNYEsesFgoajWk11g/CCWx6+r6n1KjPo/3NHJ+7YRPn48OqHI3d8Pi+hm5cSLvI CXltftQf7MOWx7Vl8xAa1aeawS5BRLNnkMqF3dWOmwN25dVNhQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLeTY9Rk2ZgYHJkXM/1XRGmSeD8HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWZlOWI0MjMtZWE0MS0z NDM4LWE0NWMtMWRjMzkwYjBiMzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQER MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB9y2AUdJWWaF/utdXzy3dUQ2ZWuMg0OVoyqYs02Ats3mUV5tPPw yT/iQ6G0578K8coxspsV2kDcMerq1viPYHAk/4pnTHBfXTI6wJ2gLlL1kjvo/z8y dONNJDbZecEhL2DyQAdpcEBrtm1qtlwg1+ct6tfxKEDeK/QM3pboHmqsLcyNcvsR gRJb7j0beWgJySaRlAHPTQZHmaLUMGZswmf42bYk05/TV19QsF6b5Gxos4Hxa2g5 uW3YbHmVf6mGUnLTT1Z9BKNbdEq2O+FZkm8u3QtoJUHIqKrPVWFi/12LWBPDl9zi HniYbAzW201phVoS7enZjYFIgTBQa8iIhaQ= -----END CERTIFICATE-----Generated at Sun Apr 27 10:33:46 2025 by rpki-client