$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b120385a-875d-3dde-ac69-bca035c8d489.roa File: b120385a-875d-3dde-ac69-bca035c8d489.roa (raw, json) Hash identifier: vHHog00NK+DtK9sqJDvZqtpW3+BxZvFWGT8txHJww9U= Subject key identifier: 3D:D4:75:C9:DE:BD:32:31:3F:9C:98:60:58:EA:E5:0E:47:C6:88:FE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA4BA4ADFDDAF938CFBD5D0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b120385a-875d-3dde-ac69-bca035c8d489.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 7016 IP address blocks: 2001:559:834a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:ba:4a:df:dd:af:93:8c:fb:d5:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=707ae4c7-f2a3-4384-aa2a-8b38353eb1b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:69:53:99:50:2f:fb:be:ff:06:ef:68:3f:7f: aa:b6:12:48:32:3c:e3:b4:28:ac:ba:4e:31:93:02: c8:7b:d4:d5:49:de:7a:49:82:f8:78:7f:3a:7f:59: cb:6c:2a:ca:6d:a7:55:0f:a9:7c:3e:7b:84:f4:c6: 0e:b1:92:c3:97:05:76:4c:d7:54:5c:d8:27:56:e1: bf:b4:42:06:e9:bb:b7:62:0f:82:3a:ee:58:61:6d: 43:79:b0:4f:2c:90:53:27:03:54:07:77:78:d3:e5: d2:76:de:2c:d0:af:30:07:cb:79:c9:1b:08:4e:bc: 69:ed:e9:7e:6a:1d:64:35:09:e9:9c:00:16:35:95: 96:79:56:47:63:8d:4a:ac:3f:eb:d7:f3:e5:ff:8a: 02:3b:1f:ad:1c:81:cd:f4:ec:ce:68:9d:12:4f:86: 7a:fc:67:50:0e:98:7c:d0:f8:d0:52:e7:bd:4a:a3: 47:b1:ad:5c:39:a1:89:ec:9f:e4:54:ac:9b:b7:d9: 2a:32:c6:3e:0b:6a:e3:2f:80:81:83:4a:92:ca:b8: 69:5a:a3:90:9c:7a:07:bf:9e:aa:2e:e7:91:68:11: e5:1c:1b:46:ea:fc:29:74:97:1b:df:ce:ed:f5:38: 8d:95:4b:d9:74:7f:a5:f7:73:f8:ab:b0:de:01:a2: 8e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D4:75:C9:DE:BD:32:31:3F:9C:98:60:58:EA:E5:0E:47:C6:88:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b120385a-875d-3dde-ac69-bca035c8d489.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:834a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:c1:cb:23:c4:c4:6d:9c:1c:77:60:21:cb:24:71:31:17:3f: 30:d8:21:c0:1d:b7:c5:14:8e:64:79:16:df:00:0a:92:51:26: 6d:81:3b:de:16:c4:45:ce:99:a5:f2:f9:42:aa:34:a7:c3:36: ca:30:54:38:da:7a:13:fe:93:88:55:28:63:2b:19:1a:42:7d: c7:3b:79:8d:68:c2:b8:27:1e:ab:2e:a6:4e:c9:0a:d7:3e:32: ce:21:69:37:70:f8:bc:ed:20:66:03:56:55:61:c6:77:35:32: 4d:b7:5e:13:39:6a:9d:08:b3:19:9b:4f:d3:dc:d5:79:01:28: 03:d8:5a:ec:3b:95:73:cd:93:82:70:de:8e:bd:b2:d3:98:75: 4c:d6:2e:4a:91:be:b2:7f:ce:1e:ae:1b:c5:75:3d:5c:33:7c: ea:fb:6e:cc:c2:66:b3:1b:af:12:3e:bc:76:3a:46:c0:d2:aa: ea:d0:75:48:a4:04:ed:9d:1a:51:69:39:7e:9a:b4:89:a7:6e: 40:50:2b:54:f6:e1:70:a0:17:6d:ac:0f:4d:c1:95:08:36:1a: fc:60:5c:ab:4d:cd:d2:ba:53:9d:ca:2c:e8:84:f6:df:78:8a: 37:39:72:57:b0:48:41:9e:e7:d5:26:89:f3:1b:db:27:ef:66: ed:de:b4:47 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9pLpK392vk4z71dAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk NzA3YWU0YzctZjJhMy00Mzg0LWFhMmEtOGIzODM1M2ViMWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWlTmVAv+77/Bu9oP3+qthJIMjzjtCisuk4x kwLIe9TVSd56SYL4eH86f1nLbCrKbadVD6l8PnuE9MYOsZLDlwV2TNdUXNgnVuG/ tEIG6bu3Yg+COu5YYW1DebBPLJBTJwNUB3d40+XSdt4s0K8wB8t5yRsITrxp7el+ ah1kNQnpnAAWNZWWeVZHY41KrD/r1/Pl/4oCOx+tHIHN9OzOaJ0ST4Z6/GdQDph8 0PjQUue9SqNHsa1cOaGJ7J/kVKybt9kqMsY+C2rjL4CBg0qSyrhpWqOQnHoHv56q LueRaBHlHBtG6vwpdJcb387t9TiNlUvZdH+l93P4q7DeAaKOIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD3UdcnevTIxP5yYYFjq5Q5Hxoj+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjEyMDM4NWEtODc1ZC0z ZGRlLWFjNjktYmNhMDM1YzhkNDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYNK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBANTByyPExG2cHHdgIcskcTEXPzDYIcAdt8UUjmR5Ft8ACpJRJm2B O94WxEXOmaXy+UKqNKfDNsowVDjaehP+k4hVKGMrGRpCfcc7eY1owrgnHqsupk7J Ctc+Ms4haTdw+LztIGYDVlVhxnc1Mk23XhM5ap0IsxmbT9Pc1XkBKAPYWuw7lXPN k4Jw3o69stOYdUzWLkqRvrJ/zh6uG8V1PVwzfOr7bszCZrMbrxI+vHY6RsDSqurQ dUikBO2dGlFpOX6atImnbkBQK1T24XCgF22sD03BlQg2GvxgXKtNzdK6U53KLOiE 9t94ijc5clewSEGe59UmifMb2yfvZu3etEc= -----END CERTIFICATE-----Generated at Sun Apr 27 18:03:01 2025 by rpki-client