$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b89c60e8-e7d4-3377-afc9-c26a9637e1a4.roa File: b89c60e8-e7d4-3377-afc9-c26a9637e1a4.roa (raw, json) Hash identifier: Jq2OO1UiPZ7fHsk6uaTOUoNy4beeTIWdJbb5YtZbySM= Subject key identifier: 14:85:AD:12:42:7C:6B:91:AF:E5:7D:80:D4:80:E3:30:E0:CF:7E:BC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA58F04C1988A01307AB000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b89c60e8-e7d4-3377-afc9-c26a9637e1a4.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 33657 IP address blocks: 2001:559:488::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a5:8f:04:c1:98:8a:01:30:7a:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=32e0effe-dc10-4430-bf17-23f6fee9669f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e6:3d:e8:6a:24:26:5c:82:df:26:5b:6e:72: 4f:21:d0:76:98:1c:0a:d7:a4:76:89:bf:31:fd:d1: 60:80:f5:23:5a:f1:31:e7:86:ec:59:fd:75:cc:e2: 76:35:44:17:bd:83:c5:f1:a0:61:4b:20:16:70:3a: dc:06:f2:d5:87:d0:fc:58:7e:c5:7f:75:8d:bf:86: 24:ae:17:86:50:05:f6:ba:bb:70:69:20:ab:ad:ae: ff:5e:ce:ab:1c:08:b0:e4:e3:6d:5d:b1:e0:f2:ce: 29:75:28:44:5f:97:85:fb:b8:a0:f5:9b:73:42:62: 62:2d:ab:5c:77:96:c5:47:42:35:e1:19:1b:77:04: f5:3e:95:72:c5:69:a4:04:d4:c2:f6:1b:b1:86:54: 0a:9f:65:f3:d1:cf:f5:9f:f4:14:86:be:3a:03:9f: e6:41:29:4e:97:c7:bf:28:3c:b2:74:1e:56:b0:d4: f4:69:c6:91:69:d7:83:71:10:96:03:56:80:b2:b4: 02:82:a8:48:e5:ac:ad:a3:1d:27:17:74:9d:fe:c5: 96:e7:62:78:65:c3:7a:8e:15:85:59:27:98:17:a5: af:4b:16:02:09:0c:2b:c3:5d:c9:41:b9:41:df:af: 4b:f8:4b:95:41:b9:fe:ed:ae:d0:0e:8c:e3:c9:68: 1a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:85:AD:12:42:7C:6B:91:AF:E5:7D:80:D4:80:E3:30:E0:CF:7E:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b89c60e8-e7d4-3377-afc9-c26a9637e1a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:488::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:6e:3f:23:e6:47:1e:6d:d1:25:bc:32:53:20:64:18:57:68: ab:58:98:fa:67:d9:4a:34:b2:f5:f7:a4:cb:f1:9d:18:de:3c: 63:44:8d:25:3a:b7:86:4c:29:f9:c4:89:a9:a1:b5:1d:a0:ea: e6:a3:eb:ab:01:3d:27:f8:ee:b1:17:ae:f6:0a:04:53:90:fd: 0c:2c:dc:08:b7:59:d6:4f:c8:38:01:7d:69:bb:9a:6e:40:e5: 44:fc:83:72:37:a7:7a:6b:bd:f9:cf:05:21:06:89:43:08:64: 19:bc:70:1c:c3:da:5c:cc:43:1f:bf:e8:1d:c9:01:02:9e:88: 86:6b:ff:82:e8:9e:9f:34:47:87:6c:49:80:fe:ec:c2:b3:83: 5f:b2:58:dd:53:0c:6f:d1:ee:cf:c6:51:ab:86:72:16:67:5b: 45:bd:68:66:ef:1c:49:92:14:8b:e6:86:03:b7:16:d1:c2:92: f9:4d:d0:a8:08:bb:f0:ea:f4:cb:c7:eb:72:07:a0:51:8d:42: b3:a6:47:49:7c:c7:6e:74:4d:06:4f:fd:54:a4:19:6c:81:10: 76:fe:33:7b:03:5b:9f:f9:91:22:ae:b1:71:29:d1:69:9a:c6: cb:35:a3:3c:51:84:65:47:fa:8a:9e:c9:29:27:61:de:61:a0: a3:79:99:43 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9pY8EwZiKATB6sAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk MzJlMGVmZmUtZGMxMC00NDMwLWJmMTctMjNmNmZlZTk2NjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleY96GokJlyC3yZbbnJPIdB2mBwK16R2ib8x /dFggPUjWvEx54bsWf11zOJ2NUQXvYPF8aBhSyAWcDrcBvLVh9D8WH7Ff3WNv4Yk rheGUAX2urtwaSCrra7/Xs6rHAiw5ONtXbHg8s4pdShEX5eF+7ig9ZtzQmJiLatc d5bFR0I14RkbdwT1PpVyxWmkBNTC9huxhlQKn2Xz0c/1n/QUhr46A5/mQSlOl8e/ KDyydB5WsNT0acaRadeDcRCWA1aAsrQCgqhI5aytox0nF3Sd/sWW52J4ZcN6jhWF WSeYF6WvSxYCCQwrw13JQblB369L+EuVQbn+7a7QDozjyWgapwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBSFrRJCfGuRr+V9gNSA4zDgz368MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjg5YzYwZTgtZTdkNC0z Mzc3LWFmYzktYzI2YTk2MzdlMWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQSI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALluPyPmRx5t0SW8MlMgZBhXaKtYmPpn2Uo0svX3pMvxnRjePGNE jSU6t4ZMKfnEiamhtR2g6uaj66sBPSf47rEXrvYKBFOQ/Qws3Ai3WdZPyDgBfWm7 mm5A5UT8g3I3p3prvfnPBSEGiUMIZBm8cBzD2lzMQx+/6B3JAQKeiIZr/4Lonp80 R4dsSYD+7MKzg1+yWN1TDG/R7s/GUauGchZnW0W9aGbvHEmSFIvmhgO3FtHCkvlN 0KgIu/Dq9MvH63IHoFGNQrOmR0l8x250TQZP/VSkGWyBEHb+M3sDW5/5kSKusXEp 0Wmaxss1ozxRhGVH+oqeySknYd5hoKN5mUM= -----END CERTIFICATE-----Generated at Mon Apr 28 06:25:33 2025 by rpki-client