$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc6a5408-be0b-342a-9f24-4d66344e0d6f.roa File: bc6a5408-be0b-342a-9f24-4d66344e0d6f.roa (raw, json) Hash identifier: ySNP1Bx6X43fvljOidiRtSaaV31lOBOKSZf6yFRZ+C8= Subject key identifier: 37:6A:D9:5B:FD:E2:C3:A8:60:32:22:53:8B:85:8C:BB:DD:86:2D:C7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA5A34C74A38008F9013180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc6a5408-be0b-342a-9f24-4d66344e0d6f.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 33659 IP address blocks: 2001:559:8421::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a5:a3:4c:74:a3:80:08:f9:01:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=1a804c17-a2ab-4d76-b93f-2fba8116ca2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9f:25:86:4a:a5:fd:a3:ba:d9:a0:c9:e4:7e: f2:8b:7b:42:f0:08:03:9a:a6:87:7f:30:80:e6:cb: 16:f3:a1:20:38:14:63:72:4c:57:f5:9a:c2:90:77: b7:7d:97:1f:70:fb:82:40:90:40:e6:50:98:f3:aa: c8:69:80:e7:c0:03:8a:c7:5a:50:fb:88:28:70:94: e6:7e:be:78:0d:62:4a:0a:45:a5:5b:9c:79:65:cf: 58:3a:cf:0b:ce:d8:ab:df:da:ba:2d:4c:3f:b5:26: 4d:68:c6:02:73:cc:4c:fa:9d:e5:de:3d:a3:62:63: fe:85:6b:40:23:92:5d:bb:d6:aa:e9:39:3a:bd:7d: fa:84:41:d7:5b:e7:3e:ec:57:32:80:a1:48:05:41: 2f:44:db:42:60:ca:72:1b:ec:70:cf:e1:8c:2d:f4: 7c:8b:99:4a:2d:d1:aa:0c:91:58:c5:06:a6:b5:72: d8:96:08:c4:80:09:49:90:ec:c6:4f:8b:e1:c7:67: 5d:46:52:4f:c7:96:31:3b:bf:58:37:35:a8:3a:b9: f7:40:5f:3b:63:41:42:48:23:7a:bb:76:04:5f:ac: 7f:35:74:45:f0:91:38:be:2a:97:2b:1e:94:8f:d7: c5:91:6c:88:8b:e1:84:b4:7e:95:e7:df:66:26:bc: ff:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:6A:D9:5B:FD:E2:C3:A8:60:32:22:53:8B:85:8C:BB:DD:86:2D:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc6a5408-be0b-342a-9f24-4d66344e0d6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8421::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:7f:e5:47:9a:96:30:b8:af:38:8c:6c:9a:ce:22:cf:b3:14: 5d:48:1a:87:ad:1c:cf:14:78:c5:17:7b:95:de:cf:b7:f6:eb: fc:01:6d:d8:ba:e3:88:e5:f9:4b:90:a5:04:83:a2:c5:29:ba: 1b:62:b3:48:76:7f:3b:82:52:91:94:b0:62:ee:d1:47:bd:4a: 9a:63:8c:3e:32:5b:b1:5b:7d:20:39:e3:d7:66:56:8d:31:8c: 62:26:57:b9:56:12:fa:a9:db:d1:d4:f2:78:77:fb:0c:07:28: d6:95:9c:ec:fc:1d:2f:9f:8c:c8:a2:34:fc:8c:4e:bb:d0:fd: da:40:e5:29:e1:1e:ad:8b:27:76:50:69:b1:96:76:d7:bb:d9: 03:4d:34:58:b0:b3:11:e1:8a:b9:02:30:8f:ab:af:bb:84:19: 10:bc:c5:33:d8:7f:4c:33:52:4e:d2:5c:de:6f:e8:54:de:2a: f8:85:c7:78:37:7e:8d:bd:6f:f2:4d:47:6e:b3:fa:f1:d2:48: e0:63:18:47:a5:40:44:3a:98:65:1e:0d:93:6b:8e:a8:9f:47: ef:8c:a1:64:57:56:aa:7d:1d:21:81:2c:ac:0e:bb:0c:68:fe: ae:f5:df:1d:4a:d2:e6:86:57:c6:1f:9a:f6:8a:72:5b:0d:e7: 42:81:13:3c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9paNMdKOACPkBMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk MWE4MDRjMTctYTJhYi00ZDc2LWI5M2YtMmZiYTgxMTZjYTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm58lhkql/aO62aDJ5H7yi3tC8AgDmqaHfzCA 5ssW86EgOBRjckxX9ZrCkHe3fZcfcPuCQJBA5lCY86rIaYDnwAOKx1pQ+4gocJTm fr54DWJKCkWlW5x5Zc9YOs8Lztir39q6LUw/tSZNaMYCc8xM+p3l3j2jYmP+hWtA I5Jdu9aq6Tk6vX36hEHXW+c+7FcygKFIBUEvRNtCYMpyG+xwz+GMLfR8i5lKLdGq DJFYxQamtXLYlgjEgAlJkOzGT4vhx2ddRlJPx5YxO79YNzWoOrn3QF87Y0FCSCN6 u3YEX6x/NXRF8JE4viqXKx6Uj9fFkWyIi+GEtH6V599mJrz/8QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDdq2Vv94sOoYDIiU4uFjLvdhi3HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmM2YTU0MDgtYmUwYi0z NDJhLTlmMjQtNGQ2NjM0NGUwZDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYQh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFF/5UealjC4rziMbJrOIs+zFF1IGoetHM8UeMUXe5Xez7f26/wB bdi644jl+UuQpQSDosUpuhtis0h2fzuCUpGUsGLu0Ue9SppjjD4yW7FbfSA549dm Vo0xjGImV7lWEvqp29HU8nh3+wwHKNaVnOz8HS+fjMiiNPyMTrvQ/dpA5SnhHq2L J3ZQabGWdte72QNNNFiwsxHhirkCMI+rr7uEGRC8xTPYf0wzUk7SXN5v6FTeKviF x3g3fo29b/JNR26z+vHSSOBjGEelQEQ6mGUeDZNrjqifR++MoWRXVqp9HSGBLKwO uwxo/q713x1K0uaGV8YfmvaKclsN50KBEzw= -----END CERTIFICATE-----Generated at Mon Apr 28 13:03:03 2025 by rpki-client