$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfa60402-6110-3973-bfb7-78cbdf938f1c.roa File: bfa60402-6110-3973-bfb7-78cbdf938f1c.roa (raw, json) Hash identifier: 6OFRVPxNrBCxLg3JhDjfMJ2dTP98JZ8LEvxYhRThs54= Subject key identifier: CC:FA:5A:10:79:77:B0:9A:4C:66:35:36:25:11:FB:2D:A3:0B:EA:2A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849849EF74256D19E870C8DA100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfa60402-6110-3973-bfb7-78cbdf938f1c.roa Signing time: Mon 14 Apr 2025 01:00:43 +0000 ROA not before: Mon 14 Apr 2025 01:00:43 +0000 ROA not after: Sun 13 Jul 2025 01:00:43 +0000 asID: 36040 IP address blocks: 2001:559:0:b3::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:84:9e:f7:42:56:d1:9e:87:0c:8d:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 14 01:00:43 2025 GMT Not After : Jul 13 01:00:43 2025 GMT Subject: CN=3827132e-7466-4f32-b47f-faaff61fa0ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d6:2a:43:7d:5a:13:c5:db:7a:b5:36:3d:3b: c8:6d:d4:51:65:cf:dd:62:86:f6:8b:40:66:1e:99: d2:92:8f:c0:30:79:70:1d:95:00:2f:8f:06:b9:4e: dd:2d:88:ae:8b:c9:f5:d2:60:75:eb:58:01:3e:47: 0d:b0:ab:15:74:d2:65:be:dc:84:44:47:bb:36:79: 29:a6:68:e0:62:1b:1c:31:a6:59:bb:a4:02:d3:72: a5:0e:c8:ef:77:59:de:41:c0:ff:cd:d1:d9:32:1c: 5c:8c:37:42:a1:29:d9:f1:67:7f:73:c5:e7:c9:4c: 8f:19:7a:28:60:28:71:c4:fc:f9:c4:38:31:fa:69: 51:96:a1:6f:4c:3a:6d:2f:e8:96:77:c6:54:5a:93: d6:c5:09:b6:8b:ef:cb:51:e6:2a:43:6c:84:e4:1f: 95:92:14:6d:30:cd:7d:d3:2c:eb:68:60:43:51:26: 1a:a1:1e:02:b6:50:93:ea:31:f6:c0:4d:1b:44:b7: 4f:0c:b0:5b:48:c8:64:a4:dc:4b:d6:15:be:98:32: c8:64:7c:ff:94:42:12:95:eb:42:8f:c8:9e:97:3e: 2f:f9:0d:fc:e2:f0:bb:d3:f3:19:aa:ae:2a:65:fc: aa:a7:a3:31:cd:fa:a4:52:4b:21:cc:64:72:09:d2: 66:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:FA:5A:10:79:77:B0:9A:4C:66:35:36:25:11:FB:2D:A3:0B:EA:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfa60402-6110-3973-bfb7-78cbdf938f1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:0:b3::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:4c:fe:1b:62:89:f2:91:65:ad:30:a8:03:e7:b0:49:ba:25: 73:29:98:52:fa:2a:da:d8:c0:1e:35:3f:0c:90:cc:44:98:b8: 85:ed:6f:a3:8e:3a:6b:eb:f9:8c:a2:28:6d:d7:4c:a1:76:44: 82:c9:88:56:f7:dc:00:8e:72:58:be:55:03:de:06:6a:1e:1d: 59:79:0f:69:b6:08:a6:d1:07:d1:42:70:cf:db:e7:da:eb:75: 0b:67:b5:97:53:ea:b6:4a:6d:56:64:1a:c3:81:b8:3e:a5:3a: 59:6c:64:2e:20:e6:b0:5e:d9:99:b1:3a:05:5f:79:1f:00:f8: b9:18:c7:eb:ef:74:7f:fe:ba:6d:f8:8f:dc:55:50:b9:e6:ab: 13:50:cd:91:53:48:c1:3d:3b:e5:e4:d8:8a:81:4e:f2:4e:9f: 13:17:48:cb:36:76:21:8d:85:44:44:2a:a7:48:ac:cf:b0:6c: e5:33:80:b8:7a:15:fa:06:ac:af:55:f1:2e:c0:1e:bc:54:6a: 9c:56:1b:69:ea:0e:98:d5:64:83:66:44:bc:8b:03:40:60:4d: fa:a0:c1:4a:20:a2:c9:cb:8c:f5:dd:33:98:26:21:01:7a:24: 12:d6:4b:9d:1b:ae:74:00:17:2d:0c:1e:fd:29:bd:3c:43:39: 56:3f:5d:64 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEmEnvdCVtGehwyNoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxNDAxMDA0M1oXDTI1MDcxMzAxMDA0M1owLzEtMCsGA1UEAxMk MzgyNzEzMmUtNzQ2Ni00ZjMyLWI0N2YtZmFhZmY2MWZhMGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9YqQ31aE8XberU2PTvIbdRRZc/dYob2i0Bm HpnSko/AMHlwHZUAL48GuU7dLYiui8n10mB161gBPkcNsKsVdNJlvtyEREe7Nnkp pmjgYhscMaZZu6QC03KlDsjvd1neQcD/zdHZMhxcjDdCoSnZ8Wd/c8XnyUyPGXoo YChxxPz5xDgx+mlRlqFvTDptL+iWd8ZUWpPWxQm2i+/LUeYqQ2yE5B+VkhRtMM19 0yzraGBDUSYaoR4CtlCT6jH2wE0bRLdPDLBbSMhkpNxL1hW+mDLIZHz/lEISletC j8ielz4v+Q384vC70/MZqq4qZfyqp6MxzfqkUkshzGRyCdJmGwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFMz6WhB5d7CaTGY1NiUR+y2jC+oqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmZhNjA0MDItNjExMC0z OTczLWJmYjctNzhjYmRmOTM4ZjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEFWQAA ALMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEApEz+G2KJ8pFlrTCoA+ewSbolcymYUvoq2tjAHjU/DJDMRJi4 he1vo446a+v5jKIobddMoXZEgsmIVvfcAI5yWL5VA94Gah4dWXkPabYIptEH0UJw z9vn2ut1C2e1l1PqtkptVmQaw4G4PqU6WWxkLiDmsF7ZmbE6BV95HwD4uRjH6+90 f/66bfiP3FVQuearE1DNkVNIwT075eTYioFO8k6fExdIyzZ2IY2FREQqp0isz7Bs 5TOAuHoV+gasr1XxLsAevFRqnFYbaeoOmNVkg2ZEvIsDQGBN+qDBSiCiycuM9d0z mCYhAXokEtZLnRuudAAXLQwe/Sm9PEM5Vj9dZA== -----END CERTIFICATE-----Generated at Sun Apr 27 20:25:03 2025 by rpki-client