$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d680d3c3-c1d5-3a77-8cc3-3b37c8e3e656.roa File: d680d3c3-c1d5-3a77-8cc3-3b37c8e3e656.roa (raw, json) Hash identifier: bIVIj5He0a8NPaCXIRE2OY8EKNdQif0HH9TQ1+o05xU= Subject key identifier: 6F:6E:30:E2:0E:56:E2:63:68:01:25:C1:03:5D:F7:8D:98:D3:CD:75 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA6B9CF35A7043198C8A4C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d680d3c3-c1d5-3a77-8cc3-3b37c8e3e656.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 33657 IP address blocks: 2001:559:b9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a6:b9:cf:35:a7:04:31:98:c8:a4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=086aaf77-74ef-4d95-861e-63000e0c08e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:01:aa:f6:68:a3:8b:e6:77:60:0c:5d:49:e8: d7:a3:54:c5:c5:b6:ed:44:57:e7:00:ca:66:60:a8: e1:b8:e0:7b:37:17:08:64:98:c5:d2:8c:db:e5:bb: f3:f5:e2:8a:81:70:b1:8f:91:0b:86:67:82:ff:6f: d1:68:59:b3:53:7c:f0:7d:91:81:de:c1:17:ce:4a: 69:6b:b0:c4:01:7b:27:58:5a:ef:68:7e:8e:fe:04: 74:ee:d1:a7:62:2e:42:bf:29:db:e1:0e:c6:5f:00: 7e:9f:cd:25:08:ff:25:ed:99:d1:18:cd:62:68:8e: 2e:3c:8f:85:9b:39:49:07:3d:1f:ba:51:d0:06:2c: d4:80:e8:e8:b7:fd:f2:4e:8e:12:48:2c:60:e1:8c: 85:5d:b8:ca:e5:53:ab:92:99:2f:d5:2f:c7:35:10: 13:61:00:75:51:8c:d7:22:95:62:fe:2e:d4:a6:67: a6:18:8e:03:f5:e9:05:25:6c:3e:e6:03:05:e3:23: 6b:e1:e4:06:f3:ec:8a:d0:9b:d4:17:37:49:39:bc: 70:cb:db:cb:8e:90:6e:5c:8e:24:fb:14:c7:37:d1: 35:05:8a:68:c6:f3:c8:59:aa:8a:63:8f:34:6c:18: ef:b5:59:1b:84:72:38:3d:46:69:41:73:08:ec:de: 20:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:6E:30:E2:0E:56:E2:63:68:01:25:C1:03:5D:F7:8D:98:D3:CD:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d680d3c3-c1d5-3a77-8cc3-3b37c8e3e656.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:b9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:36:b3:d8:e7:91:4b:90:24:4f:fa:00:db:43:a2:42:59:42: f1:b1:ab:30:74:5a:6a:68:bc:de:da:ca:c6:e8:70:3b:08:1e: 57:41:4e:67:ae:52:85:eb:35:bf:7c:6c:32:d3:d2:b3:5f:85: 15:8c:f6:08:e4:08:3a:f9:2b:90:3b:4b:c0:6d:5b:b0:27:a4: 72:b5:8d:11:29:0c:0e:5f:91:2d:bb:fa:5f:ea:85:cd:30:31: dd:71:d5:32:9c:2c:e6:c5:48:94:72:24:5d:ee:b3:e4:fd:00: 93:f9:24:5b:ce:cf:de:3f:e2:6d:c1:9b:21:1e:bf:e5:71:af: 71:db:bd:10:78:3f:dd:32:b4:ac:66:24:96:33:d2:23:84:31: 0c:94:4a:e5:e9:74:34:f1:61:67:b8:06:18:ae:50:33:13:3a: fc:e0:be:de:31:d9:1f:2d:5e:eb:55:c2:77:5b:df:a7:51:5b: 66:97:6b:0c:9f:36:33:1b:5d:f3:d5:54:de:3c:b4:f4:3f:df: 2b:f1:2d:cf:6e:cf:91:ca:2a:e4:f4:e0:56:ce:b5:b9:42:80: 68:b7:a0:f5:c3:82:9b:8c:bb:16:8d:47:60:8a:55:df:d7:a9: f0:41:c8:16:11:61:00:e6:c3:8f:33:9c:07:f9:87:86:be:bf: 79:11:c0:46 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9prnPNacEMZjIpMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk MDg2YWFmNzctNzRlZi00ZDk1LTg2MWUtNjMwMDBlMGMwOGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAGq9miji+Z3YAxdSejXo1TFxbbtRFfnAMpm YKjhuOB7NxcIZJjF0ozb5bvz9eKKgXCxj5ELhmeC/2/RaFmzU3zwfZGB3sEXzkpp a7DEAXsnWFrvaH6O/gR07tGnYi5Cvynb4Q7GXwB+n80lCP8l7ZnRGM1iaI4uPI+F mzlJBz0fulHQBizUgOjot/3yTo4SSCxg4YyFXbjK5VOrkpkv1S/HNRATYQB1UYzX IpVi/i7UpmemGI4D9ekFJWw+5gMF4yNr4eQG8+yK0JvUFzdJObxwy9vLjpBuXI4k +xTHN9E1BYpoxvPIWaqKY480bBjvtVkbhHI4PUZpQXMI7N4gIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG9uMOIOVuJjaAElwQNd942Y0811MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDY4MGQzYzMtYzFkNS0z YTc3LThjYzMtM2IzN2M4ZTNlNjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQC5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIk2s9jnkUuQJE/6ANtDokJZQvGxqzB0WmpovN7aysbocDsIHldB TmeuUoXrNb98bDLT0rNfhRWM9gjkCDr5K5A7S8BtW7AnpHK1jREpDA5fkS27+l/q hc0wMd1x1TKcLObFSJRyJF3us+T9AJP5JFvOz94/4m3BmyEev+Vxr3HbvRB4P90y tKxmJJYz0iOEMQyUSuXpdDTxYWe4BhiuUDMTOvzgvt4x2R8tXutVwndb36dRW2aX awyfNjMbXfPVVN48tPQ/3yvxLc9uz5HKKuT04FbOtblCgGi3oPXDgpuMuxaNR2CK Vd/XqfBByBYRYQDmw48znAf5h4a+v3kRwEY= -----END CERTIFICATE-----Generated at Sun Apr 27 08:58:17 2025 by rpki-client