$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da9204f6-2b1e-3774-9451-3d2b3397e6bc.roa File: da9204f6-2b1e-3774-9451-3d2b3397e6bc.roa (raw, json) Hash identifier: NjH89rL5tMHN1EPVPE39nHhC5mbUwl8bE58AdYZtG8I= Subject key identifier: 89:9E:E2:71:16:14:28:72:E6:9E:C9:25:8F:EF:82:B4:E3:E1:BE:22 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA4FE749ABDAB1345070C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da9204f6-2b1e-3774-9451-3d2b3397e6bc.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 33662 IP address blocks: 2001:559:c0d8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:fe:74:9a:bd:ab:13:45:07:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=a29ac075-cf34-42d6-a341-8270df6e764e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f0:5e:37:36:51:ab:75:47:3d:6a:c2:62:fe: bd:e9:37:f8:2d:ab:1e:ba:9a:55:4e:2a:ba:87:c3: 78:f2:9d:44:a8:f1:00:c3:bb:88:c4:1a:e1:e5:91: fc:b1:b5:1b:40:06:4c:e5:6a:19:58:35:47:a4:26: 29:c3:ce:4b:63:1f:62:8c:7d:11:44:50:98:c7:3c: 68:be:6e:67:26:5d:a0:04:7a:a9:29:22:be:26:19: 39:1f:e1:41:45:ea:5b:15:64:ae:6c:85:bb:c6:e7: 88:34:bf:1c:14:bf:28:a8:f4:8e:49:8b:56:48:1e: d6:e8:f1:fa:3d:0f:8e:15:58:33:20:eb:b3:3f:dd: f6:a3:80:5e:8f:bf:77:db:c1:1a:81:84:85:b1:07: e8:4f:02:27:3c:29:54:ba:21:cf:22:58:4c:d9:ae: 38:f8:ed:c7:7f:45:e9:bc:f7:2c:32:a3:af:c8:a2: 21:5b:b7:74:10:34:7c:91:67:67:39:f9:6e:6f:85: ad:2b:34:54:bb:74:a5:c3:ef:aa:b8:39:0c:44:d0: bd:40:2e:d2:17:d7:08:6c:af:ed:8f:5a:c0:2b:67: d7:37:f8:4f:90:c7:ff:25:c2:07:e8:af:75:4e:5f: 31:08:71:f9:ac:4b:24:57:94:23:22:98:51:b0:08: c8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:9E:E2:71:16:14:28:72:E6:9E:C9:25:8F:EF:82:B4:E3:E1:BE:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da9204f6-2b1e-3774-9451-3d2b3397e6bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c0d8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:6c:6c:93:23:7b:dc:59:72:80:58:7d:6c:a9:61:e5:79:e5: cd:c5:8e:74:66:49:c6:e0:1e:95:2f:8a:18:e4:f8:5a:88:92: 26:96:a7:da:e6:db:cb:8f:b8:fa:24:3e:fe:c3:ce:6d:7a:48: 98:a6:ce:91:1d:b6:1a:9f:c0:3b:3e:5c:5f:02:d0:8a:7e:ca: bd:99:37:6d:8a:c4:12:b5:ba:86:9f:90:c1:20:c6:38:bf:18: 0e:a4:d7:91:33:5c:01:f3:fe:cb:a3:3e:f5:75:a2:f8:f0:f2: 73:fa:33:18:03:c8:db:9f:68:ec:b9:3c:0f:a1:d0:32:a3:83: df:fb:be:fe:1b:7d:5e:8e:04:43:29:55:08:27:34:eb:1b:de: 0f:2a:a3:74:50:5a:5a:fa:aa:b2:ee:61:b3:e7:22:c3:e0:a0: 61:a8:81:6c:63:cd:dc:72:48:ed:fc:e5:40:e7:8f:44:4b:85: 0e:cc:0a:48:2e:28:1b:c7:54:4e:d4:2a:93:ee:ed:09:48:09: e6:a8:4c:84:a5:e0:b2:f7:b9:d8:3a:e7:73:7e:94:59:42:73: 12:04:5d:e8:26:f3:0d:ec:95:c8:d2:92:3e:5f:cc:53:58:fc: c7:2b:20:75:5e:95:b4:35:2f:70:83:eb:be:41:ca:a6:d0:70: 33:3e:64:46 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9pP50mr2rE0UHDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk YTI5YWMwNzUtY2YzNC00MmQ2LWEzNDEtODI3MGRmNmU3NjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivBeNzZRq3VHPWrCYv696Tf4LaseuppVTiq6 h8N48p1EqPEAw7uIxBrh5ZH8sbUbQAZM5WoZWDVHpCYpw85LYx9ijH0RRFCYxzxo vm5nJl2gBHqpKSK+Jhk5H+FBRepbFWSubIW7xueINL8cFL8oqPSOSYtWSB7W6PH6 PQ+OFVgzIOuzP932o4Bej79328EagYSFsQfoTwInPClUuiHPIlhM2a44+O3Hf0Xp vPcsMqOvyKIhW7d0EDR8kWdnOflub4WtKzRUu3Slw++quDkMRNC9QC7SF9cIbK/t j1rAK2fXN/hPkMf/JcIH6K91Tl8xCHH5rEskV5QjIphRsAjI3wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIme4nEWFChy5p7JJY/vgrTj4b4iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGE5MjA0ZjYtMmIxZS0z Nzc0LTk0NTEtM2QyYjMzOTdlNmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcDY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABFsbJMje9xZcoBYfWypYeV55c3FjnRmScbgHpUvihjk+FqIkiaW p9rm28uPuPokPv7Dzm16SJimzpEdthqfwDs+XF8C0Ip+yr2ZN22KxBK1uoafkMEg xji/GA6k15EzXAHz/sujPvV1ovjw8nP6MxgDyNufaOy5PA+h0DKjg9/7vv4bfV6O BEMpVQgnNOsb3g8qo3RQWlr6qrLuYbPnIsPgoGGogWxjzdxySO385UDnj0RLhQ7M CkguKBvHVE7UKpPu7QlICeaoTISl4LL3udg653N+lFlCcxIEXegm8w3slcjSkj5f zFNY/McrIHVelbQ1L3CD675ByqbQcDM+ZEY= -----END CERTIFICATE-----Generated at Sun Apr 27 16:30:48 2025 by rpki-client