$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/debe4fe5-ed88-37f7-a6a4-ff3769a18393.roa File: debe4fe5-ed88-37f7-a6a4-ff3769a18393.roa (raw, json) Hash identifier: 65q0lzamRP9txkfveYDITRGK9cWlD7VFY2pWAKxc3b4= Subject key identifier: 39:B1:A6:A4:41:5F:54:7F:F9:DE:68:A1:37:48:FF:B9:89:94:B4:C6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA6CCA8713BE9C5D684AE40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/debe4fe5-ed88-37f7-a6a4-ff3769a18393.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 33659 IP address blocks: 2001:559:83b5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a6:cc:a8:71:3b:e9:c5:d6:84:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=0bf00da1-5e8a-4916-84bf-7f23a17aa4b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f6:20:40:54:81:97:a5:0a:86:8a:f5:fe:4e: a2:cc:0d:b7:16:14:d2:7d:87:fb:83:77:6e:1f:38: 5d:a6:a7:57:69:c5:f7:9a:e8:cf:1e:3c:40:42:c8: e5:9b:cb:c1:f1:9b:d0:ba:38:38:18:28:97:ad:0c: e6:a6:7b:b5:ec:8c:97:cd:38:56:ef:5d:f1:cf:b6: 65:87:49:92:d7:f1:ee:79:8c:d5:ff:fe:a1:2a:6c: ca:22:86:ad:d3:f1:66:6d:98:f8:fe:8f:db:3a:f8: 3a:5c:1d:08:20:b3:37:5e:84:38:89:e1:05:09:85: ae:4a:0c:16:9b:9a:8f:eb:e1:34:4b:87:89:4f:e6: 71:fa:1d:2d:5f:29:3d:cb:b3:20:a4:3e:bd:8d:1e: a9:3e:cd:a4:34:88:07:89:97:51:1c:54:04:74:ed: 4f:94:b5:8b:e8:7a:fa:55:e6:67:d3:bd:e7:77:11: ee:f5:35:ab:1f:3e:b3:0d:21:90:78:ba:02:14:74: 06:f7:3a:c5:d4:09:59:8a:7c:31:68:7e:0e:ea:14: 34:41:f3:9d:d8:b0:92:74:70:94:08:91:ca:ce:53: 00:56:0f:c6:a8:20:5a:f5:eb:62:9f:03:03:92:7a: ff:0b:a9:fc:08:73:7a:bb:57:57:74:e8:ef:26:81: b3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B1:A6:A4:41:5F:54:7F:F9:DE:68:A1:37:48:FF:B9:89:94:B4:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/debe4fe5-ed88-37f7-a6a4-ff3769a18393.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:83b5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:8f:b8:90:15:9b:57:24:24:b7:81:a9:b7:07:b7:6b:87:90: fa:a3:c7:9f:99:4d:d8:40:40:01:51:89:04:4c:45:ea:7c:84: f3:5d:58:09:77:54:6a:65:6c:f3:96:69:66:cf:f1:2b:ae:77: 88:31:60:a5:9b:53:0d:41:80:40:5b:b6:db:5b:cc:ea:24:ae: 5b:85:57:fc:83:01:f1:b8:15:66:ed:d3:f3:25:f9:35:99:a0: b8:39:27:5e:d5:b1:5f:fe:e2:90:fd:f5:70:38:cb:c6:9b:48: e1:98:e2:c1:5e:15:76:70:f8:f4:3f:dc:1b:f7:79:4b:02:ee: 06:76:6d:a7:e2:8b:6b:bf:2e:c9:31:17:3b:d7:ea:5c:c3:64: e1:e3:fa:61:42:ab:70:41:28:79:a7:bd:50:e9:cf:e0:fc:6b: 8f:b4:4b:30:5f:60:d8:79:0e:11:1a:23:67:47:1d:5e:52:be: 31:e0:7a:dc:21:ad:6b:e3:16:6c:8e:bc:e5:99:00:39:45:e4: 8f:ce:16:fb:37:c5:58:cb:64:90:ac:7c:e7:d0:9c:73:45:ab: 8d:bc:3b:1c:75:81:76:1c:08:ae:57:23:37:fa:af:59:da:35: 93:9e:15:6b:ec:43:31:d8:1f:49:78:6f:bd:42:4c:76:5e:e0: d9:30:34:91 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9psyocTvpxdaErkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk MGJmMDBkYTEtNWU4YS00OTE2LTg0YmYtN2YyM2ExN2FhNGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvYgQFSBl6UKhor1/k6izA23FhTSfYf7g3du HzhdpqdXacX3mujPHjxAQsjlm8vB8ZvQujg4GCiXrQzmpnu17IyXzThW713xz7Zl h0mS1/HueYzV//6hKmzKIoat0/FmbZj4/o/bOvg6XB0IILM3XoQ4ieEFCYWuSgwW m5qP6+E0S4eJT+Zx+h0tXyk9y7MgpD69jR6pPs2kNIgHiZdRHFQEdO1PlLWL6Hr6 VeZn073ndxHu9TWrHz6zDSGQeLoCFHQG9zrF1AlZinwxaH4O6hQ0QfOd2LCSdHCU CJHKzlMAVg/GqCBa9etinwMDknr/C6n8CHN6u1dXdOjvJoGzZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDmxpqRBX1R/+d5ooTdI/7mJlLTGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGViZTRmZTUtZWQ4OC0z N2Y3LWE2YTQtZmYzNzY5YTE4MzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYO1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBANKPuJAVm1ckJLeBqbcHt2uHkPqjx5+ZTdhAQAFRiQRMRep8hPNd WAl3VGplbPOWaWbP8Suud4gxYKWbUw1BgEBbtttbzOokrluFV/yDAfG4FWbt0/Ml +TWZoLg5J17VsV/+4pD99XA4y8abSOGY4sFeFXZw+PQ/3Bv3eUsC7gZ2bafii2u/ LskxFzvX6lzDZOHj+mFCq3BBKHmnvVDpz+D8a4+0SzBfYNh5DhEaI2dHHV5SvjHg etwhrWvjFmyOvOWZADlF5I/OFvs3xVjLZJCsfOfQnHNFq428Oxx1gXYcCK5XIzf6 r1naNZOeFWvsQzHYH0l4b71CTHZe4NkwNJE= -----END CERTIFICATE-----Generated at Sun Apr 27 11:31:24 2025 by rpki-client