$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df8db15b-7de7-3d21-9238-9511f5ebb18d.roa File: df8db15b-7de7-3d21-9238-9511f5ebb18d.roa (raw, json) Hash identifier: bh1InFFrp2DcyfjCTK6bYNeHCASC8UlkOPq/1secGTU= Subject key identifier: 76:BB:C5:AC:23:E8:6C:20:6A:32:CF:16:E9:77:A9:4B:91:8A:D3:75 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA64BC826F1F57CF0A58F20 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df8db15b-7de7-3d21-9238-9511f5ebb18d.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 33662 IP address blocks: 2001:559:c452::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a6:4b:c8:26:f1:f5:7c:f0:a5:8f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=b8357523-22cb-41fc-be2a-52b70e52034d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c2:dc:7d:41:6d:16:fe:d3:ec:e9:ed:c8:e2: e5:a6:b7:5e:07:b3:4b:e4:8a:a9:53:6d:cc:39:43: 64:e3:bd:23:a7:a4:bf:19:df:91:60:b8:1a:ef:db: ab:77:23:0c:f6:c8:41:3b:f0:a9:80:f3:30:ed:01: ec:9a:ea:49:68:2f:6a:b6:a9:b6:29:f5:ac:86:77: 9b:63:3b:11:1b:59:03:15:41:5f:a8:c8:9b:20:18: 78:15:79:c2:d3:63:d1:e3:6b:18:4a:9f:59:e2:d9: c6:f2:d2:50:33:1e:5d:2a:39:fc:49:89:67:2f:ec: ca:bb:bf:87:8a:04:e1:84:92:ed:34:5c:56:6d:d0: fe:1a:9e:7f:24:bc:1b:d0:d7:99:cb:ce:fa:6d:71: ac:51:7d:1a:f3:e8:d3:fa:5d:82:1b:51:e2:57:b5: ed:10:8b:cb:79:2c:b1:46:28:2b:b7:bf:82:46:8a: fb:cc:11:9c:10:2a:1a:fe:d6:c6:a3:57:51:fe:14: 2b:5e:b4:52:97:0f:a3:49:f9:6a:20:73:f2:e5:c0: 2f:38:6d:eb:3c:b6:80:66:1c:60:7f:f8:e6:63:a7: ba:87:18:39:50:b2:4d:27:0c:2b:ca:f5:61:53:b1: 40:52:56:e8:1a:6c:9e:72:36:34:a6:94:ec:df:43: a7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:BB:C5:AC:23:E8:6C:20:6A:32:CF:16:E9:77:A9:4B:91:8A:D3:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df8db15b-7de7-3d21-9238-9511f5ebb18d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c452::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:e5:59:bb:7b:fd:75:98:0f:1c:1a:c6:4e:50:6f:de:f4:d4: f4:11:d5:54:01:34:5a:b0:8f:fa:60:58:db:c2:c9:14:48:4d: ac:18:25:46:1f:cc:1f:f5:10:69:d2:9f:fc:aa:b2:f7:17:c8: 11:6b:04:23:86:57:d7:f9:0b:4e:e5:89:98:b2:13:c7:36:d6: 8e:81:4a:1e:b7:68:8e:0c:d3:4c:e7:84:4d:31:6a:c2:46:7e: 3c:dc:46:66:f5:81:6c:a9:59:97:52:a1:04:c4:19:0c:f9:ba: 11:74:43:b3:8f:18:8a:1a:60:8d:77:4c:13:98:d9:5a:ce:84: 3d:75:18:cf:f5:75:1d:63:e2:d0:f1:c4:a8:b5:4d:e7:ac:8a: c0:65:a7:2b:fb:2e:05:89:17:f4:a2:95:a7:f4:6f:70:cb:da: 72:a1:28:64:87:11:ab:7a:cc:22:dc:56:9d:43:b9:a9:77:ed: 1b:9c:f1:c4:1f:5e:2e:94:52:a7:e3:31:d8:75:7a:1b:e7:71: 9b:0c:ac:29:ef:e0:4b:73:4b:81:14:17:9c:4d:c3:b4:74:4d: b6:34:45:c8:05:35:cc:2e:30:74:4c:71:4d:c9:5c:7d:59:a7: 6d:a8:0c:42:34:d0:a5:8e:ff:4c:cf:d8:06:e9:12:13:2d:27: 78:e3:b6:d6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9pkvIJvH1fPCljyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk YjgzNTc1MjMtMjJjYi00MWZjLWJlMmEtNTJiNzBlNTIwMzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsLcfUFtFv7T7OntyOLlprdeB7NL5IqpU23M OUNk470jp6S/Gd+RYLga79urdyMM9shBO/CpgPMw7QHsmupJaC9qtqm2KfWshneb YzsRG1kDFUFfqMibIBh4FXnC02PR42sYSp9Z4tnG8tJQMx5dKjn8SYlnL+zKu7+H igThhJLtNFxWbdD+Gp5/JLwb0NeZy876bXGsUX0a8+jT+l2CG1HiV7XtEIvLeSyx Rigrt7+CRor7zBGcECoa/tbGo1dR/hQrXrRSlw+jSflqIHPy5cAvOG3rPLaAZhxg f/jmY6e6hxg5ULJNJwwryvVhU7FAUlboGmyecjY0ppTs30OnGwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHa7xawj6GwgajLPFul3qUuRitN1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGY4ZGIxNWItN2RlNy0z ZDIxLTkyMzgtOTUxMWY1ZWJiMThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcRS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALjlWbt7/XWYDxwaxk5Qb9701PQR1VQBNFqwj/pgWNvCyRRITawY JUYfzB/1EGnSn/yqsvcXyBFrBCOGV9f5C07liZiyE8c21o6BSh63aI4M00znhE0x asJGfjzcRmb1gWypWZdSoQTEGQz5uhF0Q7OPGIoaYI13TBOY2VrOhD11GM/1dR1j 4tDxxKi1TeesisBlpyv7LgWJF/Silaf0b3DL2nKhKGSHEat6zCLcVp1Dual37Ruc 8cQfXi6UUqfjMdh1ehvncZsMrCnv4EtzS4EUF5xNw7R0TbY0RcgFNcwuMHRMcU3J XH1Zp22oDEI00KWO/0zP2AbpEhMtJ3jjttY= -----END CERTIFICATE-----Generated at Sun Apr 27 13:03:40 2025 by rpki-client