$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e78a81e1-1af4-3a02-a5f1-9473ea91b3e1.roa File: e78a81e1-1af4-3a02-a5f1-9473ea91b3e1.roa (raw, json) Hash identifier: /RPDfq6bhB1pyuRN4Catlpg9YTFAiAUe5biM0s8R7lY= Subject key identifier: 6D:EC:E3:AC:7A:38:8F:8A:2E:92:E1:C6:CB:A0:8C:B5:CB:0A:18:A6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA6C088EF964F441BC5C100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e78a81e1-1af4-3a02-a5f1-9473ea91b3e1.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 33657 IP address blocks: 2001:559:a009::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a6:c0:88:ef:96:4f:44:1b:c5:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=5f0ceaad-2e8e-40d0-9ec2-eb81ceaacce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:07:c9:04:3d:a3:21:74:1d:64:44:e2:60:57: b0:fd:6b:b5:fe:cd:2c:0d:eb:ca:37:f8:8c:71:f8: 16:84:43:b8:2f:40:b3:65:9c:df:cd:03:56:ad:de: f9:02:f9:30:7f:65:6b:2a:59:aa:55:de:a4:42:90: 4c:b6:bf:47:9c:06:56:5f:1d:f2:37:bc:91:7f:93: f8:45:c5:59:6a:31:ee:4d:bc:1b:4e:22:81:fe:8f: 32:da:b6:4f:92:42:da:0b:5a:1a:79:bc:56:3d:e1: cd:69:e3:b6:6a:e2:8b:1c:2a:e7:39:cf:61:41:52: 9e:76:c4:74:68:f1:04:55:c0:9e:91:c4:f4:39:50: 3c:76:2b:bc:28:62:f0:b2:ae:0a:77:02:29:59:1f: 08:10:7a:d3:a8:77:37:a0:38:da:9a:20:03:34:6f: 6f:15:81:11:6b:6b:84:c6:86:9c:0e:b3:c3:83:e2: 14:a0:7c:cb:7b:bc:f7:5e:fd:b0:a9:87:7f:05:3c: 97:70:5b:71:2b:d1:94:66:77:4f:ce:fc:66:c2:2a: bf:3f:d6:18:cc:63:86:b5:1e:ba:bc:0d:09:e6:3f: 7e:17:cb:e0:0f:7b:f1:ee:3f:47:ce:f5:48:dd:08: e3:42:61:ed:7d:37:aa:b8:ed:5b:ef:e2:b7:29:8f: a5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:EC:E3:AC:7A:38:8F:8A:2E:92:E1:C6:CB:A0:8C:B5:CB:0A:18:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e78a81e1-1af4-3a02-a5f1-9473ea91b3e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:a009::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:ec:6c:7f:ba:87:58:0e:98:56:2d:c9:9e:15:87:e1:3c:9b: f6:5e:9d:7e:3a:19:cc:29:19:95:2a:3b:8c:2a:b2:c4:b4:5c: b9:e2:0b:01:d0:7b:61:0e:e3:41:1b:e7:33:cf:21:d8:c6:38: b7:c7:64:7d:ac:be:dc:a7:81:8a:55:86:8e:00:e7:22:ea:2c: 70:e7:fc:c1:35:7f:dd:0c:52:a5:99:38:5d:88:02:b5:4d:42: 6e:e6:fd:18:4d:f9:b2:78:d1:ee:0b:fd:67:e9:d2:26:be:b7: b6:d7:7b:9d:97:f6:dd:cd:70:37:a9:05:c8:a0:02:91:c5:3f: f7:2d:98:11:a9:89:8d:14:48:1b:12:d3:07:a1:48:49:f9:bd: ff:b5:c7:4c:10:a4:35:f6:4e:d1:67:22:03:ed:e5:ed:1c:1a: 20:e8:f4:4e:d2:de:29:30:e8:d7:92:47:41:6f:88:94:b9:99: 86:6f:96:a8:c7:28:0f:16:4a:43:a2:0f:55:62:07:a2:99:3f: 68:96:e9:d2:a0:2a:0e:32:d9:6f:d1:4e:59:00:5b:28:d6:89: d7:53:80:09:e2:60:12:d7:70:32:96:4b:70:35:b1:7f:20:fd: 52:be:b0:d6:ba:07:1c:59:c4:3e:bb:69:9b:99:47:53:98:8b: 32:03:f7:3a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9psCI75ZPRBvFwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk NWYwY2VhYWQtMmU4ZS00MGQwLTllYzItZWI4MWNlYWFjY2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AfJBD2jIXQdZETiYFew/Wu1/s0sDevKN/iM cfgWhEO4L0CzZZzfzQNWrd75Avkwf2VrKlmqVd6kQpBMtr9HnAZWXx3yN7yRf5P4 RcVZajHuTbwbTiKB/o8y2rZPkkLaC1oaebxWPeHNaeO2auKLHCrnOc9hQVKedsR0 aPEEVcCekcT0OVA8diu8KGLwsq4KdwIpWR8IEHrTqHc3oDjamiADNG9vFYERa2uE xoacDrPDg+IUoHzLe7z3Xv2wqYd/BTyXcFtxK9GUZndPzvxmwiq/P9YYzGOGtR66 vA0J5j9+F8vgD3vx7j9HzvVI3QjjQmHtfTequO1b7+K3KY+lfQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG3s46x6OI+KLpLhxsugjLXLChimMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTc4YTgxZTEtMWFmNC0z YTAyLWE1ZjEtOTQ3M2VhOTFiM2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWaAJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGvsbH+6h1gOmFYtyZ4Vh+E8m/ZenX46GcwpGZUqO4wqssS0XLni CwHQe2EO40Eb5zPPIdjGOLfHZH2svtyngYpVho4A5yLqLHDn/ME1f90MUqWZOF2I ArVNQm7m/RhN+bJ40e4L/Wfp0ia+t7bXe52X9t3NcDepBcigApHFP/ctmBGpiY0U SBsS0wehSEn5vf+1x0wQpDX2TtFnIgPt5e0cGiDo9E7S3ikw6NeSR0FviJS5mYZv lqjHKA8WSkOiD1ViB6KZP2iW6dKgKg4y2W/RTlkAWyjWiddTgAniYBLXcDKWS3A1 sX8g/VK+sNa6BxxZxD67aZuZR1OYizID9zo= -----END CERTIFICATE-----Generated at Sun Apr 27 08:02:43 2025 by rpki-client