$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8e58d5c-0016-3fb7-8777-85027f430f9a.roa File: f8e58d5c-0016-3fb7-8777-85027f430f9a.roa (raw, json) Hash identifier: 1a1FPwOM4qGve9w7C8sNgxX3ytaINMEA6vj13+mS0VU= Subject key identifier: 14:26:D8:41:73:0A:8A:47:C3:12:DE:C4:15:D7:5A:E9:44:3C:28:BB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA6A71679CBBCF6E61E58C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8e58d5c-0016-3fb7-8777-85027f430f9a.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 33287 IP address blocks: 2001:559:c2f9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a6:a7:16:79:cb:bc:f6:e6:1e:58:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=a13b7e7c-e982-452e-bd73-7109880a5a69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:49:97:e6:2c:94:e0:31:91:4f:56:26:e1:1e: ad:2a:6d:8a:6c:6d:97:02:c7:0e:34:d4:5f:16:34: b8:63:38:4c:0e:51:fa:07:38:90:28:19:76:b6:3c: d5:6c:84:55:ff:ed:10:aa:97:9e:c0:b4:01:89:14: ca:fd:52:53:47:3d:5e:f3:05:07:38:fa:c4:8b:31: 1a:07:5d:e7:ca:1f:62:ec:42:d2:78:a1:01:d1:16: 79:d0:78:18:3b:cf:4f:32:2a:54:9e:02:8a:b0:42: 40:40:f3:71:4d:13:b3:ec:b5:b3:41:55:ba:9a:cb: 1c:39:82:73:91:50:ca:84:c1:0c:09:cb:79:96:a5: 50:1b:5b:07:ed:2b:b2:0b:8d:72:33:ec:92:67:41: 7f:33:d6:0a:84:f8:9e:60:fc:b9:3b:57:f4:77:3a: e6:b8:f5:49:6e:a6:43:92:13:57:e6:50:ef:9f:60: 98:d1:8a:3a:e1:d3:09:87:bf:c5:34:9a:4c:93:03: 02:24:ef:c2:69:48:6c:c5:d3:a8:e7:9b:07:bc:75: 33:89:cc:10:29:ec:07:32:f0:c1:06:e6:cd:de:29: 57:da:6b:67:4c:fb:98:30:6a:e2:c7:57:ce:55:8f: 50:0e:0b:89:01:96:a4:cd:91:44:a2:6a:bb:bc:c6: a6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:26:D8:41:73:0A:8A:47:C3:12:DE:C4:15:D7:5A:E9:44:3C:28:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8e58d5c-0016-3fb7-8777-85027f430f9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c2f9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:5b:b1:c1:45:bc:fc:f1:68:b9:9c:f1:e1:6e:87:3b:be:2e: 81:19:43:1b:ed:fe:36:f3:28:39:b5:43:39:fd:8b:f7:40:d2: 56:58:f5:6b:f8:28:3e:0f:aa:49:00:dc:cf:ca:a6:74:10:bd: 44:7f:f8:30:a1:74:e0:9b:62:62:2a:cd:18:7c:ea:9e:49:f6: 8a:d0:1f:7f:b8:94:d5:3e:b8:2c:6d:bf:08:ba:ff:91:65:5c: f3:b9:01:53:0e:a6:20:9d:2f:72:b2:4f:79:1f:e6:76:a0:c1: b8:3b:4b:f8:09:72:51:51:06:ac:74:ea:e8:4b:6d:68:44:11: 7f:3e:8d:c4:3c:fa:ff:8b:08:b8:d8:60:84:8b:0d:18:91:07: 89:7b:38:30:4c:be:b6:87:b5:1a:f2:44:f4:25:5b:c0:c2:16: a4:b5:27:6d:af:fe:17:0e:f2:b5:85:d1:f4:b6:a5:2c:3a:9b: cd:67:37:87:88:5c:d8:38:e9:21:e6:12:57:d4:d5:b5:0a:dd: 1c:04:de:ad:2e:db:8d:71:20:7f:1d:da:ac:15:82:34:99:ba: f9:ad:95:15:b7:60:23:97:81:1b:e5:62:ed:81:15:9b:8e:d2: d2:02:38:c9:ac:e2:61:cb:03:46:01:a0:fe:9c:b0:ae:01:51: a8:93:e5:c8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9pqcWecu89uYeWMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk YTEzYjdlN2MtZTk4Mi00NTJlLWJkNzMtNzEwOTg4MGE1YTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUmX5iyU4DGRT1Ym4R6tKm2KbG2XAscONNRf FjS4YzhMDlH6BziQKBl2tjzVbIRV/+0QqpeewLQBiRTK/VJTRz1e8wUHOPrEizEa B13nyh9i7ELSeKEB0RZ50HgYO89PMipUngKKsEJAQPNxTROz7LWzQVW6msscOYJz kVDKhMEMCct5lqVQG1sH7SuyC41yM+ySZ0F/M9YKhPieYPy5O1f0dzrmuPVJbqZD khNX5lDvn2CY0Yo64dMJh7/FNJpMkwMCJO/CaUhsxdOo55sHvHUzicwQKewHMvDB BubN3ilX2mtnTPuYMGrix1fOVY9QDguJAZakzZFEomq7vMamcQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBQm2EFzCopHwxLexBXXWulEPCi7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjhlNThkNWMtMDAxNi0z ZmI3LTg3NzctODUwMjdmNDMwZjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcL5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACdbscFFvPzxaLmc8eFuhzu+LoEZQxvt/jbzKDm1Qzn9i/dA0lZY 9Wv4KD4PqkkA3M/KpnQQvUR/+DChdOCbYmIqzRh86p5J9orQH3+4lNU+uCxtvwi6 /5FlXPO5AVMOpiCdL3KyT3kf5nagwbg7S/gJclFRBqx06uhLbWhEEX8+jcQ8+v+L CLjYYISLDRiRB4l7ODBMvraHtRryRPQlW8DCFqS1J22v/hcO8rWF0fS2pSw6m81n N4eIXNg46SHmElfU1bUK3RwE3q0u241xIH8d2qwVgjSZuvmtlRW3YCOXgRvlYu2B FZuO0tICOMms4mHLA0YBoP6csK4BUaiT5cg= -----END CERTIFICATE-----Generated at Mon Apr 28 13:07:25 2025 by rpki-client