$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa67e738-23af-3556-9571-951fd366731d.roa File: fa67e738-23af-3556-9571-951fd366731d.roa (raw, json) Hash identifier: bZ645DIbusAS9NKcvDTJpZEvNBHn8i1ZA/68+0V0JsE= Subject key identifier: 2E:6E:D9:98:79:A1:45:AD:99:45:FB:C5:1D:5A:7A:B2:15:4C:7C:54 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA6638E5704DD1E864FA7C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa67e738-23af-3556-9571-951fd366731d.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 7015 IP address blocks: 2001:559:56b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a6:63:8e:57:04:dd:1e:86:4f:a7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=3a12f6e3-19c8-48bf-96cb-4e38f91e122d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d7:27:b6:02:f9:64:e0:b3:64:57:08:d8:59: 10:37:6a:46:91:e2:2f:66:f0:7e:f1:82:92:3c:4d: 98:01:84:e9:a4:3f:14:e4:7b:7d:38:9d:b2:ce:12: a9:5d:19:f6:8e:4c:56:dc:b3:11:b4:5d:b4:20:6c: 36:2f:47:a3:e4:ce:b4:d6:7c:6c:62:13:86:2e:bf: d4:30:cb:63:b7:92:0a:6b:ff:73:26:b1:04:ae:ec: f7:8c:66:cc:84:af:53:81:ac:2d:67:65:11:c3:12: 10:ad:ff:5c:40:92:81:8b:cd:d0:f5:50:fc:97:2d: f0:c8:6c:40:2b:c8:d2:c8:b6:cf:53:92:58:a6:a5: ec:05:1c:0b:d5:f1:13:6e:3b:21:dc:73:13:f4:ba: 10:ee:27:2f:0a:20:b8:6f:69:c9:95:70:56:61:1b: 78:08:f5:c0:8e:11:c0:ff:48:cc:11:4b:6b:f0:b2: 8f:5d:60:21:c6:f7:ba:a8:af:c8:55:51:ce:94:e3: 96:95:53:1d:13:89:c4:55:89:9f:17:d3:7a:9c:fc: 84:15:9f:2f:49:30:a6:80:fe:f8:c5:60:f1:fc:6a: d5:71:ae:e2:cd:3f:3f:db:61:1a:b6:9a:03:f7:b2: b4:b5:33:68:65:b1:37:e7:43:ff:78:8c:9f:4d:a4: 36:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:6E:D9:98:79:A1:45:AD:99:45:FB:C5:1D:5A:7A:B2:15:4C:7C:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa67e738-23af-3556-9571-951fd366731d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:56b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:88:c9:19:e0:b0:c5:18:94:1c:87:1c:70:44:c0:54:5d:f2: bb:d6:2a:15:eb:39:db:8a:5f:fc:e9:fc:d6:f2:6d:f8:ec:12: 3b:38:32:b1:b8:7f:67:e6:7b:b1:81:e7:b8:f8:ca:49:ac:d5: df:55:4f:23:07:8a:0f:6c:4b:08:09:77:ee:90:d7:4c:a4:53: e9:a3:09:9a:24:e4:eb:10:a7:9f:39:5f:10:e5:8c:3a:9e:5f: f9:9f:e8:0e:df:95:90:54:b2:ab:99:57:e6:3e:00:12:13:f6: 1f:bc:b0:64:01:b9:6b:bb:ef:f6:d3:d2:e7:51:6d:ef:5a:cb: ca:b5:18:85:f8:8d:38:ce:a0:65:88:fe:b1:ac:d3:dd:7e:11: 8e:33:a8:5d:29:04:e7:b5:53:1d:7c:16:34:43:67:56:ed:e9: 41:b1:9a:af:06:96:53:90:ea:33:b8:e5:0e:58:c6:24:04:b7: cd:1a:b4:8f:e9:73:09:a7:90:77:66:a1:2f:48:0e:be:fe:4a: e5:8e:66:73:06:d0:4f:fd:ee:a1:d7:67:ce:cf:f8:71:aa:49: 28:d9:39:c3:3a:2a:4f:17:01:88:d1:56:6f:62:b0:6c:14:84: b6:90:89:a4:31:24:a1:69:f4:7f:8b:cf:61:af:4f:ed:85:4f: 7e:17:2c:7d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9pmOOVwTdHoZPp8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk M2ExMmY2ZTMtMTljOC00OGJmLTk2Y2ItNGUzOGY5MWUxMjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdcntgL5ZOCzZFcI2FkQN2pGkeIvZvB+8YKS PE2YAYTppD8U5Ht9OJ2yzhKpXRn2jkxW3LMRtF20IGw2L0ej5M601nxsYhOGLr/U MMtjt5IKa/9zJrEEruz3jGbMhK9TgawtZ2URwxIQrf9cQJKBi83Q9VD8ly3wyGxA K8jSyLbPU5JYpqXsBRwL1fETbjsh3HMT9LoQ7icvCiC4b2nJlXBWYRt4CPXAjhHA /0jMEUtr8LKPXWAhxve6qK/IVVHOlOOWlVMdE4nEVYmfF9N6nPyEFZ8vSTCmgP74 xWDx/GrVca7izT8/22EatpoD97K0tTNoZbE350P/eIyfTaQ2AQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC5u2Zh5oUWtmUX7xR1aerIVTHxUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmE2N2U3MzgtMjNhZi0z NTU2LTk1NzEtOTUxZmQzNjY3MzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQVr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK+IyRngsMUYlByHHHBEwFRd8rvWKhXrOduKX/zp/NbybfjsEjs4 MrG4f2fme7GB57j4ykms1d9VTyMHig9sSwgJd+6Q10ykU+mjCZok5OsQp585XxDl jDqeX/mf6A7flZBUsquZV+Y+ABIT9h+8sGQBuWu77/bT0udRbe9ay8q1GIX4jTjO oGWI/rGs091+EY4zqF0pBOe1Ux18FjRDZ1bt6UGxmq8GllOQ6jO45Q5YxiQEt80a tI/pcwmnkHdmoS9IDr7+SuWOZnMG0E/97qHXZ87P+HGqSSjZOcM6Kk8XAYjRVm9i sGwUhLaQiaQxJKFp9H+Lz2GvT+2FT34XLH0= -----END CERTIFICATE-----Generated at Tue Apr 29 16:54:15 2025 by rpki-client