$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a6cf209-5dc8-318a-8172-ea31a677d3f6.roa File: 1a6cf209-5dc8-318a-8172-ea31a677d3f6.roa (raw, json) Hash identifier: 68f46wupmp1rNjl345L526f682f5WhZIl4tFAhFdjRE= Subject key identifier: D4:53:DC:5F:B7:3C:A6:32:8B:E2:01:C9:1C:6C:0E:E2:54:69:BD:44 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA66FCBB6E2075C3F12F800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a6cf209-5dc8-318a-8172-ea31a677d3f6.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 7015 IP address blocks: 2001:559:c293::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a6:6f:cb:b6:e2:07:5c:3f:12:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=96fc1966-5782-4843-8b7a-2f51edaf9682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:68:ec:d6:69:d4:6e:e3:53:bd:23:3f:1e:e7: dc:73:0a:ac:0b:d2:99:28:d4:8b:27:45:db:93:c3: 70:41:93:a1:9b:61:c1:77:15:e0:89:3f:0f:8a:54: 46:d5:fe:17:c2:82:23:f2:e8:11:7e:1a:80:34:6d: b1:09:48:59:f0:d1:f8:8c:8c:00:bd:83:30:e1:11: 87:94:8f:2f:9d:f1:49:9f:c6:c0:0d:60:95:5f:74: 37:7b:2f:f4:6c:dd:80:2c:b5:f6:33:55:2f:b4:8e: 67:e7:b0:e3:c4:62:9f:25:a2:ef:17:3c:d7:be:3a: ed:63:a6:0c:e7:d3:d8:1c:5c:d7:eb:45:06:ad:eb: 4c:f4:59:e5:98:75:03:e2:13:b0:1a:44:53:19:4c: de:75:65:a1:df:c6:0a:98:f1:a8:9d:a0:ab:19:ae: 02:f7:38:e0:74:a1:50:41:85:14:4b:c4:1d:58:95: 31:3b:22:34:aa:4a:b3:b1:93:ad:07:70:f0:91:bd: 88:96:87:de:c4:b8:58:bb:ae:3c:a9:22:c5:48:46: 01:6b:d2:5f:87:4d:03:49:73:fc:b6:d4:ea:5d:12: 64:63:f5:32:d5:d2:f6:38:68:05:20:f0:6f:98:a1: 66:86:5e:33:16:a7:de:7d:d0:73:67:55:a7:d4:d3: 2d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:53:DC:5F:B7:3C:A6:32:8B:E2:01:C9:1C:6C:0E:E2:54:69:BD:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a6cf209-5dc8-318a-8172-ea31a677d3f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c293::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:57:0e:a0:f4:c6:a1:31:83:07:af:db:09:27:21:b0:61:09: 11:6b:cb:c7:70:4f:d4:86:7d:29:e6:32:ca:2b:2d:d9:65:2c: b2:ec:74:99:5f:d3:a4:16:56:5c:34:44:73:89:9d:ad:2a:ec: de:bd:bd:e9:2f:9b:e9:a8:18:7b:e3:99:39:2f:bb:7f:f3:6b: 20:af:82:c9:67:f5:2d:f3:d3:e4:55:46:08:d5:d8:1d:f3:da: 6d:f1:96:cd:6e:76:ef:4a:e2:ce:cd:b4:ae:ef:74:a0:2b:02: b6:04:26:77:83:50:89:b6:0f:94:c8:1a:56:f0:a2:8a:2b:98: 24:63:08:8b:40:41:31:f8:30:fe:43:dd:91:98:80:9f:9b:96: b1:d8:e3:99:e4:65:11:e3:b1:cd:54:90:52:e8:9c:b2:71:e3: 58:f6:b5:04:c1:f6:38:bc:37:c3:47:ac:d9:3f:5c:57:f2:5d: 78:cf:b4:fd:45:80:23:5a:df:aa:f7:89:f8:1a:b6:00:9c:02: 78:57:a2:c4:f9:18:87:6a:66:03:02:8d:44:eb:5b:97:0a:e9: c5:a6:eb:79:72:fc:4c:9e:5c:b4:17:c6:25:f4:84:5c:48:f2: 3f:3c:89:eb:2e:fb:b1:b6:f8:33:00:a3:72:01:25:ce:c5:a0: 29:db:69:e4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9pm/LtuIHXD8S+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk OTZmYzE5NjYtNTc4Mi00ODQzLThiN2EtMmY1MWVkYWY5NjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmjs1mnUbuNTvSM/HufccwqsC9KZKNSLJ0Xb k8NwQZOhm2HBdxXgiT8PilRG1f4XwoIj8ugRfhqANG2xCUhZ8NH4jIwAvYMw4RGH lI8vnfFJn8bADWCVX3Q3ey/0bN2ALLX2M1UvtI5n57DjxGKfJaLvFzzXvjrtY6YM 59PYHFzX60UGretM9FnlmHUD4hOwGkRTGUzedWWh38YKmPGonaCrGa4C9zjgdKFQ QYUUS8QdWJUxOyI0qkqzsZOtB3Dwkb2IlofexLhYu648qSLFSEYBa9Jfh00DSXP8 ttTqXRJkY/Uy1dL2OGgFIPBvmKFmhl4zFqfefdBzZ1Wn1NMt/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNRT3F+3PKYyi+IByRxsDuJUab1EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWE2Y2YyMDktNWRjOC0z MThhLTgxNzItZWEzMWE2NzdkM2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcKT MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABtXDqD0xqExgwev2wknIbBhCRFry8dwT9SGfSnmMsorLdllLLLs dJlf06QWVlw0RHOJna0q7N69vekvm+moGHvjmTkvu3/zayCvgsln9S3z0+RVRgjV 2B3z2m3xls1udu9K4s7NtK7vdKArArYEJneDUIm2D5TIGlbwooormCRjCItAQTH4 MP5D3ZGYgJ+blrHY45nkZRHjsc1UkFLonLJx41j2tQTB9ji8N8NHrNk/XFfyXXjP tP1FgCNa36r3ifgatgCcAnhXosT5GIdqZgMCjUTrW5cK6cWm63ly/EyeXLQXxiX0 hFxI8j88iesu+7G2+DMAo3IBJc7FoCnbaeQ= -----END CERTIFICATE-----Generated at Sun May 11 01:26:33 2025 by rpki-client