$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/723f799a-6460-31cb-be9e-84911b00c2f0.roa File: 723f799a-6460-31cb-be9e-84911b00c2f0.roa (raw, json) Hash identifier: 6S1vZDppJm1SsL/jyl58dq6B0giaVjFPMbOkC4cuO0g= Subject key identifier: 20:ED:39:E5:9E:5C:5A:1D:8F:90:BB:F6:89:E7:49:E2:5D:E7:7B:51 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA557936F365AADDB020660 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/723f799a-6460-31cb-be9e-84911b00c2f0.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 33287 IP address blocks: 2001:558:20::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a5:57:93:6f:36:5a:ad:db:02:06:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=164c68fb-326b-4640-aefa-0241190d6a1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bc:27:4e:6f:b2:fa:49:1d:6b:93:19:9c:49: 30:a6:54:5e:b6:54:57:d9:91:7e:6d:93:8b:2e:e0: a9:09:26:05:78:4f:bc:24:17:e3:67:85:94:69:8e: 6a:60:2f:27:b6:00:75:a6:f4:f6:80:a2:39:15:8f: 70:7c:0a:8d:f6:b0:97:49:78:39:51:66:2a:e1:08: c9:1e:8e:76:3b:68:8d:0d:d5:28:8f:60:3c:63:dc: 81:1a:19:a7:76:03:31:1c:9b:f8:0e:f8:71:41:9a: eb:31:ee:d2:32:ac:86:9a:23:92:cf:38:d3:18:d0: 82:b1:c9:70:8d:6c:7c:c8:ba:87:d8:d3:ea:8e:2f: 9e:2c:7a:1a:04:b5:84:7c:9c:c9:c7:55:59:cc:8d: 69:f2:09:3f:18:a5:34:1c:bc:c0:ad:b2:2e:8d:7f: 74:40:64:64:14:3e:2f:c0:7e:72:ec:68:19:3f:cb: f0:48:2d:9b:ce:a8:81:41:34:87:23:e5:87:77:47: 3e:16:98:d7:18:65:c1:2a:74:2c:3d:7f:7d:c8:56: ae:db:21:8f:dc:0f:14:3e:9d:d1:57:7e:2f:f7:13: 95:20:8f:7c:5e:26:c0:54:c0:e3:a4:2f:e5:bc:3b: ab:7d:c2:54:5d:4b:b8:47:d7:f8:d0:f9:3d:00:3d: a6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:ED:39:E5:9E:5C:5A:1D:8F:90:BB:F6:89:E7:49:E2:5D:E7:7B:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/723f799a-6460-31cb-be9e-84911b00c2f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:558:20::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:19:5a:75:59:5b:79:6e:4e:fc:86:90:a8:dd:e2:22:7b:fe: 6a:74:3f:50:5e:5e:a1:5a:00:fb:65:02:43:7f:53:a4:19:1f: 82:7a:1c:55:f8:94:70:ca:ba:f6:30:8f:71:d9:53:7e:43:67: 43:1d:85:32:ab:b5:37:3a:9f:56:d8:91:5a:f7:4c:57:27:cd: ce:e3:7c:55:40:d2:72:49:0f:c5:ba:ea:a5:99:90:09:4f:d5: b8:bb:20:bc:30:13:f3:6d:aa:2e:bb:b1:dd:15:0c:a0:5a:0e: bb:1e:f6:d4:e3:9e:64:17:af:46:53:78:a5:11:08:44:cb:bd: 1c:18:ae:84:ea:58:59:3f:91:4a:ca:59:e3:b2:43:e1:6f:46: 75:9c:0b:10:31:72:f6:eb:87:6e:c8:39:98:73:97:11:b1:e3: e0:be:40:56:34:3d:50:4e:72:4c:5d:94:63:2d:8f:8e:7a:0e: dc:e9:db:96:01:c2:74:49:dc:59:db:da:d7:d5:62:0d:ac:fc: 0f:db:bd:81:ac:93:bc:e5:50:e9:70:1b:90:3b:ff:1b:85:3b: fb:8d:f3:22:dd:f2:af:c2:00:15:e9:d7:e7:a4:33:7f:69:dc: 7c:fc:8e:fa:6d:fd:8d:5b:59:0b:17:5d:cb:bf:99:ce:18:09: eb:9a:a7:81 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9pVeTbzZardsCBmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk MTY0YzY4ZmItMzI2Yi00NjQwLWFlZmEtMDI0MTE5MGQ2YTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurwnTm+y+kkda5MZnEkwplRetlRX2ZF+bZOL LuCpCSYFeE+8JBfjZ4WUaY5qYC8ntgB1pvT2gKI5FY9wfAqN9rCXSXg5UWYq4QjJ Ho52O2iNDdUoj2A8Y9yBGhmndgMxHJv4DvhxQZrrMe7SMqyGmiOSzzjTGNCCsclw jWx8yLqH2NPqji+eLHoaBLWEfJzJx1VZzI1p8gk/GKU0HLzArbIujX90QGRkFD4v wH5y7GgZP8vwSC2bzqiBQTSHI+WHd0c+FpjXGGXBKnQsPX99yFau2yGP3A8UPp3R V34v9xOVII98XibAVMDjpC/lvDurfcJUXUu4R9f40Pk9AD2meQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCDtOeWeXFodj5C79onnSeJd53tRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzIzZjc5OWEtNjQ2MC0z MWNiLWJlOWUtODQ5MTFiMDBjMmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAEFWAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL0ZWnVZW3luTvyGkKjd4iJ7/mp0P1BeXqFaAPtlAkN/U6QZH4J6 HFX4lHDKuvYwj3HZU35DZ0MdhTKrtTc6n1bYkVr3TFcnzc7jfFVA0nJJD8W66qWZ kAlP1bi7ILwwE/Ntqi67sd0VDKBaDrse9tTjnmQXr0ZTeKURCETLvRwYroTqWFk/ kUrKWeOyQ+FvRnWcCxAxcvbrh27IOZhzlxGx4+C+QFY0PVBOckxdlGMtj456Dtzp 25YBwnRJ3Fnb2tfVYg2s/A/bvYGsk7zlUOlwG5A7/xuFO/uN8yLd8q/CABXp1+ek M39p3Hz8jvpt/Y1bWQsXXcu/mc4YCeuap4E= -----END CERTIFICATE-----Generated at Sat May 10 13:24:28 2025 by rpki-client