$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5fb5d07-080e-399c-83bf-e7af3a9c5137.roa File: a5fb5d07-080e-399c-83bf-e7af3a9c5137.roa (raw, json) Hash identifier: HwUxEVln3hjFDIlhM6M6jS7gm5SecQ2ZuY0kE1RdFSs= Subject key identifier: 3F:D4:F6:63:B4:AC:2F:48:B2:00:57:73:DB:1D:53:A5:F6:C6:A2:A6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA4A7E9F99F63F0BB5643C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5fb5d07-080e-399c-83bf-e7af3a9c5137.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 22909 IP address blocks: 2001:559:c1e4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:a7:e9:f9:9f:63:f0:bb:56:43:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=bcad05ce-1f0c-43df-9b3a-fb35df980010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:80:5a:ab:59:51:85:20:bb:c4:f6:a4:b3:c4: 19:e9:53:58:38:8b:42:8b:04:0b:4b:34:b7:db:6f: 22:ad:c0:9a:b7:58:69:d0:af:33:23:cb:bc:61:77: 42:90:74:94:0a:17:81:6e:44:bc:c9:fc:5b:47:f4: bf:60:b8:76:06:31:19:5c:21:66:f4:b2:1e:d9:8f: 22:7b:76:01:ad:7e:d0:5d:66:11:8c:4e:87:94:b4: a9:7f:79:15:21:c6:73:f4:2b:a7:49:d7:51:36:bc: a6:ad:61:a1:5b:68:ab:7c:c8:d1:3b:0e:a0:95:0b: d6:63:5c:bc:d4:b2:13:05:4a:b1:4a:03:98:80:ae: 63:c4:32:f9:af:fc:1f:85:8b:3c:ca:fe:8f:0a:fe: a6:f8:68:ef:bb:42:ed:ef:93:9d:4f:a8:93:17:ba: 31:f3:fa:42:1a:69:fb:27:ef:cc:38:2e:86:7b:ff: 6a:0d:d9:40:94:5b:59:45:41:7a:7c:14:76:70:6a: dd:b6:e1:71:07:7d:81:97:dd:3d:d6:32:7d:ec:d7: d2:df:3b:fc:ef:69:cf:d1:a0:0f:ce:5c:42:ff:25: 55:5f:2a:fc:ec:fc:4a:e8:8a:ce:f0:88:47:55:45: 02:3c:fa:62:5b:d9:90:da:d5:a9:9e:73:3c:bc:0d: a1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:D4:F6:63:B4:AC:2F:48:B2:00:57:73:DB:1D:53:A5:F6:C6:A2:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5fb5d07-080e-399c-83bf-e7af3a9c5137.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c1e4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:99:11:9d:a1:70:35:92:f7:e6:82:69:6a:f0:e3:81:b6:38: d1:86:8f:0c:04:be:72:a2:13:5c:d0:8c:52:5e:5d:33:65:63: 74:8d:4d:78:e7:06:36:54:4b:e6:ba:dc:01:51:0e:04:12:36: ee:82:82:a9:94:00:1e:b9:0e:a3:08:a9:aa:ed:e0:65:15:93: 5d:13:ae:3b:3c:56:78:a8:aa:32:be:66:cf:d3:eb:9d:cd:42: 2a:20:e7:9c:8e:30:14:12:e4:9b:01:83:f3:ef:79:aa:fe:64: 66:a8:54:76:bb:b6:63:30:06:90:77:2b:c9:34:35:c0:51:8e: 6a:33:2a:c6:d6:f7:66:70:fa:a2:8d:92:ec:cf:34:32:97:af: 15:df:7c:e8:49:c7:fe:cd:20:e2:fc:4d:3f:da:af:e7:ee:c5: 74:e9:a8:16:38:78:a3:03:65:c5:21:0e:78:6c:1a:9f:97:c2: fa:e1:22:4a:4a:57:c2:95:17:0b:43:98:0a:b8:8a:e9:01:22: fb:9f:a4:90:85:33:b1:e8:dc:4a:c9:72:9e:f5:d1:bd:bd:5d: 07:cb:65:88:2f:d4:31:09:67:70:b6:41:e0:b3:e4:f7:1e:bc: 4e:33:13:82:49:e5:73:e3:54:72:ca:07:68:8b:38:2e:ce:70: 2a:a0:a5:96 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9pKfp+Z9j8LtWQ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk YmNhZDA1Y2UtMWYwYy00M2RmLTliM2EtZmIzNWRmOTgwMDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4Baq1lRhSC7xPaks8QZ6VNYOItCiwQLSzS3 228ircCat1hp0K8zI8u8YXdCkHSUCheBbkS8yfxbR/S/YLh2BjEZXCFm9LIe2Y8i e3YBrX7QXWYRjE6HlLSpf3kVIcZz9CunSddRNrymrWGhW2irfMjROw6glQvWY1y8 1LITBUqxSgOYgK5jxDL5r/wfhYs8yv6PCv6m+Gjvu0Lt75OdT6iTF7ox8/pCGmn7 J+/MOC6Ge/9qDdlAlFtZRUF6fBR2cGrdtuFxB32Bl9091jJ97NfS3zv872nP0aAP zlxC/yVVXyr87PxK6IrO8IhHVUUCPPpiW9mQ2tWpnnM8vA2hCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD/U9mO0rC9IsgBXc9sdU6X2xqKmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTVmYjVkMDctMDgwZS0z OTljLTgzYmYtZTdhZjNhOWM1MTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcHk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIyZEZ2hcDWS9+aCaWrw44G2ONGGjwwEvnKiE1zQjFJeXTNlY3SN TXjnBjZUS+a63AFRDgQSNu6CgqmUAB65DqMIqart4GUVk10Trjs8VnioqjK+Zs/T 653NQiog55yOMBQS5JsBg/Pvear+ZGaoVHa7tmMwBpB3K8k0NcBRjmozKsbW92Zw +qKNkuzPNDKXrxXffOhJx/7NIOL8TT/ar+fuxXTpqBY4eKMDZcUhDnhsGp+Xwvrh IkpKV8KVFwtDmAq4iukBIvufpJCFM7Ho3ErJcp710b29XQfLZYgv1DEJZ3C2QeCz 5PcevE4zE4JJ5XPjVHLKB2iLOC7OcCqgpZY= -----END CERTIFICATE-----Generated at Fri May 9 17:16:11 2025 by rpki-client