$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5913996-3678-370b-a792-844451a861b3.roa File: b5913996-3678-370b-a792-844451a861b3.roa (raw, json) Hash identifier: sLLMGf5ApxXvsxKkT1LS9lK6GYy4m1rjUghwa8G/Q0s= Subject key identifier: 21:C2:FE:47:E8:6B:5E:03:6B:2F:0D:70:1C:26:06:8D:43:4E:52:DE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA633E6E4C3044F5C2FB380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5913996-3678-370b-a792-844451a861b3.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 33651 IP address blocks: 2001:559:34c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a6:33:e6:e4:c3:04:4f:5c:2f:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=9707d01a-c3b0-4f43-9be3-218b16b5eeda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4c:08:61:80:6b:2c:fb:f5:d2:9f:03:92:43: 3c:0a:0e:56:1a:90:1e:3d:87:f2:f0:c2:d6:ee:38: 2b:6b:b8:95:e9:19:c3:d7:e0:07:b7:ed:38:b6:7d: 7e:81:ef:49:7a:d9:5d:86:75:31:0b:ba:43:11:de: 0e:9d:7e:03:14:62:b3:e9:74:b5:fe:46:6f:3a:47: 88:ac:4a:09:7b:a4:27:cc:b5:6f:1e:4a:2c:21:81: 55:c3:56:36:e4:11:ac:85:cc:80:40:ce:ec:d0:2c: 92:c6:77:ad:54:65:8d:45:7e:c1:4c:58:cf:e9:63: 0d:19:84:9f:1f:e0:ee:d3:e4:1c:51:c7:c1:0e:4f: 29:0c:75:b2:0e:7d:d7:56:d8:11:cf:06:77:ef:6e: 88:9c:39:35:cf:c6:2b:e0:e9:68:2d:09:51:66:c5: 99:82:2f:16:94:de:d6:0a:c6:4b:57:42:f9:cf:71: 88:47:e1:23:75:36:fa:eb:2f:52:92:83:4f:df:57: fe:2f:d4:61:3c:7c:24:99:fe:15:22:f1:27:3d:34: 6a:2d:fd:07:75:01:f9:05:c0:e7:4d:0c:de:4a:14: db:aa:3f:50:ce:6f:2d:97:b8:ef:bf:16:38:90:73: e0:5f:0b:d5:bb:3c:97:5f:46:59:05:f0:44:c4:7d: 5b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C2:FE:47:E8:6B:5E:03:6B:2F:0D:70:1C:26:06:8D:43:4E:52:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5913996-3678-370b-a792-844451a861b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:34c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:06:9a:88:36:b9:e3:18:f9:19:d1:fd:8f:11:16:3f:61:06: 72:f9:f3:67:ab:a6:99:94:e9:49:6e:6c:94:b6:53:9f:be:e3: 1a:ee:85:77:25:59:2e:30:38:ad:3e:3e:c0:82:9b:8e:66:33: be:86:a8:9c:12:ea:bb:8f:a9:a9:82:68:91:bb:38:f8:46:8f: 9e:f2:43:9d:4d:ce:17:1b:31:58:10:1e:32:76:f5:f2:71:1b: 40:e0:6f:80:c0:03:f5:0f:eb:50:07:49:f2:39:81:b7:81:5b: 0f:04:d7:af:e1:68:db:02:e1:48:29:56:e0:7e:28:cb:f2:d7: 48:99:04:59:9b:f2:c0:08:0d:55:cb:5b:22:70:80:1d:58:a4: 3a:07:20:c3:0c:3f:d2:6b:7e:cc:d5:f1:15:80:a7:01:5e:be: af:fd:9e:27:ac:b3:c4:01:96:4e:28:7b:73:85:e3:28:84:55: f4:8a:95:49:f4:d8:d3:46:ce:0b:f3:c1:83:d5:fb:7a:19:ad: e4:57:ae:19:92:90:99:00:66:38:16:6e:8a:1a:f4:c8:ff:78: 7f:45:b5:77:d7:f9:1d:d1:00:1b:d1:fa:56:ee:8d:95:18:f6: 1a:1c:f0:a5:80:2e:fa:8c:2d:5a:2c:c6:88:7a:f0:e8:18:da: 92:69:fb:e3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9pjPm5MMET1wvs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk OTcwN2QwMWEtYzNiMC00ZjQzLTliZTMtMjE4YjE2YjVlZWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEwIYYBrLPv10p8DkkM8Cg5WGpAePYfy8MLW 7jgra7iV6RnD1+AHt+04tn1+ge9JetldhnUxC7pDEd4OnX4DFGKz6XS1/kZvOkeI rEoJe6QnzLVvHkosIYFVw1Y25BGshcyAQM7s0CySxnetVGWNRX7BTFjP6WMNGYSf H+Du0+QcUcfBDk8pDHWyDn3XVtgRzwZ3726InDk1z8Yr4OloLQlRZsWZgi8WlN7W CsZLV0L5z3GIR+EjdTb66y9SkoNP31f+L9RhPHwkmf4VIvEnPTRqLf0HdQH5BcDn TQzeShTbqj9Qzm8tl7jvvxY4kHPgXwvVuzyXX0ZZBfBExH1bNQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCHC/kfoa14Day8NcBwmBo1DTlLeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjU5MTM5OTYtMzY3OC0z NzBiLWE3OTItODQ0NDUxYTg2MWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQNM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFwGmog2ueMY+RnR/Y8RFj9hBnL582erppmU6UlubJS2U5++4xru hXclWS4wOK0+PsCCm45mM76GqJwS6ruPqamCaJG7OPhGj57yQ51NzhcbMVgQHjJ2 9fJxG0Dgb4DAA/UP61AHSfI5gbeBWw8E16/haNsC4UgpVuB+KMvy10iZBFmb8sAI DVXLWyJwgB1YpDoHIMMMP9JrfszV8RWApwFevq/9niess8QBlk4oe3OF4yiEVfSK lUn02NNGzgvzwYPV+3oZreRXrhmSkJkAZjgWbooa9Mj/eH9FtXfX+R3RABvR+lbu jZUY9hoc8KWALvqMLVosxoh68OgY2pJp++M= -----END CERTIFICATE-----Generated at Sun May 11 13:01:58 2025 by rpki-client