$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b658644c-0e36-3e20-9545-9800457131b2.roa File: b658644c-0e36-3e20-9545-9800457131b2.roa (raw, json) Hash identifier: M1S3mQRlUQOkBFbvKCmAqfDb7dw8rPyaOf5Xx/+u6cs= Subject key identifier: 69:64:D6:D5:E2:EA:D3:52:DE:75:9F:69:50:A1:1A:4B:8D:E9:F1:13 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA5696763675C3C288D4C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b658644c-0e36-3e20-9545-9800457131b2.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 33287 IP address blocks: 2001:559:83b4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a5:69:67:63:67:5c:3c:28:8d:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=f39bcd82-606a-4201-abee-caa640932316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ea:0b:72:e4:97:1c:84:07:83:dc:45:56:bc: 0d:7d:c4:a8:d1:af:cd:78:02:18:ef:1a:2f:a6:2e: 90:a9:58:36:0a:87:9a:a5:c5:e0:0c:d1:ca:5f:2b: 26:f9:7b:4b:4c:f9:0c:bc:c2:42:d8:82:22:2b:3d: 29:07:33:e8:4b:fd:56:20:a2:0e:d9:cb:20:9e:a3: cd:e8:ac:ad:aa:fb:5a:a5:85:9c:ce:3c:19:70:c1: 06:09:84:47:e2:09:65:7a:b2:3f:24:2f:f6:93:f0: ec:58:11:7f:f7:8e:0a:70:9d:14:86:67:d7:6a:79: 6d:58:28:75:05:44:df:4d:46:46:48:2b:4c:0a:0d: 6b:a5:56:e3:07:10:47:b9:af:d3:7d:f1:f2:f9:20: 2c:8c:75:7d:c7:23:a2:f6:4d:ec:17:0f:ae:f6:66: 88:07:65:f7:ba:4e:2a:2a:7b:a2:41:e2:99:4f:fc: 00:4e:74:bb:bb:4e:99:26:32:8a:a8:e9:93:98:e1: 4e:eb:eb:13:12:6b:22:bb:81:a1:02:7e:64:17:e2: e9:8b:c4:36:aa:28:32:6f:c2:05:08:39:a0:91:2c: 03:70:6b:30:c7:95:d0:55:8e:c8:56:4f:c9:3d:3b: d4:d5:a2:69:bb:12:d8:37:2e:90:ea:a9:99:bf:89: e9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:64:D6:D5:E2:EA:D3:52:DE:75:9F:69:50:A1:1A:4B:8D:E9:F1:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b658644c-0e36-3e20-9545-9800457131b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:83b4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:6c:ec:57:a8:98:c1:f2:cd:4b:86:10:4f:e2:b3:85:b3:92: d5:09:16:39:f2:8f:6f:d6:ae:5b:ef:15:5e:af:23:e9:19:49: 7f:7f:80:a5:84:a4:bf:5e:00:2e:1b:e0:fb:d2:73:c7:72:4d: db:27:37:bd:bf:51:cd:1d:fb:fd:4c:0c:05:71:04:ae:25:a4: 91:47:66:9b:2c:41:e4:21:b5:a6:ef:36:c1:6b:9d:78:17:7d: 2c:88:31:72:3b:bf:c4:97:05:00:ba:97:84:2d:a3:fa:ef:48: 40:08:98:84:0d:72:85:e3:c3:b1:ba:33:de:5f:dd:81:85:8b: 47:5f:c7:7e:df:0d:ec:58:4a:29:db:9b:63:53:ad:6a:24:48: db:9b:8f:23:0b:ba:e7:ba:27:6b:0b:a1:a9:c1:90:db:2f:84: 54:d2:22:7d:c9:05:d0:7a:c1:4f:83:b5:25:25:29:30:29:ee: c6:65:ef:20:6c:0e:15:b7:b4:26:c9:82:03:55:b4:0c:36:5d: 55:54:de:4e:ed:e2:c0:07:94:9f:20:62:90:2e:8b:60:56:bb: d9:85:35:44:48:91:38:a7:a4:14:c3:f4:3c:5e:f9:69:55:28: 3e:4a:9e:42:91:6a:d7:22:98:89:77:ae:f7:91:02:ab:4d:e4: c9:f4:7e:3e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9pWlnY2dcPCiNTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZjM5YmNkODItNjA2YS00MjAxLWFiZWUtY2FhNjQwOTMyMzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOoLcuSXHIQHg9xFVrwNfcSo0a/NeAIY7xov pi6QqVg2CoeapcXgDNHKXysm+XtLTPkMvMJC2IIiKz0pBzPoS/1WIKIO2csgnqPN 6KytqvtapYWczjwZcMEGCYRH4gllerI/JC/2k/DsWBF/944KcJ0UhmfXanltWCh1 BUTfTUZGSCtMCg1rpVbjBxBHua/TffHy+SAsjHV9xyOi9k3sFw+u9maIB2X3uk4q KnuiQeKZT/wATnS7u06ZJjKKqOmTmOFO6+sTEmsiu4GhAn5kF+Lpi8Q2qigyb8IF CDmgkSwDcGswx5XQVY7IVk/JPTvU1aJpuxLYNy6Q6qmZv4npKQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGlk1tXi6tNS3nWfaVChGkuN6fETMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjY1ODY0NGMtMGUzNi0z ZTIwLTk1NDUtOTgwMDQ1NzEzMWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYO0 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALZs7FeomMHyzUuGEE/is4WzktUJFjnyj2/WrlvvFV6vI+kZSX9/ gKWEpL9eAC4b4PvSc8dyTdsnN72/Uc0d+/1MDAVxBK4lpJFHZpssQeQhtabvNsFr nXgXfSyIMXI7v8SXBQC6l4Qto/rvSEAImIQNcoXjw7G6M95f3YGFi0dfx37fDexY Sinbm2NTrWokSNubjyMLuue6J2sLoanBkNsvhFTSIn3JBdB6wU+DtSUlKTAp7sZl 7yBsDhW3tCbJggNVtAw2XVVU3k7t4sAHlJ8gYpAui2BWu9mFNURIkTinpBTD9Dxe +WlVKD5KnkKRatcimIl3rveRAqtN5Mn0fj4= -----END CERTIFICATE-----Generated at Sun May 11 07:38:19 2025 by rpki-client