$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc87d4e2-24a6-3830-be6a-0043c01cfaf2.roa File: bc87d4e2-24a6-3830-be6a-0043c01cfaf2.roa (raw, json) Hash identifier: UffViOdf2KR6CmVwEgrtB+cYpsmLnblf0hGi/Dtmb50= Subject key identifier: BE:40:1F:25:F7:10:73:3E:9D:7B:F7:4E:9C:68:EF:09:6A:E3:C7:85 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849B14A34FC2DF3DDD87B8D2F00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc87d4e2-24a6-3830-be6a-0043c01cfaf2.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 33657 IP address blocks: 2001:559:a038::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:34:fc:2d:f3:dd:d8:7b:8d:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=048225b5-6da1-4699-a51a-23a63356849b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:57:b4:5c:ce:73:c6:7f:28:28:f1:53:fa:95: b2:32:9e:6e:ba:bb:5c:6e:4a:f1:66:81:f4:b8:37: 7b:55:e4:ed:ac:c3:18:f9:d3:03:fd:53:2f:f4:da: fb:da:ba:bb:91:07:72:24:44:a6:7c:b2:52:88:ef: 7a:8e:02:31:1e:41:04:a6:ed:01:76:02:c5:51:0a: 73:8b:d0:a9:00:4c:c8:9c:f8:e6:de:39:60:2a:f3: 9d:66:62:f2:50:2e:ed:b7:61:f9:4e:e0:77:12:0f: eb:aa:8b:9f:11:d0:d5:e1:55:97:84:09:f8:77:e4: eb:b2:ba:c3:c0:3d:7b:79:ce:dc:14:f4:36:a5:8b: 4e:27:8b:b5:26:a3:2a:77:cf:0b:ad:1f:61:0d:ab: f0:54:da:4f:bf:f9:2a:2e:2d:80:cd:c3:03:b4:00: c9:c6:4e:b0:1d:71:b5:d2:df:ab:08:5f:86:03:88: e6:db:84:76:8a:7a:ce:82:f1:e3:64:bf:77:0a:c2: 1a:b2:57:df:3a:8e:a2:ec:b1:d9:ac:76:b0:48:18: f2:19:cf:cb:35:73:98:7e:87:0d:4c:38:9e:60:2a: 42:84:42:d9:e4:ac:1a:03:b2:05:02:ea:1f:b1:0d: 29:54:73:0f:a9:9d:05:2a:b6:a8:5d:d9:8a:16:1f: 03:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:40:1F:25:F7:10:73:3E:9D:7B:F7:4E:9C:68:EF:09:6A:E3:C7:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc87d4e2-24a6-3830-be6a-0043c01cfaf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:a038::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:24:c0:78:10:ad:17:95:98:19:f8:d1:e8:a1:0d:b3:3b:a2: 75:e0:7c:8b:37:e2:55:86:d7:29:ad:a8:5e:b2:41:c0:e3:0c: f9:de:ac:ff:b2:ae:ae:83:e9:9e:8b:3e:b0:9d:69:51:1b:c2: 50:8c:27:24:dd:9c:65:95:5c:69:80:67:57:74:ef:bc:ff:b7: c6:a6:67:01:f3:2a:ec:ed:a8:68:dd:fb:86:e2:b9:a0:77:ef: ba:b5:56:67:4c:00:27:99:98:7b:a3:ee:5e:a2:b8:4c:9f:62: e6:59:5a:ea:de:58:e5:15:6e:12:1f:59:c2:ac:b6:c3:66:4c: 00:66:3d:f9:75:d5:e5:72:2b:eb:2c:59:0e:c8:63:ec:ba:ea: 31:3f:7b:45:d2:e1:e8:09:65:15:b1:d2:fa:bc:cd:64:29:73: f6:73:f1:20:81:a8:74:ad:0d:7d:da:e6:52:ff:e0:35:da:9a: 59:e4:cc:d2:10:ba:fc:5b:0b:34:46:aa:1d:fb:46:69:41:e8: 0d:0f:d8:e0:7a:93:e0:52:64:a5:90:9e:03:b6:e0:ec:29:cd: bc:52:b3:3a:2a:ed:a6:48:c6:22:d1:27:2f:a4:1e:6b:50:68: b2:63:5c:b7:4d:de:a8:5d:e4:cd:4e:79:f8:19:06:27:0f:f3: 85:fb:a2:00 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmxSjT8LfPd2HuNLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MDQ4MjI1YjUtNmRhMS00Njk5LWE1MWEtMjNhNjMzNTY4NDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArle0XM5zxn8oKPFT+pWyMp5uurtcbkrxZoH0 uDd7VeTtrMMY+dMD/VMv9Nr72rq7kQdyJESmfLJSiO96jgIxHkEEpu0BdgLFUQpz i9CpAEzInPjm3jlgKvOdZmLyUC7tt2H5TuB3Eg/rqoufEdDV4VWXhAn4d+TrsrrD wD17ec7cFPQ2pYtOJ4u1JqMqd88LrR9hDavwVNpPv/kqLi2AzcMDtADJxk6wHXG1 0t+rCF+GA4jm24R2inrOgvHjZL93CsIaslffOo6i7LHZrHawSBjyGc/LNXOYfocN TDieYCpChELZ5KwaA7IFAuofsQ0pVHMPqZ0FKraoXdmKFh8D4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL5AHyX3EHM+nXv3Tpxo7wlq48eFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmM4N2Q0ZTItMjRhNi0z ODMwLWJlNmEtMDA0M2MwMWNmYWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWaA4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEokwHgQrReVmBn40eihDbM7onXgfIs34lWG1ymtqF6yQcDjDPne rP+yrq6D6Z6LPrCdaVEbwlCMJyTdnGWVXGmAZ1d077z/t8amZwHzKuztqGjd+4bi uaB377q1VmdMACeZmHuj7l6iuEyfYuZZWureWOUVbhIfWcKstsNmTABmPfl11eVy K+ssWQ7IY+y66jE/e0XS4egJZRWx0vq8zWQpc/Zz8SCBqHStDX3a5lL/4DXamlnk zNIQuvxbCzRGqh37RmlB6A0P2OB6k+BSZKWQngO24OwpzbxSszoq7aZIxiLRJy+k HmtQaLJjXLdN3qhd5M1OefgZBicP84X7ogA= -----END CERTIFICATE-----Generated at Sun May 11 09:15:53 2025 by rpki-client