$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1539c7c-d1fa-3ca4-9938-19b076cf1203.roa File: d1539c7c-d1fa-3ca4-9938-19b076cf1203.roa (raw, json) Hash identifier: /cT/PewUsMSR8xhgWKrrx8QTBIh0szQu7t8uUTdH1NA= Subject key identifier: 96:A9:05:A7:26:37:A9:C4:E9:A4:6C:D5:55:A7:6B:39:88:FC:BC:19 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA61C05A025F29393907280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1539c7c-d1fa-3ca4-9938-19b076cf1203.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 22258 IP address blocks: 2001:559:b2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a6:1c:05:a0:25:f2:93:93:90:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=8c7e0597-4ba2-4eb2-aefb-24b8fa259067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:cf:12:55:20:74:58:8e:71:5f:38:d1:0b:ca: db:da:ed:5e:da:2a:df:7c:3b:56:5f:6d:a3:a5:e5: bf:c0:cb:bb:af:f8:fa:b2:3e:58:96:66:1a:c0:c7: 2e:c6:e7:0a:ea:b2:0f:4f:53:83:2a:e1:8f:30:55: 21:0a:32:8e:56:cd:e3:90:22:86:5a:60:75:45:a9: c2:41:8a:c7:e9:66:bd:0d:17:3b:71:5f:22:45:ee: 7d:b6:1e:4c:70:7e:d8:28:6a:cf:3a:9c:a3:8e:41: 21:c3:32:0c:dc:2d:e8:1f:69:77:fc:30:52:18:1c: 0e:8d:9b:ac:1a:eb:b7:2c:35:c8:18:1c:44:1b:ef: 97:fc:14:76:e1:90:19:d5:7a:08:57:01:88:8e:f6: 5e:c0:65:f6:75:7c:53:bf:b1:2f:88:af:fb:12:3a: 46:62:97:e6:82:83:9f:06:9e:19:80:91:ed:51:3e: f9:74:ce:7c:2d:72:4d:03:7b:87:ca:6a:43:52:f1: 19:67:d9:fc:94:68:5e:ef:91:e4:19:db:6e:25:2e: 48:90:ea:b5:7f:65:6f:0a:81:71:1c:36:ad:6f:98: 18:66:07:80:f0:4c:f1:52:ee:65:a2:a9:b1:43:47: 96:24:cb:08:f4:cf:5e:75:5a:b5:2d:c0:e0:61:e4: 7d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A9:05:A7:26:37:A9:C4:E9:A4:6C:D5:55:A7:6B:39:88:FC:BC:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1539c7c-d1fa-3ca4-9938-19b076cf1203.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:b2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:d2:20:f7:93:9d:4a:a7:8b:34:db:0a:25:44:63:e8:29:47: 8c:90:76:6e:e8:71:01:a2:32:a4:48:c1:75:85:87:97:0c:e0: 15:08:01:0b:52:8c:a5:12:76:26:70:c3:94:47:f9:1c:9b:7c: da:b9:7f:36:1a:33:b1:c4:cd:a7:b7:f2:26:aa:86:1a:9d:9f: 60:49:91:ca:87:e7:8a:ce:38:31:4d:49:d0:20:24:61:64:b1: c0:39:65:72:89:74:7c:aa:2f:b1:50:6d:d2:40:77:bc:6b:33: 9f:b7:00:fc:56:73:c2:85:1b:58:94:2f:2a:eb:02:df:9d:94: 14:ef:5a:0f:86:84:a2:fb:56:73:16:cf:c2:22:6d:b2:7b:af: 14:0d:06:10:2b:7f:f3:b9:ef:9f:3e:e9:65:b0:ea:89:a2:72: 21:4b:04:41:4b:0c:d6:78:ed:aa:a3:84:08:85:c5:6e:68:e3: 2f:f4:7e:14:18:b2:be:2d:4e:ba:38:06:18:8d:b8:3e:24:5a: f1:8a:2d:30:a3:5d:0c:f4:0b:9f:62:70:88:c5:ea:ff:8b:3b: 9e:a9:56:59:59:8c:b2:8c:69:8a:40:50:f6:eb:c3:14:7b:5f: a1:73:87:78:12:79:6e:4f:48:68:65:f3:bc:d7:01:a4:a5:70: fb:b3:b0:09 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9phwFoCXyk5OQcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk OGM3ZTA1OTctNGJhMi00ZWIyLWFlZmItMjRiOGZhMjU5MDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAns8SVSB0WI5xXzjRC8rb2u1e2irffDtWX22j peW/wMu7r/j6sj5YlmYawMcuxucK6rIPT1ODKuGPMFUhCjKOVs3jkCKGWmB1RanC QYrH6Wa9DRc7cV8iRe59th5McH7YKGrPOpyjjkEhwzIM3C3oH2l3/DBSGBwOjZus Guu3LDXIGBxEG++X/BR24ZAZ1XoIVwGIjvZewGX2dXxTv7EviK/7EjpGYpfmgoOf Bp4ZgJHtUT75dM58LXJNA3uHympDUvEZZ9n8lGhe75HkGdtuJS5IkOq1f2VvCoFx HDatb5gYZgeA8EzxUu5loqmxQ0eWJMsI9M9edVq1LcDgYeR9swIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJapBacmN6nE6aRs1VWnazmI/LwZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDE1MzljN2MtZDFmYS0z Y2E0LTk5MzgtMTliMDc2Y2YxMjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQCy MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGHSIPeTnUqnizTbCiVEY+gpR4yQdm7ocQGiMqRIwXWFh5cM4BUI AQtSjKUSdiZww5RH+RybfNq5fzYaM7HEzae38iaqhhqdn2BJkcqH54rOODFNSdAg JGFkscA5ZXKJdHyqL7FQbdJAd7xrM5+3APxWc8KFG1iULyrrAt+dlBTvWg+GhKL7 VnMWz8IibbJ7rxQNBhArf/O5758+6WWw6omiciFLBEFLDNZ47aqjhAiFxW5o4y/0 fhQYsr4tTro4BhiNuD4kWvGKLTCjXQz0C59icIjF6v+LO56pVllZjLKMaYpAUPbr wxR7X6Fzh3gSeW5PSGhl87zXAaSlcPuzsAk= -----END CERTIFICATE-----Generated at Fri May 9 11:32:41 2025 by rpki-client