$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f30c72bc-94ad-35a9-8963-614a3b19f52e.roa File: f30c72bc-94ad-35a9-8963-614a3b19f52e.roa (raw, json) Hash identifier: CSnjv54MF6drJa5WFNbxTDV7vH1dfuy7OLOrPjZI+LE= Subject key identifier: 93:DA:75:21:78:33:96:A2:3A:6D:C4:B4:C1:B7:5F:C9:42:48:B4:6B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA5661087BE265A22A7BC80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f30c72bc-94ad-35a9-8963-614a3b19f52e.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 33287 IP address blocks: 2001:559:81ee::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a5:66:10:87:be:26:5a:22:a7:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=0b585f47-b4be-4b0b-9011-0f85489f8e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:97:c0:84:32:be:f9:b5:6e:a1:66:fa:a7:98: 64:3c:47:98:62:0b:a8:b0:3b:52:f9:b1:a2:84:a0: 44:48:ca:98:17:f3:0b:0d:12:b6:17:39:c3:db:94: df:9c:48:8e:bb:5d:98:89:01:a5:81:80:fd:ab:60: f0:6f:df:5d:7b:92:95:77:b7:0e:ae:eb:f0:74:27: 27:dd:3f:d6:d2:7a:c2:fa:10:3d:ac:d2:62:b5:ce: 89:de:30:81:bc:8a:5b:07:38:87:cd:de:03:96:4d: e8:1d:2b:59:1c:77:e0:ab:53:3e:36:9a:27:35:b9: 28:76:30:08:6b:56:dc:c7:a2:f9:32:1a:64:4f:1d: 65:c7:ec:68:0e:56:53:6f:4f:62:52:16:81:92:25: 7a:eb:74:7e:f7:fb:77:07:d3:01:36:d9:b0:00:17: b8:51:f0:54:36:d7:09:3e:2c:35:f2:78:69:ac:a9: af:13:e9:43:7a:93:32:33:3b:16:4b:56:9f:ae:6b: c5:1d:b4:f0:aa:b3:15:61:ef:88:23:82:98:95:65: ad:f8:64:d9:81:db:56:af:3a:fc:b0:8e:ef:b8:f5: 5d:30:27:e8:05:19:a1:16:30:1f:b6:5f:99:89:04: 3e:09:90:84:32:ac:1b:aa:05:67:a9:bc:12:93:8a: a1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:DA:75:21:78:33:96:A2:3A:6D:C4:B4:C1:B7:5F:C9:42:48:B4:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f30c72bc-94ad-35a9-8963-614a3b19f52e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:81ee::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:65:85:76:e2:4d:b6:3c:e2:83:e1:5b:fe:b3:8e:09:c3:01: 76:46:dc:73:a0:d4:61:1b:79:53:75:76:4a:61:e0:b8:19:cb: 77:26:99:60:98:d3:28:80:e2:29:3e:42:2b:3f:82:10:14:7c: 5a:f0:08:02:1c:00:c1:5d:ff:16:28:45:80:d9:fd:07:93:87: e6:5a:ee:a1:a5:29:df:67:1a:69:29:ae:68:13:63:fb:95:80: 47:64:e3:c0:c9:3c:04:9f:d8:af:8e:ea:a2:96:e2:f4:4c:59: 50:5a:4c:65:37:f9:01:02:82:e7:f2:9c:b0:5b:7f:d0:58:8d: 68:cb:6f:d1:f0:7e:89:b3:68:a1:bc:33:04:a5:11:e2:d2:57: 84:7b:01:2a:e9:81:44:a9:96:22:0b:51:50:38:bc:54:39:d0: 55:20:c0:12:29:db:bc:55:8f:07:57:b6:4f:44:ab:b8:50:11: 10:ef:35:09:fb:3e:48:b4:45:1e:a8:60:8e:3e:ae:9e:55:ee: a6:16:1c:23:4e:56:f1:8c:9c:03:91:93:5b:52:1d:cb:0b:20: 1f:2c:7f:f9:2c:71:76:1a:5b:7c:09:9d:06:7d:3a:75:45:48: 71:e8:3e:fd:10:69:67:f2:e8:db:65:dc:da:6a:b2:23:49:d3: 09:9b:2c:7e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9pWYQh74mWiKnvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk MGI1ODVmNDctYjRiZS00YjBiLTkwMTEtMGY4NTQ4OWY4ZTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZfAhDK++bVuoWb6p5hkPEeYYguosDtS+bGi hKBESMqYF/MLDRK2FznD25TfnEiOu12YiQGlgYD9q2Dwb99de5KVd7cOruvwdCcn 3T/W0nrC+hA9rNJitc6J3jCBvIpbBziHzd4Dlk3oHStZHHfgq1M+NponNbkodjAI a1bcx6L5MhpkTx1lx+xoDlZTb09iUhaBkiV663R+9/t3B9MBNtmwABe4UfBUNtcJ Piw18nhprKmvE+lDepMyMzsWS1afrmvFHbTwqrMVYe+II4KYlWWt+GTZgdtWrzr8 sI7vuPVdMCfoBRmhFjAftl+ZiQQ+CZCEMqwbqgVnqbwSk4qhvQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJPadSF4M5aiOm3EtMG3X8lCSLRrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjMwYzcyYmMtOTRhZC0z NWE5LTg5NjMtNjE0YTNiMTlmNTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYHu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFplhXbiTbY84oPhW/6zjgnDAXZG3HOg1GEbeVN1dkph4LgZy3cm mWCY0yiA4ik+Qis/ghAUfFrwCAIcAMFd/xYoRYDZ/QeTh+Za7qGlKd9nGmkprmgT Y/uVgEdk48DJPASf2K+O6qKW4vRMWVBaTGU3+QECgufynLBbf9BYjWjLb9Hwfomz aKG8MwSlEeLSV4R7ASrpgUSpliILUVA4vFQ50FUgwBIp27xVjwdXtk9Eq7hQERDv NQn7Pki0RR6oYI4+rp5V7qYWHCNOVvGMnAORk1tSHcsLIB8sf/kscXYaW3wJnQZ9 OnVFSHHoPv0QaWfy6Ntl3NpqsiNJ0wmbLH4= -----END CERTIFICATE-----Generated at Sat May 10 19:19:33 2025 by rpki-client