$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/004bd3cb-ae7c-3162-84d8-5d1d6f011840.roa File: 004bd3cb-ae7c-3162-84d8-5d1d6f011840.roa (raw, json) Hash identifier: U9BJbwx84knGwOCL6cO+Hpa/efJypZAT9hjZMO64Bdk= Subject key identifier: A2:1D:CD:0E:1C:4C:38:95:9E:05:74:1B:8B:E0:7A:5F:82:21:55:21 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285847BEFA6CD926019ED85C6F1D00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/004bd3cb-ae7c-3162-84d8-5d1d6f011840.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 33652 IP address blocks: 2001:559:8216::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:fa:6c:d9:26:01:9e:d8:5c:6f:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=2b1c6639-c59c-4821-a2d0-885f72a2b151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ce:19:f6:f2:65:c5:f2:dc:af:8f:57:b2:40: 5f:5b:5f:c2:96:9f:db:2f:a2:f3:ba:f1:1e:01:c6: 10:93:db:d0:11:71:a7:be:96:17:5f:f6:66:43:b7: 99:00:c8:61:21:53:6a:5c:50:dd:c3:ba:ef:17:40: b1:0f:5d:b9:b7:e8:b9:13:8c:88:af:c7:3c:da:a1: 6f:b5:62:70:83:98:bd:40:70:a2:0a:21:26:4c:a1: 6d:c0:39:7a:a1:2d:97:3b:2a:30:fc:b6:62:e8:9e: 78:82:94:65:ea:53:4f:b9:a7:48:bc:07:98:6e:a5: 4c:1c:1c:db:e8:ed:90:59:40:63:32:d8:a1:c0:91: 37:f3:17:57:60:26:39:92:57:19:f1:4f:1f:90:ed: 6d:19:4e:43:3a:d4:70:5e:71:a1:ba:db:97:29:c2: f9:13:28:38:33:ef:cc:36:94:68:44:bb:3c:b2:4f: d7:f9:9a:7e:1c:21:9d:12:fe:b3:2a:72:39:ab:3d: f9:fe:98:bf:60:5c:9d:da:49:81:0a:0b:53:07:e8: 2c:b2:4e:eb:82:6e:cb:95:7e:1f:b5:78:81:35:35: 27:e3:7b:45:01:e5:78:8a:f9:c7:81:55:bd:4a:70: 4e:32:c2:a7:de:7d:cb:1b:7a:e3:de:70:45:a7:25: cb:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:1D:CD:0E:1C:4C:38:95:9E:05:74:1B:8B:E0:7A:5F:82:21:55:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/004bd3cb-ae7c-3162-84d8-5d1d6f011840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8216::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:cf:a8:8f:2c:6b:6c:2f:44:b8:81:8f:ce:87:d6:b3:cf:23: 11:5a:17:01:18:bb:71:62:a5:b3:22:98:d1:e6:66:be:58:b2: 43:92:2b:2c:38:55:fc:85:96:6d:10:eb:5c:1c:e2:4a:e0:c0: a2:3a:38:1f:fa:f8:b7:b3:3a:39:0f:12:4d:20:f7:d3:01:cc: 29:de:cd:76:85:59:14:52:3a:ff:79:e0:d4:80:59:82:73:46: 35:55:8f:10:c1:42:34:0c:45:2d:46:45:69:8b:72:64:a0:02: 2e:57:3f:bc:6c:d1:ce:64:49:e6:e6:25:bd:93:ee:62:0a:ab: 3d:fe:d6:b8:22:10:9f:31:22:00:da:5e:2b:09:a7:c9:04:7c: 71:52:38:c4:5b:a7:8d:f0:7b:57:0f:c3:bb:07:d5:97:49:9c: 8e:93:09:cc:8a:a6:01:6f:4b:d4:65:f8:fe:19:0b:0e:cb:f0: be:81:ca:ad:fc:9d:b4:3c:a2:1c:a7:5f:35:98:d2:41:77:ba: f4:7f:ad:18:8a:20:76:73:d5:71:5a:bf:c3:87:54:7f:88:fc: e4:fe:d0:cc:3d:95:05:b5:fb:93:99:bb:2d:2d:08:39:2a:b9: fe:6e:c6:ce:cb:91:20:1c:f9:1a:08:9d:f3:5c:c7:46:c2:77: b3:f4:b4:9a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe++mzZJgGe2FxvHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk MmIxYzY2MzktYzU5Yy00ODIxLWEyZDAtODg1ZjcyYTJiMTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvc4Z9vJlxfLcr49XskBfW1/Clp/bL6LzuvEe AcYQk9vQEXGnvpYXX/ZmQ7eZAMhhIVNqXFDdw7rvF0CxD125t+i5E4yIr8c82qFv tWJwg5i9QHCiCiEmTKFtwDl6oS2XOyow/LZi6J54gpRl6lNPuadIvAeYbqVMHBzb 6O2QWUBjMtihwJE38xdXYCY5klcZ8U8fkO1tGU5DOtRwXnGhutuXKcL5Eyg4M+/M NpRoRLs8sk/X+Zp+HCGdEv6zKnI5qz35/pi/YFyd2kmBCgtTB+gssk7rgm7LlX4f tXiBNTUn43tFAeV4ivnHgVW9SnBOMsKn3n3LG3rj3nBFpyXL1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKIdzQ4cTDiVngV0G4vgel+CIVUhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDA0YmQzY2ItYWU3Yy0z MTYyLTg0ZDgtNWQxZDZmMDExODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYIW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACXPqI8sa2wvRLiBj86H1rPPIxFaFwEYu3FipbMimNHmZr5YskOS Kyw4VfyFlm0Q61wc4krgwKI6OB/6+LezOjkPEk0g99MBzCnezXaFWRRSOv954NSA WYJzRjVVjxDBQjQMRS1GRWmLcmSgAi5XP7xs0c5kSebmJb2T7mIKqz3+1rgiEJ8x IgDaXisJp8kEfHFSOMRbp43we1cPw7sH1ZdJnI6TCcyKpgFvS9Rl+P4ZCw7L8L6B yq38nbQ8ohynXzWY0kF3uvR/rRiKIHZz1XFav8OHVH+I/OT+0Mw9lQW1+5OZuy0t CDkquf5uxs7LkSAc+RoInfNcx0bCd7P0tJo= -----END CERTIFICATE-----Generated at Fri Nov 22 16:54:12 2024 by rpki-client on console-ams.rpki-client.org