$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/418347ab-5e91-38bb-9f4f-4e50720ed46a.roa File: 418347ab-5e91-38bb-9f4f-4e50720ed46a.roa (raw, json) Hash identifier: Nqf2CpGqe2dMa/5xxbeew56QGvs+dIEZPemy+soMal8= Subject key identifier: 00:AF:0D:E7:FC:D2:45:3E:87:21:A1:8D:1C:73:16:35:63:B8:61:77 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858460049DFE95833EF61064FBF00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/418347ab-5e91-38bb-9f4f-4e50720ed46a.roa Signing time: Sun 26 May 2024 13:00:34 +0000 ROA not before: Sun 26 May 2024 13:00:34 +0000 ROA not after: Sat 24 Aug 2024 13:00:34 +0000 asID: 33650 IP address blocks: 2001:559:137::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Jun 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:00:49:df:e9:58:33:ef:61:06:4f:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 26 13:00:34 2024 GMT Not After : Aug 24 13:00:34 2024 GMT Subject: CN=f3d69acb-feb0-4424-a895-8883d9fdc2b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:96:39:74:bd:44:b4:59:6a:b3:1a:2a:fc:32: 4e:b4:7c:e1:70:d2:ae:99:c5:49:2f:5e:a4:82:17: 29:0a:2e:46:0c:e9:34:26:73:63:b7:1e:10:04:dc: 2b:c7:88:2f:53:94:b3:19:36:28:d8:e4:91:a7:0b: de:97:09:a6:22:99:73:07:bd:38:dd:04:e3:5c:dd: 3d:45:2b:d3:e9:13:a4:cc:c5:3f:bb:8b:a9:3f:f3: 4f:3c:89:f0:1e:58:e3:f8:08:4e:ba:dc:7a:ad:5e: f9:fb:04:18:18:b6:7d:12:7f:57:ff:93:aa:ca:3a: 8a:6a:b4:a9:85:a1:30:7a:3e:36:79:55:34:11:85: 9a:dc:6f:bb:b4:76:18:05:f8:e1:ec:62:4a:50:ee: bc:6b:6e:24:1b:68:6d:05:74:cf:13:84:04:b9:d4: a2:01:79:5b:04:b8:e0:a4:a3:e1:af:71:54:e2:7c: 61:7c:a6:78:e9:78:ab:37:5d:45:12:81:85:b8:75: 3c:1f:5f:e3:54:b5:a1:f1:95:47:62:cd:78:bd:52: 8a:38:02:14:72:a3:68:80:65:b2:17:d2:05:5f:88: 41:aa:39:5f:78:4f:d2:0a:9e:70:9d:75:cd:17:d3: ed:10:13:f5:a1:ca:4e:65:71:28:b1:ba:b0:a7:88: ef:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:AF:0D:E7:FC:D2:45:3E:87:21:A1:8D:1C:73:16:35:63:B8:61:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/418347ab-5e91-38bb-9f4f-4e50720ed46a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:137::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:bc:67:da:34:d9:8f:ed:ef:23:f7:ee:d6:b0:4d:7b:71:cb: d3:05:b8:e8:90:5b:c6:68:31:c2:52:05:39:48:71:7c:ce:55: 6a:33:12:68:d0:82:88:93:a9:dd:e0:4b:b7:b7:d7:9a:6b:8b: 89:9e:63:51:b7:56:03:fe:13:ff:10:57:8c:77:1a:e0:e7:2d: cd:0e:39:1b:fb:e1:17:34:ae:f9:fe:a4:5b:37:14:5a:46:0b: 9b:f9:0c:4b:9f:1a:6c:cc:bd:97:3f:d6:77:38:5d:93:5a:5c: 85:f5:df:99:69:c6:ae:63:92:83:9a:26:02:33:11:8f:a5:e2: 54:87:ca:1a:72:a1:03:22:1c:27:e2:b6:df:ef:a6:d7:45:3a: 53:89:0c:1f:fd:e6:1b:7a:e5:ef:aa:ad:0b:b4:f8:50:45:04: f6:e9:d6:fc:1c:21:67:eb:e7:30:d7:c0:f6:5a:00:83:72:73: e7:a0:a8:97:c4:42:7c:78:a0:7c:13:3d:f7:3a:05:f8:c5:23: 9b:3f:20:83:2a:d1:1b:81:29:d1:18:fb:47:04:30:b1:b2:d1: 67:1d:fe:22:a0:26:fc:d0:f7:84:e1:f2:5c:0c:0d:ac:ee:a8: ea:2c:94:06:e9:5b:25:e5:15:bc:fc:11:76:02:97:16:de:3c: e5:57:27:45 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEYASd/pWDPvYQZPvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDUyNjEzMDAzNFoXDTI0MDgyNDEzMDAzNFowLzEtMCsGA1UEAxMk ZjNkNjlhY2ItZmViMC00NDI0LWE4OTUtODg4M2Q5ZmRjMmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZY5dL1EtFlqsxoq/DJOtHzhcNKumcVJL16k ghcpCi5GDOk0JnNjtx4QBNwrx4gvU5SzGTYo2OSRpwvelwmmIplzB7043QTjXN09 RSvT6ROkzMU/u4upP/NPPInwHljj+AhOutx6rV75+wQYGLZ9En9X/5OqyjqKarSp haEwej42eVU0EYWa3G+7tHYYBfjh7GJKUO68a24kG2htBXTPE4QEudSiAXlbBLjg pKPhr3FU4nxhfKZ46XirN11FEoGFuHU8H1/jVLWh8ZVHYs14vVKKOAIUcqNogGWy F9IFX4hBqjlfeE/SCp5wnXXNF9PtEBP1ocpOZXEosbqwp4jvwQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFACvDef80kU+hyGhjRxzFjVjuGF3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDE4MzQ3YWItNWU5MS0z OGJiLTlmNGYtNGU1MDcyMGVkNDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQE3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC+8Z9o02Y/t7yP37tawTXtxy9MFuOiQW8ZoMcJSBTlIcXzOVWoz EmjQgoiTqd3gS7e315pri4meY1G3VgP+E/8QV4x3GuDnLc0OORv74Rc0rvn+pFs3 FFpGC5v5DEufGmzMvZc/1nc4XZNaXIX135lpxq5jkoOaJgIzEY+l4lSHyhpyoQMi HCfitt/vptdFOlOJDB/95ht65e+qrQu0+FBFBPbp1vwcIWfr5zDXwPZaAINyc+eg qJfEQnx4oHwTPfc6BfjFI5s/IIMq0RuBKdEY+0cEMLGy0Wcd/iKgJvzQ94Th8lwM DazuqOoslAbpWyXlFbz8EXYClxbePOVXJ0U= -----END CERTIFICATE-----Generated at Sun Jun 16 01:49:07 2024 by rpki-client on console-fra.rpki-client.org