$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a40eaab5-e92d-35d2-a097-924f20b2717c.roa File: a40eaab5-e92d-35d2-a097-924f20b2717c.roa (raw, json) Hash identifier: IYhrqoAsbLcB7vg8SN0zGonfXiyrMm9AAqFl70qIFr4= Subject key identifier: 26:42:28:2F:EA:ED:E8:02:6C:9C:96:7E:12:69:C2:19:B7:1B:5F:84 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285846004A80224C9EFA1D37032C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a40eaab5-e92d-35d2-a097-924f20b2717c.roa Signing time: Sun 26 May 2024 13:00:34 +0000 ROA not before: Sun 26 May 2024 13:00:34 +0000 ROA not after: Sat 24 Aug 2024 13:00:34 +0000 asID: 33287 IP address blocks: 2001:559:102::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Jun 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:00:4a:80:22:4c:9e:fa:1d:37:03:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 26 13:00:34 2024 GMT Not After : Aug 24 13:00:34 2024 GMT Subject: CN=33432d48-b81a-4e29-a303-a3e4134fa926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5b:59:10:c1:1d:5e:f2:e2:d0:2b:68:f3:05: bd:18:c1:87:a7:ac:52:4f:15:00:49:9f:a2:a1:95: 17:27:86:ab:a9:21:0b:e9:29:39:72:f1:e3:62:62: 30:fd:f9:e9:09:ce:f9:d1:a6:84:76:a0:c0:08:e8: 9b:ee:d9:6c:5b:b8:df:39:56:c4:e2:29:da:6d:7c: b5:57:d1:b2:f2:64:b2:e9:5c:25:30:ad:dc:2f:56: ac:c9:17:39:2c:9c:d2:47:64:bf:d2:59:0b:d7:25: 77:14:ed:4d:87:7f:ef:b6:98:0d:6a:3a:2d:e2:61: 08:d0:6f:c8:aa:be:6e:d7:31:e3:a1:51:ec:7e:3a: fb:be:cb:6b:ba:4b:1c:5a:21:20:63:8d:b5:9e:ae: 0c:61:bf:78:eb:71:08:6a:ef:c6:60:62:4c:84:23: 77:b4:71:af:69:8a:c0:bf:00:ab:49:9d:08:40:6c: ea:f0:db:99:d8:d2:aa:0c:3f:e2:38:eb:1f:d7:75: ff:b3:10:9b:75:00:67:4a:e2:91:aa:f0:fa:6c:63: a5:88:01:75:ce:8e:8e:a0:92:08:8f:a3:e2:1b:db: f5:20:13:a6:b1:81:b8:55:e3:70:53:41:4b:db:f1: 02:f9:fe:3e:da:2b:61:bc:0a:14:e1:58:61:27:59: dd:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:42:28:2F:EA:ED:E8:02:6C:9C:96:7E:12:69:C2:19:B7:1B:5F:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a40eaab5-e92d-35d2-a097-924f20b2717c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:102::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:0e:3b:4e:8d:21:a9:d7:d3:1d:32:c1:6b:2d:bf:4e:47:8b: 70:78:0d:27:bd:d9:1e:17:5b:32:34:53:6b:d9:1f:7f:5e:cb: 5e:b2:e1:40:0e:2d:aa:90:be:60:89:93:ba:81:cc:7e:df:fe: 20:78:70:fc:44:76:5d:10:9b:36:b0:a3:e4:ff:3c:dd:3d:d1: 38:b0:9b:3a:29:04:15:93:ca:9d:be:41:e8:ee:66:4f:15:ca: 6c:35:c1:70:02:b1:78:fe:af:40:07:81:49:fb:ed:04:34:d2: 9d:92:0e:c7:50:3f:b0:ec:b9:95:2d:1e:42:fc:69:25:20:b2: b5:41:e6:c3:d9:78:b9:65:dc:d2:a5:bd:22:64:0f:bc:7f:f5: 58:41:4a:ac:17:a1:b8:05:2a:44:65:f4:91:1a:00:8b:66:82: b6:9d:40:c0:78:2d:56:d1:6f:61:41:a5:19:72:db:59:6f:78: 7a:95:c8:ac:b4:8d:ea:8e:87:db:55:6f:d4:2c:4f:14:76:06: a5:9e:c7:e2:6f:60:ae:73:13:94:19:3c:ff:d9:45:a3:2f:d2: a4:ab:ed:31:96:97:8a:38:e5:8a:5b:d9:3a:9c:84:bf:1a:f4: b0:27:a9:d0:4c:41:10:15:42:2e:3a:1d:86:d4:cb:96:5f:96: 92:c4:06:74 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEYASoAiTJ76HTcDLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDUyNjEzMDAzNFoXDTI0MDgyNDEzMDAzNFowLzEtMCsGA1UEAxMk MzM0MzJkNDgtYjgxYS00ZTI5LWEzMDMtYTNlNDEzNGZhOTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFtZEMEdXvLi0Cto8wW9GMGHp6xSTxUASZ+i oZUXJ4arqSEL6Sk5cvHjYmIw/fnpCc750aaEdqDACOib7tlsW7jfOVbE4inabXy1 V9Gy8mSy6VwlMK3cL1asyRc5LJzSR2S/0lkL1yV3FO1Nh3/vtpgNajot4mEI0G/I qr5u1zHjoVHsfjr7vstrukscWiEgY421nq4MYb9463EIau/GYGJMhCN3tHGvaYrA vwCrSZ0IQGzq8NuZ2NKqDD/iOOsf13X/sxCbdQBnSuKRqvD6bGOliAF1zo6OoJII j6PiG9v1IBOmsYG4VeNwU0FL2/EC+f4+2ithvAoU4VhhJ1ndVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCZCKC/q7egCbJyWfhJpwhm3G1+EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTQwZWFhYjUtZTkyZC0z NWQyLWEwOTctOTI0ZjIwYjI3MTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQEC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABAOO06NIanX0x0ywWstv05Hi3B4DSe92R4XWzI0U2vZH39ey16y 4UAOLaqQvmCJk7qBzH7f/iB4cPxEdl0Qmzawo+T/PN090TiwmzopBBWTyp2+Qeju Zk8Vymw1wXACsXj+r0AHgUn77QQ00p2SDsdQP7DsuZUtHkL8aSUgsrVB5sPZeLll 3NKlvSJkD7x/9VhBSqwXobgFKkRl9JEaAItmgradQMB4LVbRb2FBpRly21lveHqV yKy0jeqOh9tVb9QsTxR2BqWex+JvYK5zE5QZPP/ZRaMv0qSr7TGWl4o45Ypb2Tqc hL8a9LAnqdBMQRAVQi46HYbUy5ZflpLEBnQ= -----END CERTIFICATE-----Generated at Sat Jun 1 16:19:43 2024 by rpki-client on console-ams.rpki-client.org