$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afc3b4d5-1660-39be-8773-56649759c5ee.roa File: afc3b4d5-1660-39be-8773-56649759c5ee.roa (raw, json) Hash identifier: ggEApXZc5auFK1fqxkAzEnkWpXYKrNGrzaFpeUq2mVU= Subject key identifier: 91:3C:54:E6:D2:37:59:11:39:03:B5:DF:4A:DE:3A:60:90:DE:43:D4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285846004B5F94D6C210724CBE8C00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afc3b4d5-1660-39be-8773-56649759c5ee.roa Signing time: Sun 26 May 2024 13:00:34 +0000 ROA not before: Sun 26 May 2024 13:00:34 +0000 ROA not after: Sat 24 Aug 2024 13:00:34 +0000 asID: 20214 IP address blocks: 2001:559:8798::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Jun 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:00:4b:5f:94:d6:c2:10:72:4c:be:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 26 13:00:34 2024 GMT Not After : Aug 24 13:00:34 2024 GMT Subject: CN=c1be6896-d28f-4f87-98d3-3c967728d56b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:2e:b8:64:79:77:80:8a:d0:2f:6a:c7:ed:ca: dc:ab:c1:7b:54:c7:7b:68:10:5c:aa:c2:9c:87:e8: a2:5d:ad:81:44:a4:7d:14:e8:64:d5:b5:e3:f9:37: 52:6a:11:b3:27:0c:16:a8:a5:91:58:66:5e:cf:55: cd:ce:c6:82:98:49:f3:ba:c9:e7:37:14:54:0a:37: 8e:c9:06:48:6d:be:e3:39:3c:93:a9:d9:c1:ff:d8: c3:92:0b:9b:97:df:de:3b:30:31:fb:a8:b3:db:28: d3:b0:c5:cb:d0:cc:15:33:96:56:0f:e1:10:6a:da: a3:e8:d1:3f:60:2d:44:6c:63:1f:09:e6:a9:fd:25: 89:d3:2c:54:c1:62:9a:5b:82:5e:e8:b0:c7:92:f2: 0f:a5:11:22:3d:59:77:e4:d1:7c:bf:22:c3:c6:6b: 33:e9:54:22:12:25:4b:34:12:bc:10:fc:17:11:72: a1:a9:a7:fc:1a:8c:9d:88:17:26:db:55:ff:63:96: 8d:8d:c7:c9:f8:c8:dc:20:be:2c:2f:71:38:64:da: a0:90:24:f6:c8:67:67:34:ee:d8:19:7a:fb:ac:97: af:06:91:ad:ac:d9:87:63:8b:c4:c8:23:ef:eb:77: 1f:b2:3d:a5:db:4a:37:e8:f7:36:27:7f:05:c2:7c: df:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:3C:54:E6:D2:37:59:11:39:03:B5:DF:4A:DE:3A:60:90:DE:43:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afc3b4d5-1660-39be-8773-56649759c5ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8798::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:06:dd:dc:27:06:3d:f9:7c:20:c6:64:40:43:e4:c9:cd:5a: a2:2f:6c:d0:4d:2a:07:66:5f:eb:6c:6c:dd:86:16:c4:82:bf: 59:82:73:7c:0a:64:fd:03:23:6a:23:a7:4b:79:b5:f6:28:09: d8:84:d9:94:3e:fd:32:df:c0:87:9c:77:96:72:72:10:e5:f0: 86:e5:a0:6a:d6:4b:72:e4:cc:36:23:07:10:c3:d7:66:4b:e7: 17:77:e2:68:81:f2:8d:d6:80:60:c0:2c:2f:34:36:8b:eb:65: b3:78:05:a4:c4:9f:26:1f:40:15:91:07:6e:a4:fe:c7:e4:20: 14:eb:ad:70:a6:23:ea:92:4c:c4:5d:47:b0:d7:2e:05:4f:ba: 81:b7:7d:da:2b:12:4c:23:85:77:84:a6:35:11:18:02:48:f4: dc:19:ce:1b:73:e4:e1:7c:da:39:c4:a1:87:21:d0:d5:45:6d: 64:a2:b1:e6:a0:0e:23:de:9e:25:7d:99:9d:34:16:e4:0e:7d: 05:54:a2:43:86:bb:85:10:43:2e:24:94:7d:00:f4:8e:14:73: 44:6f:b3:68:91:08:94:f2:96:fe:e0:15:ec:33:ef:e8:53:4f: 8d:a5:45:f2:6f:f3:3d:5c:fa:ba:aa:ce:73:f9:ee:a2:6b:fe: 1a:65:86:39 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEYAS1+U1sIQcky+jAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDUyNjEzMDAzNFoXDTI0MDgyNDEzMDAzNFowLzEtMCsGA1UEAxMk YzFiZTY4OTYtZDI4Zi00Zjg3LTk4ZDMtM2M5Njc3MjhkNTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhS64ZHl3gIrQL2rH7crcq8F7VMd7aBBcqsKc h+iiXa2BRKR9FOhk1bXj+TdSahGzJwwWqKWRWGZez1XNzsaCmEnzusnnNxRUCjeO yQZIbb7jOTyTqdnB/9jDkgubl9/eOzAx+6iz2yjTsMXL0MwVM5ZWD+EQatqj6NE/ YC1EbGMfCeap/SWJ0yxUwWKaW4Je6LDHkvIPpREiPVl35NF8vyLDxmsz6VQiEiVL NBK8EPwXEXKhqaf8GoydiBcm21X/Y5aNjcfJ+MjcIL4sL3E4ZNqgkCT2yGdnNO7Y GXr7rJevBpGtrNmHY4vEyCPv63cfsj2l20o36Pc2J38FwnzffwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJE8VObSN1kROQO130reOmCQ3kPUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWZjM2I0ZDUtMTY2MC0z OWJlLTg3NzMtNTY2NDk3NTljNWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYeY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABAG3dwnBj35fCDGZEBD5MnNWqIvbNBNKgdmX+tsbN2GFsSCv1mC c3wKZP0DI2ojp0t5tfYoCdiE2ZQ+/TLfwIecd5ZychDl8IbloGrWS3LkzDYjBxDD 12ZL5xd34miB8o3WgGDALC80NovrZbN4BaTEnyYfQBWRB26k/sfkIBTrrXCmI+qS TMRdR7DXLgVPuoG3fdorEkwjhXeEpjURGAJI9NwZzhtz5OF82jnEoYch0NVFbWSi seagDiPeniV9mZ00FuQOfQVUokOGu4UQQy4klH0A9I4Uc0Rvs2iRCJTylv7gFewz 7+hTT42lRfJv8z1c+rqqznP57qJr/hplhjk= -----END CERTIFICATE-----Generated at Sat Jun 1 12:11:28 2024 by rpki-client on console-ams.rpki-client.org