$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00de3752-dfd5-3ece-8f4c-4874d51d2e75.roa File: 00de3752-dfd5-3ece-8f4c-4874d51d2e75.roa (raw, json) Hash identifier: D47KNEfbFXC2JMwvPt8NT/M5A6S33IZsx9jO2LttM2k= Subject key identifier: 2B:D5:02:E9:CF:9B:4A:4C:C3:8D:96:ED:C4:8A:6B:AB:D3:FD:A3:51 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FABC4172995EC60C4A57CC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00de3752-dfd5-3ece-8f4c-4874d51d2e75.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 33668 IP address blocks: 2001:559:815e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ab:c4:17:29:95:ec:60:c4:a5:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=e425b387-6f4d-4d2c-b08e-7e34ded2c0f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d2:b3:d6:94:41:66:77:c8:7d:b0:03:18:e2: 2d:21:86:f0:e8:f7:9d:78:b6:85:30:c6:2a:e5:36: 69:63:39:e4:fe:e5:85:0f:c8:90:64:da:d9:d7:63: 72:e8:aa:f3:54:78:16:d9:c4:2f:50:8c:a9:8a:1a: c4:b4:8e:57:f4:33:f5:80:42:1e:5e:54:6c:5b:3f: aa:bc:64:5d:52:56:52:db:ff:8d:9a:ee:12:ef:7b: 1f:7c:a5:b8:be:e1:ab:8d:ce:91:be:27:86:c1:12: 43:5c:1f:9a:77:0a:f5:bf:d9:6e:1d:c8:b6:9d:fc: 42:f5:f4:3a:9b:73:18:d3:b4:5c:97:ef:df:56:9e: ba:2c:03:23:ee:1d:62:8c:e9:97:94:bf:36:82:d6: b1:3e:f7:d4:f1:89:c5:81:62:c1:70:de:e8:81:51: fd:4b:d1:0c:ff:f8:f8:f9:de:7c:3a:4d:74:c9:cd: ce:b8:a3:c7:17:cb:6e:fb:3f:2f:15:87:ae:72:ec: 8b:3b:b4:ee:05:49:32:62:a4:54:fe:3a:7d:80:55: 79:07:51:cd:9b:df:94:dc:2c:54:b8:d4:da:a9:6d: a4:5e:6e:c8:6b:88:98:4c:2c:ac:61:0c:4d:26:8e: 0a:06:1a:94:1e:81:09:d6:63:4c:46:b2:52:70:f8: 53:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D5:02:E9:CF:9B:4A:4C:C3:8D:96:ED:C4:8A:6B:AB:D3:FD:A3:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00de3752-dfd5-3ece-8f4c-4874d51d2e75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:815e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:8a:00:dd:39:b9:f1:99:2f:7f:1d:08:5b:70:64:2c:40:cb: 9f:b1:68:dc:9c:c6:53:5a:7f:b8:55:8a:24:85:2f:63:dd:5d: fc:18:f0:4b:0a:ec:d2:95:24:cf:f8:17:93:84:af:f8:af:9e: 7d:0b:40:e5:c5:67:30:5f:2d:21:77:c4:5c:12:a8:f6:87:d7: 56:09:63:47:92:ff:df:ae:c7:3e:ce:65:bf:48:97:c1:50:92: f1:37:36:55:b6:03:9e:d6:ea:22:9c:87:6c:d3:b7:e7:ae:91: 51:55:ff:f2:c6:e8:92:6b:91:12:78:94:40:46:4a:50:a5:8a: 7c:e4:47:60:3d:b3:5c:b5:6e:e9:99:bd:a8:f2:7e:0e:03:74: c8:82:d8:89:5c:f3:5b:3c:b0:13:b2:2f:03:50:bf:ed:98:14: 61:53:5f:c6:a5:ca:af:b3:31:16:2d:42:b2:54:85:ed:77:f7: 8c:09:a4:7f:28:40:e4:51:d1:d7:83:4f:16:d0:8f:2c:12:44: f1:98:c4:65:6f:be:1a:58:d1:b6:a0:2f:35:19:dd:eb:c8:21: eb:ff:24:44:a0:d6:e3:85:65:45:06:bf:85:52:80:ca:20:3d: b4:b7:5f:0b:95:4a:92:54:3c:06:b3:75:e6:87:c8:13:01:f9: b7:69:a4:20 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfq8QXKZXsYMSlfMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk ZTQyNWIzODctNmY0ZC00ZDJjLWIwOGUtN2UzNGRlZDJjMGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNKz1pRBZnfIfbADGOItIYbw6PedeLaFMMYq 5TZpYznk/uWFD8iQZNrZ12Ny6KrzVHgW2cQvUIypihrEtI5X9DP1gEIeXlRsWz+q vGRdUlZS2/+Nmu4S73sffKW4vuGrjc6RvieGwRJDXB+adwr1v9luHci2nfxC9fQ6 m3MY07Rcl+/fVp66LAMj7h1ijOmXlL82gtaxPvfU8YnFgWLBcN7ogVH9S9EM//j4 +d58Ok10yc3OuKPHF8tu+z8vFYeucuyLO7TuBUkyYqRU/jp9gFV5B1HNm9+U3CxU uNTaqW2kXm7Ia4iYTCysYQxNJo4KBhqUHoEJ1mNMRrJScPhT6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCvVAunPm0pMw42W7cSKa6vT/aNRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDBkZTM3NTItZGZkNS0z ZWNlLThmNGMtNDg3NGQ1MWQyZTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYFe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALGKAN05ufGZL38dCFtwZCxAy5+xaNycxlNaf7hViiSFL2PdXfwY 8EsK7NKVJM/4F5OEr/ivnn0LQOXFZzBfLSF3xFwSqPaH11YJY0eS/9+uxz7OZb9I l8FQkvE3NlW2A57W6iKch2zTt+eukVFV//LG6JJrkRJ4lEBGSlClinzkR2A9s1y1 bumZvajyfg4DdMiC2Ilc81s8sBOyLwNQv+2YFGFTX8alyq+zMRYtQrJUhe1394wJ pH8oQORR0deDTxbQjywSRPGYxGVvvhpY0bagLzUZ3evIIev/JESg1uOFZUUGv4VS gMogPbS3XwuVSpJUPAazdeaHyBMB+bdppCA= -----END CERTIFICATE-----Generated at Sun May 5 02:33:59 2024 by rpki-client on console-fra.rpki-client.org