$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00e9c3f0-f1bf-3ae3-8e1b-b6145f06439c.roa File: 00e9c3f0-f1bf-3ae3-8e1b-b6145f06439c.roa (raw, json) Hash identifier: 1c13E06q7o37DgmorHgqNuvsItbV5vtFIK8V5Czxc08= Subject key identifier: 8E:DB:40:34:AB:DE:E1:3F:B2:4E:7E:95:29:7D:21:19:71:48:10:CE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAFF97503F711B13D5D7200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00e9c3f0-f1bf-3ae3-8e1b-b6145f06439c.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 33287 IP address blocks: 2001:559:c2e7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:af:f9:75:03:f7:11:b1:3d:5d:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=4d3e8b27-9fec-4a78-8fff-dcdffb32b3b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:18:4e:c5:fa:a7:24:16:cc:6f:a1:f2:56:9b: a1:e5:3b:14:73:74:30:7c:e8:4b:88:cb:ca:28:03: f6:73:7e:15:a0:be:85:74:82:19:82:5a:fa:ed:69: bd:bc:61:67:38:b7:1b:2c:40:8d:32:37:79:0b:59: 1f:8e:9e:f3:54:3a:1a:8d:cb:dd:5f:b0:71:91:43: 08:d9:3f:01:1a:3e:4c:73:ed:35:fe:80:11:2f:91: 13:b4:14:8c:ae:64:04:0f:3b:92:fd:05:da:27:f8: ef:b8:60:31:fe:37:b6:0c:7f:d2:f9:d3:6d:02:d5: fd:6a:7a:fd:d9:92:62:a4:4c:06:ca:62:f5:d1:49: 3c:38:d5:ea:1b:6c:37:f7:63:02:52:52:f3:cf:50: 4d:87:50:55:eb:e5:f1:0c:57:31:a7:24:1a:ab:6d: b9:65:ce:7f:4a:95:a5:df:25:b5:97:d0:63:b1:06: 81:05:e0:9a:a6:9f:13:6c:2e:3e:29:93:14:da:9d: c5:6e:7e:fd:f5:64:08:c4:9b:3f:e9:ea:c7:79:c7: 09:f3:a2:2a:95:44:91:1d:cc:f3:a0:9e:42:56:85: 0c:1d:59:35:42:1b:9b:cc:38:6c:63:5d:9b:99:1f: e5:d0:15:67:f1:d8:b5:07:f0:b8:16:b1:bb:94:d6: 09:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:DB:40:34:AB:DE:E1:3F:B2:4E:7E:95:29:7D:21:19:71:48:10:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00e9c3f0-f1bf-3ae3-8e1b-b6145f06439c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c2e7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:58:3d:e8:bb:85:78:98:45:13:d0:ac:cd:1a:00:3c:84:29: 0d:f0:b0:4d:60:b2:83:4e:14:2c:77:38:2e:a3:ac:fa:5f:d4: 2d:57:7a:cc:49:9d:de:2f:93:50:be:b5:c7:0a:d0:1f:1d:87: 28:4c:8d:f9:9f:4c:46:6d:f5:b3:87:6f:2c:05:e0:69:24:e1: c0:cf:89:36:12:37:c9:c6:a6:40:52:3f:0c:87:21:1a:78:9c: 27:7c:c2:44:4f:b8:36:97:ad:23:e4:b6:61:36:67:fc:a2:7b: bc:8c:d0:36:8f:9f:69:8f:d7:b1:57:30:f8:e3:5a:4c:aa:2f: f3:28:04:46:6c:c2:44:85:83:44:f7:89:dc:bf:e6:e1:e2:b7: df:95:3d:cf:5f:8a:fe:04:64:9b:34:08:f9:39:46:f6:db:67: 50:87:af:48:dd:40:35:38:94:0d:de:2a:3c:33:85:2e:a6:a4: 8e:d4:07:3e:42:3e:13:83:de:4e:65:44:aa:75:b0:2c:3a:1c: 06:18:67:81:e6:cf:40:61:d9:58:ed:75:e8:2b:56:8c:4e:58: a4:d8:c7:29:39:ce:62:2d:e5:b6:4c:06:1e:39:4f:2f:1a:15: 6b:0a:b3:38:c9:10:f4:85:ab:e7:58:b5:15:ec:c7:23:c6:81: 6c:cd:8c:83 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfr/l1A/cRsT1dcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk NGQzZThiMjctOWZlYy00YTc4LThmZmYtZGNkZmZiMzJiM2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hhOxfqnJBbMb6HyVpuh5TsUc3QwfOhLiMvK KAP2c34VoL6FdIIZglr67Wm9vGFnOLcbLECNMjd5C1kfjp7zVDoajcvdX7BxkUMI 2T8BGj5Mc+01/oARL5ETtBSMrmQEDzuS/QXaJ/jvuGAx/je2DH/S+dNtAtX9anr9 2ZJipEwGymL10Uk8ONXqG2w392MCUlLzz1BNh1BV6+XxDFcxpyQaq225Zc5/SpWl 3yW1l9BjsQaBBeCapp8TbC4+KZMU2p3Fbn799WQIxJs/6erHeccJ86IqlUSRHczz oJ5CVoUMHVk1QhubzDhsY12bmR/l0BVn8di1B/C4FrG7lNYJBQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI7bQDSr3uE/sk5+lSl9IRlxSBDOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDBlOWMzZjAtZjFiZi0z YWUzLThlMWItYjYxNDVmMDY0MzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcLn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF5YPei7hXiYRRPQrM0aADyEKQ3wsE1gsoNOFCx3OC6jrPpf1C1X esxJnd4vk1C+tccK0B8dhyhMjfmfTEZt9bOHbywF4Gkk4cDPiTYSN8nGpkBSPwyH IRp4nCd8wkRPuDaXrSPktmE2Z/yie7yM0DaPn2mP17FXMPjjWkyqL/MoBEZswkSF g0T3idy/5uHit9+VPc9fiv4EZJs0CPk5RvbbZ1CHr0jdQDU4lA3eKjwzhS6mpI7U Bz5CPhOD3k5lRKp1sCw6HAYYZ4Hmz0Bh2VjtdegrVoxOWKTYxyk5zmIt5bZMBh45 Ty8aFWsKszjJEPSFq+dYtRXsxyPGgWzNjIM= -----END CERTIFICATE-----Generated at Sat May 4 14:46:37 2024 by rpki-client on console-ams.rpki-client.org