$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02d44f75-79aa-3239-9f37-1a40bb2161d4.roa File: 02d44f75-79aa-3239-9f37-1a40bb2161d4.roa (raw, json) Hash identifier: qm9/SUICNBHGgtkVg13b25xAYNvEawN/gpd7G24dsWU= Subject key identifier: F3:AB:EE:C1:66:E7:40:86:5E:04:D7:14:03:23:60:7E:5A:CE:60:77 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285847BEFC25AE210E4D8904FC3DC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02d44f75-79aa-3239-9f37-1a40bb2161d4.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 33659 IP address blocks: 2001:559:28f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:fc:25:ae:21:0e:4d:89:04:fc:3d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=8c65238d-7d2e-413d-af9b-dbf8dbcba95a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a9:88:e6:e3:20:f0:60:7c:e9:3f:46:9e:71: 40:fe:8b:9a:a8:9c:dc:79:07:01:8c:cf:3e:e9:32: 42:39:7f:12:bb:5f:76:76:4b:90:ac:ae:06:84:2d: 98:fd:c8:91:6a:52:f8:42:bc:1b:61:90:f1:ad:8f: 70:86:ac:8d:9d:23:16:b6:8c:97:ca:76:61:f7:f8: d3:9f:3e:b0:c8:cf:b9:bb:3b:80:06:90:b8:df:f4: 81:87:76:b7:dd:3c:b1:29:06:a7:4a:32:df:fa:d7: e2:82:ae:83:19:76:99:42:89:28:a7:ae:56:da:98: e2:0c:56:71:31:58:ba:22:a2:fc:d7:d2:e7:50:fb: 81:f8:dd:06:ce:bd:3c:b9:ac:c5:67:6c:57:a6:36: ad:dc:bf:01:d8:f1:72:ae:1b:c4:36:73:20:32:36: 12:12:41:a9:ea:fd:5f:44:4d:c8:cd:ac:12:bf:51: 22:6b:bd:5a:fb:3c:a4:ff:17:9f:6a:33:80:c3:b2: 70:11:9b:d7:49:17:10:a1:37:fc:08:2f:8b:5d:62: 61:46:a9:33:86:55:26:e0:56:75:79:10:5a:78:fa: 3a:00:23:e8:56:45:6d:30:f9:ec:b8:0a:76:b7:13: 00:82:f0:fb:6e:d7:b8:c6:fc:b3:10:3d:01:d3:9f: 57:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:AB:EE:C1:66:E7:40:86:5E:04:D7:14:03:23:60:7E:5A:CE:60:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02d44f75-79aa-3239-9f37-1a40bb2161d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:28f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:e1:40:7e:25:87:8c:b9:1b:9c:a1:0c:ee:4e:09:b7:0d:12: 5a:6a:96:c1:5b:c3:41:91:e2:2f:bd:14:c4:52:24:9a:bf:d3: d6:6a:57:7d:ca:9d:76:46:b8:e5:b5:44:d2:47:cf:1d:9d:53: 74:d8:8f:04:37:75:cc:71:1d:df:d2:e6:89:0a:5e:7e:1c:c3: 3d:5b:90:d8:ee:10:21:91:fd:67:e8:99:3b:7f:18:90:72:f5: 2b:1c:9e:30:88:ce:bb:a2:9d:49:bf:4b:08:fc:fe:83:ab:95: bb:f5:a3:62:bc:67:1f:7b:7e:a1:36:82:b3:3f:01:5f:97:4c: 30:f9:8c:01:ca:d1:63:b8:1b:47:48:54:46:e9:48:93:a5:aa: 1c:86:bb:a3:33:83:a3:79:2f:cf:b1:e3:18:5e:10:1a:fa:63: 45:f6:9c:2e:9a:5e:97:e1:10:4e:53:a3:09:a1:17:be:c2:6f: 42:0e:19:70:a7:bb:2e:0a:85:33:30:6c:60:b6:df:29:bd:74: 4c:2e:8c:c2:1a:2e:28:9e:e2:fc:78:d4:9c:50:97:d7:e0:25: 0f:e2:43:7d:e0:86:f4:d0:87:ed:5c:ca:30:07:5d:13:c2:0b: 75:2c:b2:f7:17:c5:d3:4e:0f:42:0c:c0:55:1e:c3:39:cb:26: ee:5f:01:16 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe+/CWuIQ5NiQT8PcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk OGM2NTIzOGQtN2QyZS00MTNkLWFmOWItZGJmOGRiY2JhOTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqmI5uMg8GB86T9GnnFA/ouaqJzceQcBjM8+ 6TJCOX8Su192dkuQrK4GhC2Y/ciRalL4QrwbYZDxrY9whqyNnSMWtoyXynZh9/jT nz6wyM+5uzuABpC43/SBh3a33TyxKQanSjLf+tfigq6DGXaZQokop65W2pjiDFZx MVi6IqL819LnUPuB+N0Gzr08uazFZ2xXpjat3L8B2PFyrhvENnMgMjYSEkGp6v1f RE3IzawSv1Eia71a+zyk/xefajOAw7JwEZvXSRcQoTf8CC+LXWJhRqkzhlUm4FZ1 eRBaePo6ACPoVkVtMPnsuAp2txMAgvD7bte4xvyzED0B059XOwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPOr7sFm50CGXgTXFAMjYH5azmB3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDJkNDRmNzUtNzlhYS0z MjM5LTlmMzctMWE0MGJiMjE2MWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQKP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAArhQH4lh4y5G5yhDO5OCbcNElpqlsFbw0GR4i+9FMRSJJq/09Zq V33KnXZGuOW1RNJHzx2dU3TYjwQ3dcxxHd/S5okKXn4cwz1bkNjuECGR/WfomTt/ GJBy9SscnjCIzruinUm/Swj8/oOrlbv1o2K8Zx97fqE2grM/AV+XTDD5jAHK0WO4 G0dIVEbpSJOlqhyGu6Mzg6N5L8+x4xheEBr6Y0X2nC6aXpfhEE5TowmhF77Cb0IO GXCnuy4KhTMwbGC23ym9dEwujMIaLiie4vx41JxQl9fgJQ/iQ33ghvTQh+1cyjAH XRPCC3UssvcXxdNOD0IMwFUewznLJu5fARY= -----END CERTIFICATE-----Generated at Fri Nov 22 11:18:11 2024 by rpki-client on console-fra.rpki-client.org