$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03a1145b-fa84-32be-935d-051eeb0dc5a8.roa File: 03a1145b-fa84-32be-935d-051eeb0dc5a8.roa (raw, json) Hash identifier: SVfSbLJcq9JlrVYlk2hfiD03jFhZW59I3i5HEaKxkuY= Subject key identifier: 10:EA:53:D0:56:BC:83:67:C9:1A:27:58:A6:1D:31:5A:4A:FE:6F:A5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285847BEF91C7FFA714D67DBB9C0C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03a1145b-fa84-32be-935d-051eeb0dc5a8.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 7725 IP address blocks: 2001:559:c104::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Dec 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:f9:1c:7f:fa:71:4d:67:db:b9:c0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=a1f6f1af-e44b-4a6e-be3e-2d6d43df4f0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fa:0f:69:2a:71:e9:fd:db:ab:bc:f9:19:38: 48:ce:3f:96:99:f1:e0:fa:e3:ab:3d:30:2e:4e:7a: 7f:9b:4f:1a:e5:a8:18:e2:ca:ee:c6:66:d5:9c:55: 15:16:26:d9:41:05:40:01:82:d3:27:93:78:0a:5d: 1c:f7:4e:47:12:13:53:41:7b:b0:70:58:b7:fe:1d: f1:32:91:50:12:97:2c:dd:c8:4c:6e:29:21:be:67: 89:8f:9d:72:8a:d5:c0:f7:32:28:10:6a:6e:bc:1f: 3c:65:cf:82:13:a0:b1:d1:21:7a:9d:43:05:41:76: 0f:5b:51:05:19:73:bf:b6:cd:a5:03:77:5c:52:11: 8f:10:cd:b9:c1:67:49:94:a2:77:4d:64:1b:cf:8d: 52:4e:28:d9:16:73:17:5f:77:38:a1:40:d3:bf:02: 78:9e:28:e9:47:f2:fa:19:bd:60:1e:c8:92:92:1d: 1f:7e:98:d0:03:91:19:f0:2d:5a:f6:3e:69:59:4a: 64:05:8c:55:5a:47:54:fa:d7:4c:b4:c2:23:07:04: cc:e2:47:2e:63:74:18:40:30:5c:8a:ce:61:a2:fd: f4:d6:ef:c1:23:af:f5:31:ad:53:44:13:d7:df:f1: 90:0a:14:66:c9:00:08:7e:bd:1d:98:65:87:e7:60: 68:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:EA:53:D0:56:BC:83:67:C9:1A:27:58:A6:1D:31:5A:4A:FE:6F:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03a1145b-fa84-32be-935d-051eeb0dc5a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c104::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:16:37:1a:05:bf:46:d0:0f:68:4e:bc:1b:ef:dc:f3:aa:72: a9:66:c9:fe:bd:b7:58:1a:30:e9:0c:e3:99:fe:ad:58:62:db: 2a:27:97:22:80:7f:12:a9:53:03:5d:08:3f:b2:eb:4b:99:a7: 53:28:0a:23:41:59:48:ab:d4:78:09:eb:02:2a:e9:67:f5:cb: 0f:a5:cf:c6:1d:67:95:4a:c0:27:40:45:58:fd:1a:c7:cc:a4: b8:0b:24:84:8d:ed:7f:63:16:62:6e:8b:14:fc:be:82:08:eb: d5:4c:36:e1:da:3f:41:7a:93:75:fb:a0:1b:61:0d:26:26:61: 3e:e6:ff:cf:44:72:f9:b2:51:00:50:25:70:35:91:a0:d8:53: e2:7c:8b:84:d7:c3:0c:7b:0a:a8:b8:d1:ac:a8:ac:02:aa:18: 55:d9:c4:53:7f:55:04:45:5c:28:e0:1d:08:37:32:d1:a2:f5: fd:fd:36:6e:51:2f:f2:38:80:fa:db:72:75:99:fc:3c:1e:04: 76:4a:6a:ff:a6:2c:76:9e:58:63:16:17:af:a4:b4:86:0e:fc: dd:a5:fa:cb:61:df:ba:96:81:94:a5:01:ab:08:57:2a:42:d1: c5:60:2c:84:fc:28:fa:c9:69:2a:54:db:5a:9b:8e:cc:78:fe: d2:a9:f5:79 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe++Rx/+nFNZ9u5wMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk YTFmNmYxYWYtZTQ0Yi00YTZlLWJlM2UtMmQ2ZDQzZGY0ZjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/oPaSpx6f3bq7z5GThIzj+WmfHg+uOrPTAu Tnp/m08a5agY4sruxmbVnFUVFibZQQVAAYLTJ5N4Cl0c905HEhNTQXuwcFi3/h3x MpFQEpcs3chMbikhvmeJj51yitXA9zIoEGpuvB88Zc+CE6Cx0SF6nUMFQXYPW1EF GXO/ts2lA3dcUhGPEM25wWdJlKJ3TWQbz41STijZFnMXX3c4oUDTvwJ4nijpR/L6 Gb1gHsiSkh0ffpjQA5EZ8C1a9j5pWUpkBYxVWkdU+tdMtMIjBwTM4kcuY3QYQDBc is5hov301u/BI6/1Ma1TRBPX3/GQChRmyQAIfr0dmGWH52BoKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBDqU9BWvINnyRonWKYdMVpK/m+lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDNhMTE0NWItZmE4NC0z MmJlLTkzNWQtMDUxZWViMGRjNWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcEE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKcWNxoFv0bQD2hOvBvv3POqcqlmyf69t1gaMOkM45n+rVhi2yon lyKAfxKpUwNdCD+y60uZp1MoCiNBWUir1HgJ6wIq6Wf1yw+lz8YdZ5VKwCdARVj9 GsfMpLgLJISN7X9jFmJuixT8voII69VMNuHaP0F6k3X7oBthDSYmYT7m/89Ecvmy UQBQJXA1kaDYU+J8i4TXwwx7Cqi40ayorAKqGFXZxFN/VQRFXCjgHQg3MtGi9f39 Nm5RL/I4gPrbcnWZ/DweBHZKav+mLHaeWGMWF6+ktIYO/N2l+sth37qWgZSlAasI VypC0cVgLIT8KPrJaSpU21qbjsx4/tKp9Xk= -----END CERTIFICATE-----Generated at Sun Dec 22 03:51:03 2024 by rpki-client on console-ams.rpki-client.org