$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06dd6233-4c69-393a-9343-163f65b69677.roa File: 06dd6233-4c69-393a-9343-163f65b69677.roa (raw, json) Hash identifier: G9Qr1ebJi2KJyosKh20JswzAMZW4AIFN1JzIEGgdjSI= Subject key identifier: E2:E5:D9:C8:8E:13:22:01:24:E8:D2:CC:66:87:76:2D:7C:BA:4F:74 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAB93C69E37B400C2225C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06dd6233-4c69-393a-9343-163f65b69677.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 33651 IP address blocks: 2001:559:3b5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ab:93:c6:9e:37:b4:00:c2:22:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=c6e0cd4f-2c47-4b87-ba6c-9eb945a528ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:32:20:fd:a3:57:42:8e:27:76:95:b3:fb:ed: e6:3c:0e:88:fe:be:3e:bc:53:8f:02:28:aa:57:7b: e1:ed:c1:a0:64:3e:77:45:e6:45:c4:95:be:10:30: 2d:f6:97:5d:3d:fa:8e:b1:df:d0:b7:69:c8:04:11: b8:18:2b:b1:31:ff:31:94:0c:cf:d0:e8:40:95:22: 6b:19:84:29:e7:65:57:7a:83:8e:a4:88:64:a8:05: be:e1:bd:6e:9d:cb:7f:72:61:0f:bb:fd:d4:9f:c1: 98:d4:77:c2:28:9c:37:e8:74:5e:50:00:03:c8:d3: 28:b8:d7:44:d1:31:39:5b:b6:70:61:c9:7c:21:ab: 43:24:1b:47:fb:b7:2c:24:3a:e3:e6:be:8b:10:01: c7:fd:cc:e5:30:b1:24:10:23:b0:92:ac:fe:75:07: cd:04:1c:13:b6:ab:02:eb:bc:2f:e0:8c:8b:0a:3d: 80:cc:48:9f:11:c9:c4:2f:40:f0:dd:bb:8a:10:8b: fc:ef:91:7e:28:8c:78:ec:d6:e0:f4:f3:28:33:08: 3b:df:cf:d2:8a:c0:6f:f6:cb:eb:d7:0e:05:03:44: 94:83:9b:ba:17:a1:6b:ae:4a:87:73:c7:96:45:3d: d2:70:3c:16:da:00:7b:62:01:4e:3c:73:ed:da:bc: ad:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E5:D9:C8:8E:13:22:01:24:E8:D2:CC:66:87:76:2D:7C:BA:4F:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06dd6233-4c69-393a-9343-163f65b69677.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:3b5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:fc:c1:c3:68:f1:13:b5:89:92:16:be:45:3e:0c:74:db:79: 5d:5b:52:f6:d6:85:a0:68:71:97:f0:91:39:52:1a:46:80:7a: a2:31:97:b2:9f:b4:4d:03:6a:7b:0d:64:af:2c:4a:cd:38:29: 84:87:6e:9d:57:0a:98:0a:a5:61:57:19:a3:8d:f5:94:06:bb: 3a:6a:1d:13:b4:d4:43:ff:1c:d0:7f:1e:43:ad:c7:69:ba:05: 02:a7:32:4f:97:8c:65:1a:dc:ea:1b:92:9a:c8:59:83:29:58: c1:9d:92:b6:69:3d:06:9c:66:e9:bd:71:cd:98:ef:fc:00:26: b1:26:d3:f6:68:c1:1c:d5:b2:ad:ae:75:31:45:58:05:31:cf: ba:7a:63:a3:72:aa:b4:0b:9d:21:8c:66:54:36:55:fe:b2:04: 3b:30:4a:c1:68:55:e5:c7:2a:96:9b:eb:16:ea:b3:bc:7e:b7: d3:a6:2b:fa:b6:dc:f7:9c:5e:c9:5e:ab:7e:6d:43:c8:13:35: 32:f4:e8:f0:0b:98:9e:8a:32:d3:b1:f2:5e:9c:dd:cb:b3:6b: f1:7e:2b:a8:2d:56:79:e0:f2:37:41:85:97:11:a0:fb:2a:4c: 91:5b:cf:db:05:32:ac:cb:e8:c0:67:09:5e:b2:7c:db:59:9b: 0f:86:cd:79 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfq5PGnje0AMIiXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk YzZlMGNkNGYtMmM0Ny00Yjg3LWJhNmMtOWViOTQ1YTUyOGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDIg/aNXQo4ndpWz++3mPA6I/r4+vFOPAiiq V3vh7cGgZD53ReZFxJW+EDAt9pddPfqOsd/Qt2nIBBG4GCuxMf8xlAzP0OhAlSJr GYQp52VXeoOOpIhkqAW+4b1unct/cmEPu/3Un8GY1HfCKJw36HReUAADyNMouNdE 0TE5W7ZwYcl8IatDJBtH+7csJDrj5r6LEAHH/czlMLEkECOwkqz+dQfNBBwTtqsC 67wv4IyLCj2AzEifEcnEL0Dw3buKEIv875F+KIx47Nbg9PMoMwg738/SisBv9svr 1w4FA0SUg5u6F6FrrkqHc8eWRT3ScDwW2gB7YgFOPHPt2rytEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOLl2ciOEyIBJOjSzGaHdi18uk90MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDZkZDYyMzMtNGM2OS0z OTNhLTkzNDMtMTYzZjY1YjY5Njc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQO1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIr8wcNo8RO1iZIWvkU+DHTbeV1bUvbWhaBocZfwkTlSGkaAeqIx l7KftE0DansNZK8sSs04KYSHbp1XCpgKpWFXGaON9ZQGuzpqHRO01EP/HNB/HkOt x2m6BQKnMk+XjGUa3OobkprIWYMpWMGdkrZpPQacZum9cc2Y7/wAJrEm0/ZowRzV sq2udTFFWAUxz7p6Y6NyqrQLnSGMZlQ2Vf6yBDswSsFoVeXHKpab6xbqs7x+t9Om K/q23PecXsleq35tQ8gTNTL06PALmJ6KMtOx8l6c3cuza/F+K6gtVnng8jdBhZcR oPsqTJFbz9sFMqzL6MBnCV6yfNtZmw+GzXk= -----END CERTIFICATE-----Generated at Sat May 4 14:46:55 2024 by rpki-client on console-ams.rpki-client.org