$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0db1e1d3-9a2d-3b9e-9146-242888386a4c.roa File: 0db1e1d3-9a2d-3b9e-9146-242888386a4c.roa (raw, json) Hash identifier: lrZ21DkEGLqHpW1ZfowMnq4Z5bmOkjW4i/ziTG4iPWI= Subject key identifier: CF:97:D3:0C:81:97:0E:7C:C6:DD:94:C9:9B:0E:5F:22:87:7A:DE:1F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAC491887D5A3EDF080C5C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0db1e1d3-9a2d-3b9e-9146-242888386a4c.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 33657 IP address blocks: 2001:559:828b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ac:49:18:87:d5:a3:ed:f0:80:c5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=b5a1cb2f-7af7-4493-a28c-3b53bb98cf16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a9:4d:9a:c8:50:fb:ef:44:30:d1:45:53:3c: a8:36:df:6e:36:73:69:3b:f1:86:16:f9:d0:96:f5: c1:c9:8c:7c:e6:d6:6c:b6:ff:b3:e4:ef:5f:8d:f4: 7e:47:fa:c1:f6:88:07:1c:c5:fc:fe:27:c3:a1:d5: f6:2d:26:85:0d:d8:42:d6:cd:0c:43:c8:33:58:9d: 0e:64:14:6a:5e:5e:6a:70:43:0d:be:f9:62:3b:3d: b4:86:6b:a2:8b:4f:89:3e:e9:93:d1:8b:5d:51:b2: 75:b5:50:0c:8d:e5:55:e9:f6:c6:e5:e7:b7:e2:5c: d8:96:a0:3b:12:b4:ef:a8:5e:2c:ca:f0:b2:bd:3d: 6c:dc:0f:0a:61:77:27:f3:29:c6:ac:37:3f:b8:38: 03:34:10:c3:78:12:77:90:43:59:46:8c:16:76:98: 18:88:77:a7:43:b2:fb:4d:70:d6:4f:e2:10:8a:4a: e1:94:71:64:d3:07:f8:5b:8d:5e:88:36:b1:41:4a: e5:60:87:33:a2:7e:55:ef:a5:c2:44:a2:6f:d6:1b: 6c:92:4f:41:7d:3b:6b:91:08:ab:40:aa:3b:77:3c: c9:62:19:56:06:2d:49:07:68:6a:15:6c:c9:36:84: 08:77:ec:26:83:7a:f1:a8:7b:17:6d:41:4f:48:a8: 2b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:97:D3:0C:81:97:0E:7C:C6:DD:94:C9:9B:0E:5F:22:87:7A:DE:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0db1e1d3-9a2d-3b9e-9146-242888386a4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:828b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:65:80:5e:47:ce:ce:dd:21:9e:cf:dd:65:c4:1f:73:0f:0b: 4e:fa:71:74:00:0c:93:6f:33:bc:28:06:b1:89:d4:3c:d0:ce: 51:2f:2c:84:01:24:13:34:00:f2:dd:b9:6e:34:6a:ec:3b:b7: d7:23:88:af:4f:2e:da:25:e6:ff:e5:21:5b:78:b9:1a:02:5b: 94:8a:da:84:33:15:30:ea:5c:eb:05:de:ce:d1:20:de:ca:29: 70:38:f9:d8:9b:0f:98:34:4b:b9:1c:cd:20:43:78:1c:d5:9d: 43:20:0c:22:49:58:d0:86:0d:4a:af:d4:94:bf:f2:24:b9:0c: b6:22:d6:7a:1a:08:b6:71:70:70:09:df:47:28:94:c2:50:f0: ca:92:9e:59:4f:05:6a:51:00:05:cf:36:8d:76:5b:33:87:56: 3f:0a:9c:7c:84:07:5d:46:67:4a:db:c7:3c:0f:d9:2b:f5:83: 5b:7e:f2:e5:64:ff:20:89:7c:7c:88:9b:a7:aa:cf:5a:4e:bf: 8e:67:e9:67:e6:f4:59:e6:8d:8f:ca:eb:70:0d:b0:18:77:d8: fd:6d:1b:80:1f:61:0c:f3:2f:5d:57:f1:ee:1d:63:79:04:e1: 99:39:5c:1c:e2:a9:30:38:fd:29:14:c8:d4:72:ac:94:1a:53: ba:47:54:da -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfrEkYh9Wj7fCAxcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk YjVhMWNiMmYtN2FmNy00NDkzLWEyOGMtM2I1M2JiOThjZjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6lNmshQ++9EMNFFUzyoNt9uNnNpO/GGFvnQ lvXByYx85tZstv+z5O9fjfR+R/rB9ogHHMX8/ifDodX2LSaFDdhC1s0MQ8gzWJ0O ZBRqXl5qcEMNvvliOz20hmuii0+JPumT0YtdUbJ1tVAMjeVV6fbG5ee34lzYlqA7 ErTvqF4syvCyvT1s3A8KYXcn8ynGrDc/uDgDNBDDeBJ3kENZRowWdpgYiHenQ7L7 TXDWT+IQikrhlHFk0wf4W41eiDaxQUrlYIczon5V76XCRKJv1htskk9BfTtrkQir QKo7dzzJYhlWBi1JB2hqFWzJNoQId+wmg3rxqHsXbUFPSKgrcQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM+X0wyBlw58xt2UyZsOXyKHet4fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGRiMWUxZDMtOWEyZC0z YjllLTkxNDYtMjQyODg4Mzg2YTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYKL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB1lgF5Hzs7dIZ7P3WXEH3MPC076cXQADJNvM7woBrGJ1DzQzlEv LIQBJBM0APLduW40auw7t9cjiK9PLtol5v/lIVt4uRoCW5SK2oQzFTDqXOsF3s7R IN7KKXA4+dibD5g0S7kczSBDeBzVnUMgDCJJWNCGDUqv1JS/8iS5DLYi1noaCLZx cHAJ30colMJQ8MqSnllPBWpRAAXPNo12WzOHVj8KnHyEB11GZ0rbxzwP2Sv1g1t+ 8uVk/yCJfHyIm6eqz1pOv45n6Wfm9FnmjY/K63ANsBh32P1tG4AfYQzzL11X8e4d Y3kE4Zk5XBziqTA4/SkUyNRyrJQaU7pHVNo= -----END CERTIFICATE-----Generated at Sun May 5 02:13:50 2024 by rpki-client on console-ams.rpki-client.org