$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0dd80873-044a-3c14-8dd0-559d9d2035d5.roa File: 0dd80873-044a-3c14-8dd0-559d9d2035d5.roa (raw, json) Hash identifier: r6hQQF+tAdJwXJle3RbfEej/0Bnp+eYUsAXwPDjQY4A= Subject key identifier: 0A:64:75:EB:9F:98:63:9D:A4:91:DB:C1:67:A4:5A:09:C0:14:3E:B7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285847BEF73ADEE8310E3C0B28F480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0dd80873-044a-3c14-8dd0-559d9d2035d5.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 7725 IP address blocks: 2001:559:8457::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Dec 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:f7:3a:de:e8:31:0e:3c:0b:28:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=c71fdfbf-d969-43ff-92cf-43e9050cd901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:52:21:03:10:8e:40:54:42:88:f6:d4:93:2e: 7b:12:05:4b:c9:06:bc:e8:91:4c:8c:a1:78:ca:40: 4e:bb:10:9e:85:25:f7:bd:80:0b:db:8c:ae:ba:fd: 65:9c:ad:c5:43:e6:57:00:27:a5:c3:db:30:4a:01: 3e:49:08:52:c4:48:74:dd:dd:03:b7:ac:b2:65:b0: 6e:2a:b8:60:6f:64:64:02:3d:68:15:de:e4:84:cb: 25:9d:a3:06:d4:15:73:16:ee:35:39:00:fc:b2:d4: 24:3b:78:7a:8f:8b:7e:c9:53:c8:3d:8f:ac:b4:65: ec:4a:77:b4:a6:3c:d3:ec:65:5d:99:24:59:58:3a: e0:01:a2:ff:ac:57:0c:d0:60:a5:a9:79:3b:55:75: 89:a5:cc:2b:20:44:0c:e1:ec:70:00:d8:79:7f:2c: ae:00:ad:24:a8:c5:9c:5e:f4:97:b7:9d:c1:79:f3: 34:1a:dc:be:46:ec:cb:82:ae:11:92:74:f3:13:3e: 95:92:0b:11:55:a9:2a:57:d9:4e:8b:e2:b8:34:18: 20:10:12:8c:28:a1:08:06:cb:fa:41:ef:66:19:8e: 12:9e:30:d4:ca:3a:65:e7:44:a6:3f:00:f8:8d:c0: 89:7a:76:2a:43:dd:de:33:df:5a:3e:7b:5e:fa:da: ff:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:64:75:EB:9F:98:63:9D:A4:91:DB:C1:67:A4:5A:09:C0:14:3E:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0dd80873-044a-3c14-8dd0-559d9d2035d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8457::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:e5:45:e5:3e:ca:f4:a5:2e:99:aa:00:e1:d5:39:30:4d:b0: 12:59:90:25:43:83:5d:ba:7d:d2:92:0c:4a:9b:e3:3c:ea:bd: 91:a4:c0:be:f1:c2:ea:fd:06:e0:df:60:0e:9b:06:af:ef:d3: 7d:4e:ed:59:17:62:48:bd:ee:b4:a1:77:12:83:77:ef:ac:18: 01:54:ae:d7:70:f4:79:67:2e:dc:77:58:8c:20:b7:93:f2:6c: e9:64:5b:b8:62:2a:d7:15:a5:65:d5:ea:ba:11:43:3a:5d:04: d9:88:40:4b:88:06:55:32:9e:60:b8:35:ca:27:3d:a0:d2:b9: fe:44:e7:17:64:c3:2d:7b:39:1a:26:e1:0e:e0:31:02:f8:d9: 11:7f:fb:6c:80:36:4d:13:d7:a5:7d:96:7e:3c:4d:5f:a3:02: 19:e4:f1:de:f3:e9:6c:4d:d0:53:15:85:22:4b:d6:39:8b:a3: 28:5e:65:31:91:21:32:30:bc:33:23:8a:fb:d6:ea:54:25:ac: 89:86:bd:9e:31:d6:aa:a5:c9:eb:f2:f6:6e:19:7a:bb:5a:17: f9:0b:bf:00:fe:fe:e9:04:80:12:bf:03:e4:db:c8:9b:e8:6d: 20:cd:4a:cf:96:94:2e:d8:69:77:e2:e5:30:13:4d:38:0d:76: da:2d:99:19 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe+9zre6DEOPAso9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk YzcxZmRmYmYtZDk2OS00M2ZmLTkyY2YtNDNlOTA1MGNkOTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFIhAxCOQFRCiPbUky57EgVLyQa86JFMjKF4 ykBOuxCehSX3vYAL24yuuv1lnK3FQ+ZXACelw9swSgE+SQhSxEh03d0Dt6yyZbBu Krhgb2RkAj1oFd7khMslnaMG1BVzFu41OQD8stQkO3h6j4t+yVPIPY+stGXsSne0 pjzT7GVdmSRZWDrgAaL/rFcM0GClqXk7VXWJpcwrIEQM4exwANh5fyyuAK0kqMWc XvSXt53BefM0Gty+RuzLgq4RknTzEz6VkgsRVakqV9lOi+K4NBggEBKMKKEIBsv6 Qe9mGY4SnjDUyjpl50SmPwD4jcCJenYqQ93eM99aPnte+tr/sQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFApkdeufmGOdpJHbwWekWgnAFD63MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGRkODA4NzMtMDQ0YS0z YzE0LThkZDAtNTU5ZDlkMjAzNWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYRX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAvlReU+yvSlLpmqAOHVOTBNsBJZkCVDg126fdKSDEqb4zzqvZGk wL7xwur9BuDfYA6bBq/v031O7VkXYki97rShdxKDd++sGAFUrtdw9HlnLtx3WIwg t5PybOlkW7hiKtcVpWXV6roRQzpdBNmIQEuIBlUynmC4NconPaDSuf5E5xdkwy17 ORom4Q7gMQL42RF/+2yANk0T16V9ln48TV+jAhnk8d7z6WxN0FMVhSJL1jmLoyhe ZTGRITIwvDMjivvW6lQlrImGvZ4x1qqlyevy9m4ZertaF/kLvwD+/ukEgBK/A+Tb yJvobSDNSs+WlC7YaXfi5TATTTgNdtotmRk= -----END CERTIFICATE-----Generated at Sun Dec 22 03:52:16 2024 by rpki-client on console-ams.rpki-client.org