$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0fa347c9-f83d-3ae9-9374-568d64a50871.roa File: 0fa347c9-f83d-3ae9-9374-568d64a50871.roa (raw, json) Hash identifier: UCw85Q6RYyl9DShcFXXD3yyEJpWzuu+UeKRckgM4FkE= Subject key identifier: 32:3D:6D:58:7E:15:7F:60:2C:D4:AD:87:91:7A:89:56:EB:7A:99:E5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285847BEFB0AF490482C8ECC2DB736 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0fa347c9-f83d-3ae9-9374-568d64a50871.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 7015 IP address blocks: 2001:559:c2bb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:fb:0a:f4:90:48:2c:8e:cc:2d:b7:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=5f3b9c7e-aece-415c-a52b-2c8aba3c79d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:6a:e6:73:9a:a6:10:75:0f:ea:46:0e:41:c7: 98:13:28:af:62:25:90:60:06:1f:70:35:3b:2e:d4: 77:30:5e:bb:cd:65:ec:71:6c:3f:ec:5f:b7:86:bc: 40:62:4b:e4:c4:c6:47:af:84:3e:d8:67:6e:47:19: 44:36:6c:e6:ea:14:35:25:3f:22:8f:ea:d5:ee:9c: 5a:b9:ef:e6:cd:28:f9:36:5d:8b:ad:ba:66:53:81: d8:6e:a4:e7:e7:4b:b9:d8:b9:af:44:dc:40:f4:66: 6b:04:bc:ef:41:d7:d0:08:9b:0a:91:05:e9:9a:b8: 43:c5:92:e1:ec:b6:17:40:d1:c8:fd:9f:bd:6d:5e: 0c:80:21:b4:47:53:1a:55:ff:24:15:0c:65:c6:10: be:ba:71:7c:48:9c:51:73:da:dc:1b:fd:d0:83:6e: 0e:40:df:eb:dc:86:fa:8f:1a:4a:d8:8a:1f:5e:93: d7:49:3e:4e:56:1b:0d:40:90:c6:7c:8c:88:de:b0: b1:f0:ee:86:27:2f:76:71:01:06:8a:7e:ee:7b:43: f1:19:d0:45:96:fd:3e:ec:2c:1f:16:c1:0f:4e:82: 73:6e:d8:92:a5:d3:5f:d2:91:69:40:4c:13:26:39: 1d:7f:3c:33:25:81:7a:78:0f:4e:c7:57:a9:40:34: 17:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:3D:6D:58:7E:15:7F:60:2C:D4:AD:87:91:7A:89:56:EB:7A:99:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0fa347c9-f83d-3ae9-9374-568d64a50871.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c2bb::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:f1:19:d2:96:41:0e:e7:98:34:71:df:2b:2d:d3:4f:1f:65: 02:94:b4:b2:35:62:b0:8c:b8:7a:07:6f:39:c6:39:76:d3:c1: 3b:88:68:42:f2:a3:ef:da:07:c5:e6:a0:c2:a1:78:c4:31:18: af:0b:fa:47:ab:75:f2:5e:5e:27:d7:94:f7:4d:0e:30:e3:92: a7:ee:b6:c1:0c:13:5c:23:af:cb:9a:dc:fb:f9:22:ce:7d:d6: b3:98:d6:86:db:34:f8:13:16:5d:bd:43:c4:56:d7:84:50:3d: 11:aa:44:2d:83:2f:37:93:f4:52:a5:96:ec:ff:f7:7a:6c:1d: 97:83:46:0f:be:8a:e7:e0:0f:80:83:69:80:84:ab:57:77:ea: 20:eb:da:f0:d7:95:08:41:01:d4:14:09:99:0b:85:f0:4b:e3: b5:93:7d:ae:16:bc:9a:79:64:4d:bb:bb:6c:0a:12:5d:88:ca: 4d:fb:bc:83:4e:0b:5c:c1:a4:b9:84:0f:1d:f0:ad:55:74:dc: 26:a5:43:ea:de:2e:30:63:21:83:e7:62:17:f8:19:f6:fe:d1: 51:1e:65:31:a0:2a:6b:7d:b3:d1:ea:4b:5a:c3:6d:9f:25:45: af:44:b7:49:d2:45:82:57:46:96:16:70:65:ca:cc:ac:60:25: 0f:9d:6d:97 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe++wr0kEgsjswttzYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk NWYzYjljN2UtYWVjZS00MTVjLWE1MmItMmM4YWJhM2M3OWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2rmc5qmEHUP6kYOQceYEyivYiWQYAYfcDU7 LtR3MF67zWXscWw/7F+3hrxAYkvkxMZHr4Q+2GduRxlENmzm6hQ1JT8ij+rV7pxa ue/mzSj5Nl2LrbpmU4HYbqTn50u52LmvRNxA9GZrBLzvQdfQCJsKkQXpmrhDxZLh 7LYXQNHI/Z+9bV4MgCG0R1MaVf8kFQxlxhC+unF8SJxRc9rcG/3Qg24OQN/r3Ib6 jxpK2IofXpPXST5OVhsNQJDGfIyI3rCx8O6GJy92cQEGin7ue0PxGdBFlv0+7Cwf FsEPToJzbtiSpdNf0pFpQEwTJjkdfzwzJYF6eA9Ox1epQDQXQQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDI9bVh+FX9gLNSth5F6iVbrepnlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGZhMzQ3YzktZjgzZC0z YWU5LTkzNzQtNTY4ZDY0YTUwODcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcK7 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJLxGdKWQQ7nmDRx3yst008fZQKUtLI1YrCMuHoHbznGOXbTwTuI aELyo+/aB8XmoMKheMQxGK8L+kerdfJeXifXlPdNDjDjkqfutsEME1wjr8ua3Pv5 Is591rOY1obbNPgTFl29Q8RW14RQPRGqRC2DLzeT9FKlluz/93psHZeDRg++iufg D4CDaYCEq1d36iDr2vDXlQhBAdQUCZkLhfBL47WTfa4WvJp5ZE27u2wKEl2Iyk37 vINOC1zBpLmEDx3wrVV03CalQ+reLjBjIYPnYhf4Gfb+0VEeZTGgKmt9s9HqS1rD bZ8lRa9Et0nSRYJXRpYWcGXKzKxgJQ+dbZc= -----END CERTIFICATE-----Generated at Mon Nov 25 19:53:23 2024 by rpki-client on console-fra.rpki-client.org