$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10898e12-c6b0-3815-8fac-edacfc91a45e.roa File: 10898e12-c6b0-3815-8fac-edacfc91a45e.roa (raw, json) Hash identifier: uV8ni/dbF3WPMzIhvqrwO5Fsz31zypCD5H8nOSzfA1Y= Subject key identifier: 3F:BC:54:F8:7F:D4:64:D9:30:5D:31:34:3B:D9:B5:DB:B7:E6:08:53 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAC5BE6EAD8AF31F02FA610 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10898e12-c6b0-3815-8fac-edacfc91a45e.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 33659 IP address blocks: 2001:559:84f4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ac:5b:e6:ea:d8:af:31:f0:2f:a6:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=4d29384e-a871-40a5-b599-29e357dab175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:50:e4:8e:b0:5b:9b:03:5f:ed:71:01:e0:44: 43:bc:fb:75:33:aa:be:e9:d1:b1:3f:d3:2c:bf:30: ab:41:6e:11:74:74:34:a9:00:9f:ed:a8:fe:3a:9a: 4f:e8:36:da:f8:e9:f3:0a:40:d3:5f:b8:96:b5:4c: 35:b3:98:d2:d7:d3:31:af:80:8e:86:68:21:c2:cc: ea:72:5c:32:c0:27:c8:2d:ac:0b:da:43:8e:72:d7: 35:3a:03:ad:54:cf:03:be:a5:03:c0:92:89:67:b8: b0:5d:bd:4c:55:00:23:94:27:92:ed:4d:46:5a:80: 92:93:41:70:74:27:92:67:73:8f:59:56:1e:db:fc: a1:2a:be:4b:1b:33:f6:93:72:f5:a8:aa:39:43:f0: e7:52:6c:45:8f:85:f7:93:47:4e:03:49:a1:1f:70: 3b:4e:de:cb:bc:fc:c8:4c:81:0c:3d:2d:64:e4:bb: 77:26:a5:32:47:1c:f1:a8:7d:b6:f0:fa:f6:25:2c: 43:f8:77:47:2a:6c:27:a1:00:0f:f2:37:7c:1b:54: 7a:8f:d1:93:a8:2b:5b:dc:fe:58:bf:b2:f9:45:ed: 3e:60:f9:2b:70:95:14:01:30:6b:16:b8:d3:86:f5: d6:cc:75:b1:69:bc:45:a7:c8:83:cd:33:51:53:ff: 59:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:BC:54:F8:7F:D4:64:D9:30:5D:31:34:3B:D9:B5:DB:B7:E6:08:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10898e12-c6b0-3815-8fac-edacfc91a45e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:84f4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:bd:32:65:f4:b0:ab:c7:35:fc:14:d7:fa:71:8b:67:9b:c6: c2:08:dd:07:06:9f:42:26:8f:e7:21:10:ec:f0:89:1f:68:84: 23:f8:58:11:0c:1a:17:84:e1:58:0e:26:50:2c:b6:f2:c4:64: 9d:f7:1e:e9:e4:15:18:a5:e3:6d:2e:ea:13:5f:0d:03:32:1a: b2:36:ed:39:8d:4d:fe:53:36:ef:a5:e3:a6:2e:fa:b0:14:8f: df:88:58:18:e2:b3:a2:d1:0a:2e:3f:31:a9:cd:63:7b:af:d6: cf:95:57:8b:b2:dd:4c:b7:ed:fd:b7:60:dd:46:f3:ba:ac:4f: a8:f7:1c:c5:11:8f:92:03:83:e4:76:6b:1c:09:54:2f:0a:20: 41:5d:25:89:f5:77:c9:7e:ea:fe:52:4e:cb:26:28:e2:be:1d: 9f:ea:59:7c:ee:1e:e1:94:8a:64:e5:ec:17:6c:8e:5b:1c:e8: 2b:a8:b6:e8:ab:84:cd:7b:c2:5d:e6:2b:b0:e2:46:0f:cc:88: d5:8d:ff:b4:48:8c:72:e0:33:11:d6:f6:69:d0:8c:3d:59:a8: 2b:b5:f6:ed:85:cf:df:17:e2:34:f4:1d:38:81:a4:ab:dc:7a: 6c:1e:ed:a3:92:14:42:1a:8c:21:93:b3:4c:ac:89:c1:b5:06: 78:38:e8:11 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfrFvm6tivMfAvphAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk NGQyOTM4NGUtYTg3MS00MGE1LWI1OTktMjllMzU3ZGFiMTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVDkjrBbmwNf7XEB4ERDvPt1M6q+6dGxP9Ms vzCrQW4RdHQ0qQCf7aj+OppP6Dba+OnzCkDTX7iWtUw1s5jS19Mxr4COhmghwszq clwywCfILawL2kOOctc1OgOtVM8DvqUDwJKJZ7iwXb1MVQAjlCeS7U1GWoCSk0Fw dCeSZ3OPWVYe2/yhKr5LGzP2k3L1qKo5Q/DnUmxFj4X3k0dOA0mhH3A7Tt7LvPzI TIEMPS1k5Lt3JqUyRxzxqH228Pr2JSxD+HdHKmwnoQAP8jd8G1R6j9GTqCtb3P5Y v7L5Re0+YPkrcJUUATBrFrjThvXWzHWxabxFp8iDzTNRU/9ZqQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD+8VPh/1GTZMF0xNDvZtdu35ghTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTA4OThlMTItYzZiMC0z ODE1LThmYWMtZWRhY2ZjOTFhNDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYT0 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMq9MmX0sKvHNfwU1/pxi2ebxsII3QcGn0Imj+chEOzwiR9ohCP4 WBEMGheE4VgOJlAstvLEZJ33HunkFRil420u6hNfDQMyGrI27TmNTf5TNu+l46Yu +rAUj9+IWBjis6LRCi4/ManNY3uv1s+VV4uy3Uy37f23YN1G87qsT6j3HMURj5ID g+R2axwJVC8KIEFdJYn1d8l+6v5STssmKOK+HZ/qWXzuHuGUimTl7Bdsjlsc6Cuo tuirhM17wl3mK7DiRg/MiNWN/7RIjHLgMxHW9mnQjD1ZqCu19u2Fz98X4jT0HTiB pKvcemwe7aOSFEIajCGTs0ysicG1Bng46BE= -----END CERTIFICATE-----Generated at Sun May 5 02:13:58 2024 by rpki-client on console-ams.rpki-client.org