$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12eb1b8b-2152-3d25-8222-4e29b1c0758c.roa File: 12eb1b8b-2152-3d25-8222-4e29b1c0758c.roa (raw, json) Hash identifier: oeNs08s7oQYGqCscko3gjf5t2VCXrd9ODrUJmON0R3k= Subject key identifier: 89:D5:CB:B9:71:0E:3B:7C:77:E4:72:16:3D:B3:22:93:34:60:02:4F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAC30F97744C24FD826B6C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12eb1b8b-2152-3d25-8222-4e29b1c0758c.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 33491 IP address blocks: 2001:559:222::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ac:30:f9:77:44:c2:4f:d8:26:b6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=9c3fa950-b8fa-47cd-b580-69c3d980d969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:74:6f:82:51:97:fd:10:a7:e3:73:81:fb:67: 05:9c:a9:6f:1a:2f:36:b6:b9:91:81:37:15:e5:ad: 8b:4a:0d:92:86:f9:79:99:6b:a2:15:ec:f4:b3:0f: 6b:09:0e:24:9d:ec:e2:ba:fd:c4:86:b0:ae:66:13: 4c:7d:42:49:e1:d0:65:a5:d6:cb:43:f6:22:93:46: 1f:1b:56:69:fa:32:29:d3:31:ab:3e:0d:78:8f:82: 3c:da:b5:fe:f1:55:03:39:d1:b5:c3:92:b9:ac:7c: 37:6c:39:cb:4e:b1:22:13:37:fa:da:7e:86:42:f9: 11:7d:86:cc:b7:9b:7f:a8:eb:ca:b9:89:96:6e:7b: db:e0:3a:9c:ad:50:94:3f:a8:7a:31:9e:f5:17:f1: da:6e:ce:5c:65:62:4a:5b:22:00:f8:9c:31:8b:4e: 85:bc:d4:45:e8:10:e3:33:34:46:e6:9d:81:56:e0: 12:28:87:fa:10:44:dd:53:37:19:83:fb:93:78:4d: 8f:aa:8e:9a:b5:86:b5:02:6d:0b:ed:63:28:22:b3: 2b:8e:ce:54:52:28:33:69:df:c8:58:9d:42:86:09: 60:1a:8c:ab:9b:46:ac:6a:7a:9e:42:33:57:31:ca: 07:97:6b:9f:15:e3:ae:3c:c5:4c:d8:35:81:da:b8: 64:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D5:CB:B9:71:0E:3B:7C:77:E4:72:16:3D:B3:22:93:34:60:02:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12eb1b8b-2152-3d25-8222-4e29b1c0758c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:222::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption db:5c:37:c3:f2:6b:6d:29:ee:15:da:dd:01:a4:fe:53:ae:cd: c5:58:0c:09:f8:ac:a8:74:8e:2b:80:f6:68:46:26:4e:82:e5: 19:02:bd:ae:a7:e5:89:6b:16:d0:9e:73:1e:2a:46:a2:b0:be: 7b:19:c4:84:10:dd:05:20:d0:86:b8:e9:de:f1:c3:cf:2b:80: 7d:4c:47:ad:f1:64:38:51:6c:96:82:d4:6c:27:bc:b9:9c:33: 6c:dc:62:f7:9b:d0:0e:a6:e5:21:c1:83:a4:c9:7a:8c:cd:dd: e4:67:de:b6:4c:78:d0:e7:75:6a:99:79:ab:69:95:72:bc:00: 46:19:ec:8d:0c:23:58:0c:8d:bf:af:78:96:c4:08:41:1d:89: 2b:01:0d:43:c8:ea:94:d9:66:6b:7b:82:8f:db:3a:22:a0:5f: 6e:7c:c7:59:49:b2:f1:e9:58:29:13:81:2a:0f:35:26:5a:e6: 3f:67:47:f0:4a:e1:1f:a9:c7:4a:5d:d8:66:62:8d:40:4b:0b: e1:6a:bf:cf:ac:52:87:98:5a:bb:16:a4:f9:d3:ca:e6:46:d9: b9:24:54:93:21:b0:18:dd:8c:b6:2e:62:e5:b3:97:a2:46:20: 8f:61:48:6c:a7:60:be:6b:85:a1:89:f4:36:c8:01:49:f9:ce: c3:6f:07:f9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfrDD5d0TCT9gmtsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk OWMzZmE5NTAtYjhmYS00N2NkLWI1ODAtNjljM2Q5ODBkOTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHRvglGX/RCn43OB+2cFnKlvGi82trmRgTcV 5a2LSg2Shvl5mWuiFez0sw9rCQ4kneziuv3EhrCuZhNMfUJJ4dBlpdbLQ/Yik0Yf G1Zp+jIp0zGrPg14j4I82rX+8VUDOdG1w5K5rHw3bDnLTrEiEzf62n6GQvkRfYbM t5t/qOvKuYmWbnvb4DqcrVCUP6h6MZ71F/Habs5cZWJKWyIA+Jwxi06FvNRF6BDj MzRG5p2BVuASKIf6EETdUzcZg/uTeE2Pqo6atYa1Am0L7WMoIrMrjs5UUigzad/I WJ1ChglgGoyrm0asanqeQjNXMcoHl2ufFeOuPMVM2DWB2rhkmQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFInVy7lxDjt8d+RyFj2zIpM0YAJPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTJlYjFiOGItMjE1Mi0z ZDI1LTgyMjItNGUyOWIxYzA3NThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQIi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBANtcN8Pya20p7hXa3QGk/lOuzcVYDAn4rKh0jiuA9mhGJk6C5RkC va6n5YlrFtCecx4qRqKwvnsZxIQQ3QUg0Ia46d7xw88rgH1MR63xZDhRbJaC1Gwn vLmcM2zcYveb0A6m5SHBg6TJeozN3eRn3rZMeNDndWqZeatplXK8AEYZ7I0MI1gM jb+veJbECEEdiSsBDUPI6pTZZmt7go/bOiKgX258x1lJsvHpWCkTgSoPNSZa5j9n R/BK4R+px0pd2GZijUBLC+Fqv8+sUoeYWrsWpPnTyuZG2bkkVJMhsBjdjLYuYuWz l6JGII9hSGynYL5rhaGJ9DbIAUn5zsNvB/k= -----END CERTIFICATE-----Generated at Sat May 4 14:44:56 2024 by rpki-client on console-fra.rpki-client.org