$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/139e4498-2acd-3cd9-a503-c951aeceba27.roa File: 139e4498-2acd-3cd9-a503-c951aeceba27.roa (raw, json) Hash identifier: aiMJGfnn6W3EeqgZ8cW1POQWj7qLfDTM0s5AMsYXJ6o= Subject key identifier: B8:40:3A:6F:0C:85:6B:68:47:E8:74:06:DC:A7:EB:C9:27:57:7C:B7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285847BEF72C88E3975BF099009F80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/139e4498-2acd-3cd9-a503-c951aeceba27.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 7016 IP address blocks: 2001:559:c3fc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:f7:2c:88:e3:97:5b:f0:99:00:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=edc5e9bd-7c5d-4656-be06-6993049d803d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:25:61:d7:b1:57:ef:73:d9:c6:79:a4:4a:dc: 73:d4:c9:fa:95:73:0c:b4:c0:73:11:65:51:af:62: e5:9a:0f:01:71:23:4c:36:94:dd:3e:88:a6:d1:91: 01:93:d6:43:a7:aa:18:15:6a:e6:48:b2:fd:78:17: 1a:c9:bb:54:fe:48:84:27:8d:37:5f:7a:b3:38:c8: ca:c6:aa:8c:12:bc:82:13:44:48:09:af:ab:01:ad: d9:1f:15:1a:81:48:6a:ad:c4:de:73:0c:52:7a:0b: 0d:0e:0b:3a:c0:c6:6f:3b:6a:ca:d3:bf:e2:94:7b: 5e:ab:bb:20:7c:0b:0b:18:87:c8:96:88:c5:f9:77: 38:62:c4:25:a3:c8:9e:0c:8c:e1:11:7d:f4:2b:34: 50:ab:d2:4a:f3:ae:e3:05:01:58:eb:a0:5e:c2:f5: 4a:a7:89:97:c1:cf:4a:4b:08:cb:e0:72:48:8f:03: 81:75:c3:43:61:f8:2a:e1:13:fa:a2:99:1e:45:19: f6:a5:38:ed:c5:d8:56:04:28:ce:2d:ad:37:75:0d: 8a:8e:29:95:c2:18:9a:58:04:2a:07:5b:47:e5:a7: 5d:bb:ff:34:79:f5:d4:df:c6:22:cc:0d:64:bb:16: 34:7e:b8:5a:97:24:93:d3:f6:ec:e0:90:cb:01:a2: cc:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:40:3A:6F:0C:85:6B:68:47:E8:74:06:DC:A7:EB:C9:27:57:7C:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/139e4498-2acd-3cd9-a503-c951aeceba27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c3fc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:d0:5e:7d:56:ef:99:04:34:85:81:6f:4f:2c:5c:69:e5:01: 1c:1b:ca:0c:58:26:01:f1:9b:ab:ba:9d:b4:45:f1:1d:bc:c4: f1:0f:e2:29:27:52:1d:d2:30:47:52:c6:4c:08:73:a1:b2:c7: 4d:e5:bf:da:99:18:c1:96:3c:e1:ac:f5:39:98:3b:9b:3e:2d: 51:9c:9b:c1:27:cb:d4:aa:d8:01:a7:f0:56:64:e1:d9:71:ee: 6d:83:b1:94:3c:1d:02:c7:3d:af:51:b7:4d:77:5d:ec:b7:20: 4b:27:d6:1a:f3:80:74:5c:fc:c1:5f:75:a7:43:23:95:bb:00: c8:89:b3:da:8d:eb:65:83:77:32:76:c5:b8:61:6c:4c:c4:f1: 85:c2:63:83:89:f3:d3:37:47:b1:5b:a7:63:b9:92:2b:09:4c: bd:f7:a7:c0:75:52:ef:0a:e6:82:11:35:2e:0b:ee:c9:c0:38: 1a:79:6e:d2:62:46:0d:73:73:21:1c:28:d9:4e:eb:dc:9e:13: c5:d4:0d:c8:b1:3a:ca:8e:9c:0c:ad:37:f2:45:84:db:58:fa: d4:1b:a7:5e:7b:c5:80:45:45:6a:1b:f2:24:d3:50:f1:b5:6f: 4f:a8:75:dd:22:da:6f:fa:ea:1d:49:b4:90:b1:85:df:16:00: 68:4b:1f:e4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe+9yyI45db8JkAn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk ZWRjNWU5YmQtN2M1ZC00NjU2LWJlMDYtNjk5MzA0OWQ4MDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCVh17FX73PZxnmkStxz1Mn6lXMMtMBzEWVR r2Llmg8BcSNMNpTdPoim0ZEBk9ZDp6oYFWrmSLL9eBcaybtU/kiEJ403X3qzOMjK xqqMEryCE0RICa+rAa3ZHxUagUhqrcTecwxSegsNDgs6wMZvO2rK07/ilHteq7sg fAsLGIfIlojF+Xc4YsQlo8ieDIzhEX30KzRQq9JK867jBQFY66BewvVKp4mXwc9K SwjL4HJIjwOBdcNDYfgq4RP6opkeRRn2pTjtxdhWBCjOLa03dQ2KjimVwhiaWAQq B1tH5addu/80efXU38YizA1kuxY0frhalyST0/bs4JDLAaLMyQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLhAOm8MhWtoR+h0Btyn68knV3y3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTM5ZTQ0OTgtMmFjZC0z Y2Q5LWE1MDMtYzk1MWFlY2ViYTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcP8 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAADQXn1W75kENIWBb08sXGnlARwbygxYJgHxm6u6nbRF8R28xPEP 4iknUh3SMEdSxkwIc6Gyx03lv9qZGMGWPOGs9TmYO5s+LVGcm8Eny9Sq2AGn8FZk 4dlx7m2DsZQ8HQLHPa9Rt013Xey3IEsn1hrzgHRc/MFfdadDI5W7AMiJs9qN62WD dzJ2xbhhbEzE8YXCY4OJ89M3R7Fbp2O5kisJTL33p8B1Uu8K5oIRNS4L7snAOBp5 btJiRg1zcyEcKNlO69yeE8XUDcixOsqOnAytN/JFhNtY+tQbp157xYBFRWob8iTT UPG1b0+odd0i2m/66h1JtJCxhd8WAGhLH+Q= -----END CERTIFICATE-----