$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13a42a8d-9145-3831-b804-d501ba2a0f93.roa File: 13a42a8d-9145-3831-b804-d501ba2a0f93.roa (raw, json) Hash identifier: l87vjS2gxHi04Mozz+rA3h0M+ZSvxJ31ffF3lpf9jpQ= Subject key identifier: BE:AA:4C:09:49:A3:CC:F5:E6:B1:46:68:82:FF:36:B3:CB:24:D4:7F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAE91E788BFCF2B70797580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13a42a8d-9145-3831-b804-d501ba2a0f93.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 33651 IP address blocks: 2001:559:833c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ae:91:e7:88:bf:cf:2b:70:79:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=5cbe0157-4ddf-4693-a4db-914e9ec4021a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b2:8e:c2:e8:32:a4:06:67:d6:e1:dd:fb:85: 3a:e6:57:65:67:99:29:74:41:81:08:ec:c9:d9:e2: b5:c3:1d:8e:31:1b:43:95:d6:b1:6d:f3:05:5f:e2: 23:89:97:26:82:11:a9:a4:96:96:fe:5a:b8:c6:78: 9d:5a:fa:de:34:99:d1:b3:72:53:01:5c:36:c0:1d: 04:df:b4:d0:1d:5c:82:be:3e:f8:26:72:1a:c0:fe: d4:28:e4:3d:e9:17:0e:7e:3c:86:e0:cc:2c:0c:7e: 54:6c:d4:fe:01:68:e1:d5:13:67:56:87:d1:3f:92: 81:b7:56:39:2c:57:c5:51:2a:47:e4:61:f7:25:b3: 4e:ce:33:70:86:10:5d:8a:0b:b2:77:bc:0c:b0:ac: a8:7c:be:fc:96:00:ca:02:e0:11:d2:d2:d9:2b:f9: 0c:e3:f6:47:1a:26:ea:5f:46:4a:e6:15:ad:25:5d: e8:03:fc:f7:08:17:62:ec:c2:b4:a5:5a:27:a5:7c: db:d6:c4:b1:ac:c7:07:24:68:9d:c2:65:ea:d9:09: 20:34:ee:b2:3a:ba:c2:36:be:10:c1:e5:ca:b7:c4: 15:b9:b3:f5:8b:e5:48:23:c6:62:6a:8a:85:c6:12: 43:e9:05:63:b4:62:18:41:8d:9f:f3:e9:77:ca:5e: 7c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:AA:4C:09:49:A3:CC:F5:E6:B1:46:68:82:FF:36:B3:CB:24:D4:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13a42a8d-9145-3831-b804-d501ba2a0f93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:833c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:98:cd:ee:08:2d:c2:62:04:91:69:b7:d5:c4:10:8e:84:7e: a0:43:56:bb:21:09:7b:f8:1b:d5:71:d3:60:65:a0:23:3a:d4: 81:09:9d:c9:8b:5c:3f:48:de:c7:bb:bf:dd:7f:30:53:93:ff: db:dc:b7:bb:f8:b5:2d:0f:52:fe:b3:86:7c:44:2a:c2:20:94: 04:19:9a:a1:4b:05:7d:8f:b6:e6:e0:f0:f9:5e:09:5a:18:1e: e9:59:31:2f:28:56:52:88:e7:91:66:38:ef:39:2d:c0:47:f2: 81:30:b8:70:dd:ca:73:b2:d0:6c:04:36:37:dd:c6:56:82:af: 73:d6:94:bd:fd:ea:29:06:ab:2b:09:36:62:99:e4:f0:15:a7: b7:d8:39:5c:b2:29:bf:06:75:83:3e:91:b4:0e:1e:20:5f:48: d1:88:38:57:d1:f4:4f:a9:8b:4c:d3:90:c5:8a:91:22:f7:b4: da:8b:6e:df:68:e9:a2:38:eb:2e:85:7a:b3:e8:04:ca:52:9d: bc:95:0d:f2:66:58:96:2a:5b:11:c9:14:93:01:8d:e4:47:21: 84:38:15:9a:41:cd:cf:4d:04:40:29:71:c3:df:9f:66:02:32: ee:5a:de:4d:26:eb:26:c8:71:af:21:36:58:bd:e2:b2:f9:8f: a6:b0:54:36 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfrpHniL/PK3B5dYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk NWNiZTAxNTctNGRkZi00NjkzLWE0ZGItOTE0ZTllYzQwMjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrKOwugypAZn1uHd+4U65ldlZ5kpdEGBCOzJ 2eK1wx2OMRtDldaxbfMFX+IjiZcmghGppJaW/lq4xnidWvreNJnRs3JTAVw2wB0E 37TQHVyCvj74JnIawP7UKOQ96RcOfjyG4MwsDH5UbNT+AWjh1RNnVofRP5KBt1Y5 LFfFUSpH5GH3JbNOzjNwhhBdiguyd7wMsKyofL78lgDKAuAR0tLZK/kM4/ZHGibq X0ZK5hWtJV3oA/z3CBdi7MK0pVonpXzb1sSxrMcHJGidwmXq2QkgNO6yOrrCNr4Q weXKt8QVubP1i+VII8ZiaoqFxhJD6QVjtGIYQY2f8+l3yl58aQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL6qTAlJo8z15rFGaIL/NrPLJNR/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTNhNDJhOGQtOTE0NS0z ODMxLWI4MDQtZDUwMWJhMmEwZjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYM8 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALSYze4ILcJiBJFpt9XEEI6EfqBDVrshCXv4G9Vx02BloCM61IEJ ncmLXD9I3se7v91/MFOT/9vct7v4tS0PUv6zhnxEKsIglAQZmqFLBX2Ptubg8Ple CVoYHulZMS8oVlKI55FmOO85LcBH8oEwuHDdynOy0GwENjfdxlaCr3PWlL396ikG qysJNmKZ5PAVp7fYOVyyKb8GdYM+kbQOHiBfSNGIOFfR9E+pi0zTkMWKkSL3tNqL bt9o6aI46y6FerPoBMpSnbyVDfJmWJYqWxHJFJMBjeRHIYQ4FZpBzc9NBEApccPf n2YCMu5a3k0m6ybIca8hNli94rL5j6awVDY= -----END CERTIFICATE-----Generated at Sat May 4 14:47:36 2024 by rpki-client on console-ams.rpki-client.org