$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1cafbc6b-0fe9-3ad6-9373-29925de1a173.roa File: 1cafbc6b-0fe9-3ad6-9373-29925de1a173.roa (raw, json) Hash identifier: QqSrshIgIgNOZqLCyeZEK88bn7yu3HpMOHlKPBkNeuw= Subject key identifier: 52:51:44:B3:63:15:FF:FC:8A:E3:AE:C2:E8:74:16:68:12:56:D3:5B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAF584D82D4793BA16C7300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1cafbc6b-0fe9-3ad6-9373-29925de1a173.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 7015 IP address blocks: 2001:559:87eb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:af:58:4d:82:d4:79:3b:a1:6c:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=10684c83-e0bd-4939-81e7-16e8591594e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a5:f7:c4:48:18:74:4c:0f:5e:0d:22:86:fd: f5:10:b6:2f:80:7e:84:3d:56:94:af:4e:4a:0a:a6: 14:14:74:8a:84:45:2b:92:c8:84:09:b1:f8:48:91: d6:2c:40:a9:40:5c:4d:a5:ab:36:ef:ab:b0:06:d0: d8:c2:4a:d5:1b:d2:bd:b4:d9:a6:1e:5d:43:bb:30: 76:50:8d:17:30:b7:eb:ad:89:f1:88:59:5f:6c:36: c2:b6:b9:31:0d:85:12:50:7b:53:8c:d5:11:9d:5c: d1:1d:c4:c0:9b:dd:9d:2e:08:3a:c8:80:91:43:76: 40:a6:18:0d:da:2d:10:a9:21:04:15:cb:0c:06:e8: 00:5e:1b:a4:a3:81:c0:f7:30:05:9e:a3:c0:7b:84: 8f:ab:e1:00:59:bd:ed:ad:d0:93:74:21:a9:63:df: c4:08:3b:23:fa:32:77:99:3a:eb:62:f8:b3:33:40: e1:f5:e2:50:17:a7:a0:fd:03:64:28:56:0a:a8:08: 5d:35:5d:f8:67:77:d6:54:d1:85:23:2a:8a:e1:ff: eb:6e:a7:c8:28:f9:53:3d:d4:89:56:26:65:76:70: 25:01:fb:eb:0f:36:ae:e7:33:c9:5c:b6:f9:e7:c6: 06:98:01:fb:ee:4e:ad:dd:18:9a:07:cf:40:a7:45: 8b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:51:44:B3:63:15:FF:FC:8A:E3:AE:C2:E8:74:16:68:12:56:D3:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1cafbc6b-0fe9-3ad6-9373-29925de1a173.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:87eb::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:32:a1:b8:76:f8:c8:a5:d8:0a:9f:4e:09:84:83:26:0a:92: f7:6b:39:4a:9a:68:d0:21:8f:64:b3:6a:7f:eb:40:29:f8:f5: d2:9f:19:7b:f1:1a:38:22:cd:bf:45:06:73:ce:31:f9:7c:05: 27:fa:6c:f4:9b:de:7d:eb:e3:79:c5:97:71:2f:00:45:10:09: 4f:1f:e6:00:e0:cf:a6:99:cf:3d:62:ff:93:0a:65:15:08:08: 14:2c:fb:88:6e:7f:bf:36:19:82:7f:e3:6b:31:12:59:3f:60: 38:e4:23:3f:64:4c:55:1d:60:04:7f:33:86:a8:74:6e:45:25: a9:07:98:6a:f4:20:6a:e5:d5:a6:9a:0a:3f:87:0c:f3:4e:9f: 8d:bd:dc:2b:4d:19:a6:85:8c:0e:66:ef:ff:90:d2:a2:1b:4d: 4e:0d:ca:ee:da:e8:2f:21:4f:b6:12:b1:d8:f1:f7:e7:5e:84: 63:e4:de:e3:b1:8b:b8:eb:be:65:cb:b5:fc:cb:b9:82:72:5a: 1c:6b:c7:b2:e9:b1:84:eb:24:4a:c5:bb:a5:8c:50:16:11:1b: ed:bc:3c:f6:a9:07:8c:ad:06:1e:3e:86:8a:b7:f5:7b:73:b6: 5d:74:97:17:e0:97:ab:80:27:a2:cf:a1:b1:b4:52:c7:9d:e0: e8:e7:45:d1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfr1hNgtR5O6FscwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk MTA2ODRjODMtZTBiZC00OTM5LTgxZTctMTZlODU5MTU5NGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqX3xEgYdEwPXg0ihv31ELYvgH6EPVaUr05K CqYUFHSKhEUrksiECbH4SJHWLECpQFxNpas276uwBtDYwkrVG9K9tNmmHl1DuzB2 UI0XMLfrrYnxiFlfbDbCtrkxDYUSUHtTjNURnVzRHcTAm92dLgg6yICRQ3ZAphgN 2i0QqSEEFcsMBugAXhuko4HA9zAFnqPAe4SPq+EAWb3trdCTdCGpY9/ECDsj+jJ3 mTrrYvizM0Dh9eJQF6eg/QNkKFYKqAhdNV34Z3fWVNGFIyqK4f/rbqfIKPlTPdSJ ViZldnAlAfvrDzau5zPJXLb558YGmAH77k6t3RiaB89Ap0WLVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFJRRLNjFf/8iuOuwuh0FmgSVtNbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWNhZmJjNmItMGZlOS0z YWQ2LTkzNzMtMjk5MjVkZTFhMTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYfr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGcyobh2+Mil2AqfTgmEgyYKkvdrOUqaaNAhj2Szan/rQCn49dKf GXvxGjgizb9FBnPOMfl8BSf6bPSb3n3r43nFl3EvAEUQCU8f5gDgz6aZzz1i/5MK ZRUICBQs+4huf782GYJ/42sxElk/YDjkIz9kTFUdYAR/M4aodG5FJakHmGr0IGrl 1aaaCj+HDPNOn4293CtNGaaFjA5m7/+Q0qIbTU4Nyu7a6C8hT7YSsdjx9+dehGPk 3uOxi7jrvmXLtfzLuYJyWhxrx7LpsYTrJErFu6WMUBYRG+28PPapB4ytBh4+hoq3 9Xtztl10lxfgl6uAJ6LPobG0Used4OjnRdE= -----END CERTIFICATE-----Generated at Sat May 4 14:45:33 2024 by rpki-client on console-fra.rpki-client.org