$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/213aa0b4-6957-34af-be95-217340498c7b.roa File: 213aa0b4-6957-34af-be95-217340498c7b.roa (raw, json) Hash identifier: 5oDX5qsgDz26UQjBCzWGYA5/4Yx6mLd0CGORi7QhVWY= Subject key identifier: 9A:72:60:99:7B:CC:0C:62:3A:22:77:56:BB:67:02:1E:2C:87:40:98 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAE2159BC77171603E5F920 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/213aa0b4-6957-34af-be95-217340498c7b.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 21508 IP address blocks: 2001:559:c0f6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ae:21:59:bc:77:17:16:03:e5:f9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=1343f19e-3aa0-4a33-b97e-fd251103b1a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f2:62:9b:34:2b:50:53:89:38:58:b5:fb:d2: a8:94:d5:8b:e5:8c:35:b8:90:4e:81:d4:f5:81:a4: c2:d8:52:da:7b:23:d1:42:f7:bf:f6:ef:73:0f:14: 43:6d:d9:79:27:04:69:ba:d0:75:09:8e:56:91:df: 44:91:46:bc:d5:ba:59:ed:63:0a:d5:5a:3d:b6:08: 76:ae:98:18:8a:30:4a:c2:6b:84:8c:d8:24:b2:89: 52:fc:93:02:c5:e3:9c:97:0e:64:9d:b1:0f:47:44: db:5b:6c:7e:93:1f:d3:af:ad:8c:f7:e8:aa:db:1e: df:e6:17:21:b4:c0:22:e9:09:26:40:c6:c9:f6:f6: d1:12:36:9b:36:c8:f9:0f:76:51:b7:ef:84:74:4e: 90:ba:fa:6b:3a:7f:87:69:6b:60:fb:2d:ba:41:07: e3:8d:32:36:31:eb:0e:65:2e:df:73:ae:a9:6b:bc: 6d:47:b6:21:c7:93:94:22:fd:4a:bb:fe:90:c7:24: 8b:9d:4b:33:24:41:13:34:ca:8a:65:74:8a:db:36: eb:d3:3c:5d:39:4b:22:a6:89:29:ab:d4:3a:ca:df: b3:a4:fc:fb:dc:f4:e6:de:c0:11:a5:b6:dc:06:a4: 15:2a:fb:84:09:70:2f:8f:c6:e8:2f:3d:52:1d:85: a2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:72:60:99:7B:CC:0C:62:3A:22:77:56:BB:67:02:1E:2C:87:40:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/213aa0b4-6957-34af-be95-217340498c7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c0f6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:fd:e5:9b:f6:90:a2:4b:6d:6e:d5:e7:4d:68:fd:68:d7:93: 29:5f:09:c2:10:f3:db:d3:e7:d9:4b:2c:86:de:12:6a:87:b0: b8:d8:4f:92:ba:bb:13:97:ee:fd:72:bc:97:e9:11:49:96:5a: 5c:20:9f:89:cd:e1:ec:c9:f7:a5:d8:96:b5:1d:b0:42:0f:da: 3a:44:95:28:2d:ae:0b:05:81:b3:46:93:99:de:89:36:f7:30: ac:5a:9d:33:24:ad:b3:67:b6:4f:ee:a3:e6:72:18:0b:5c:22: 52:fc:cf:d4:09:3a:4b:b8:5a:5a:a2:14:c1:f1:ea:84:4d:9f: 41:0a:32:de:cb:54:09:de:9b:85:d8:d8:c3:84:39:1c:f8:61: 00:f5:f0:95:7a:24:b0:03:50:3c:6d:2d:23:8d:59:bb:05:d3: d3:42:4b:5b:9a:97:cb:29:79:9f:10:5e:9c:8d:4f:73:1b:1a: 9f:22:20:bb:23:4e:9a:b1:c0:48:d6:91:f3:3c:c3:92:ed:cb: f9:b0:95:83:f2:05:e7:ea:15:4f:b3:df:74:5c:58:21:99:b4: fc:f3:da:5f:4e:20:a0:58:f7:9b:0d:fa:98:ec:21:3a:1e:e8: 2e:b5:8e:6a:ad:b6:4b:75:4a:6f:96:82:db:93:44:a4:9a:da: ec:4a:44:8a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfriFZvHcXFgPl+SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk MTM0M2YxOWUtM2FhMC00YTMzLWI5N2UtZmQyNTExMDNiMWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/JimzQrUFOJOFi1+9KolNWL5Yw1uJBOgdT1 gaTC2FLaeyPRQve/9u9zDxRDbdl5JwRputB1CY5Wkd9EkUa81bpZ7WMK1Vo9tgh2 rpgYijBKwmuEjNgksolS/JMCxeOclw5knbEPR0TbW2x+kx/Tr62M9+iq2x7f5hch tMAi6QkmQMbJ9vbREjabNsj5D3ZRt++EdE6QuvprOn+HaWtg+y26QQfjjTI2MesO ZS7fc66pa7xtR7Yhx5OUIv1Ku/6QxySLnUszJEETNMqKZXSK2zbr0zxdOUsipokp q9Q6yt+zpPz73PTm3sARpbbcBqQVKvuECXAvj8boLz1SHYWisQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJpyYJl7zAxiOiJ3VrtnAh4sh0CYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjEzYWEwYjQtNjk1Ny0z NGFmLWJlOTUtMjE3MzQwNDk4YzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcD2 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABv95Zv2kKJLbW7V501o/WjXkylfCcIQ89vT59lLLIbeEmqHsLjY T5K6uxOX7v1yvJfpEUmWWlwgn4nN4ezJ96XYlrUdsEIP2jpElSgtrgsFgbNGk5ne iTb3MKxanTMkrbNntk/uo+ZyGAtcIlL8z9QJOku4WlqiFMHx6oRNn0EKMt7LVAne m4XY2MOEORz4YQD18JV6JLADUDxtLSONWbsF09NCS1ual8speZ8QXpyNT3MbGp8i ILsjTpqxwEjWkfM8w5Lty/mwlYPyBefqFU+z33RcWCGZtPzz2l9OIKBY95sN+pjs IToe6C61jmqttkt1Sm+WgtuTRKSa2uxKRIo= -----END CERTIFICATE-----Generated at Sun May 5 02:35:55 2024 by rpki-client on console-fra.rpki-client.org