$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/275febf2-51e7-3c51-976a-392ba2e5a942.roa File: 275febf2-51e7-3c51-976a-392ba2e5a942.roa (raw, json) Hash identifier: Gkgmug/RXfvIY4WnvJRvV4NmIntY5UP/H3GFP0pwxNI= Subject key identifier: BA:B6:4C:C8:7D:B3:9A:99:52:64:1D:B8:09:72:36:95:6B:A3:84:E3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FABD652AE1B9BE53B9B9A00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/275febf2-51e7-3c51-976a-392ba2e5a942.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 7015 IP address blocks: 2001:559:8574::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ab:d6:52:ae:1b:9b:e5:3b:9b:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=c2058a3e-58ea-44fe-9738-71edbef772eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:25:6a:a4:b0:bf:84:d7:3d:3a:68:d7:4f:2d: 4b:89:cc:09:60:c4:25:4c:d1:42:55:0b:cc:00:d3: b6:aa:9b:b9:f0:54:6b:d1:8c:7e:58:ed:36:4a:38: a8:4f:af:fd:03:37:77:25:4c:48:52:ed:38:a0:bd: a5:a9:40:7b:c2:f7:0d:42:1d:6d:af:b5:cd:0b:d8: 6a:40:e3:f2:20:c5:6e:c4:0e:f0:3b:f2:02:04:c8: 10:3b:15:00:06:62:be:f1:fb:6f:10:9f:60:01:87: 2b:1f:5f:d3:c6:0a:4f:b9:17:0a:2f:e1:ac:bb:fe: 97:37:7d:3c:af:f1:59:24:fd:66:8a:9e:1a:b7:a0: 2e:5c:02:71:62:b8:76:85:70:2c:eb:bf:73:97:e9: 02:da:f1:ff:41:04:e2:aa:0e:a6:34:fe:f8:9b:85: 02:33:e5:74:99:79:be:16:99:c9:fe:0a:71:7c:b1: 96:c1:ee:4b:02:8e:f2:6e:f7:f2:46:42:11:4f:57: 76:7c:2d:6a:9f:d5:5d:b4:71:e1:1c:9c:37:99:85: 05:77:82:d5:34:15:70:1d:b3:bb:58:be:f2:04:c4: 61:00:45:b8:81:4a:81:46:44:9b:aa:7f:e1:57:03: 64:7f:62:ec:1e:53:3c:8b:ca:e2:74:08:86:44:ae: 85:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B6:4C:C8:7D:B3:9A:99:52:64:1D:B8:09:72:36:95:6B:A3:84:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/275febf2-51e7-3c51-976a-392ba2e5a942.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8574::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:d1:a3:d0:a5:a8:06:25:cd:82:a6:da:0d:66:78:28:5d:02: a2:19:b8:0e:4e:76:27:88:3e:eb:07:47:dd:6c:ee:d4:d8:c5: cc:d6:ab:23:7d:36:55:14:91:a6:c1:e3:f9:05:ce:cf:59:95: 1e:a7:2e:80:68:f6:bb:c9:1e:31:be:2b:83:98:ba:1a:8f:c4: 5f:b0:d8:96:d7:b4:ce:ab:dd:ab:50:c3:99:53:46:80:ea:e7: dc:ba:ef:f3:d2:86:e1:c8:b6:fa:9b:8c:3f:aa:0f:ad:71:d4: da:e8:ed:04:61:d7:c8:aa:7a:b8:48:e8:34:1c:6c:ad:eb:10: 8d:f5:23:7b:dc:9f:12:e7:69:50:83:8d:e7:21:b0:52:6b:0f: 5d:f7:62:37:e9:89:76:dc:8f:69:2c:c6:03:ee:24:d2:13:9c: eb:c4:56:bc:8d:f8:bf:4a:0f:27:3a:be:fd:11:5f:91:a2:ff: 4f:50:7a:34:e9:06:87:b6:00:50:50:f7:d1:34:7c:a9:cb:e8: 12:3c:fe:0b:9a:a0:fb:c7:6d:1f:1c:18:e8:02:47:78:98:d4: a2:cb:83:d3:72:94:5e:5c:42:60:90:46:e4:51:3b:3f:f0:a2: 8e:d0:ea:49:1e:28:45:cf:2a:06:89:0b:c7:09:5b:2b:f1:f8: 4c:92:05:96 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfq9ZSrhub5TubmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk YzIwNThhM2UtNThlYS00NGZlLTk3MzgtNzFlZGJlZjc3MmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyVqpLC/hNc9OmjXTy1LicwJYMQlTNFCVQvM ANO2qpu58FRr0Yx+WO02SjioT6/9Azd3JUxIUu04oL2lqUB7wvcNQh1tr7XNC9hq QOPyIMVuxA7wO/ICBMgQOxUABmK+8ftvEJ9gAYcrH1/TxgpPuRcKL+Gsu/6XN308 r/FZJP1mip4at6AuXAJxYrh2hXAs679zl+kC2vH/QQTiqg6mNP74m4UCM+V0mXm+ FpnJ/gpxfLGWwe5LAo7ybvfyRkIRT1d2fC1qn9VdtHHhHJw3mYUFd4LVNBVwHbO7 WL7yBMRhAEW4gUqBRkSbqn/hVwNkf2LsHlM8i8ridAiGRK6FUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLq2TMh9s5qZUmQduAlyNpVro4TjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjc1ZmViZjItNTFlNy0z YzUxLTk3NmEtMzkyYmEyZTVhOTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYV0 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALDRo9ClqAYlzYKm2g1meChdAqIZuA5OdieIPusHR91s7tTYxczW qyN9NlUUkabB4/kFzs9ZlR6nLoBo9rvJHjG+K4OYuhqPxF+w2JbXtM6r3atQw5lT RoDq59y67/PShuHItvqbjD+qD61x1Nro7QRh18iqerhI6DQcbK3rEI31I3vcnxLn aVCDjechsFJrD133YjfpiXbcj2ksxgPuJNITnOvEVryN+L9KDyc6vv0RX5Gi/09Q ejTpBoe2AFBQ99E0fKnL6BI8/guaoPvHbR8cGOgCR3iY1KLLg9NylF5cQmCQRuRR Oz/woo7Q6kkeKEXPKgaJC8cJWyvx+EySBZY= -----END CERTIFICATE-----Generated at Sun May 5 02:14:59 2024 by rpki-client on console-ams.rpki-client.org