$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28476f09-459d-3de2-b999-0c7cf09fdfec.roa File: 28476f09-459d-3de2-b999-0c7cf09fdfec.roa (raw, json) Hash identifier: qXN8/Spzh43gqP56HCl7grjfB0wuCI+c5r6RJ4187Ks= Subject key identifier: 76:0A:AC:E6:5C:14:75:A7:1E:3D:31:2C:8F:3F:88:EF:F7:DF:40:28 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FABD48E8F682B337099FD80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28476f09-459d-3de2-b999-0c7cf09fdfec.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 7015 IP address blocks: 2001:559:849e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ab:d4:8e:8f:68:2b:33:70:99:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=75cc7e62-6c1e-4b99-a40d-a4a0b550cb32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2f:23:6d:c5:62:f3:80:3b:45:75:5d:b0:db: b8:9e:a2:a8:0b:eb:7b:e8:00:20:8a:38:25:de:38: 45:03:69:11:85:3b:c7:10:77:7c:fc:ac:5c:6b:c2: a6:ca:2e:7d:e6:d8:57:d3:06:c7:9e:1a:de:ca:15: a3:61:5d:55:6c:10:6e:f7:7a:67:cd:11:b3:9e:73: cc:c7:83:e2:f5:ea:81:ab:bf:84:c4:98:35:c1:8a: df:e7:26:52:f4:18:a8:eb:17:91:93:05:72:b9:7f: fe:af:29:27:07:a1:39:73:d8:43:1f:31:20:f4:2f: 87:6a:d8:2d:aa:be:c8:06:76:6c:9c:b1:ae:5c:06: d7:5b:fe:09:c5:7a:27:a7:ae:95:6b:37:86:55:67: a1:b1:c6:8d:a0:4a:ad:bb:d1:d8:5f:c1:7b:46:0d: 95:d5:ac:3a:0c:86:8b:76:df:3c:cc:8d:4b:3c:a7: 18:ab:f9:7a:28:7a:55:5a:47:67:1a:ee:48:d5:8a: e3:38:80:e7:cd:7b:8b:66:a0:36:fc:88:df:e5:5a: d6:5f:90:89:7f:0f:15:13:f9:1c:84:83:bc:c0:6b: 79:8d:61:c7:45:6f:85:b8:0f:cb:8c:48:09:ab:93: f6:cb:eb:d8:f9:49:96:ac:06:4c:12:11:5d:74:0c: 23:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:0A:AC:E6:5C:14:75:A7:1E:3D:31:2C:8F:3F:88:EF:F7:DF:40:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28476f09-459d-3de2-b999-0c7cf09fdfec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:849e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:92:47:58:ef:8a:b2:bc:a7:86:b6:3f:af:3d:bd:67:8c:26: a0:26:ab:4c:62:78:ad:7e:94:a6:03:3d:11:b0:f0:dc:3a:bb: 08:af:82:14:64:2f:da:e5:f6:b8:dc:69:85:f1:b7:c8:8c:fb: 2a:b8:47:80:ec:54:68:79:37:92:64:07:c7:5d:41:5e:37:99: f3:3f:a8:a0:92:a7:bb:22:3f:db:04:b7:79:15:5e:eb:d1:63: 27:62:b2:cc:7d:9d:b2:5d:0b:94:c4:d3:49:2d:de:b4:94:31: ec:d3:7e:da:20:e9:1e:87:2e:fa:65:c8:00:10:a0:26:34:39: da:68:2b:57:34:79:d0:b2:8d:a6:d9:f9:7c:f8:87:fb:d1:8f: 56:20:d3:1d:f8:76:47:bd:d3:28:71:0a:cd:83:24:f3:d8:92: 4a:88:f0:ee:cf:34:b0:08:1c:63:56:04:97:61:0f:2e:40:ee: 56:9b:d8:d5:b7:4a:e5:1b:b4:f3:bc:ff:d5:7c:bf:b3:f2:07: eb:10:57:18:cd:9d:03:b9:42:f7:94:9a:92:8f:04:e5:54:bf: 82:d4:4a:ee:81:74:c8:2c:7a:d8:4b:d3:81:04:e6:8a:b4:8c: 52:91:49:0b:cb:a7:68:e5:55:43:0b:86:3e:09:65:21:6d:d4: b2:c2:00:6a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfq9SOj2grM3CZ/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk NzVjYzdlNjItNmMxZS00Yjk5LWE0MGQtYTRhMGI1NTBjYjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxi8jbcVi84A7RXVdsNu4nqKoC+t76AAgijgl 3jhFA2kRhTvHEHd8/Kxca8Kmyi595thX0wbHnhreyhWjYV1VbBBu93pnzRGznnPM x4Pi9eqBq7+ExJg1wYrf5yZS9Bio6xeRkwVyuX/+ryknB6E5c9hDHzEg9C+Hatgt qr7IBnZsnLGuXAbXW/4JxXonp66VazeGVWehscaNoEqtu9HYX8F7Rg2V1aw6DIaL dt88zI1LPKcYq/l6KHpVWkdnGu5I1YrjOIDnzXuLZqA2/Ijf5VrWX5CJfw8VE/kc hIO8wGt5jWHHRW+FuA/LjEgJq5P2y+vY+UmWrAZMEhFddAwjxQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHYKrOZcFHWnHj0xLI8/iO/330AoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjg0NzZmMDktNDU5ZC0z ZGUyLWI5OTktMGM3Y2YwOWZkZmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYSe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMqSR1jvirK8p4a2P689vWeMJqAmq0xieK1+lKYDPRGw8Nw6uwiv ghRkL9rl9rjcaYXxt8iM+yq4R4DsVGh5N5JkB8ddQV43mfM/qKCSp7siP9sEt3kV XuvRYydissx9nbJdC5TE00kt3rSUMezTftog6R6HLvplyAAQoCY0OdpoK1c0edCy jabZ+Xz4h/vRj1Yg0x34dke90yhxCs2DJPPYkkqI8O7PNLAIHGNWBJdhDy5A7lab 2NW3SuUbtPO8/9V8v7PyB+sQVxjNnQO5QveUmpKPBOVUv4LUSu6BdMgsethL04EE 5oq0jFKRSQvLp2jlVUMLhj4JZSFt1LLCAGo= -----END CERTIFICATE-----Generated at Sun May 5 02:36:21 2024 by rpki-client on console-fra.rpki-client.org