$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2902da7d-5c09-3df2-8ff9-0e28eced0f40.roa File: 2902da7d-5c09-3df2-8ff9-0e28eced0f40.roa (raw, json) Hash identifier: MZAnY5QEzEQlEOv/blnFN7F2sWyvr6sD8yQYOTjiqi0= Subject key identifier: CD:05:D8:1E:6B:8C:19:66:25:8E:C7:D1:F6:EE:7F:A5:20:5D:2E:E1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858482D5A9F6BB02AB24F94F61D80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2902da7d-5c09-3df2-8ff9-0e28eced0f40.roa Signing time: Thu 12 Dec 2024 02:00:38 +0000 ROA not before: Thu 12 Dec 2024 02:00:38 +0000 ROA not after: Wed 12 Mar 2025 01:00:38 +0000 asID: 7725 IP address blocks: 2001:559:2012::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Dec 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2d:5a:9f:6b:b0:2a:b2:4f:94:f6:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Dec 12 02:00:38 2024 GMT Not After : Mar 12 01:00:38 2025 GMT Subject: CN=47ebdc0c-ee7f-4ff2-b9e9-4ee539635b56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3d:07:c3:bc:99:90:ff:f9:fb:f4:b9:8a:18: 06:fc:60:27:78:bd:f3:33:3c:4b:17:c6:2e:5d:3c: ef:0f:5f:b8:4e:75:c1:33:83:78:43:c0:b9:5c:13: 46:b1:20:c3:63:c1:2b:c4:a3:7a:54:44:5a:e1:fb: f1:c7:e6:7f:ec:7a:4a:50:3b:5f:8c:09:1a:96:de: 65:86:9b:e6:12:62:5b:a6:8b:50:78:2c:2c:7f:54: 4a:a8:13:03:32:89:0d:0d:66:f8:a6:5d:85:97:97: 36:02:b7:9e:c4:14:1a:58:b5:01:b2:21:44:09:6c: 56:03:a7:4d:3a:12:01:23:0b:37:0f:fe:c8:32:a0: 61:47:d3:08:32:07:08:71:ef:14:2f:21:4c:d7:d1: b1:a8:5c:0b:d1:82:3c:e0:0f:c7:53:79:03:c9:94: fe:72:cb:80:a7:3a:0e:17:0b:67:13:29:b5:8b:59: e8:88:63:3c:58:1e:f2:40:d2:9d:ab:d5:f1:38:94: 71:56:90:1e:04:8a:b9:07:f3:fd:bb:97:d2:a3:63: d9:27:89:73:d3:cf:f3:5f:3e:7b:71:27:63:ca:4f: bf:8a:cf:49:64:a9:ca:25:8e:19:07:bc:36:d2:98: 57:e2:c6:f8:af:24:b6:ce:f1:c6:d7:a0:16:29:87: 5c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:05:D8:1E:6B:8C:19:66:25:8E:C7:D1:F6:EE:7F:A5:20:5D:2E:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2902da7d-5c09-3df2-8ff9-0e28eced0f40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:2012::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:17:eb:75:04:76:98:13:b4:11:ce:90:e7:d5:f2:d0:a2:76: 2c:eb:9e:85:e3:4c:8e:6f:f5:ba:c4:36:0b:cf:9f:db:12:06: f7:47:4d:5d:fe:a0:54:7a:9c:df:3a:11:4c:58:cc:71:1f:ee: 96:f2:c9:8c:74:65:65:47:78:ea:b5:b9:be:de:02:e9:b5:67: c3:44:25:1a:08:4f:5f:2f:ac:c2:64:af:cb:35:1a:52:1d:6c: 86:6c:09:7e:a6:11:20:92:d9:a7:f3:60:bf:a2:39:9c:bb:9d: 30:ac:8f:3c:5b:cf:7c:77:a9:93:5b:49:25:d1:09:d7:96:95: 95:de:08:4b:1a:bf:95:67:0f:09:f8:83:29:d0:e6:89:42:9a: 3a:d9:6d:59:a1:46:ff:21:96:4d:47:de:e2:dc:b3:4b:01:15: f4:d0:9b:4e:9b:f1:2f:63:01:d3:c7:cc:d0:2d:5d:7a:51:66: 56:b4:10:a8:5e:51:9d:03:15:41:86:b7:d1:d2:0c:f0:c4:7c: f4:ea:a0:41:86:0f:72:41:43:b6:1b:67:89:4e:8d:9d:4f:35: 3c:f1:a0:6f:61:f3:e2:b0:23:8e:08:ec:91:dd:ae:66:0c:d7: 9b:53:cf:eb:2e:91:57:51:92:53:7a:54:f3:1c:06:40:1d:9f: 35:9b:4b:7a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgtWp9rsCqyT5T2HYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTIxMjAyMDAzOFoXDTI1MDMxMjAxMDAzOFowLzEtMCsGA1UEAxMk NDdlYmRjMGMtZWU3Zi00ZmYyLWI5ZTktNGVlNTM5NjM1YjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiz0Hw7yZkP/5+/S5ihgG/GAneL3zMzxLF8Yu XTzvD1+4TnXBM4N4Q8C5XBNGsSDDY8ErxKN6VERa4fvxx+Z/7HpKUDtfjAkalt5l hpvmEmJbpotQeCwsf1RKqBMDMokNDWb4pl2Fl5c2AreexBQaWLUBsiFECWxWA6dN OhIBIws3D/7IMqBhR9MIMgcIce8ULyFM19GxqFwL0YI84A/HU3kDyZT+csuApzoO FwtnEym1i1noiGM8WB7yQNKdq9XxOJRxVpAeBIq5B/P9u5fSo2PZJ4lz08/zXz57 cSdjyk+/is9JZKnKJY4ZB7w20phX4sb4ryS2zvHG16AWKYdctwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM0F2B5rjBlmJY7H0fbuf6UgXS7hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjkwMmRhN2QtNWMwOS0z ZGYyLThmZjktMGUyOGVjZWQwZjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWSAS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKMX63UEdpgTtBHOkOfV8tCidizrnoXjTI5v9brENgvPn9sSBvdH TV3+oFR6nN86EUxYzHEf7pbyyYx0ZWVHeOq1ub7eAum1Z8NEJRoIT18vrMJkr8s1 GlIdbIZsCX6mESCS2afzYL+iOZy7nTCsjzxbz3x3qZNbSSXRCdeWlZXeCEsav5Vn Dwn4gynQ5olCmjrZbVmhRv8hlk1H3uLcs0sBFfTQm06b8S9jAdPHzNAtXXpRZla0 EKheUZ0DFUGGt9HSDPDEfPTqoEGGD3JBQ7YbZ4lOjZ1PNTzxoG9h8+KwI44I7JHd rmYM15tTz+sukVdRklN6VPMcBkAdnzWbS3o= -----END CERTIFICATE-----Generated at Sun Dec 22 16:14:17 2024 by rpki-client on console-ams.rpki-client.org