$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c017776-f1fd-31d7-917c-a1e5e8a404e1.roa File: 2c017776-f1fd-31d7-917c-a1e5e8a404e1.roa (raw, json) Hash identifier: 3ZWhOXELbAfrMeQWpq8WRkQrFXi1F122Bfz8UsSebtg= Subject key identifier: 60:4C:D8:5B:F7:71:2A:28:4A:9D:D2:FD:0D:D7:2A:FC:B8:86:F6:B3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAB4830D9D98EA958D4AF80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c017776-f1fd-31d7-917c-a1e5e8a404e1.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 7016 IP address blocks: 2001:559:85f1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ab:48:30:d9:d9:8e:a9:58:d4:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=67749c63-ad4d-4166-b7ce-428728bd4e40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a5:a5:97:a9:40:69:30:b3:66:61:db:47:92: dd:bf:21:fe:69:35:0a:2b:2b:00:5e:56:8c:85:7c: 1e:c4:e9:4b:01:47:88:36:1e:43:19:3f:6d:1f:23: d2:51:d2:a7:d7:f5:43:ce:9a:15:ca:fc:a2:a8:02: df:de:06:35:8f:ae:36:77:d6:4a:13:e4:fc:8f:1e: d7:66:e9:1c:a7:c9:45:2c:0c:2e:a6:52:02:48:73: 9e:2a:80:80:f2:a0:1c:bf:48:b0:7f:fc:c8:e3:48: 75:91:e7:e9:70:22:e8:e0:1a:2d:cd:ee:77:ca:29: a6:67:1c:8c:6b:66:83:21:67:01:65:ae:0a:6a:10: 63:96:6e:99:2a:da:dd:54:71:2c:f8:68:98:8c:ea: 41:70:04:48:41:e8:1a:7d:b7:f4:fb:70:a8:f5:bc: eb:a2:aa:4c:e5:58:7e:0c:a4:29:f1:d4:e4:77:e1: 08:f9:af:51:ad:87:52:15:a0:8b:23:d9:d0:bc:72: 72:ce:a3:cd:84:67:20:03:f5:a6:e7:55:8c:80:df: 20:ea:4d:77:2f:4b:da:ec:ed:1b:cb:dc:93:96:ca: 35:70:d6:8a:08:7f:2d:b7:58:8e:9f:77:6c:44:47: dc:df:6c:a6:63:48:06:a0:ef:c4:02:cd:51:37:fa: 50:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:4C:D8:5B:F7:71:2A:28:4A:9D:D2:FD:0D:D7:2A:FC:B8:86:F6:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c017776-f1fd-31d7-917c-a1e5e8a404e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:85f1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:64:ba:a4:a9:27:dd:1e:c8:6d:d2:3b:f6:84:fe:56:b2:71: e1:e0:b6:bc:52:36:ba:7e:8a:d8:df:49:02:1f:6d:ae:e7:00: 56:52:68:90:47:13:9b:e7:66:37:1e:d0:e5:91:fb:9b:d4:19: 61:61:79:5a:11:07:a9:f0:9d:61:75:14:c2:e1:c4:1a:9a:0e: 8f:52:e9:d4:b7:78:0b:ee:9f:fa:80:cd:9f:2a:36:64:b7:a0: 3f:c9:99:53:66:87:10:3f:d1:55:84:f7:25:cd:da:fa:bd:30: 59:e3:1f:c5:3a:73:37:39:eb:3a:1c:f6:76:2e:a3:8d:dd:56: 5f:83:e6:37:ed:88:f7:24:96:aa:6d:7d:ef:ca:d3:36:0c:4a: 9c:c3:41:fe:92:54:5c:a4:23:94:73:f1:6d:39:e5:96:3c:49: 8d:6a:35:75:94:32:d3:10:54:c9:3e:bd:f9:0f:ab:ba:ed:ab: 88:03:64:ac:ea:bb:d9:75:53:20:92:ee:6a:1f:e7:39:04:53: 96:73:d5:6c:1e:77:23:01:85:8d:82:99:43:35:3e:27:e0:c7: 8a:17:8d:3b:b0:3e:03:a1:79:3f:b8:79:f8:ce:08:a5:53:e1: 92:5d:01:41:a8:4c:97:6f:c6:eb:07:87:ca:51:01:26:5e:84: 9d:cf:75:b0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfq0gw2dmOqVjUr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk Njc3NDljNjMtYWQ0ZC00MTY2LWI3Y2UtNDI4NzI4YmQ0ZTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqWll6lAaTCzZmHbR5LdvyH+aTUKKysAXlaM hXwexOlLAUeINh5DGT9tHyPSUdKn1/VDzpoVyvyiqALf3gY1j642d9ZKE+T8jx7X Zukcp8lFLAwuplICSHOeKoCA8qAcv0iwf/zI40h1kefpcCLo4Botze53yimmZxyM a2aDIWcBZa4KahBjlm6ZKtrdVHEs+GiYjOpBcARIQegafbf0+3Co9bzroqpM5Vh+ DKQp8dTkd+EI+a9RrYdSFaCLI9nQvHJyzqPNhGcgA/Wm51WMgN8g6k13L0va7O0b y9yTlso1cNaKCH8tt1iOn3dsREfc32ymY0gGoO/EAs1RN/pQnQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGBM2Fv3cSooSp3S/Q3XKvy4hvazMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmMwMTc3NzYtZjFmZC0z MWQ3LTkxN2MtYTFlNWU4YTQwNGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYXx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD5kuqSpJ90eyG3SO/aE/layceHgtrxSNrp+itjfSQIfba7nAFZS aJBHE5vnZjce0OWR+5vUGWFheVoRB6nwnWF1FMLhxBqaDo9S6dS3eAvun/qAzZ8q NmS3oD/JmVNmhxA/0VWE9yXN2vq9MFnjH8U6czc56zoc9nYuo43dVl+D5jftiPck lqptfe/K0zYMSpzDQf6SVFykI5Rz8W055ZY8SY1qNXWUMtMQVMk+vfkPq7rtq4gD ZKzqu9l1UyCS7mof5zkEU5Zz1WwedyMBhY2CmUM1Pifgx4oXjTuwPgOheT+4efjO CKVT4ZJdAUGoTJdvxusHh8pRASZehJ3PdbA= -----END CERTIFICATE-----Generated at Sat May 4 14:46:29 2024 by rpki-client on console-fra.rpki-client.org