$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f4342c2-8c64-374f-9b72-f4cdc3642758.roa File: 2f4342c2-8c64-374f-9b72-f4cdc3642758.roa (raw, json) Hash identifier: FW1TMOA7qVsYQSbjHXyiApiBhwqJhA8nJ8jKe3JdGVM= Subject key identifier: CE:B9:E6:CC:0B:C9:7C:03:69:56:F0:95:1A:89:97:50:1B:F5:8A:EE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FB080D58D81E536592DDF80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f4342c2-8c64-374f-9b72-f4cdc3642758.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 33659 IP address blocks: 2001:559:c2ac::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:b0:80:d5:8d:81:e5:36:59:2d:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=18987c7f-9b24-4bef-9b9d-8985aa34bd42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f9:cd:e6:55:7f:ba:a6:2d:87:b8:07:53:f5: 6f:06:e1:b1:c3:dc:2c:85:f6:ba:b1:61:b0:ce:8e: b6:99:53:97:d2:1e:75:83:41:f8:d8:af:4a:14:ff: 66:6b:29:21:97:6c:87:1a:c6:c5:87:42:47:d4:5c: ff:88:1f:05:8c:e9:3f:2f:a3:c5:93:22:a5:46:b9: cf:c9:cf:2f:d1:e3:72:a5:98:24:f6:50:c4:43:3a: ff:0f:ce:46:f1:0a:f5:16:73:7f:6a:5e:0d:68:56: 43:e2:60:1b:84:87:18:55:6c:88:e4:47:9b:f1:13: a4:ee:a6:0f:f5:c9:ff:57:2d:e9:5a:34:12:9f:f4: df:70:f7:ec:5f:98:88:34:b0:8c:6e:54:93:8a:e3: f8:83:9b:b7:fe:5d:1e:16:00:f6:61:18:d5:63:9c: 1e:3c:ee:f2:fb:b4:2a:84:d0:02:01:79:00:78:2a: 2d:1a:f5:10:44:54:8d:35:7e:79:05:66:7c:87:0d: 5a:bc:57:d4:f5:ec:4e:b9:b9:44:93:d5:d8:2f:ad: ee:1d:e8:85:bc:33:90:19:92:d4:8f:21:48:72:6d: 48:fb:8c:6e:11:3c:e4:e2:23:48:84:c5:0e:e5:70: 70:ec:98:55:3c:e1:22:85:51:71:40:6d:c1:06:b2: 85:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B9:E6:CC:0B:C9:7C:03:69:56:F0:95:1A:89:97:50:1B:F5:8A:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f4342c2-8c64-374f-9b72-f4cdc3642758.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c2ac::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:60:18:99:ce:32:bc:48:94:c6:2d:fe:53:8f:82:cc:43:29: 3b:5c:46:64:ee:6b:6b:bd:f8:2b:eb:b5:a3:8c:fa:00:3c:99: 77:6d:f6:00:f2:94:16:8d:8b:69:8c:75:f8:84:ed:c8:3a:dc: 62:69:41:78:2d:6b:03:e6:96:07:c5:64:30:29:df:47:0a:4f: 5c:09:70:56:80:76:f3:4b:cd:fc:46:5c:f1:19:13:79:e8:17: 08:88:85:1e:73:58:37:dc:17:40:2d:8b:34:70:70:15:3a:6d: 90:1d:2f:ab:3a:08:8e:d4:90:76:35:23:de:eb:16:20:65:a6: 5b:7f:49:f1:ef:0b:3b:f5:74:36:38:84:4b:cb:21:38:32:56: e7:37:71:70:73:50:12:3f:34:d9:68:b0:24:f0:3b:de:74:02: 3b:94:3c:90:23:87:d2:7e:85:87:db:2a:37:9a:63:68:09:b0: 48:33:89:68:80:a4:2b:20:8c:74:c6:9e:c0:20:46:a0:75:37: 9e:26:12:a1:e1:7e:24:89:bc:91:4a:02:8a:51:40:27:1b:a7: 3a:e7:0e:5d:90:fc:e9:65:57:be:79:07:85:36:a1:fb:91:42: d9:75:3e:35:1c:4d:45:8f:1d:d6:cf:2b:9d:35:49:17:94:a4: c1:64:47:af -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfsIDVjYHlNlkt34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk MTg5ODdjN2YtOWIyNC00YmVmLTliOWQtODk4NWFhMzRiZDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfnN5lV/uqYth7gHU/VvBuGxw9wshfa6sWGw zo62mVOX0h51g0H42K9KFP9maykhl2yHGsbFh0JH1Fz/iB8FjOk/L6PFkyKlRrnP yc8v0eNypZgk9lDEQzr/D85G8Qr1FnN/al4NaFZD4mAbhIcYVWyI5Eeb8ROk7qYP 9cn/Vy3pWjQSn/TfcPfsX5iINLCMblSTiuP4g5u3/l0eFgD2YRjVY5wePO7y+7Qq hNACAXkAeCotGvUQRFSNNX55BWZ8hw1avFfU9exOublEk9XYL63uHeiFvDOQGZLU jyFIcm1I+4xuETzk4iNIhMUO5XBw7JhVPOEihVFxQG3BBrKFXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM655swLyXwDaVbwlRqJl1Ab9YruMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmY0MzQyYzItOGM2NC0z NzRmLTliNzItZjRjZGMzNjQyNzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcKs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABtgGJnOMrxIlMYt/lOPgsxDKTtcRmTua2u9+CvrtaOM+gA8mXdt 9gDylBaNi2mMdfiE7cg63GJpQXgtawPmlgfFZDAp30cKT1wJcFaAdvNLzfxGXPEZ E3noFwiIhR5zWDfcF0AtizRwcBU6bZAdL6s6CI7UkHY1I97rFiBlplt/SfHvCzv1 dDY4hEvLITgyVuc3cXBzUBI/NNlosCTwO950AjuUPJAjh9J+hYfbKjeaY2gJsEgz iWiApCsgjHTGnsAgRqB1N54mEqHhfiSJvJFKAopRQCcbpzrnDl2Q/OllV755B4U2 ofuRQtl1PjUcTUWPHdbPK501SReUpMFkR68= -----END CERTIFICATE-----Generated at Sun May 5 02:15:19 2024 by rpki-client on console-ams.rpki-client.org