$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2fc276be-b6c3-394b-ad06-a15ecf688207.roa File: 2fc276be-b6c3-394b-ad06-a15ecf688207.roa (raw, json) Hash identifier: iPVnG23+8vaWNo8Aiqhs1fNJvHoRK3i4zrevGM2OhLc= Subject key identifier: A8:0C:3E:5B:93:7B:C7:8F:B5:4A:04:7A:AB:FA:B6:88:86:35:D1:8F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAC5A2C0ADAE7330E5B75C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2fc276be-b6c3-394b-ad06-a15ecf688207.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 33659 IP address blocks: 2001:559:82bc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ac:5a:2c:0a:da:e7:33:0e:5b:75:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=58efd48f-3d91-47d7-a0fd-356f99780a96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fd:a4:a1:9f:fd:85:78:e0:5a:c1:05:31:fb: eb:bd:dd:e1:9a:e7:77:0e:57:2b:aa:44:25:6b:8b: 92:d4:0a:ee:fd:1f:ec:40:99:c6:78:11:1b:8a:56: 5e:6e:c4:98:e8:af:5d:e7:56:8f:87:02:07:5b:77: 86:7a:da:21:2c:38:7b:22:2d:91:d9:9e:02:30:e2: d0:9c:1c:5b:b5:a0:a0:9f:18:1d:cb:0e:5c:ea:77: a3:a9:31:4e:4b:1c:cb:55:00:1a:ce:9f:31:c3:46: 10:d7:6a:1a:d8:e3:1e:92:b4:95:62:40:1d:5a:4a: 4c:45:50:f7:4e:e3:59:1d:17:a0:86:7b:19:a1:57: 6c:12:8d:0e:95:60:91:79:4f:0b:07:8b:ef:50:c6: 11:93:8e:30:36:96:1e:fc:97:6f:e9:e2:05:42:5b: 33:96:bc:55:24:21:da:f9:dc:1b:33:e1:cf:34:6d: 39:71:bf:8a:83:40:0f:f9:84:d7:7a:c2:37:b5:90: fa:6e:99:0e:f6:5a:02:e6:8d:6a:2a:e0:14:f2:d0: df:79:59:6c:53:af:cc:ee:8b:59:05:3f:b1:c4:c1: 73:43:b0:24:76:fc:ff:6b:15:e9:c6:1d:3c:d2:99: 79:5d:22:6f:9d:28:19:bd:e5:62:d6:8d:e7:48:6f: 75:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:0C:3E:5B:93:7B:C7:8F:B5:4A:04:7A:AB:FA:B6:88:86:35:D1:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2fc276be-b6c3-394b-ad06-a15ecf688207.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:82bc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:6d:56:ae:b1:ba:d4:5a:ce:2c:6f:df:4f:a4:bb:c6:77:b4: 18:e2:bc:86:56:86:31:0e:9c:19:ed:45:54:65:f5:5a:23:15: 68:f3:0a:02:71:64:6e:bd:45:d7:e4:e4:de:95:62:c4:aa:6c: e3:c4:3f:04:f4:94:b7:d5:81:f8:ac:ce:05:3b:0b:d9:89:8b: e3:ec:bc:95:0e:aa:2d:92:35:11:39:73:a4:12:80:c5:14:bd: 0d:0c:3a:1b:32:a7:7b:1f:5e:2a:6c:b3:d4:10:b7:c7:f3:ab: 3e:a3:91:26:7a:61:74:9f:74:f4:4e:cd:1e:5a:1b:98:15:ed: 90:52:79:02:ec:ac:54:01:a4:03:fc:14:2e:b1:18:d6:ca:32: e3:83:eb:f1:bd:fa:fd:3d:2b:9b:95:49:0c:e3:ea:4e:07:5c: 3e:13:b5:46:b3:3b:e8:d3:51:b0:9b:94:76:76:49:dc:57:28: 45:2f:c1:0a:9b:37:e6:cf:58:8c:f5:58:d7:23:30:9e:cf:ed: d0:e7:1a:00:39:a7:7a:09:a1:7e:39:e5:ef:0f:17:90:c5:3c: b4:20:6c:85:d0:57:40:fb:74:b0:52:9b:80:03:2e:c1:38:87: 0f:8b:e6:56:18:40:1b:14:93:b1:2e:d4:57:1f:d4:ec:43:66: ba:4b:e2:f7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfrFosCtrnMw5bdcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk NThlZmQ0OGYtM2Q5MS00N2Q3LWEwZmQtMzU2Zjk5NzgwYTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvv2koZ/9hXjgWsEFMfvrvd3hmud3DlcrqkQl a4uS1Aru/R/sQJnGeBEbilZebsSY6K9d51aPhwIHW3eGetohLDh7Ii2R2Z4CMOLQ nBxbtaCgnxgdyw5c6nejqTFOSxzLVQAazp8xw0YQ12oa2OMekrSVYkAdWkpMRVD3 TuNZHReghnsZoVdsEo0OlWCReU8LB4vvUMYRk44wNpYe/Jdv6eIFQlszlrxVJCHa +dwbM+HPNG05cb+Kg0AP+YTXesI3tZD6bpkO9loC5o1qKuAU8tDfeVlsU6/M7otZ BT+xxMFzQ7Akdvz/axXpxh080pl5XSJvnSgZveVi1o3nSG91QwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKgMPluTe8ePtUoEeqv6toiGNdGPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmZjMjc2YmUtYjZjMy0z OTRiLWFkMDYtYTE1ZWNmNjg4MjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYK8 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA1tVq6xutRazixv30+ku8Z3tBjivIZWhjEOnBntRVRl9VojFWjz CgJxZG69Rdfk5N6VYsSqbOPEPwT0lLfVgfiszgU7C9mJi+PsvJUOqi2SNRE5c6QS gMUUvQ0MOhsyp3sfXipss9QQt8fzqz6jkSZ6YXSfdPROzR5aG5gV7ZBSeQLsrFQB pAP8FC6xGNbKMuOD6/G9+v09K5uVSQzj6k4HXD4TtUazO+jTUbCblHZ2SdxXKEUv wQqbN+bPWIz1WNcjMJ7P7dDnGgA5p3oJoX455e8PF5DFPLQgbIXQV0D7dLBSm4AD LsE4hw+L5lYYQBsUk7Eu1Fcf1OxDZrpL4vc= -----END CERTIFICATE-----Generated at Sat May 4 14:49:07 2024 by rpki-client on console-ams.rpki-client.org