$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/31df2ca2-207b-39d2-aea4-0b04030fd01c.roa File: 31df2ca2-207b-39d2-aea4-0b04030fd01c.roa (raw, json) Hash identifier: lCclzCeLg2iUHo3K9QyeO64S8K8rNJBdfZrtkPjYyOs= Subject key identifier: 8C:94:F8:A2:83:05:71:D8:19:0F:6B:58:56:99:05:77:51:4D:E2:0F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285847BEFAE749FB1794D7E6CFB700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/31df2ca2-207b-39d2-aea4-0b04030fd01c.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 7015 IP address blocks: 2001:559:71a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:fa:e7:49:fb:17:94:d7:e6:cf:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=35af042c-ca1a-406b-a0dd-e3642e8ffc0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3f:1c:2d:c6:44:f8:8f:b5:4f:f0:c1:7c:f0: 65:ee:de:ca:c4:f0:83:eb:c3:e4:51:16:05:ad:af: 78:a4:67:25:cf:47:ba:09:62:f5:7d:81:60:8f:68: 2f:6f:c9:de:4d:20:85:4e:d9:69:aa:29:47:4c:7c: 37:8d:b6:32:45:e2:d8:34:74:40:af:ec:3b:04:b8: 64:9c:c3:1f:f3:92:2d:50:e7:e4:2f:25:55:7f:3d: a0:25:02:e4:0d:f2:eb:8a:87:f4:ac:a6:33:8b:37: 54:f3:34:7c:46:aa:1a:18:a4:44:c6:b8:65:28:9a: d0:95:b6:86:8e:2a:33:82:1c:45:6b:8a:12:17:82: a5:31:ee:35:52:a0:61:4a:2d:0f:f9:74:01:ac:1b: 34:cf:d3:24:3c:55:66:ad:c1:b1:b4:42:4a:b7:b3: 89:f5:94:e5:0a:35:10:3c:b8:86:98:56:a7:f1:0c: 4c:2a:9b:96:b6:c1:3e:37:e7:d9:77:2b:07:52:63: 47:04:e3:62:1d:be:40:74:58:5c:6e:97:19:14:b2: 9f:d5:08:ee:59:5f:d8:18:61:a8:d1:83:0c:2a:b2: c4:2f:f8:62:1a:1a:d8:3b:0a:8d:be:3e:ba:31:c5: 36:b5:ab:d4:13:12:66:49:26:a4:30:ee:63:9f:53: 7b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:94:F8:A2:83:05:71:D8:19:0F:6B:58:56:99:05:77:51:4D:E2:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/31df2ca2-207b-39d2-aea4-0b04030fd01c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:71a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:2f:1f:59:06:25:c1:5b:f7:70:82:51:3f:8a:de:87:18:ad: e0:2e:bf:96:21:c0:1f:4f:5b:1a:7d:38:4f:a8:36:8a:dc:a9: f6:71:bf:b8:76:88:a8:62:b8:ba:ce:17:b4:5a:8a:97:ff:fc: 62:70:2e:5c:3d:19:bc:4d:e0:b3:83:e0:8d:1a:71:d3:87:f4: 35:c2:60:d7:22:55:31:bd:bf:c2:01:de:96:2d:b0:dd:43:41: 97:b0:b4:38:7e:9b:ef:9d:e9:cd:4b:0f:41:83:29:fd:8f:60: ee:3a:b4:dc:7f:af:1a:ea:48:8b:66:fb:b1:05:6b:e7:e8:93: 09:0c:e9:41:d8:25:61:f2:33:99:c2:eb:a1:a4:0c:dd:a0:79: a9:51:49:24:c3:c6:1f:6c:6b:29:bb:8e:88:85:01:28:d7:25: e8:1e:e1:9a:03:41:53:9e:02:59:d2:3d:a2:62:c5:8c:4d:04: 96:e7:c9:97:e2:ed:05:60:ec:6b:a8:fe:9f:62:33:f9:06:30: b1:64:52:71:7d:85:d5:7a:af:bd:ea:6d:13:63:bc:b5:3d:74: 29:ff:49:a9:18:89:51:a6:3f:83:1a:56:53:46:54:1b:bc:28: 4b:08:a0:42:0a:04:5e:cf:97:7f:5e:bd:3a:5e:ef:49:ae:50: 2a:91:5e:60 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe++udJ+xeU1+bPtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk MzVhZjA0MmMtY2ExYS00MDZiLWEwZGQtZTM2NDJlOGZmYzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjj8cLcZE+I+1T/DBfPBl7t7KxPCD68PkURYF ra94pGclz0e6CWL1fYFgj2gvb8neTSCFTtlpqilHTHw3jbYyReLYNHRAr+w7BLhk nMMf85ItUOfkLyVVfz2gJQLkDfLriof0rKYzizdU8zR8RqoaGKRExrhlKJrQlbaG jiozghxFa4oSF4KlMe41UqBhSi0P+XQBrBs0z9MkPFVmrcGxtEJKt7OJ9ZTlCjUQ PLiGmFan8QxMKpuWtsE+N+fZdysHUmNHBONiHb5AdFhcbpcZFLKf1QjuWV/YGGGo 0YMMKrLEL/hiGhrYOwqNvj66McU2tavUExJmSSakMO5jn1N7mwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIyU+KKDBXHYGQ9rWFaZBXdRTeIPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzFkZjJjYTItMjA3Yi0z OWQyLWFlYTQtMGIwNDAzMGZkMDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQca MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHsvH1kGJcFb93CCUT+K3ocYreAuv5YhwB9PWxp9OE+oNorcqfZx v7h2iKhiuLrOF7Raipf//GJwLlw9GbxN4LOD4I0acdOH9DXCYNciVTG9v8IB3pYt sN1DQZewtDh+m++d6c1LD0GDKf2PYO46tNx/rxrqSItm+7EFa+fokwkM6UHYJWHy M5nC66GkDN2gealRSSTDxh9saym7joiFASjXJege4ZoDQVOeAlnSPaJixYxNBJbn yZfi7QVg7Guo/p9iM/kGMLFkUnF9hdV6r73qbRNjvLU9dCn/SakYiVGmP4MaVlNG VBu8KEsIoEIKBF7Pl39evTpe70muUCqRXmA= -----END CERTIFICATE-----Generated at Mon Nov 25 18:56:59 2024 by rpki-client on console-ams.rpki-client.org