$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32dfd0e8-c6f9-35d9-9052-a89d31fbe624.roa File: 32dfd0e8-c6f9-35d9-9052-a89d31fbe624.roa (raw, json) Hash identifier: F9H/qpynrvgRVyJpIx0E1Owv7v3roEh8Cfg3+RdvCwM= Subject key identifier: 67:FF:39:9A:AC:A8:2C:3B:4C:3F:0B:0F:FC:8B:DA:27:9A:1B:D8:9D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285847BEFA44A21CC6998BE6F68540 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32dfd0e8-c6f9-35d9-9052-a89d31fbe624.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 33651 IP address blocks: 2001:559:867c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:fa:44:a2:1c:c6:99:8b:e6:f6:85:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=264038e5-b2ee-42de-b112-8e7885a30bf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:cc:33:62:d6:c5:ac:b8:a8:96:ef:6c:30:aa: 59:ff:f2:24:7b:73:b5:2f:37:b1:fb:cd:51:af:8a: 94:7f:59:b7:90:1d:f6:e5:bd:64:77:e3:b1:0c:5e: 11:5f:21:6f:c6:98:bb:05:e8:a4:89:9c:6a:3f:de: 2c:6e:e4:56:8d:83:94:ea:21:56:ff:6b:35:83:99: d9:8b:87:46:24:97:c6:7a:7e:39:74:eb:7d:cd:72: a4:fe:58:44:a4:cf:58:83:d3:fa:91:50:b0:ce:c5: 78:05:01:47:3e:57:e1:57:ed:80:49:a9:3a:48:a5: 24:b7:0b:5a:7f:9e:4d:33:d5:b5:82:6d:0c:c6:b6: d1:54:d8:12:a2:62:f5:47:41:16:d9:24:ab:16:aa: aa:5a:ef:2c:93:3d:0a:a9:c6:19:2f:87:72:69:1f: bd:57:e5:fe:a4:9d:13:ec:f2:6b:08:70:51:f6:0f: d7:92:0e:79:f5:82:41:81:c7:37:e0:f5:b7:43:7b: 0b:67:6a:a1:f9:2a:d2:ff:ac:a9:c3:02:55:14:a2: c7:13:23:72:65:de:bd:31:df:f1:42:37:61:76:2d: d8:95:cb:60:eb:bf:22:20:c7:15:7c:13:7d:97:84: 2c:51:f5:98:98:93:78:1f:38:c9:98:0f:61:d9:be: 93:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:FF:39:9A:AC:A8:2C:3B:4C:3F:0B:0F:FC:8B:DA:27:9A:1B:D8:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32dfd0e8-c6f9-35d9-9052-a89d31fbe624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:867c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:ef:58:bf:73:44:4c:30:02:dd:5d:05:5a:aa:bd:88:28:b8: 06:e9:0b:03:ff:10:81:bc:2b:63:f9:46:ed:6a:af:ce:1d:78: 01:7b:14:fa:b0:2e:ad:0d:4c:73:3e:2c:38:e3:0d:3a:36:d2: f3:02:f6:32:31:c1:87:7c:52:39:35:98:d1:68:a7:4d:d3:55: 16:5f:da:c8:20:52:eb:13:92:90:2a:47:81:f9:cb:3b:51:2b: c5:3a:47:9e:f6:6d:47:21:41:eb:1e:af:54:3f:67:7e:b9:8e: af:69:f0:39:db:2a:36:18:3a:a0:23:db:e6:e3:b7:40:8b:67: bb:58:3f:89:d8:6a:3b:a7:c0:b3:b6:6b:e0:ce:fb:ff:d1:a7: dd:97:21:1b:b6:ad:c2:f5:b4:70:f9:d7:f9:01:c1:42:bd:8b: 51:e0:9c:25:1a:ed:fd:48:97:46:0b:b3:44:54:65:bb:92:93: 0c:8b:5c:1d:13:c7:d3:cf:3b:9f:0d:94:85:c3:8a:7a:4e:b2: 25:fc:bd:b3:75:9f:ae:6b:f3:13:f3:e7:b2:b3:6e:ec:44:a1: af:c1:d7:93:a5:11:0c:db:3b:6e:bd:06:44:d6:ab:b3:b7:1e: 22:4d:ab:99:51:59:f4:60:77:62:84:48:c6:8a:46:0d:e1:29: 15:d9:d5:28 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe++kSiHMaZi+b2hUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk MjY0MDM4ZTUtYjJlZS00MmRlLWIxMTItOGU3ODg1YTMwYmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8wzYtbFrLiolu9sMKpZ//Ike3O1Lzex+81R r4qUf1m3kB325b1kd+OxDF4RXyFvxpi7BeikiZxqP94sbuRWjYOU6iFW/2s1g5nZ i4dGJJfGen45dOt9zXKk/lhEpM9Yg9P6kVCwzsV4BQFHPlfhV+2ASak6SKUktwta f55NM9W1gm0MxrbRVNgSomL1R0EW2SSrFqqqWu8skz0KqcYZL4dyaR+9V+X+pJ0T 7PJrCHBR9g/Xkg559YJBgcc34PW3Q3sLZ2qh+SrS/6ypwwJVFKLHEyNyZd69Md/x Qjdhdi3Ylctg678iIMcVfBN9l4QsUfWYmJN4HzjJmA9h2b6TvQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGf/OZqsqCw7TD8LD/yL2ieaG9idMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzJkZmQwZTgtYzZmOS0z NWQ5LTkwNTItYTg5ZDMxZmJlNjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYZ8 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFXvWL9zREwwAt1dBVqqvYgouAbpCwP/EIG8K2P5Ru1qr84deAF7 FPqwLq0NTHM+LDjjDTo20vMC9jIxwYd8Ujk1mNFop03TVRZf2sggUusTkpAqR4H5 yztRK8U6R572bUchQeser1Q/Z365jq9p8DnbKjYYOqAj2+bjt0CLZ7tYP4nYajun wLO2a+DO+//Rp92XIRu2rcL1tHD51/kBwUK9i1HgnCUa7f1Il0YLs0RUZbuSkwyL XB0Tx9PPO58NlIXDinpOsiX8vbN1n65r8xPz57KzbuxEoa/B15OlEQzbO269BkTW q7O3HiJNq5lRWfRgd2KESMaKRg3hKRXZ1Sg= -----END CERTIFICATE-----Generated at Fri Nov 22 11:52:26 2024 by rpki-client on console-ams.rpki-client.org