$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35f87b1c-be8b-374c-8bfe-33998c13e118.roa File: 35f87b1c-be8b-374c-8bfe-33998c13e118.roa (raw, json) Hash identifier: LEgbp4+Lmaakt0WSYFv4LbWJkbTEdU4rhOwS8aiNhHw= Subject key identifier: 00:D8:FF:CA:6D:2C:2A:67:1F:D0:9D:A4:41:E7:4B:05:25:B2:DD:B5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAC1E54CB67336EB70C54E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35f87b1c-be8b-374c-8bfe-33998c13e118.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 33287 IP address blocks: 2001:559:83da::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ac:1e:54:cb:67:33:6e:b7:0c:54:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=1aa44141-3246-4b6e-9e59-964372fc315e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d5:e6:3e:d9:3b:81:87:a0:c6:45:b4:77:16: 84:85:9d:98:ea:7b:0b:ac:5f:be:c8:db:15:e6:f0: 68:3d:3a:c4:89:25:6b:10:06:0f:4b:29:6d:24:bf: 7b:f3:64:ea:e0:98:0f:f6:9f:30:42:87:6a:6e:4e: 62:79:17:7e:a6:6e:2c:f9:12:8d:87:f6:cd:54:35: b2:46:29:a1:94:3e:17:68:d2:a5:5d:02:64:70:b6: e6:08:f1:04:df:5c:da:83:cb:30:3b:58:31:46:1c: eb:4d:2f:a6:b3:97:58:d7:23:00:32:8f:c3:93:c1: e9:aa:d5:c9:fb:61:1d:c3:04:a2:86:32:5c:ab:27: 66:2a:a8:0a:a7:2f:18:39:f1:f7:68:e6:e6:33:35: 3e:df:7f:9e:1c:2c:c2:56:e8:53:27:7d:24:3d:ca: 01:f8:c3:ec:14:c7:dd:3b:d3:56:5e:83:d5:dc:96: 67:07:ac:96:9c:e8:38:cc:55:bb:cf:24:a5:2d:e9: 6f:35:5e:92:b2:f1:02:ca:e4:de:5c:a0:04:11:4d: 71:3f:81:0f:f4:f1:5d:c9:05:94:98:a0:e1:c5:da: 55:29:43:f4:70:c9:00:6f:a2:a0:c5:67:12:85:72: e7:d8:54:68:38:0c:6e:02:fd:a4:44:25:17:58:31: 67:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:D8:FF:CA:6D:2C:2A:67:1F:D0:9D:A4:41:E7:4B:05:25:B2:DD:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35f87b1c-be8b-374c-8bfe-33998c13e118.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:83da::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:82:9a:ba:c5:1c:ff:4b:c1:71:ed:7a:71:a8:cb:c6:13:f6: 53:64:c4:d8:54:39:86:5d:52:db:dc:07:93:15:c2:4e:fe:d5: b7:78:7e:25:64:47:87:07:26:00:d6:71:91:ef:3e:c4:7c:1b: c0:4a:ca:00:07:87:28:94:9a:d8:16:9f:da:84:cc:ea:9e:74: bd:55:4c:53:21:75:26:90:f4:a0:7c:66:9a:c8:db:e9:b9:71: c7:ca:8a:fe:b5:99:bc:16:e8:bf:7e:eb:51:ae:f7:fb:c5:02: a5:54:eb:d3:09:01:32:e9:07:67:cd:d1:f3:3b:d9:0e:3b:4d: cf:0d:90:3e:d9:36:d0:5b:a7:09:36:a8:15:39:e1:fd:d2:ea: d8:fc:ba:3b:92:01:5c:79:5e:3c:92:37:78:39:16:cb:70:d3: 2a:9e:69:b4:86:47:ce:d4:27:8d:84:ee:0f:f8:01:8f:f2:ad: 66:10:bb:00:25:1e:5c:98:7e:9a:3d:c1:78:20:05:c4:a0:e1: 11:1f:8f:2c:cf:71:c1:d3:65:08:04:d6:9e:d8:b5:8b:91:dd: c8:58:35:c9:1f:8a:2d:95:70:a1:10:f3:d9:a5:2f:ad:5c:d3: 21:a7:9c:24:42:b6:46:72:10:68:cc:76:45:4d:c0:8e:ca:13: 3a:29:2a:26 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfrB5Uy2czbrcMVOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk MWFhNDQxNDEtMzI0Ni00YjZlLTllNTktOTY0MzcyZmMzMTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tXmPtk7gYegxkW0dxaEhZ2Y6nsLrF++yNsV 5vBoPTrEiSVrEAYPSyltJL9782Tq4JgP9p8wQodqbk5ieRd+pm4s+RKNh/bNVDWy RimhlD4XaNKlXQJkcLbmCPEE31zag8swO1gxRhzrTS+ms5dY1yMAMo/Dk8HpqtXJ +2EdwwSihjJcqydmKqgKpy8YOfH3aObmMzU+33+eHCzCVuhTJ30kPcoB+MPsFMfd O9NWXoPV3JZnB6yWnOg4zFW7zySlLelvNV6SsvECyuTeXKAEEU1xP4EP9PFdyQWU mKDhxdpVKUP0cMkAb6KgxWcShXLn2FRoOAxuAv2kRCUXWDFndwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFADY/8ptLCpnH9CdpEHnSwUlst21MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzVmODdiMWMtYmU4Yi0z NzRjLThiZmUtMzM5OThjMTNlMTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYPa MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADeCmrrFHP9LwXHtenGoy8YT9lNkxNhUOYZdUtvcB5MVwk7+1bd4 fiVkR4cHJgDWcZHvPsR8G8BKygAHhyiUmtgWn9qEzOqedL1VTFMhdSaQ9KB8ZprI 2+m5ccfKiv61mbwW6L9+61Gu9/vFAqVU69MJATLpB2fN0fM72Q47Tc8NkD7ZNtBb pwk2qBU54f3S6tj8ujuSAVx5XjySN3g5Fstw0yqeabSGR87UJ42E7g/4AY/yrWYQ uwAlHlyYfpo9wXggBcSg4REfjyzPccHTZQgE1p7YtYuR3chYNckfii2VcKEQ89ml L61c0yGnnCRCtkZyEGjMdkVNwI7KEzopKiY= -----END CERTIFICATE-----Generated at Sun May 5 02:15:35 2024 by rpki-client on console-ams.rpki-client.org