$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3787e792-feb0-3f09-bd43-3ecfae92f707.roa File: 3787e792-feb0-3f09-bd43-3ecfae92f707.roa (raw, json) Hash identifier: Tqzw8RadZ39t1mjwilEOVGZFVf8JPrQauVPbC/TPm4c= Subject key identifier: 19:89:08:89:3F:32:E2:77:54:C1:BF:76:96:DB:F1:86:49:1E:32:CA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAC253AFC386F416B5D9800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3787e792-feb0-3f09-bd43-3ecfae92f707.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 33287 IP address blocks: 2001:559:c491::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ac:25:3a:fc:38:6f:41:6b:5d:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=3bca2a0d-357c-4732-a747-110dcdafb7a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:14:b0:41:13:4e:50:77:bf:51:43:86:33:8f: 48:f4:4c:76:95:ba:43:23:53:6a:54:ab:b2:f5:0f: 4c:4e:9c:3f:a0:8b:b6:4b:34:06:d9:51:d9:b5:ea: 8b:8c:a8:fc:a3:c6:c4:04:39:a5:52:d5:6e:26:48: cc:bf:79:20:d3:97:dc:e6:0a:46:67:f7:ed:b6:4d: 89:01:1c:26:c6:70:e0:6a:59:a0:63:b4:9c:d9:b8: 27:0e:18:45:c5:24:91:04:19:be:ea:49:ca:02:fe: 09:43:57:eb:9d:f6:69:eb:74:e1:ab:19:91:5a:33: 7e:93:d7:db:01:72:79:be:82:e4:4f:98:39:84:df: 8a:d4:b2:8a:f9:51:2f:85:16:c2:41:91:99:03:eb: 5e:46:c6:18:bb:0d:e8:59:cc:ea:11:e9:b9:1c:5e: aa:e3:57:95:9f:e8:37:74:43:8e:6d:aa:91:1c:25: af:18:ae:67:7e:76:fd:f7:95:3d:26:b1:8f:c0:63: dc:22:2e:53:07:1f:f7:9e:72:b7:8a:e8:0d:aa:ed: 31:a2:9b:9e:40:17:f2:b9:fd:fe:ec:cf:b7:fd:bc: 7c:3e:c7:21:65:65:f5:28:1a:7a:b6:db:c1:1d:14: 60:3a:eb:1d:c8:2f:af:c7:92:b8:4d:7a:be:0f:38: d2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:89:08:89:3F:32:E2:77:54:C1:BF:76:96:DB:F1:86:49:1E:32:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3787e792-feb0-3f09-bd43-3ecfae92f707.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c491::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:c6:40:77:6c:86:e7:cc:06:77:8f:23:92:c5:61:2b:0e:e6: e1:f1:0b:2f:b3:89:ee:3d:09:a1:5b:df:b7:26:21:8e:fc:03: 20:cb:a2:9d:4e:30:4e:3d:01:5e:2f:8b:88:92:9e:e3:95:3c: 4f:cc:b4:e1:e1:de:77:49:6c:ac:57:5c:79:a6:76:d4:e4:b9: 0a:25:ba:97:19:01:ea:3f:f0:32:fe:ca:ca:20:6b:02:04:ea: 64:1f:e7:7e:bf:c8:dc:7d:91:6b:15:75:74:13:69:4a:93:ea: a2:4d:da:46:88:a2:02:f7:ed:d1:27:ec:b6:ac:42:9e:59:47: a0:4c:e8:45:13:3a:44:fb:4b:08:d0:8f:ab:15:81:16:98:f2: 8b:6f:e9:14:1c:1b:23:1e:87:3b:ab:ff:c0:81:87:d7:c5:8c: 9e:6d:2d:f1:74:d9:4d:b4:72:7c:3a:3d:a4:cd:30:db:71:2b: 9c:74:2f:1a:9b:24:21:3b:26:82:8d:a9:be:db:81:5a:6d:4a: 7a:0f:f3:b9:42:bd:b9:5d:71:6a:09:cc:72:f4:23:86:e4:8e: 2f:2d:2b:56:2a:f5:9b:82:79:54:ab:13:d8:37:31:9e:0d:8c: 0e:5c:35:22:1c:6b:eb:2c:57:a4:60:32:64:75:a8:54:0f:a6: 40:35:c1:d9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfrCU6/DhvQWtdmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk M2JjYTJhMGQtMzU3Yy00NzMyLWE3NDctMTEwZGNkYWZiN2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhSwQRNOUHe/UUOGM49I9Ex2lbpDI1NqVKuy 9Q9MTpw/oIu2SzQG2VHZteqLjKj8o8bEBDmlUtVuJkjMv3kg05fc5gpGZ/fttk2J ARwmxnDgalmgY7Sc2bgnDhhFxSSRBBm+6knKAv4JQ1frnfZp63ThqxmRWjN+k9fb AXJ5voLkT5g5hN+K1LKK+VEvhRbCQZGZA+teRsYYuw3oWczqEem5HF6q41eVn+g3 dEOObaqRHCWvGK5nfnb995U9JrGPwGPcIi5TBx/3nnK3iugNqu0xopueQBfyuf3+ 7M+3/bx8PschZWX1KBp6ttvBHRRgOusdyC+vx5K4TXq+DzjScwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBmJCIk/MuJ3VMG/dpbb8YZJHjLKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzc4N2U3OTItZmViMC0z ZjA5LWJkNDMtM2VjZmFlOTJmNzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcSR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA3GQHdshufMBnePI5LFYSsO5uHxCy+zie49CaFb37cmIY78AyDL op1OME49AV4vi4iSnuOVPE/MtOHh3ndJbKxXXHmmdtTkuQolupcZAeo/8DL+ysog awIE6mQf536/yNx9kWsVdXQTaUqT6qJN2kaIogL37dEn7LasQp5ZR6BM6EUTOkT7 SwjQj6sVgRaY8otv6RQcGyMehzur/8CBh9fFjJ5tLfF02U20cnw6PaTNMNtxK5x0 LxqbJCE7JoKNqb7bgVptSnoP87lCvbldcWoJzHL0I4bkji8tK1Yq9ZuCeVSrE9g3 MZ4NjA5cNSIca+ssV6RgMmR1qFQPpkA1wdk= -----END CERTIFICATE-----Generated at Sun May 5 02:15:39 2024 by rpki-client on console-ams.rpki-client.org