$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38e08afe-69b5-3c98-81e8-4ff5868d5a60.roa File: 38e08afe-69b5-3c98-81e8-4ff5868d5a60.roa (raw, json) Hash identifier: OJnH92aDbPBwkKTASyOTbBwupFP99DfDnuJhafbx4VM= Subject key identifier: 1D:A8:1B:D5:48:1F:34:37:68:24:54:17:16:79:41:53:88:7D:5D:28 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAC1792715A4F019A383A00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38e08afe-69b5-3c98-81e8-4ff5868d5a60.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 33287 IP address blocks: 2001:559:3d1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ac:17:92:71:5a:4f:01:9a:38:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=f7aad0e5-9ff4-4e39-9536-4ddd050309c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:29:0c:90:7c:c4:2b:a3:d1:26:f7:dd:9f:f5: a9:cf:f9:8e:03:b3:86:6d:9b:6f:f7:a1:cd:3a:95: 87:b1:aa:29:a0:c3:60:9a:35:73:91:09:19:c3:dd: 25:a7:73:6d:64:72:a7:e4:73:12:92:f6:ff:78:b5: fd:86:6e:2f:2c:38:08:c2:fc:f9:5b:f3:c8:01:c8: 6c:23:56:4e:f4:b9:c1:95:7a:53:d1:21:e3:a2:01: 90:af:57:b1:27:25:41:3b:1e:35:52:9d:8e:d1:20: bd:d6:1e:a9:95:b5:65:cc:d8:06:46:cf:75:9a:f3: f0:28:ac:90:38:d4:e7:f0:bf:b1:40:d9:17:6f:e5: 75:5f:af:8b:10:04:2e:fc:1b:9f:02:76:a6:09:91: d3:26:7b:64:7d:57:9f:02:4f:da:cb:64:92:60:d4: bf:20:9c:39:06:69:20:00:59:1d:a4:48:12:a4:ae: 3f:0b:6f:82:af:8e:3f:80:39:40:17:0a:b1:be:1f: e9:85:2a:b6:ae:ef:54:aa:11:18:08:81:8e:35:40: a9:bf:ed:7d:0f:cc:3b:9b:1b:1f:73:7b:ac:4a:6d: 2b:20:85:45:65:be:6d:12:11:f5:de:22:6b:0b:23: 4d:1b:07:84:0b:21:50:71:f2:5f:c9:9f:ad:86:7b: 4c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A8:1B:D5:48:1F:34:37:68:24:54:17:16:79:41:53:88:7D:5D:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38e08afe-69b5-3c98-81e8-4ff5868d5a60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:3d1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:b4:75:e8:86:88:3c:60:e9:ff:48:56:a5:fe:d5:d1:d3:d3: 3a:13:e9:f1:26:03:9a:71:83:c9:3a:8c:43:d9:a9:df:bb:90: a0:12:7a:fc:7c:49:38:39:dd:b7:9b:5f:25:4a:91:23:5b:6d: cf:98:4c:e5:63:48:d6:14:d1:62:65:17:35:50:ee:56:34:b3: 08:1a:3d:c7:21:8d:71:46:96:2f:95:4b:66:50:1f:a3:c6:f6: 1e:5e:b9:d6:3a:71:08:a8:53:b1:4d:9e:00:0b:ce:ea:54:13: 33:0a:e4:56:80:18:d6:f0:22:6b:f3:61:b8:9f:db:07:ec:1a: af:ba:30:25:cd:e1:7a:cd:41:12:13:9e:d6:4a:b1:1e:88:40: 0c:82:f7:0b:32:89:98:76:4a:7d:1e:66:2a:f2:8a:84:f2:4d: c9:1f:52:c0:e9:d1:84:48:4a:07:cc:fb:7f:f3:a7:6a:5c:dc: b4:8b:b9:3d:56:70:8c:c2:b6:e9:ec:6c:16:45:63:61:38:71: 9a:ce:f2:c6:67:a0:05:52:14:9c:70:7c:22:46:d1:53:09:b3: 1a:3b:56:07:e4:e3:4c:b7:49:0e:77:14:14:6e:8f:74:ed:c0: b8:45:d5:9d:e5:9c:60:6d:42:e1:55:71:35:17:12:29:8f:b1: ff:9e:6b:03 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfrBeScVpPAZo4OgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk ZjdhYWQwZTUtOWZmNC00ZTM5LTk1MzYtNGRkZDA1MDMwOWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SkMkHzEK6PRJvfdn/Wpz/mOA7OGbZtv96HN OpWHsaopoMNgmjVzkQkZw90lp3NtZHKn5HMSkvb/eLX9hm4vLDgIwvz5W/PIAchs I1ZO9LnBlXpT0SHjogGQr1exJyVBOx41Up2O0SC91h6plbVlzNgGRs91mvPwKKyQ ONTn8L+xQNkXb+V1X6+LEAQu/BufAnamCZHTJntkfVefAk/ay2SSYNS/IJw5Bmkg AFkdpEgSpK4/C2+Cr44/gDlAFwqxvh/phSq2ru9UqhEYCIGONUCpv+19D8w7mxsf c3usSm0rIIVFZb5tEhH13iJrCyNNGweECyFQcfJfyZ+thntMdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB2oG9VIHzQ3aCRUFxZ5QVOIfV0oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzhlMDhhZmUtNjliNS0z Yzk4LTgxZTgtNGZmNTg2OGQ1YTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQPR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ+0deiGiDxg6f9IVqX+1dHT0zoT6fEmA5pxg8k6jEPZqd+7kKAS evx8STg53bebXyVKkSNbbc+YTOVjSNYU0WJlFzVQ7lY0swgaPcchjXFGli+VS2ZQ H6PG9h5eudY6cQioU7FNngALzupUEzMK5FaAGNbwImvzYbif2wfsGq+6MCXN4XrN QRITntZKsR6IQAyC9wsyiZh2Sn0eZiryioTyTckfUsDp0YRISgfM+3/zp2pc3LSL uT1WcIzCtunsbBZFY2E4cZrO8sZnoAVSFJxwfCJG0VMJsxo7Vgfk40y3SQ53FBRu j3TtwLhF1Z3lnGBtQuFVcTUXEimPsf+eawM= -----END CERTIFICATE-----Generated at Sat May 4 14:49:36 2024 by rpki-client on console-ams.rpki-client.org