$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f3a2b28-6f69-38fb-be63-8dd2d1e277e0.roa File: 3f3a2b28-6f69-38fb-be63-8dd2d1e277e0.roa (raw, json) Hash identifier: xKPWyjdXi/UWlT+dBNb/htpb18nxGKaxrBGNuv9G4kg= Subject key identifier: 68:F7:FE:C3:91:70:9C:CA:0E:DE:8A:26:82:1C:CD:96:1D:D8:16:B5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAC1C05ECE6A1E8FCDA7400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f3a2b28-6f69-38fb-be63-8dd2d1e277e0.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 33287 IP address blocks: 2001:559:8155::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ac:1c:05:ec:e6:a1:e8:fc:da:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=12b79cac-d4bd-4284-849d-2c7cc9f2fa03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:cc:f5:e9:83:39:d7:b2:fa:87:74:62:04:94: 2d:55:87:6f:93:b8:ea:31:53:4f:75:0f:b4:23:40: a6:37:9d:a0:41:a0:8e:0e:13:61:3e:8f:b9:a3:d0: 15:ea:b3:e1:28:d7:b0:66:2b:1b:e9:f6:54:78:01: f3:41:f8:87:ea:00:64:21:ff:be:7d:3d:23:65:5b: 9c:50:a9:21:07:dc:c0:4d:8b:67:93:b7:52:0f:87: 31:7f:2b:0c:69:90:e5:0f:ff:a5:c0:6d:ae:6c:a0: 9e:1e:76:43:15:16:73:85:75:c4:29:44:6a:0b:f5: fd:21:6b:8a:73:48:a5:3f:0a:5d:f3:79:86:40:f8: 75:a9:6a:d1:d5:1d:a5:80:6c:76:02:16:71:87:88: 3a:19:5c:8e:e2:aa:bc:08:3b:c7:9d:78:db:9a:07: 10:e7:ed:e7:33:9d:92:94:db:f4:96:b9:29:b0:82: 6f:f3:87:9a:87:f6:d7:fa:d3:09:41:b8:04:c2:0c: 28:75:1c:26:56:a8:21:ec:31:1e:43:b7:56:8c:79: 89:da:9a:dc:17:a2:9d:e2:c1:8a:f0:eb:43:fe:b7: 88:d7:25:7e:d8:9e:69:e2:58:81:0a:52:56:17:64: 3d:f5:a9:19:ec:9d:cb:65:ca:30:5b:d0:72:93:95: f7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F7:FE:C3:91:70:9C:CA:0E:DE:8A:26:82:1C:CD:96:1D:D8:16:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f3a2b28-6f69-38fb-be63-8dd2d1e277e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8155::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:b7:40:38:bd:fb:dc:57:c9:e4:f0:c9:2e:d5:2c:f4:0c:97: 3c:f2:51:35:99:3f:71:ef:a7:15:b9:e1:7b:1c:5c:3b:e4:ab: 0d:0a:f4:37:6b:9a:25:41:3a:16:28:e5:8b:c6:14:2e:a4:01: db:13:80:24:e4:1a:7a:e2:6c:54:2e:e8:c5:43:0f:d0:8a:12: 7b:d5:ba:90:65:70:41:71:14:8e:e7:b3:3c:e1:2b:36:1d:37: 70:a7:90:4a:a8:4f:b6:27:50:74:91:86:a0:88:01:3d:5b:e9: 58:00:89:ef:18:e1:5f:8f:2b:af:ae:b8:c4:1a:42:56:9a:22: 0e:17:0a:4c:da:85:5b:e3:22:db:cb:3f:87:bf:88:cd:cb:e7: 65:fd:df:f1:d9:5e:4d:7a:c4:c7:82:47:16:86:24:9f:62:90: 22:72:3f:00:0b:31:22:7a:08:92:e6:3b:81:39:a1:4f:1a:ae: 34:ed:30:27:ad:dc:02:b1:be:ee:90:4e:36:3a:c6:44:79:6b: 5d:71:9d:c6:54:5f:42:f7:85:d4:a8:9a:c5:c8:1f:46:4e:cc: db:4a:2f:d0:2b:1b:e5:b3:b0:3b:35:74:d0:c0:37:e7:a7:0e: 7a:1b:53:5c:b7:5c:0d:46:78:6f:af:d2:73:81:4d:f5:8a:8f: 3f:55:f7:9d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfrBwF7Oah6PzadAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk MTJiNzljYWMtZDRiZC00Mjg0LTg0OWQtMmM3Y2M5ZjJmYTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsz16YM517L6h3RiBJQtVYdvk7jqMVNPdQ+0 I0CmN52gQaCODhNhPo+5o9AV6rPhKNewZisb6fZUeAHzQfiH6gBkIf++fT0jZVuc UKkhB9zATYtnk7dSD4cxfysMaZDlD/+lwG2ubKCeHnZDFRZzhXXEKURqC/X9IWuK c0ilPwpd83mGQPh1qWrR1R2lgGx2AhZxh4g6GVyO4qq8CDvHnXjbmgcQ5+3nM52S lNv0lrkpsIJv84eah/bX+tMJQbgEwgwodRwmVqgh7DEeQ7dWjHmJ2prcF6Kd4sGK 8OtD/reI1yV+2J5p4liBClJWF2Q99akZ7J3LZcowW9Byk5X31wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGj3/sORcJzKDt6KJoIczZYd2Ba1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2YzYTJiMjgtNmY2OS0z OGZiLWJlNjMtOGRkMmQxZTI3N2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYFV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFK3QDi9+9xXyeTwyS7VLPQMlzzyUTWZP3HvpxW54XscXDvkqw0K 9DdrmiVBOhYo5YvGFC6kAdsTgCTkGnribFQu6MVDD9CKEnvVupBlcEFxFI7nszzh KzYdN3CnkEqoT7YnUHSRhqCIAT1b6VgAie8Y4V+PK6+uuMQaQlaaIg4XCkzahVvj ItvLP4e/iM3L52X93/HZXk16xMeCRxaGJJ9ikCJyPwALMSJ6CJLmO4E5oU8arjTt MCet3AKxvu6QTjY6xkR5a11xncZUX0L3hdSomsXIH0ZOzNtKL9ArG+WzsDs1dNDA N+enDnobU1y3XA1GeG+v0nOBTfWKjz9V950= -----END CERTIFICATE-----Generated at Sat May 4 14:49:59 2024 by rpki-client on console-ams.rpki-client.org