$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/410af8eb-c9e1-321c-9ac7-714e0430560b.roa File: 410af8eb-c9e1-321c-9ac7-714e0430560b.roa (raw, json) Hash identifier: XiNDcS0TVX1I3bOKNsSR/3Cj+rpscEpBeaRXZ34vR1Q= Subject key identifier: D8:69:FA:4B:BC:9D:29:88:56:60:02:53:98:7C:AF:92:7B:36:17:63 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAFCDF27EC68FDB7560CB80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/410af8eb-c9e1-321c-9ac7-714e0430560b.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 13367 IP address blocks: 2001:559:8229::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:af:cd:f2:7e:c6:8f:db:75:60:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=962acaff-c2be-4b4b-8dd1-2d405593152c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:11:85:21:15:95:57:00:54:5e:8d:68:5c:41: b0:d2:86:5c:1b:7e:84:0c:46:21:3c:83:6d:76:6d: 94:3b:92:74:6a:46:b5:4b:4d:61:1c:a6:dd:ff:35: 1d:52:6f:48:e4:40:14:b8:15:3c:2c:dc:56:db:c9: 22:97:e7:85:16:54:96:3c:2b:ed:36:cd:10:21:04: fa:98:da:f7:28:4c:65:32:5e:9a:e0:2f:d3:84:c8: a2:ac:62:14:dc:2e:88:ff:c6:06:01:06:d8:52:2c: 5b:1f:20:7f:46:bd:f0:d0:40:b0:ed:6a:93:9f:69: ff:5c:7c:49:9f:bc:87:ec:27:34:82:ee:0e:c2:07: ec:21:50:d4:6d:ad:4f:66:2e:9d:e3:d6:a9:5b:eb: 0b:2d:8e:98:43:47:10:c0:7e:9e:58:a1:fb:2b:77: e1:e8:30:70:43:d6:95:ed:cc:20:73:be:f5:91:e5: 88:74:1b:2f:33:7c:b2:c3:0d:4e:7e:d0:a5:b9:ea: 07:58:a2:ba:07:02:d0:ef:86:39:6a:6b:e4:91:d1: 1e:40:6b:4d:3b:ed:1a:71:af:e7:a1:da:cf:53:f1: 04:58:b1:2a:ba:2e:98:7d:a7:f7:9c:f2:aa:eb:e2: 3a:e9:09:a4:51:38:d0:d9:f8:10:84:ae:9c:1d:98: 99:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:69:FA:4B:BC:9D:29:88:56:60:02:53:98:7C:AF:92:7B:36:17:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/410af8eb-c9e1-321c-9ac7-714e0430560b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8229::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:d5:f7:0d:7d:06:28:c7:fd:9c:bd:38:99:fa:f1:3b:50:0e: d0:4d:40:38:17:1a:1b:a6:ec:11:1a:3b:d7:35:94:e5:ca:03: 2d:26:5f:9e:14:b3:63:d4:c1:8e:65:70:c7:cb:d4:92:6b:4e: 3b:d8:7d:59:d6:fc:fe:da:b5:65:27:b6:ec:f8:dc:ac:ca:a7: e8:d9:f4:46:f8:a8:64:06:a0:99:8e:e6:17:e3:7e:99:e5:4f: 4f:b3:a2:c1:b9:74:73:6b:0d:86:65:bc:ea:b6:ae:b6:2b:4a: 12:45:1f:f4:6c:c4:30:b1:f0:87:ab:c5:67:41:bc:a1:4f:c2: 93:4b:d4:28:dc:f9:1c:77:88:ef:af:02:a2:15:a2:1a:de:f0: 61:5b:8d:40:54:2f:52:39:76:64:cc:4e:4a:30:76:d9:88:84: 2a:dc:45:07:49:13:38:e9:86:40:4c:83:f5:35:7f:8e:1e:06: ad:b1:41:78:1e:3c:f8:14:05:68:2f:b2:24:c9:33:b5:72:6c: 0f:53:8d:be:ba:5d:22:81:29:3b:97:a6:e3:90:72:f1:75:94: aa:7c:ff:bb:e1:95:25:f4:98:67:cc:9a:a7:a8:d2:00:db:15: 9d:85:e7:4c:0d:27:19:92:d5:35:a0:77:b1:a8:2b:3c:b4:35: ab:be:92:a1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfr83yfsaP23Vgy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk OTYyYWNhZmYtYzJiZS00YjRiLThkZDEtMmQ0MDU1OTMxNTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBGFIRWVVwBUXo1oXEGw0oZcG36EDEYhPINt dm2UO5J0aka1S01hHKbd/zUdUm9I5EAUuBU8LNxW28kil+eFFlSWPCvtNs0QIQT6 mNr3KExlMl6a4C/ThMiirGIU3C6I/8YGAQbYUixbHyB/Rr3w0ECw7WqTn2n/XHxJ n7yH7Cc0gu4OwgfsIVDUba1PZi6d49apW+sLLY6YQ0cQwH6eWKH7K3fh6DBwQ9aV 7cwgc771keWIdBsvM3yyww1OftClueoHWKK6BwLQ74Y5amvkkdEeQGtNO+0aca/n odrPU/EEWLEqui6Yfaf3nPKq6+I66QmkUTjQ2fgQhK6cHZiZQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNhp+ku8nSmIVmACU5h8r5J7NhdjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDEwYWY4ZWItYzllMS0z MjFjLTlhYzctNzE0ZTA0MzA1NjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYIp MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABnV9w19BijH/Zy9OJn68TtQDtBNQDgXGhum7BEaO9c1lOXKAy0m X54Us2PUwY5lcMfL1JJrTjvYfVnW/P7atWUntuz43KzKp+jZ9Eb4qGQGoJmO5hfj fpnlT0+zosG5dHNrDYZlvOq2rrYrShJFH/RsxDCx8IerxWdBvKFPwpNL1Cjc+Rx3 iO+vAqIVohre8GFbjUBUL1I5dmTMTkowdtmIhCrcRQdJEzjphkBMg/U1f44eBq2x QXgePPgUBWgvsiTJM7VybA9Tjb66XSKBKTuXpuOQcvF1lKp8/7vhlSX0mGfMmqeo 0gDbFZ2F50wNJxmS1TWgd7GoKzy0Nau+kqE= -----END CERTIFICATE-----Generated at Sun May 5 01:16:27 2024 by rpki-client on console-ams.rpki-client.org