$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43f6d06c-2e15-30f2-9e56-e6728b366679.roa File: 43f6d06c-2e15-30f2-9e56-e6728b366679.roa (raw, json) Hash identifier: 3YF+ogCmW6W82N1dS3BZpYjDXylT7mtFv/4ECgc/S3Q= Subject key identifier: B4:10:A2:FA:BE:8D:69:B6:DB:85:F1:79:79:D7:0F:C0:EC:A2:F3:07 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858430947AEE26331779DE7D11FC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43f6d06c-2e15-30f2-9e56-e6728b366679.roa Signing time: Sun 27 Aug 2023 12:00:00 +0000 ROA not before: Sun 27 Aug 2023 12:00:00 +0000 ROA not after: Sun 10 Nov 2024 05:00:00 +0000 asID: 33490 IP address blocks: 2001:559:b00d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:09:47:ae:e2:63:31:77:9d:e7:d1:1f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 27 12:00:00 2023 GMT Not After : Nov 10 05:00:00 2024 GMT Subject: CN=35468f61-74fc-490c-95d4-bbf66484130d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:60:fe:38:1f:16:34:3c:31:c5:45:6f:9d:48: 79:26:29:8c:3f:1f:40:2a:e5:60:d3:bc:71:de:97: 78:ef:58:9b:79:4b:f1:4c:98:32:11:15:df:40:fa: 7d:60:02:88:34:a3:18:f7:9a:79:1c:3a:06:ed:fb: 86:1e:11:e5:f5:a6:73:94:cf:5b:77:bc:b4:9e:9e: 8d:25:b3:8c:28:59:ab:92:be:e9:0e:5d:7e:34:84: 95:36:5a:cf:11:6e:a1:ad:30:b6:ef:d7:4d:2a:a7: d3:75:ea:0f:c6:d1:b2:72:89:aa:7f:a7:98:b6:e2: 27:6a:fb:b1:49:57:eb:7a:e3:8b:6b:07:f2:09:f5: 12:43:92:f0:37:f8:3d:80:c5:64:c7:f8:70:78:0d: 9e:9d:08:a2:35:4e:df:71:7b:d6:e2:1e:a9:3a:9e: b4:e1:8c:d1:04:3f:84:1d:20:4c:57:26:77:64:7e: 3d:f9:b4:2f:b2:00:65:a3:4d:21:fc:d8:f7:b8:cd: d6:d4:a0:f8:60:b4:66:3c:cf:c0:32:32:a8:67:17: a2:c2:c8:34:8c:1e:9f:d6:19:9e:8f:0a:8b:b0:e9: e1:10:52:cd:30:7e:7e:5b:a7:a8:b1:df:df:7f:55: d7:12:44:f2:a3:ac:66:3d:4e:7a:af:45:62:32:af: 44:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:10:A2:FA:BE:8D:69:B6:DB:85:F1:79:79:D7:0F:C0:EC:A2:F3:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43f6d06c-2e15-30f2-9e56-e6728b366679.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:b00d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:0c:a0:71:71:20:fa:41:5d:a7:f0:95:9b:48:b2:bd:5c:59: 5d:3b:e7:39:cb:f5:7e:1e:9d:3c:3e:ec:9d:96:0e:9b:d9:c5: aa:f9:91:d5:48:c8:53:f4:59:ae:1e:62:4d:bb:72:af:bb:84: 64:ae:60:b8:5e:2b:d0:f7:c4:46:2a:17:02:ff:5e:f5:99:50: ba:cb:d0:bd:bb:8c:6c:d5:7e:db:19:62:d3:41:f0:26:18:b1: 4d:c8:8f:4c:80:af:2d:b7:cb:91:2c:af:fc:df:37:4e:d3:73: aa:fe:57:3f:4f:b6:64:aa:95:dd:08:7e:94:f4:cf:ab:1b:6a: f4:74:bc:b8:f1:9e:f5:c1:98:19:33:ea:d2:43:33:e2:d2:4f: 40:a6:08:7c:9d:41:49:42:51:af:1f:a6:8d:31:04:11:1b:4a: c6:ef:09:37:58:88:b6:8d:42:02:fa:3f:8f:2c:ae:d9:be:33: 1f:6d:b4:71:70:4f:c9:6f:43:c4:6e:cf:26:f2:7b:ac:42:e7: 98:b4:46:ab:36:72:b8:83:98:8d:6e:e3:5d:e5:83:99:c2:ab: ba:47:58:aa:e4:43:44:11:be:dd:55:55:66:2e:a4:c9:8d:3d: 89:2f:72:1e:d3:c6:c9:64:92:73:a7:38:b2:38:f5:32:6a:54: 85:29:bc:69 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEMJR67iYzF3nefRH8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTExMDA1MDAwMFowLzEtMCsGA1UEAxMk MzU0NjhmNjEtNzRmYy00OTBjLTk1ZDQtYmJmNjY0ODQxMzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmD+OB8WNDwxxUVvnUh5JimMPx9AKuVg07xx 3pd471ibeUvxTJgyERXfQPp9YAKINKMY95p5HDoG7fuGHhHl9aZzlM9bd7y0np6N JbOMKFmrkr7pDl1+NISVNlrPEW6hrTC279dNKqfTdeoPxtGycomqf6eYtuInavux SVfreuOLawfyCfUSQ5LwN/g9gMVkx/hweA2enQiiNU7fcXvW4h6pOp604YzRBD+E HSBMVyZ3ZH49+bQvsgBlo00h/Nj3uM3W1KD4YLRmPM/AMjKoZxeiwsg0jB6f1hme jwqLsOnhEFLNMH5+W6eosd/ff1XXEkTyo6xmPU56r0ViMq9EdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLQQovq+jWm224XxeXnXD8DsovMHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDNmNmQwNmMtMmUxNS0z MGYyLTllNTYtZTY3MjhiMzY2Njc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWbAN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKwMoHFxIPpBXafwlZtIsr1cWV075znL9X4enTw+7J2WDpvZxar5 kdVIyFP0Wa4eYk27cq+7hGSuYLheK9D3xEYqFwL/XvWZULrL0L27jGzVftsZYtNB 8CYYsU3Ij0yAry23y5Esr/zfN07Tc6r+Vz9PtmSqld0IfpT0z6sbavR0vLjxnvXB mBkz6tJDM+LST0CmCHydQUlCUa8fpo0xBBEbSsbvCTdYiLaNQgL6P48srtm+Mx9t tHFwT8lvQ8Ruzybye6xC55i0Rqs2criDmI1u413lg5nCq7pHWKrkQ0QRvt1VVWYu pMmNPYkvch7TxslkknOnOLI49TJqVIUpvGk= -----END CERTIFICATE-----Generated at Sat May 4 14:50:15 2024 by rpki-client on console-ams.rpki-client.org