$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/497425c9-ab16-3597-a620-6e1e432a2039.roa File: 497425c9-ab16-3597-a620-6e1e432a2039.roa (raw, json) Hash identifier: lfS6/czwPdR/qlsJBE17yoE8jiFrtfYNudIf1+xVsPU= Subject key identifier: 80:B7:4B:9F:C2:D6:AD:E1:12:48:6D:96:45:D3:44:65:F7:BC:E5:4D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FABC3D2E44A2EC63B74AE80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/497425c9-ab16-3597-a620-6e1e432a2039.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 33668 IP address blocks: 2001:559:451::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ab:c3:d2:e4:4a:2e:c6:3b:74:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=94163e89-76d9-4479-9c94-b2acd322bb05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:04:ef:bf:ca:62:43:39:73:94:8c:58:c9:f2: dd:29:c9:92:13:21:7d:73:7f:55:a1:5e:a6:f7:51: 3a:9d:ab:c7:b9:a2:7c:11:79:d6:9d:85:98:f2:82: c0:0f:d9:e7:49:cc:df:ae:26:e7:46:1d:e9:c1:e1: 75:6c:b4:84:da:cb:58:07:28:d3:b5:b0:5b:fc:27: 98:8b:ec:38:d0:11:2f:60:00:42:d3:ee:1c:ac:99: ba:39:54:a9:90:2a:92:33:f7:0d:87:1b:02:15:d0: 2e:f5:1f:8a:56:57:1b:2a:ba:2a:3a:58:e4:ef:14: 2d:77:61:37:60:24:5d:6f:83:d3:58:83:77:bb:86: d1:76:72:df:04:54:db:d3:a9:c8:17:6c:33:81:ad: 55:15:b8:0f:20:cd:bb:ed:3c:99:57:90:08:aa:c7: 5e:07:ac:db:e8:1b:b7:c8:f6:96:f8:f1:f7:ac:60: e8:bc:ab:c4:af:e7:8b:bd:43:25:63:ba:7c:33:35: 07:d3:1c:d8:a3:24:b1:8a:e3:33:a7:41:50:a8:25: 64:d5:c0:02:31:8f:3d:07:2a:60:ec:ee:8e:a1:d2: ed:9e:92:42:aa:00:05:f3:6b:48:58:38:c8:0b:a8: b0:c7:f0:33:d6:0c:f8:ed:ed:5f:aa:fa:e1:d7:b8: 37:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:B7:4B:9F:C2:D6:AD:E1:12:48:6D:96:45:D3:44:65:F7:BC:E5:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/497425c9-ab16-3597-a620-6e1e432a2039.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:451::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:37:a5:7a:7c:03:e3:fb:82:c1:eb:5e:51:e3:d6:df:60:3a: 87:1c:7d:99:cd:47:5b:08:00:43:03:f8:72:ec:c8:78:70:7e: 4b:db:6e:f7:b5:88:a2:32:e9:56:4d:af:60:69:e7:fa:46:c6: 36:17:cd:f2:5d:f7:d7:fa:d0:cb:63:d0:10:4e:51:1e:dc:5d: 58:d1:8f:79:db:af:7d:31:c2:f1:37:86:63:8e:a3:d2:49:11: c3:1f:f6:98:8c:a1:ec:cd:17:dd:22:13:15:e5:b9:d1:83:df: a6:2b:9c:3b:c8:8c:0e:63:61:1f:dd:8f:49:41:d8:87:29:d9: 0d:7a:a3:a7:8e:b4:d1:ae:9b:e7:8a:4f:31:ad:34:b0:72:be: b5:62:09:f9:f1:9a:57:ab:c6:2e:78:6f:dd:50:45:7a:37:46: 80:c9:8b:4a:87:83:35:33:ea:5b:80:ff:5e:dd:26:c1:71:6f: 00:85:fa:7f:61:50:c0:15:fd:d2:c6:ad:84:3a:07:e6:d9:7d: 9a:d5:92:8b:f4:6f:1c:ba:75:c7:88:93:d8:2a:2f:d4:70:83: 71:d0:5a:9f:5d:7c:e8:84:9e:23:fd:08:88:34:4f:26:9f:76: e1:42:33:7d:0c:d1:9e:e5:28:74:2b:07:1f:12:19:19:38:4b: c8:60:eb:36 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfq8PS5Eouxjt0roAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk OTQxNjNlODktNzZkOS00NDc5LTljOTQtYjJhY2QzMjJiYjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApATvv8piQzlzlIxYyfLdKcmSEyF9c39VoV6m 91E6navHuaJ8EXnWnYWY8oLAD9nnSczfribnRh3pweF1bLSE2stYByjTtbBb/CeY i+w40BEvYABC0+4crJm6OVSpkCqSM/cNhxsCFdAu9R+KVlcbKroqOljk7xQtd2E3 YCRdb4PTWIN3u4bRdnLfBFTb06nIF2wzga1VFbgPIM277TyZV5AIqsdeB6zb6Bu3 yPaW+PH3rGDovKvEr+eLvUMlY7p8MzUH0xzYoySxiuMzp0FQqCVk1cACMY89Bypg 7O6OodLtnpJCqgAF82tIWDjIC6iwx/Az1gz47e1fqvrh17g33QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIC3S5/C1q3hEkhtlkXTRGX3vOVNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDk3NDI1YzktYWIxNi0z NTk3LWE2MjAtNmUxZTQzMmEyMDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQRR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABk3pXp8A+P7gsHrXlHj1t9gOoccfZnNR1sIAEMD+HLsyHhwfkvb bve1iKIy6VZNr2Bp5/pGxjYXzfJd99f60Mtj0BBOUR7cXVjRj3nbr30xwvE3hmOO o9JJEcMf9piMoezNF90iExXludGD36YrnDvIjA5jYR/dj0lB2Icp2Q16o6eOtNGu m+eKTzGtNLByvrViCfnxmlerxi54b91QRXo3RoDJi0qHgzUz6luA/17dJsFxbwCF +n9hUMAV/dLGrYQ6B+bZfZrVkov0bxy6dceIk9gqL9Rwg3HQWp9dfOiEniP9CIg0 TyafduFCM30M0Z7lKHQrBx8SGRk4S8hg6zY= -----END CERTIFICATE-----Generated at Sat May 4 14:48:16 2024 by rpki-client on console-fra.rpki-client.org