$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a2f0dd1-fb42-3f0d-afe4-d83f7e63e724.roa File: 4a2f0dd1-fb42-3f0d-afe4-d83f7e63e724.roa (raw, json) Hash identifier: vL3uBJlL8rznpRxudbwI3t24s/7nqROwIzc4n7XUV+g= Subject key identifier: A1:A7:C3:DB:97:33:20:0D:5A:97:72:7E:9D:59:B3:21:46:40:4A:E8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584576184C16EB9397F6F36CAC80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a2f0dd1-fb42-3f0d-afe4-d83f7e63e724.roa Signing time: Sun 07 Apr 2024 01:00:24 +0000 ROA not before: Sun 07 Apr 2024 01:00:24 +0000 ROA not after: Sat 06 Jul 2024 01:00:24 +0000 asID: 7015 IP address blocks: 2001:559:e02b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:76:18:4c:16:eb:93:97:f6:f3:6c:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 7 01:00:24 2024 GMT Not After : Jul 6 01:00:24 2024 GMT Subject: CN=b0da879a-c559-498c-9488-49e1885c817a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:4e:d1:b4:e1:4c:17:c1:f4:e1:ad:fb:a9:15: a9:f7:32:a8:de:73:b7:0c:3c:05:f4:0c:17:22:3d: 60:9c:89:d6:64:d2:f9:58:21:93:df:53:b0:02:e1: a7:30:fb:e0:20:4d:25:ae:32:cc:e0:f1:1f:ef:f9: df:2c:31:7f:c1:33:88:e6:fe:43:c8:b7:58:b5:12: 87:64:23:72:35:f7:39:59:30:25:9c:5c:14:5e:bd: fe:d8:ae:6d:b8:f3:0a:94:71:57:59:dc:29:fc:a6: 75:d7:6b:e8:a1:63:73:7b:c3:45:92:3b:36:7f:07: 6a:d3:fe:7c:ff:cb:da:94:42:36:24:c6:08:8e:44: 75:d9:24:31:60:03:7b:89:ad:fe:19:08:67:53:95: 3f:d6:8e:b0:b6:2a:0e:02:14:54:f7:fe:d2:e9:cc: bf:c9:a1:0f:1f:a7:0d:81:69:46:68:c6:f6:5a:de: 9b:37:a5:fd:3d:00:22:9f:32:a4:4b:41:5c:2b:92: 2f:dd:6a:e2:cb:c7:82:bd:c9:42:56:99:b6:6a:7a: 23:5b:1f:d1:56:fa:eb:2b:46:20:8c:a5:17:47:22: ce:3a:c0:56:50:4c:23:c5:6f:a8:85:a4:51:51:71: 03:22:30:d8:3e:98:58:2f:eb:09:62:ca:e5:59:36: 35:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A7:C3:DB:97:33:20:0D:5A:97:72:7E:9D:59:B3:21:46:40:4A:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a2f0dd1-fb42-3f0d-afe4-d83f7e63e724.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:e02b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:9f:6d:10:f2:60:2a:de:14:52:90:41:83:31:0a:cf:34:7b: 61:86:d8:1a:17:ad:c9:dc:a2:a4:86:f4:37:c4:74:c7:c3:09: 87:fb:78:61:42:e4:eb:e8:e7:de:f9:ee:53:e4:05:72:93:8f: 5b:c3:43:91:93:5c:7d:0c:0c:82:a8:39:a8:ba:bc:da:29:74: d5:c0:42:22:f8:61:bc:eb:db:ca:f7:32:f8:88:68:30:17:98: 34:f7:6c:19:c2:3f:f4:9c:f5:50:57:8b:b2:6a:53:c3:c0:40: f1:1c:3d:b8:f3:d3:fb:50:24:14:17:f6:ce:56:59:32:d0:5b: dd:37:1e:fa:d6:ba:d3:7a:2e:ed:ec:48:31:3d:43:8e:c1:b3: d8:07:ab:76:0a:a7:e4:b6:eb:1c:1e:aa:1e:69:93:e7:99:82: c5:28:8c:fe:40:55:a7:10:05:b0:ae:92:ff:79:45:cb:c2:86: 62:63:8b:a1:fd:2f:d5:65:f7:fa:5c:1d:fa:94:d2:33:0d:d6: 6c:24:fb:e1:4f:1c:4a:00:43:45:32:db:e2:3b:d4:9e:9d:ec: 21:fc:ce:89:19:21:a7:fa:06:7d:1a:ca:b7:b0:8e:78:61:2f: 45:ed:21:a8:0b:de:2f:0a:06:3e:a0:72:37:b8:74:42:30:7e: da:1f:4b:11 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEV2GEwW65OX9vNsrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDQwNzAxMDAyNFoXDTI0MDcwNjAxMDAyNFowLzEtMCsGA1UEAxMk YjBkYTg3OWEtYzU1OS00OThjLTk0ODgtNDllMTg4NWM4MTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgE7RtOFMF8H04a37qRWp9zKo3nO3DDwF9AwX Ij1gnInWZNL5WCGT31OwAuGnMPvgIE0lrjLM4PEf7/nfLDF/wTOI5v5DyLdYtRKH ZCNyNfc5WTAlnFwUXr3+2K5tuPMKlHFXWdwp/KZ112vooWNze8NFkjs2fwdq0/58 /8valEI2JMYIjkR12SQxYAN7ia3+GQhnU5U/1o6wtioOAhRU9/7S6cy/yaEPH6cN gWlGaMb2Wt6bN6X9PQAinzKkS0FcK5Iv3Wriy8eCvclCVpm2anojWx/RVvrrK0Yg jKUXRyLOOsBWUEwjxW+ohaRRUXEDIjDYPphYL+sJYsrlWTY1zwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKGnw9uXMyANWpdyfp1ZsyFGQEroMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGEyZjBkZDEtZmI0Mi0z ZjBkLWFmZTQtZDgzZjdlNjNlNzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWeAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACyfbRDyYCreFFKQQYMxCs80e2GG2BoXrcncoqSG9DfEdMfDCYf7 eGFC5Ovo59757lPkBXKTj1vDQ5GTXH0MDIKoOai6vNopdNXAQiL4Ybzr28r3MviI aDAXmDT3bBnCP/Sc9VBXi7JqU8PAQPEcPbjz0/tQJBQX9s5WWTLQW903HvrWutN6 Lu3sSDE9Q47Bs9gHq3YKp+S26xweqh5pk+eZgsUojP5AVacQBbCukv95RcvChmJj i6H9L9Vl9/pcHfqU0jMN1mwk++FPHEoAQ0Uy2+I71J6d7CH8zokZIaf6Bn0ayrew jnhhL0XtIagL3i8KBj6gcje4dEIwftofSxE= -----END CERTIFICATE-----Generated at Sun May 5 02:38:26 2024 by rpki-client on console-fra.rpki-client.org