$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4be2c8c5-6671-3248-8594-cfbdf03eea30.roa File: 4be2c8c5-6671-3248-8594-cfbdf03eea30.roa (raw, json) Hash identifier: VefLwyroIU3gzHvLZ7P785F7PTy5y4ICv4Gm0UGHQm0= Subject key identifier: BD:C9:8D:11:EC:04:3F:D6:62:BC:10:AE:D0:33:C0:95:8F:7B:F3:6F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FABA2F0905BE59103F660A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4be2c8c5-6671-3248-8594-cfbdf03eea30.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 33652 IP address blocks: 2001:559:c11a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ab:a2:f0:90:5b:e5:91:03:f6:60:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=5f0a3746-259e-4a4e-ba34-ddedf9b2d483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:41:96:d2:c9:d1:8b:e3:ed:66:f7:8f:cb:c8: 0c:4f:da:cf:d4:c9:9e:08:eb:1e:be:0e:45:b1:1a: 92:93:98:6c:d3:d2:fb:a4:4d:1a:b2:01:11:81:fc: bb:2a:30:ef:dc:7c:24:9c:53:48:2e:bf:51:1f:a8: 15:4e:f0:79:e9:10:35:7a:66:d6:be:72:7c:9b:a2: 9f:50:09:77:ab:1c:e0:7a:cc:a9:f2:f3:29:d1:cb: 77:cf:c2:1b:14:e6:0f:14:37:b5:a2:2b:ff:56:00: 5b:99:27:c2:38:33:3a:4e:6f:ab:05:8e:ab:f9:9a: 60:27:d2:f8:62:d0:b0:f1:fe:68:6d:ee:22:5c:c1: d4:63:0c:0e:73:c1:6b:11:0e:b6:dd:e7:d8:2d:d3: 08:44:84:88:5b:26:8c:e6:0c:ee:51:e3:4a:3c:9b: 96:9c:a1:02:25:cd:c6:5d:07:d5:1a:ed:7e:cb:52: 91:7e:aa:b0:00:3f:44:33:53:e1:fa:fe:d6:b7:67: 45:e2:14:c9:d9:48:ac:0e:b9:62:c6:a2:27:31:d3: 2f:6c:a6:12:3d:a4:fb:1d:42:dc:b3:f8:89:6d:9e: 3f:09:1f:71:39:69:9f:be:b0:b2:4c:5c:78:5a:b8: ef:8e:78:34:c1:54:7c:b1:ed:90:d0:e6:25:2e:90: c8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:C9:8D:11:EC:04:3F:D6:62:BC:10:AE:D0:33:C0:95:8F:7B:F3:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4be2c8c5-6671-3248-8594-cfbdf03eea30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c11a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:97:b2:ea:c9:5f:c2:e9:19:63:d9:55:e7:97:e1:27:7e:f3: fd:37:2b:69:26:88:bd:e4:87:5f:b7:34:23:01:6f:8f:f6:0f: 51:56:f1:9c:00:5a:2d:ef:82:35:d0:41:5a:96:68:c7:07:e6: a5:b4:81:e9:ff:ee:b5:3d:e3:e2:8f:fc:d4:74:14:eb:dd:97: c5:72:52:95:6c:f4:31:aa:d3:08:ae:ef:e8:78:ec:4f:ce:23: c7:1f:f6:62:d8:d9:a0:3a:94:00:fd:b9:f1:20:bc:f4:f2:18: 6a:af:81:b8:f8:4d:56:6e:3a:44:1a:ba:74:8c:3e:1c:00:c5: 29:b9:f1:72:97:06:05:77:59:ef:d3:ef:19:55:61:8a:15:67: b4:7b:e7:fc:cb:af:ac:c3:ca:f9:ed:a9:d6:14:92:2d:f7:12: 69:f3:38:a6:99:2c:d5:6c:05:b8:88:13:f2:26:0b:26:ba:5d: c4:bb:a4:87:93:70:8d:97:77:f5:a7:f4:21:4b:51:33:b5:cc: 74:3f:43:07:fe:fb:dd:b0:87:42:2c:4f:0c:a2:34:ec:9e:22: fa:b7:42:e7:2c:8e:64:67:95:f3:3e:dd:55:72:93:eb:ea:31: c7:89:7d:7f:48:8d:c9:16:c4:b7:00:12:cf:04:08:05:35:67: cb:c2:49:98 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfq6LwkFvlkQP2YKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk NWYwYTM3NDYtMjU5ZS00YTRlLWJhMzQtZGRlZGY5YjJkNDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokGW0snRi+PtZvePy8gMT9rP1MmeCOsevg5F sRqSk5hs09L7pE0asgERgfy7KjDv3HwknFNILr9RH6gVTvB56RA1embWvnJ8m6Kf UAl3qxzgesyp8vMp0ct3z8IbFOYPFDe1oiv/VgBbmSfCODM6Tm+rBY6r+ZpgJ9L4 YtCw8f5obe4iXMHUYwwOc8FrEQ623efYLdMIRISIWyaM5gzuUeNKPJuWnKECJc3G XQfVGu1+y1KRfqqwAD9EM1Ph+v7Wt2dF4hTJ2UisDrlixqInMdMvbKYSPaT7HULc s/iJbZ4/CR9xOWmfvrCyTFx4Wrjvjng0wVR8se2Q0OYlLpDIVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL3JjRHsBD/WYrwQrtAzwJWPe/NvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGJlMmM4YzUtNjY3MS0z MjQ4LTg1OTQtY2ZiZGYwM2VlYTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcEa MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMiXsurJX8LpGWPZVeeX4Sd+8/03K2kmiL3kh1+3NCMBb4/2D1FW 8ZwAWi3vgjXQQVqWaMcH5qW0gen/7rU94+KP/NR0FOvdl8VyUpVs9DGq0wiu7+h4 7E/OI8cf9mLY2aA6lAD9ufEgvPTyGGqvgbj4TVZuOkQaunSMPhwAxSm58XKXBgV3 We/T7xlVYYoVZ7R75/zLr6zDyvntqdYUki33EmnzOKaZLNVsBbiIE/ImCya6XcS7 pIeTcI2Xd/Wn9CFLUTO1zHQ/Qwf++92wh0IsTwyiNOyeIvq3QucsjmRnlfM+3VVy k+vqMceJfX9IjckWxLcAEs8ECAU1Z8vCSZg= -----END CERTIFICATE-----Generated at Sat May 4 14:50:42 2024 by rpki-client on console-ams.rpki-client.org