$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c45e455-eee4-3092-9ab8-805a43dcb511.roa File: 4c45e455-eee4-3092-9ab8-805a43dcb511.roa (raw, json) Hash identifier: ZnXnE8mrefo2kxCPq2Sw1VTQ8EKzDUpGN3KNhvpcR2s= Subject key identifier: C1:B9:1A:64:F1:DF:CA:3E:19:BD:76:8F:35:68:C9:FF:5C:4E:9F:39 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAE9A6C5D451688015D6180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c45e455-eee4-3092-9ab8-805a43dcb511.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 33651 IP address blocks: 2001:559:87ff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ae:9a:6c:5d:45:16:88:01:5d:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=331c2f49-b2b1-4150-83da-8993223e12e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:05:22:a1:ad:c6:e9:11:49:53:6e:82:d5:20: 06:29:e6:dd:c3:43:3e:04:25:99:ce:ab:7d:57:25: 29:8d:e2:fb:03:08:38:9a:ae:11:bf:3d:5f:05:d3: 2b:1c:4a:94:6f:ca:7e:7a:33:5a:e1:2a:5e:64:43: 9b:5b:bc:af:53:9a:b7:e7:a0:40:34:65:c3:1b:b5: f5:2e:df:14:e2:d6:02:56:9a:60:18:a7:45:5f:df: 37:b6:3a:6f:8b:32:5a:9c:22:e5:3b:63:99:c3:2b: 28:29:94:07:01:3c:b8:f9:ce:b3:1a:57:47:52:50: 23:68:f3:1c:05:a6:85:75:d9:cd:d3:ce:64:e6:d7: 88:85:60:d3:e3:75:20:f5:49:8c:83:90:05:f2:20: f0:97:7f:fe:09:d2:7f:35:6f:04:8f:fb:bd:0b:66: 55:d2:5c:71:e0:f9:d0:35:21:25:cc:36:f8:e6:e5: dd:aa:8d:da:dc:fc:21:e9:c9:fd:9e:0b:48:d7:62: 52:d3:18:10:ca:42:1f:19:1f:44:1e:24:b0:bb:c2: 81:6f:77:ee:85:31:90:26:1c:72:29:13:0c:ec:6c: e2:c9:9a:ba:6d:5f:d0:0e:68:22:7f:c8:f3:d8:48: 5d:a9:50:0a:82:9a:cf:d0:0e:ba:65:cb:05:a6:c8: 74:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:B9:1A:64:F1:DF:CA:3E:19:BD:76:8F:35:68:C9:FF:5C:4E:9F:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c45e455-eee4-3092-9ab8-805a43dcb511.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:87ff::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:18:52:55:88:51:a3:81:02:9c:28:4c:43:11:59:9f:13:b6: 57:0d:3b:e1:4e:bf:56:96:b8:8b:29:dd:2f:bf:ea:4b:33:eb: b6:7f:10:76:e3:52:a0:db:32:a0:c5:fc:71:f2:d7:28:53:7e: c7:7b:cd:73:2e:76:9c:03:62:8a:82:b8:a3:66:6b:20:b7:58: 2e:cf:d7:d8:34:04:4c:c4:c2:d8:0c:46:a3:64:cc:a2:f1:05: 1f:cf:f1:a6:28:37:5c:7c:73:e8:c4:d0:08:a4:58:a2:e3:11: ab:f7:d2:eb:45:b3:74:26:1d:e6:fd:c1:fe:0d:3d:8b:07:8b: 65:3a:ca:e4:73:65:a8:fa:94:a1:ec:e3:02:82:07:ae:d8:21: f0:61:e0:57:00:09:f7:38:67:fb:c4:78:b4:3d:d4:ab:f1:57: 1d:6f:ee:aa:91:2f:1e:15:1a:4e:6e:b6:46:88:76:c4:61:88: ce:95:23:1d:4f:2f:d6:57:87:82:6b:a1:09:62:c8:62:eb:f3: 66:ba:74:fe:76:fc:04:b3:b2:e4:38:1e:cb:a4:f9:11:53:42: 4f:32:b5:5e:0c:1e:96:03:d8:34:37:81:0f:9b:f0:a8:a9:1d: 7a:c5:8a:63:3b:40:f6:af:73:2b:cd:2b:63:a2:42:6c:9d:c7: 73:f5:f8:b4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfrppsXUUWiAFdYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk MzMxYzJmNDktYjJiMS00MTUwLTgzZGEtODk5MzIyM2UxMmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQUioa3G6RFJU26C1SAGKebdw0M+BCWZzqt9 VyUpjeL7Awg4mq4Rvz1fBdMrHEqUb8p+ejNa4SpeZEObW7yvU5q356BANGXDG7X1 Lt8U4tYCVppgGKdFX983tjpvizJanCLlO2OZwysoKZQHATy4+c6zGldHUlAjaPMc BaaFddnN085k5teIhWDT43Ug9UmMg5AF8iDwl3/+CdJ/NW8Ej/u9C2ZV0lxx4PnQ NSElzDb45uXdqo3a3Pwh6cn9ngtI12JS0xgQykIfGR9EHiSwu8KBb3fuhTGQJhxy KRMM7GziyZq6bV/QDmgif8jz2EhdqVAKgprP0A66ZcsFpsh0YwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMG5GmTx38o+Gb12jzVoyf9cTp85MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGM0NWU0NTUtZWVlNC0z MDkyLTlhYjgtODA1YTQzZGNiNTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYf/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFEYUlWIUaOBApwoTEMRWZ8TtlcNO+FOv1aWuIsp3S+/6ksz67Z/ EHbjUqDbMqDF/HHy1yhTfsd7zXMudpwDYoqCuKNmayC3WC7P19g0BEzEwtgMRqNk zKLxBR/P8aYoN1x8c+jE0AikWKLjEav30utFs3QmHeb9wf4NPYsHi2U6yuRzZaj6 lKHs4wKCB67YIfBh4FcACfc4Z/vEeLQ91KvxVx1v7qqRLx4VGk5utkaIdsRhiM6V Ix1PL9ZXh4JroQliyGLr82a6dP52/ASzsuQ4Hsuk+RFTQk8ytV4MHpYD2DQ3gQ+b 8KipHXrFimM7QPavcyvNK2OiQmydx3P1+LQ= -----END CERTIFICATE-----Generated at Sat May 4 14:50:43 2024 by rpki-client on console-ams.rpki-client.org