$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cf837bf-0767-3d3d-975a-3b0a2b12ae44.roa File: 4cf837bf-0767-3d3d-975a-3b0a2b12ae44.roa (raw, json) Hash identifier: HY+kLFXpjMU1Cppby0gpELLtvzlXlhuk2AFSQDoipU4= Subject key identifier: 5A:DC:CF:81:9D:FD:B0:D8:5D:31:B6:AE:2C:66:3D:D0:90:83:47:FC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285847BEF90AA8386321C5FFA55540 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cf837bf-0767-3d3d-975a-3b0a2b12ae44.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 7725 IP address blocks: 2001:559:8064::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Dec 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:f9:0a:a8:38:63:21:c5:ff:a5:55:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=e167a5cb-73ab-4148-95a1-3216a164b3b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a8:59:7a:d8:16:a4:71:2d:3f:01:cc:e4:45: 2f:66:3c:45:a4:85:06:4d:b4:ab:d1:c4:53:ae:7a: 88:8b:1d:d6:8b:50:32:78:74:12:ac:d8:b4:e6:75: d9:60:ec:7c:3c:96:c3:25:dc:1a:24:b2:db:90:23: 4d:c3:bd:08:dd:a3:96:fa:81:b9:25:31:59:39:ef: f2:6d:2c:5d:32:d9:99:fa:b6:cf:23:d4:71:d6:44: 65:76:18:33:b8:54:71:51:28:0c:c7:42:27:9b:ab: b6:e7:02:d1:2a:9d:c0:5a:2a:e4:b1:0a:4b:b1:fd: 1d:97:23:69:62:b7:20:f0:16:b4:ed:e9:b7:fe:73: 1e:b9:88:8f:0e:60:e0:2e:51:d4:a8:4d:9a:79:15: 86:ed:37:33:9c:13:89:62:06:f4:3b:95:26:b6:3d: 77:73:cd:31:2b:e5:16:27:90:5d:7e:69:c7:31:e4: 87:2b:34:22:6e:38:94:6b:4b:ad:fa:bb:e3:d4:d7: dc:54:93:be:8a:eb:8e:a5:df:12:97:21:2f:b3:c0: e1:c7:29:9c:06:32:dd:e3:36:a6:28:43:e9:e8:31: 2c:83:b4:fe:e2:93:cf:69:f0:30:2f:99:3b:1c:aa: ec:24:ee:07:05:b8:eb:a8:53:00:65:bc:6d:84:2a: b8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:DC:CF:81:9D:FD:B0:D8:5D:31:B6:AE:2C:66:3D:D0:90:83:47:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cf837bf-0767-3d3d-975a-3b0a2b12ae44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8064::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:08:65:7f:a1:89:a0:ff:e2:cf:11:01:a6:12:85:14:a6:58: 3c:61:de:26:34:b4:c3:07:80:09:77:bf:b2:a1:c7:c6:70:6c: cc:0a:ea:9d:26:33:dc:f4:22:4d:dc:0b:2d:14:50:14:7f:78: 43:b4:73:9e:85:db:47:93:58:66:99:15:3e:d5:ca:fa:60:7d: 2f:3b:48:03:77:44:04:fd:bb:0f:a9:ef:77:80:1f:cc:00:76: bb:d8:cd:aa:b8:32:ce:23:09:d3:18:b9:10:e5:61:64:da:e4: a5:8a:f1:c3:ae:83:39:ab:f2:20:9b:7b:ef:76:02:61:7e:4f: f3:40:28:c5:e4:3c:e2:e5:21:c1:ef:2f:ac:5b:66:04:08:d2: 28:a0:1c:b4:ca:8a:5b:b9:65:3a:3d:65:ec:10:7c:39:d4:b5: 75:9d:f6:52:89:cd:09:36:47:6d:60:0f:95:69:52:c6:1c:d9: 4d:ae:f1:06:f1:36:04:af:68:8b:6e:bc:2a:7b:f2:f3:15:91: 88:33:3c:89:24:62:26:50:4a:47:00:5a:90:e4:ba:23:bb:6f: 10:50:23:45:85:73:93:80:62:ea:57:6d:82:a2:43:10:42:0a: 9b:58:95:8e:ab:8e:59:b3:6c:1c:a3:29:76:ac:fa:ca:0f:8b: e3:43:d5:d4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe++QqoOGMhxf+lVUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk ZTE2N2E1Y2ItNzNhYi00MTQ4LTk1YTEtMzIxNmExNjRiM2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqhZetgWpHEtPwHM5EUvZjxFpIUGTbSr0cRT rnqIix3Wi1AyeHQSrNi05nXZYOx8PJbDJdwaJLLbkCNNw70I3aOW+oG5JTFZOe/y bSxdMtmZ+rbPI9Rx1kRldhgzuFRxUSgMx0Inm6u25wLRKp3AWirksQpLsf0dlyNp Yrcg8Ba07em3/nMeuYiPDmDgLlHUqE2aeRWG7TcznBOJYgb0O5Umtj13c80xK+UW J5BdfmnHMeSHKzQibjiUa0ut+rvj1NfcVJO+iuuOpd8SlyEvs8DhxymcBjLd4zam KEPp6DEsg7T+4pPPafAwL5k7HKrsJO4HBbjrqFMAZbxthCq41QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFrcz4Gd/bDYXTG2rixmPdCQg0f8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGNmODM3YmYtMDc2Ny0z ZDNkLTk3NWEtM2IwYTJiMTJhZTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYBk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADgIZX+hiaD/4s8RAaYShRSmWDxh3iY0tMMHgAl3v7Khx8ZwbMwK 6p0mM9z0Ik3cCy0UUBR/eEO0c56F20eTWGaZFT7VyvpgfS87SAN3RAT9uw+p73eA H8wAdrvYzaq4Ms4jCdMYuRDlYWTa5KWK8cOugzmr8iCbe+92AmF+T/NAKMXkPOLl IcHvL6xbZgQI0iigHLTKilu5ZTo9ZewQfDnUtXWd9lKJzQk2R21gD5VpUsYc2U2u 8QbxNgSvaItuvCp78vMVkYgzPIkkYiZQSkcAWpDkuiO7bxBQI0WFc5OAYupXbYKi QxBCCptYlY6rjlmzbByjKXas+soPi+ND1dQ= -----END CERTIFICATE-----Generated at Sun Dec 22 15:09:49 2024 by rpki-client on console-fra.rpki-client.org