$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4de2fd41-508f-377a-a6a7-ee12c0b3a413.roa File: 4de2fd41-508f-377a-a6a7-ee12c0b3a413.roa (raw, json) Hash identifier: A2+8Fs+9rGUzRhrkHjYTn8vqI+ip53xmaI/U6soGyyg= Subject key identifier: 45:01:0F:75:E0:D7:EB:89:0F:41:C8:F3:33:86:B5:44:05:B3:4C:2B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285847BEF7DF41228D36A36F56FF00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4de2fd41-508f-377a-a6a7-ee12c0b3a413.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 33287 IP address blocks: 2001:559:596::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:f7:df:41:22:8d:36:a3:6f:56:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=d0d0f8e2-e489-49bb-b096-6816de017cce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1c:83:61:22:9a:08:8b:18:6a:e1:b9:6d:c8: 5e:c8:8c:9b:c5:7d:9b:0e:1e:d1:2c:89:26:fb:95: e7:23:5e:7a:a6:7c:b7:1c:80:6d:77:8a:50:a6:34: 2e:b7:dc:39:4c:72:1e:5c:75:4c:6a:9e:02:87:e7: 4e:a2:f0:32:f7:36:ef:bc:02:57:b7:bb:ed:6c:b1: 2f:d8:46:b3:e0:f8:af:e6:8b:ae:40:75:fd:21:d3: 45:f8:52:ed:da:84:64:e5:c4:23:57:b6:16:ba:3d: 24:35:52:2a:1c:b3:24:ea:8d:1a:9e:77:00:a0:38: c9:12:54:2f:8b:b6:e4:99:bb:54:34:f1:cd:d0:39: 8a:10:00:32:94:24:ec:e7:04:8a:d8:06:60:7c:83: d8:12:e5:f2:fc:17:e3:de:57:1a:65:3b:e0:ba:e0: d2:98:b2:82:64:7a:54:2f:52:93:6b:87:c1:94:37: 43:2f:6c:e9:24:f5:4a:5d:32:0b:da:6f:41:87:70: ee:66:1c:1a:0e:d4:d8:59:04:22:63:f0:5d:d0:57: 8c:c5:b0:29:6e:3a:cd:9e:88:6f:f0:2e:8b:fc:cc: 40:35:12:00:b4:ac:94:80:2d:d3:01:0c:bf:7b:50: 93:ff:b9:1b:42:45:89:a8:73:5b:9e:19:81:9d:75: de:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:01:0F:75:E0:D7:EB:89:0F:41:C8:F3:33:86:B5:44:05:B3:4C:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4de2fd41-508f-377a-a6a7-ee12c0b3a413.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:596::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:85:d1:9c:d1:f1:fe:f3:f4:e2:98:4a:93:eb:80:49:de:fc: ff:58:45:87:1a:ad:3e:ec:2a:05:bf:40:bb:4c:e3:d3:ca:6c: fc:f5:b8:54:33:c2:a1:c0:74:c4:25:f4:ef:41:76:49:b1:6f: be:91:a3:05:a2:f8:54:79:34:48:93:49:c2:27:c3:ac:b0:4f: 8f:12:d0:91:53:52:f0:a5:b6:36:d6:cd:58:8d:7b:36:e5:3c: 4e:12:72:14:88:f5:07:8b:46:07:7f:8a:ca:8b:97:b4:98:c8: 92:c8:9b:f0:46:6d:fd:b8:00:9f:cb:ae:0a:82:0d:f1:af:25: 47:6d:24:9c:81:e6:c3:c0:bb:ee:c9:6b:9c:ca:d7:53:1b:9a: d2:20:d5:90:4e:70:3c:1b:af:b1:ce:ca:1f:89:b8:77:73:b5: b1:21:95:db:5a:5a:36:6e:91:02:06:e9:da:e0:f3:68:cc:f5: 46:54:ea:e4:11:b0:f9:6c:e2:5b:69:64:d0:5a:b2:9c:74:40: 0a:30:f6:0e:00:bb:65:7b:a8:f4:ff:64:0c:3e:5e:eb:28:46: cb:30:07:39:94:65:b3:3f:a1:16:e2:9d:21:ad:74:f0:25:e0: 2c:2b:5a:35:c4:5f:74:9b:df:b5:d3:99:65:16:70:72:ed:da: 50:c8:b4:6a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe+999BIo02o29W/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk ZDBkMGY4ZTItZTQ4OS00OWJiLWIwOTYtNjgxNmRlMDE3Y2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRyDYSKaCIsYauG5bcheyIybxX2bDh7RLIkm +5XnI156pny3HIBtd4pQpjQut9w5THIeXHVMap4Ch+dOovAy9zbvvAJXt7vtbLEv 2Eaz4Piv5ouuQHX9IdNF+FLt2oRk5cQjV7YWuj0kNVIqHLMk6o0anncAoDjJElQv i7bkmbtUNPHN0DmKEAAylCTs5wSK2AZgfIPYEuXy/Bfj3lcaZTvguuDSmLKCZHpU L1KTa4fBlDdDL2zpJPVKXTIL2m9Bh3DuZhwaDtTYWQQiY/Bd0FeMxbApbjrNnohv 8C6L/MxANRIAtKyUgC3TAQy/e1CT/7kbQkWJqHNbnhmBnXXeHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEUBD3Xg1+uJD0HI8zOGtUQFs0wrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGRlMmZkNDEtNTA4Zi0z NzdhLWE2YTctZWUxMmMwYjNhNDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQWW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIeF0ZzR8f7z9OKYSpPrgEne/P9YRYcarT7sKgW/QLtM49PKbPz1 uFQzwqHAdMQl9O9Bdkmxb76RowWi+FR5NEiTScInw6ywT48S0JFTUvCltjbWzViN ezblPE4SchSI9QeLRgd/isqLl7SYyJLIm/BGbf24AJ/LrgqCDfGvJUdtJJyB5sPA u+7Ja5zK11MbmtIg1ZBOcDwbr7HOyh+JuHdztbEhldtaWjZukQIG6drg82jM9UZU 6uQRsPls4ltpZNBaspx0QAow9g4Au2V7qPT/ZAw+XusoRsswBzmUZbM/oRbinSGt dPAl4CwrWjXEX3Sb37XTmWUWcHLt2lDItGo= -----END CERTIFICATE-----Generated at Fri Nov 22 11:54:53 2024 by rpki-client on console-ams.rpki-client.org