$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5527f56b-4c29-3f5f-be4e-b88739c3e676.roa File: 5527f56b-4c29-3f5f-be4e-b88739c3e676.roa (raw, json) Hash identifier: qPKnyXSod/KAWGbop1Cm8O2nCPnXmDPU4SMv2BCluZA= Subject key identifier: 37:9F:17:CB:3C:9E:B1:82:7C:DE:D1:9D:F2:B8:B7:69:A6:C4:99:B2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285847BEF81C9572765148D41FEC40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5527f56b-4c29-3f5f-be4e-b88739c3e676.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 33659 IP address blocks: 2001:559:70a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:f8:1c:95:72:76:51:48:d4:1f:ec:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=c719e531-2d68-48c6-ba9e-cd1c1ecbd766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:10:0d:c1:f5:9a:d1:7f:e7:a5:4a:70:34:aa: 0a:e9:01:1a:5f:47:b2:a6:21:48:62:fd:5f:0d:e7: 7e:06:bf:ab:b5:5d:25:c3:23:05:fa:34:b7:5a:d5: 7b:da:33:40:05:c8:99:27:18:a1:55:67:76:8e:ed: 50:0c:f7:98:7e:d2:e6:0b:14:5b:90:52:db:8a:af: d0:04:8e:99:32:88:ca:8d:df:93:6a:92:4f:e6:d6: 27:34:cd:d7:fa:be:ae:de:f4:59:db:61:de:ab:1e: f5:04:bf:8a:6d:63:cc:84:ef:fa:73:45:c1:ed:bb: 6f:04:9c:f2:cd:ad:71:21:41:de:f8:b7:a9:78:4c: ba:89:9c:48:5c:a4:22:9e:da:9d:31:73:32:1c:e7: 97:b5:a2:d3:03:29:f5:5c:f3:54:04:bb:1b:d8:0e: e9:60:64:90:09:8b:bb:e5:e0:1e:68:c4:7f:98:c3: 6c:54:4b:f3:57:fe:40:57:8b:87:07:6f:5c:90:2a: 94:67:54:3a:ca:5a:ce:5c:b9:7f:23:85:77:59:22: 94:53:b5:06:23:a5:f1:2e:1e:04:a1:83:73:4b:ea: b5:30:2f:49:bd:3d:a6:7a:d9:fe:3f:76:21:62:ce: 3e:d9:0d:61:12:19:bd:f9:e6:ff:90:5a:7f:ba:be: 0e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:9F:17:CB:3C:9E:B1:82:7C:DE:D1:9D:F2:B8:B7:69:A6:C4:99:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5527f56b-4c29-3f5f-be4e-b88739c3e676.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:70a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:86:c1:f2:3a:3c:4d:96:c7:ed:7d:7b:da:16:c7:0a:f5:84: dc:e4:2e:dd:eb:03:72:64:da:e6:71:20:cc:f6:e5:19:6d:67: 38:af:47:e9:be:c3:8b:70:b8:39:d8:62:65:e6:c1:ad:fe:ab: 02:4f:18:46:8a:b0:25:5a:5a:c2:d6:35:07:e3:b9:31:d7:34: 86:f3:f5:3c:0f:88:92:cb:cb:6b:39:ba:fb:00:94:0e:c6:ef: b1:ed:55:bc:4d:bc:2f:dc:48:8c:c1:0e:b2:ec:b4:25:ee:16: 08:c1:24:ff:b2:72:50:e9:98:16:e0:f2:2c:8c:9f:16:0b:13: ca:87:96:c5:a6:b7:64:e8:72:ca:a7:6f:89:8d:55:58:0f:d3: 6f:f9:95:9e:bc:4c:fc:9a:de:22:12:c6:ee:78:03:b2:02:dd: 38:7f:65:35:0b:f5:e9:7b:9e:1c:21:79:2a:b5:75:32:34:72: 05:52:66:5d:83:b8:77:3f:6b:0e:29:2c:b9:a8:08:3e:a8:73: ec:33:9a:c0:83:89:a8:bd:bd:bd:ea:98:c5:91:14:3f:c0:af: 6b:1b:da:c7:a9:42:e5:47:ac:0b:43:13:3c:bc:d0:81:95:e9: e6:75:59:a4:4c:66:a8:e7:9e:a5:b5:fc:86:3d:94:5c:3a:57: 38:ee:fa:4d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe++ByVcnZRSNQf7EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk YzcxOWU1MzEtMmQ2OC00OGM2LWJhOWUtY2QxYzFlY2JkNzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxANwfWa0X/npUpwNKoK6QEaX0eypiFIYv1f Ded+Br+rtV0lwyMF+jS3WtV72jNABciZJxihVWd2ju1QDPeYftLmCxRbkFLbiq/Q BI6ZMojKjd+TapJP5tYnNM3X+r6u3vRZ22Heqx71BL+KbWPMhO/6c0XB7btvBJzy za1xIUHe+LepeEy6iZxIXKQintqdMXMyHOeXtaLTAyn1XPNUBLsb2A7pYGSQCYu7 5eAeaMR/mMNsVEvzV/5AV4uHB29ckCqUZ1Q6ylrOXLl/I4V3WSKUU7UGI6XxLh4E oYNzS+q1MC9JvT2metn+P3YhYs4+2Q1hEhm9+eb/kFp/ur4OywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDefF8s8nrGCfN7RnfK4t2mmxJmyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTUyN2Y1NmItNGMyOS0z ZjVmLWJlNGUtYjg4NzM5YzNlNjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQcK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALOGwfI6PE2Wx+19e9oWxwr1hNzkLt3rA3Jk2uZxIMz25RltZziv R+m+w4twuDnYYmXmwa3+qwJPGEaKsCVaWsLWNQfjuTHXNIbz9TwPiJLLy2s5uvsA lA7G77HtVbxNvC/cSIzBDrLstCXuFgjBJP+yclDpmBbg8iyMnxYLE8qHlsWmt2To csqnb4mNVVgP02/5lZ68TPya3iISxu54A7IC3Th/ZTUL9el7nhwheSq1dTI0cgVS Zl2DuHc/aw4pLLmoCD6oc+wzmsCDiai9vb3qmMWRFD/Ar2sb2sepQuVHrAtDEzy8 0IGV6eZ1WaRMZqjnnqW1/IY9lFw6Vzju+k0= -----END CERTIFICATE-----Generated at Fri Nov 22 11:55:32 2024 by rpki-client on console-ams.rpki-client.org