$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/576bb39a-0930-37fe-ad15-21e0b1dac7f1.roa File: 576bb39a-0930-37fe-ad15-21e0b1dac7f1.roa (raw, json) Hash identifier: +ZGSmueV/b7neej3HIFEgaXdA61dqrbs6KGPgzIBfy4= Subject key identifier: 09:85:5F:65:5B:EC:3E:7A:E8:48:15:33:7D:75:0B:3B:F8:9C:77:94 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAC19C2F47D917185BD21C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/576bb39a-0930-37fe-ad15-21e0b1dac7f1.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 33287 IP address blocks: 2001:559:5fb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ac:19:c2:f4:7d:91:71:85:bd:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=47be2dac-9094-4330-a068-664992f8510e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:83:ba:17:36:55:a9:06:2a:00:20:cc:85:78: 52:bc:e7:d3:4d:9c:67:4f:df:75:17:cd:f7:f9:1b: aa:d2:23:c8:c5:43:42:28:b8:1a:f0:31:e6:4a:75: bf:47:92:61:42:0f:cf:a8:b0:a4:93:97:6e:40:c0: 47:f2:bf:a0:bd:fd:6c:bd:68:e6:10:15:56:0e:dc: 99:45:21:8b:64:29:50:d7:0a:1b:e4:8d:e7:c9:c3: 36:e2:cd:97:43:4f:0b:95:63:18:4d:28:b9:d1:0c: cc:db:ed:3c:ce:30:79:48:a3:ae:06:45:9f:cb:f4: 38:c3:8f:b7:93:b7:13:f1:75:3c:a5:85:c4:1d:63: 36:a6:ff:da:d8:49:1c:78:9c:1c:a4:52:35:d2:9e: 81:e8:c2:f6:cd:a9:69:69:a5:48:57:f4:a8:de:c2: 5d:ae:9c:3e:68:9c:b3:61:00:89:82:9b:09:5f:e6: 60:fe:80:74:24:47:b2:95:34:27:6e:4e:3e:f3:59: c9:5e:01:ce:40:df:d1:84:48:ff:32:63:42:f5:61: 23:e4:d7:de:05:e6:92:76:45:1e:e2:95:c9:26:90: 83:d2:60:5f:b5:90:bf:ed:23:28:30:3c:c1:19:86: 42:26:38:7d:28:43:dd:6c:81:36:a2:94:d0:7b:cd: 31:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:85:5F:65:5B:EC:3E:7A:E8:48:15:33:7D:75:0B:3B:F8:9C:77:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/576bb39a-0930-37fe-ad15-21e0b1dac7f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:5fb::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:30:c6:9a:26:bc:b4:dc:f0:25:aa:cb:72:66:7f:7f:82:cd: cc:45:b1:17:b3:d6:bf:5e:f3:82:db:6c:97:e4:d6:4d:30:34: 20:cb:f4:47:b9:94:55:55:29:e8:4b:11:08:90:47:0d:ab:ef: 48:9a:5e:6b:27:a7:af:08:06:19:2c:06:78:8a:2e:7f:e1:27: 46:bc:64:16:06:46:43:55:32:48:8b:fa:f4:81:b7:a1:21:c1: 03:34:08:4a:a3:53:b9:44:a2:d1:56:c5:ac:e8:22:6a:50:75: c5:9e:3f:05:90:aa:76:72:a4:83:91:36:54:bb:7a:79:a7:3e: e2:c1:d2:41:b9:af:cf:3e:bd:bd:49:91:cb:25:bf:15:dc:b3: c5:3c:7d:73:ae:08:2f:b4:f6:f4:5a:78:c0:d1:94:e1:43:7d: f9:90:d9:b7:98:49:45:e4:5a:8a:91:21:6f:5b:14:22:b0:d1: 09:68:05:ab:09:a6:5a:65:09:3d:71:be:c7:e9:30:6c:49:c1: 78:be:a5:d2:03:89:2b:a6:3e:af:9a:38:ec:d0:62:c7:a9:77: 1a:b4:14:75:30:1b:af:26:5a:b2:30:e0:6b:fe:04:f9:27:24: a7:29:e7:ee:73:c6:f4:e3:e6:f3:02:dc:f7:1e:29:73:bc:a9: 65:37:60:2b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfrBnC9H2RcYW9IcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk NDdiZTJkYWMtOTA5NC00MzMwLWEwNjgtNjY0OTkyZjg1MTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioO6FzZVqQYqACDMhXhSvOfTTZxnT991F833 +Ruq0iPIxUNCKLga8DHmSnW/R5JhQg/PqLCkk5duQMBH8r+gvf1svWjmEBVWDtyZ RSGLZClQ1wob5I3nycM24s2XQ08LlWMYTSi50QzM2+08zjB5SKOuBkWfy/Q4w4+3 k7cT8XU8pYXEHWM2pv/a2EkceJwcpFI10p6B6ML2zalpaaVIV/So3sJdrpw+aJyz YQCJgpsJX+Zg/oB0JEeylTQnbk4+81nJXgHOQN/RhEj/MmNC9WEj5NfeBeaSdkUe 4pXJJpCD0mBftZC/7SMoMDzBGYZCJjh9KEPdbIE2opTQe80xQQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAmFX2Vb7D566EgVM311Czv4nHeUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTc2YmIzOWEtMDkzMC0z N2ZlLWFkMTUtMjFlMGIxZGFjN2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQX7 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD4wxpomvLTc8CWqy3Jmf3+CzcxFsRez1r9e84LbbJfk1k0wNCDL 9Ee5lFVVKehLEQiQRw2r70iaXmsnp68IBhksBniKLn/hJ0a8ZBYGRkNVMkiL+vSB t6EhwQM0CEqjU7lEotFWxazoImpQdcWePwWQqnZypIORNlS7enmnPuLB0kG5r88+ vb1JkcslvxXcs8U8fXOuCC+09vRaeMDRlOFDffmQ2beYSUXkWoqRIW9bFCKw0Qlo BasJplplCT1xvsfpMGxJwXi+pdIDiSumPq+aOOzQYsepdxq0FHUwG68mWrIw4Gv+ BPknJKcp5+5zxvTj5vMC3PceKXO8qWU3YCs= -----END CERTIFICATE-----Generated at Sun May 5 02:17:01 2024 by rpki-client on console-ams.rpki-client.org