$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a24436c-0152-3ebc-9b32-4b8d4bd3ac1f.roa File: 5a24436c-0152-3ebc-9b32-4b8d4bd3ac1f.roa (raw, json) Hash identifier: dJrQO+RCiCdwsc3b+O3Y0M8IKQJTICdwphn+/DZXspQ= Subject key identifier: 3F:B2:BE:9C:A6:2B:42:15:88:7D:47:F4:45:5A:7E:8F:2E:93:C5:32 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAD14BD507764B8889DD780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a24436c-0152-3ebc-9b32-4b8d4bd3ac1f.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 22909 IP address blocks: 2001:559:444::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ad:14:bd:50:77:64:b8:88:9d:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=87e4ad64-19f6-4421-9b09-ae249a031e60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6b:bc:1c:38:8f:bd:08:18:83:72:49:72:20: f6:04:b6:22:b8:47:2f:ca:d6:06:69:39:5b:e4:2d: 45:80:f4:01:f0:89:e8:22:46:20:53:83:e2:80:eb: 56:9a:be:5b:ba:de:c0:0a:92:01:f1:9e:76:0c:f1: 7e:5f:23:b6:e3:5b:1d:4c:aa:05:1d:91:04:2d:dd: 8b:9c:d0:34:f5:38:99:cd:d8:04:23:9b:97:77:58: ea:e3:27:52:0d:fa:d0:76:bf:e0:c8:e2:5d:ce:50: f5:c4:93:e6:1c:e0:c0:8b:be:d6:d0:71:d3:15:cf: 7f:ce:a9:32:a9:3e:39:df:29:b4:cf:8d:fc:6f:df: 36:de:51:85:4a:47:e4:c9:e7:59:d6:d5:d3:b0:32: d2:05:69:f8:e9:00:7f:60:05:8b:ed:12:44:0a:61: 10:0e:09:38:55:fd:a7:60:4c:3a:04:2b:57:23:e9: 66:3e:7a:25:8a:37:da:92:38:02:24:1d:98:07:74: 57:28:6f:27:ee:48:64:f6:5d:57:b7:0e:66:f3:5e: ea:1b:ae:92:49:bf:21:a6:62:82:63:4b:b6:65:9d: 8d:92:af:b0:ed:10:4f:88:7e:95:94:18:63:6d:02: f4:56:4f:32:f0:b0:49:6d:7d:1e:ba:56:dd:52:9a: 41:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:B2:BE:9C:A6:2B:42:15:88:7D:47:F4:45:5A:7E:8F:2E:93:C5:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a24436c-0152-3ebc-9b32-4b8d4bd3ac1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:444::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:8b:f1:46:64:ad:ee:8c:ef:98:5d:31:4f:37:1e:90:19:dd: 37:98:a3:bd:76:28:0e:6b:48:e1:95:b4:b1:24:fb:e5:61:9b: d9:d2:cd:4b:65:91:53:74:8e:5c:c1:11:17:b5:4f:c2:5b:7f: 85:e3:f9:c8:55:1c:0a:94:83:79:1c:58:a9:8e:95:5c:92:1f: 66:32:4c:11:2a:04:37:74:3e:63:1a:77:35:2e:69:aa:43:74: b8:72:90:44:44:c4:21:f9:92:5c:7e:c3:59:3b:15:d7:4f:68: be:11:53:47:45:ad:0e:4b:2c:53:34:2e:74:2f:c6:3a:e5:30: f8:11:3c:be:1f:95:00:83:21:8b:1d:95:82:8c:74:59:c9:d4: f2:b6:c3:ad:d9:15:95:4e:dc:d0:30:43:ca:e1:e3:b5:81:c3: ca:0e:63:75:5c:a2:67:db:0b:a9:97:81:76:d9:70:1d:b7:95: 81:1f:ac:20:c4:38:5f:c9:64:b6:eb:ff:68:de:a0:82:0e:60: ea:5f:1d:0c:31:86:12:b7:af:bb:c3:ec:74:95:fb:80:cc:d5: 4e:29:ec:43:59:cf:7a:5a:ce:24:77:6b:e3:e3:c1:15:c7:cf: cd:1c:82:33:48:14:36:a8:93:86:ba:ab:2d:2d:c0:59:b7:a2: 98:ce:ce:59 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfrRS9UHdkuIid14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk ODdlNGFkNjQtMTlmNi00NDIxLTliMDktYWUyNDlhMDMxZTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2u8HDiPvQgYg3JJciD2BLYiuEcvytYGaTlb 5C1FgPQB8InoIkYgU4PigOtWmr5but7ACpIB8Z52DPF+XyO241sdTKoFHZEELd2L nNA09TiZzdgEI5uXd1jq4ydSDfrQdr/gyOJdzlD1xJPmHODAi77W0HHTFc9/zqky qT453ym0z438b9823lGFSkfkyedZ1tXTsDLSBWn46QB/YAWL7RJECmEQDgk4Vf2n YEw6BCtXI+lmPnolijfakjgCJB2YB3RXKG8n7khk9l1Xtw5m817qG66SSb8hpmKC Y0u2ZZ2Nkq+w7RBPiH6VlBhjbQL0Vk8y8LBJbX0eulbdUppB4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD+yvpymK0IViH1H9EVafo8uk8UyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWEyNDQzNmMtMDE1Mi0z ZWJjLTliMzItNGI4ZDRiZDNhYzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQRE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJqL8UZkre6M75hdMU83HpAZ3TeYo712KA5rSOGVtLEk++Vhm9nS zUtlkVN0jlzBERe1T8Jbf4Xj+chVHAqUg3kcWKmOlVySH2YyTBEqBDd0PmMadzUu aapDdLhykERExCH5klx+w1k7FddPaL4RU0dFrQ5LLFM0LnQvxjrlMPgRPL4flQCD IYsdlYKMdFnJ1PK2w63ZFZVO3NAwQ8rh47WBw8oOY3VcomfbC6mXgXbZcB23lYEf rCDEOF/JZLbr/2jeoIIOYOpfHQwxhhK3r7vD7HSV+4DM1U4p7ENZz3paziR3a+Pj wRXHz80cgjNIFDaok4a6qy0twFm3opjOzlk= -----END CERTIFICATE-----Generated at Sat May 4 14:51:33 2024 by rpki-client on console-ams.rpki-client.org