$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c25c2b5-4e22-3fac-af63-da1d791f1b7b.roa File: 5c25c2b5-4e22-3fac-af63-da1d791f1b7b.roa (raw, json) Hash identifier: mgZ34Pw5F5C46LtvyyIksd8jEWmFfRymYjTJK0Lu01I= Subject key identifier: D2:B1:AB:27:BB:8A:AF:9A:D8:34:07:B4:EA:65:BB:AC:A1:07:76:5F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285847BEF7421DF38B2DA1B466CF80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c25c2b5-4e22-3fac-af63-da1d791f1b7b.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 20214 IP address blocks: 2001:559:589::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Dec 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:f7:42:1d:f3:8b:2d:a1:b4:66:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=cb104982-0e7a-464a-8c0c-d0709cacbe41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0d:20:20:d9:56:c5:12:2a:2b:f3:a9:9c:e8: f3:bd:99:2a:12:52:25:14:e9:12:6a:6c:78:52:7c: c6:6a:bb:1c:5a:11:05:49:e2:46:fd:03:1c:17:84: d8:61:62:c8:f6:ae:1a:f0:95:ca:e9:21:60:4e:46: e7:c3:9d:b0:ac:b3:70:47:6f:29:01:3c:1b:f3:0b: b9:af:19:ba:55:49:f3:f5:45:df:64:fe:a4:cf:d4: 00:2e:db:70:ea:73:ba:8d:ec:17:d3:f4:2a:25:76: 3a:4f:dd:ca:95:f4:70:b0:6d:03:58:f7:40:c2:a7: 8b:24:9b:ed:61:fa:8f:42:9d:ca:22:71:86:2f:4c: 62:10:ed:06:69:2d:d4:e5:7b:2f:37:58:48:0f:ed: be:85:85:fd:33:53:b8:f0:a0:f1:32:29:66:dd:70: 17:ef:08:38:99:7b:d0:66:6a:2c:ae:f2:12:fb:9d: 60:59:4e:4f:ab:dc:e4:b0:cd:33:d0:77:1f:20:ea: 6a:46:8f:1e:af:b5:32:df:83:34:c2:8b:c7:b7:11: 9e:cd:da:55:8a:28:0f:90:19:3a:8f:c9:f8:9d:c4: b7:02:40:7d:bb:42:cc:3a:f8:8a:d4:87:81:5b:44: 72:9b:4a:16:6c:62:3a:fe:c0:1b:df:2d:6e:bb:39: 8e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B1:AB:27:BB:8A:AF:9A:D8:34:07:B4:EA:65:BB:AC:A1:07:76:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c25c2b5-4e22-3fac-af63-da1d791f1b7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:589::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:22:5e:dd:70:88:cc:85:a9:69:6a:0b:49:7f:74:48:f8:1c: cf:59:be:0f:b0:33:4b:53:43:28:ab:e4:83:b9:c9:f0:a6:bb: 71:ce:2b:71:6e:5f:f8:46:97:a6:ac:94:90:6a:4b:52:d5:82: 60:67:c5:6c:62:16:3f:31:77:3a:29:b0:4f:5b:51:70:49:d7: 51:5d:0e:03:df:27:0a:30:6b:4a:fa:a0:1d:60:30:e6:66:d3: 8e:ae:cc:5b:7b:b5:12:f3:b6:8d:9c:91:27:48:49:e5:bd:96: 39:24:ca:82:18:42:5b:23:4e:e1:92:9d:69:7a:ed:8d:83:b1: 82:a1:49:79:9d:aa:ed:e7:56:f7:4f:7a:bc:5c:5a:e0:99:c6: b3:12:66:d2:9a:45:f3:77:ad:78:0b:f5:41:d2:35:7d:97:ce: db:06:74:35:7d:8d:d7:cc:e6:64:d0:46:ef:87:e9:0c:12:cf: 6c:f4:12:2d:04:f8:2b:69:d2:04:ff:ea:f7:0c:3d:e6:b3:ff: 79:16:20:5b:8d:98:86:91:05:35:f0:48:af:72:0f:23:f8:a1: b6:c6:9e:13:86:7e:90:69:f2:e0:1a:59:20:94:fc:bf:fa:a5: da:35:85:73:47:51:7d:81:6f:43:81:3f:25:e4:65:d4:0d:2d: a2:ff:da:45 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe+90Id84stobRmz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk Y2IxMDQ5ODItMGU3YS00NjRhLThjMGMtZDA3MDljYWNiZTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmg0gINlWxRIqK/OpnOjzvZkqElIlFOkSamx4 UnzGarscWhEFSeJG/QMcF4TYYWLI9q4a8JXK6SFgTkbnw52wrLNwR28pATwb8wu5 rxm6VUnz9UXfZP6kz9QALttw6nO6jewX0/QqJXY6T93KlfRwsG0DWPdAwqeLJJvt YfqPQp3KInGGL0xiEO0GaS3U5XsvN1hID+2+hYX9M1O48KDxMilm3XAX7wg4mXvQ ZmosrvIS+51gWU5Pq9zksM0z0HcfIOpqRo8er7Uy34M0wovHtxGezdpViigPkBk6 j8n4ncS3AkB9u0LMOviK1IeBW0Rym0oWbGI6/sAb3y1uuzmOkwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNKxqye7iq+a2DQHtOplu6yhB3ZfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWMyNWMyYjUtNGUyMi0z ZmFjLWFmNjMtZGExZDc5MWYxYjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQWJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGsiXt1wiMyFqWlqC0l/dEj4HM9Zvg+wM0tTQyir5IO5yfCmu3HO K3FuX/hGl6aslJBqS1LVgmBnxWxiFj8xdzopsE9bUXBJ11FdDgPfJwowa0r6oB1g MOZm046uzFt7tRLzto2ckSdISeW9ljkkyoIYQlsjTuGSnWl67Y2DsYKhSXmdqu3n VvdPerxcWuCZxrMSZtKaRfN3rXgL9UHSNX2XztsGdDV9jdfM5mTQRu+H6QwSz2z0 Ei0E+Ctp0gT/6vcMPeaz/3kWIFuNmIaRBTXwSK9yDyP4obbGnhOGfpBp8uAaWSCU /L/6pdo1hXNHUX2Bb0OBPyXkZdQNLaL/2kU= -----END CERTIFICATE-----Generated at Sun Dec 22 15:12:30 2024 by rpki-client on console-fra.rpki-client.org