$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c6e1c45-ac96-33b6-bdfb-c75e4eb63b9c.roa File: 5c6e1c45-ac96-33b6-bdfb-c75e4eb63b9c.roa (raw, json) Hash identifier: OzRC2cBp+PEvUKYagjid5XOuQCc/4rDVzCd/XeTcFLg= Subject key identifier: 17:E2:03:6D:8C:40:DD:24:56:AE:67:6F:DD:6E:B2:85:2F:8F:8D:6E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285847BEFAA4D30B0276DCE3268760 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c6e1c45-ac96-33b6-bdfb-c75e4eb63b9c.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 33667 IP address blocks: 2001:559:53::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:fa:a4:d3:0b:02:76:dc:e3:26:87:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=b3950b22-c693-404b-a711-43c176b48d54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d9:82:e8:dd:ef:17:d3:5b:99:a9:ec:3d:8d: c0:e9:46:b8:e9:06:ad:38:13:c6:71:4f:e1:0a:97: ec:5a:10:0f:29:aa:1f:ad:94:5c:80:6f:99:c4:b0: fa:9a:cb:a7:3c:d2:98:26:3e:96:26:62:b6:b9:73: ac:31:0c:a1:31:dd:c1:de:58:9c:60:d1:d9:14:ca: 08:a7:5a:c1:36:7b:9a:e7:22:f3:92:20:eb:1e:90: c9:a5:69:f8:5a:22:46:87:24:cc:26:cb:0e:d9:fd: ce:bf:33:78:97:8f:01:2c:67:92:93:69:04:3c:27: 0a:4f:e1:0a:6c:80:9c:37:43:b0:94:27:ba:95:39: 68:73:af:76:76:d3:19:5a:73:5a:44:d2:80:94:6b: 59:b9:a0:a0:f5:1a:b3:6a:78:4c:f2:9b:d2:0f:1e: 6f:a6:0e:82:d9:e0:54:ba:e0:24:18:b2:72:b3:a4: 94:0c:ee:ab:d7:01:8f:02:a5:0a:51:28:85:8d:fa: a4:ee:0d:a9:db:00:14:8d:13:a6:22:0f:59:6b:10: ab:e0:66:34:5a:33:05:8b:bc:ad:b6:d3:6d:5f:87: 3d:23:77:4c:8d:68:7c:69:43:02:c9:1c:ae:3c:58: 32:3c:8c:45:ff:62:99:60:ab:02:05:7e:71:22:50: df:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E2:03:6D:8C:40:DD:24:56:AE:67:6F:DD:6E:B2:85:2F:8F:8D:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c6e1c45-ac96-33b6-bdfb-c75e4eb63b9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:53::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:ac:7e:16:ed:bf:ca:ec:74:69:bd:94:f7:ce:bc:12:31:4b: 3c:a4:68:e3:c3:5c:95:e4:20:60:a0:17:60:b1:0d:0d:c5:d7: 8f:c2:43:4b:43:3d:af:4e:f0:bf:dd:4e:2c:61:ab:26:31:d5: 79:f0:14:4c:18:40:4d:18:1e:4c:60:09:ac:94:70:e0:85:bd: 9e:e0:bb:8d:36:19:45:9f:4c:6b:d8:b0:9b:f8:28:ab:99:64: 41:ab:e4:36:aa:93:5a:7a:f2:20:8b:67:40:42:b1:fe:f6:9f: 52:01:59:5e:5e:9d:5a:18:f0:eb:44:9e:95:a1:29:a4:e5:d9: a3:cb:af:aa:76:0a:4e:49:aa:6a:2e:8f:47:b3:7a:a7:ea:14: 5e:22:79:29:a5:d9:e7:7b:b2:0c:b9:50:5a:fc:91:a9:bc:d3: ae:38:9a:cf:4e:28:a3:11:8c:3c:35:71:e8:b7:0d:bc:8c:f4: 5f:d6:ea:d8:38:36:d1:1b:50:10:e2:59:d8:1d:aa:1a:a4:5a: db:b3:b0:d5:a9:75:0b:2a:4c:5e:1b:c0:5c:0b:40:d1:39:2d: 3a:ae:84:dd:77:4a:d6:c4:d1:c5:9e:61:21:ef:dc:12:0a:a3: 91:2b:c8:84:23:a2:0d:45:68:bc:43:86:b6:dd:74:1d:93:5a: 12:84:fe:f1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe++qTTCwJ23OMmh2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk YjM5NTBiMjItYzY5My00MDRiLWE3MTEtNDNjMTc2YjQ4ZDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9mC6N3vF9NbmansPY3A6Ua46QatOBPGcU/h CpfsWhAPKaofrZRcgG+ZxLD6msunPNKYJj6WJmK2uXOsMQyhMd3B3licYNHZFMoI p1rBNnua5yLzkiDrHpDJpWn4WiJGhyTMJssO2f3OvzN4l48BLGeSk2kEPCcKT+EK bICcN0OwlCe6lTloc692dtMZWnNaRNKAlGtZuaCg9RqzanhM8pvSDx5vpg6C2eBU uuAkGLJys6SUDO6r1wGPAqUKUSiFjfqk7g2p2wAUjROmIg9ZaxCr4GY0WjMFi7yt ttNtX4c9I3dMjWh8aUMCyRyuPFgyPIxF/2KZYKsCBX5xIlDfCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBfiA22MQN0kVq5nb91usoUvj41uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWM2ZTFjNDUtYWM5Ni0z M2I2LWJkZmItYzc1ZTRlYjYzYjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQBT MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMWsfhbtv8rsdGm9lPfOvBIxSzykaOPDXJXkIGCgF2CxDQ3F14/C Q0tDPa9O8L/dTixhqyYx1XnwFEwYQE0YHkxgCayUcOCFvZ7gu402GUWfTGvYsJv4 KKuZZEGr5Daqk1p68iCLZ0BCsf72n1IBWV5enVoY8OtEnpWhKaTl2aPLr6p2Ck5J qmouj0ezeqfqFF4ieSml2ed7sgy5UFr8kam80644ms9OKKMRjDw1cei3DbyM9F/W 6tg4NtEbUBDiWdgdqhqkWtuzsNWpdQsqTF4bwFwLQNE5LTquhN13StbE0cWeYSHv 3BIKo5EryIQjog1FaLxDhrbddB2TWhKE/vE= -----END CERTIFICATE-----Generated at Tue Nov 26 02:31:06 2024 by rpki-client on console-fra.rpki-client.org