$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d38c8fc-4a33-3a22-8394-f034c8348809.roa File: 5d38c8fc-4a33-3a22-8394-f034c8348809.roa (raw, json) Hash identifier: Sd7SEoQKMhvrocJsvAsw677h3N74nNu372z0KS7/1lo= Subject key identifier: 42:60:D4:01:9F:D0:BD:3B:EC:27:AE:A3:72:C8:DC:4F:58:AC:69:B5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAC581699FBF61462695D00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d38c8fc-4a33-3a22-8394-f034c8348809.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 33659 IP address blocks: 2001:559:45d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ac:58:16:99:fb:f6:14:62:69:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=652d892a-dae6-4553-bb9c-4f99cff3c610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0b:8d:f3:13:0d:28:56:39:b1:67:f2:26:5b: 87:a5:09:e9:be:90:68:41:e3:bc:52:f8:05:96:f4: 33:21:ae:03:8e:0d:ac:d8:25:b9:62:d1:3b:55:c0: bd:e0:52:2c:52:07:2f:6a:c4:05:f2:8a:55:b3:89: 4b:8e:d8:06:34:0f:a8:90:a4:a1:24:70:85:96:88: dc:d7:c0:f5:7e:21:3c:4f:1e:4e:0a:40:ef:25:56: 74:fa:da:b9:c9:0b:b6:8b:40:e2:be:38:31:21:af: 9d:0c:47:f2:3c:ea:c9:d0:77:c9:0e:7b:54:ad:67: 06:29:80:0f:1f:41:ac:fb:22:da:1f:98:36:20:a8: 85:2c:da:a3:6b:86:94:31:f0:92:56:6c:c2:e8:2e: 4f:31:60:35:08:73:9f:a3:66:31:da:39:0f:a0:2e: 5b:35:9d:26:40:31:5d:67:e0:3b:a3:2a:d1:5f:ed: 18:f8:e6:63:64:21:cf:c3:15:fc:09:db:c0:94:d8: cf:ff:96:e5:a0:f4:75:75:d1:39:b0:1e:d5:c0:c7: e6:d5:26:7e:3f:1e:44:0b:fe:3d:3e:c6:94:37:1c: 06:74:9c:de:2f:57:69:72:6f:ec:87:ed:bd:16:35: 90:db:27:c3:c0:76:82:91:fe:98:a2:c0:4a:88:d7: 4f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:60:D4:01:9F:D0:BD:3B:EC:27:AE:A3:72:C8:DC:4F:58:AC:69:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d38c8fc-4a33-3a22-8394-f034c8348809.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:45d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:8e:4d:1e:2e:9f:6c:13:2c:48:d5:63:97:9a:fa:0f:fc:a3: bb:3a:61:8f:06:2b:9f:fc:12:46:e6:5e:03:d3:2b:4a:ac:68: 34:1a:04:1f:ad:6b:5f:f5:df:d4:bb:18:4c:a9:40:a0:3c:ab: 61:d1:f7:21:5f:b8:54:e2:bc:03:f6:6d:09:76:12:ef:9f:68: d6:4c:95:e5:f5:12:5c:af:a3:f7:fe:c8:69:ec:63:bb:66:30: 20:f4:66:5b:40:15:73:7b:f1:d5:b3:71:e1:25:e6:0c:9b:6e: 0f:97:77:2f:a5:fa:12:5a:63:9c:23:4f:a0:34:11:ba:60:63: e1:15:2a:bc:fc:e7:48:aa:50:66:38:04:fa:b1:4e:6f:fd:40: 98:c0:84:e7:13:64:e0:fe:bb:31:be:4b:7d:06:c9:e7:c4:c8: 57:57:f4:ab:47:e3:18:69:af:dd:20:d3:d3:86:29:76:b3:81: ed:b5:67:40:ab:58:d4:30:c2:77:f6:f7:7b:a2:33:ef:ec:25: 26:12:f5:0c:bd:81:4f:44:00:56:f2:1d:40:d5:fc:c0:a4:a3: 19:69:8f:34:79:20:ff:c5:cc:4c:e1:74:e3:52:46:f0:b2:e5: 5d:81:1a:8a:eb:72:af:db:11:82:ca:4d:14:17:04:a1:57:0c: da:5f:6d:42 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfrFgWmfv2FGJpXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk NjUyZDg5MmEtZGFlNi00NTUzLWJiOWMtNGY5OWNmZjNjNjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArguN8xMNKFY5sWfyJluHpQnpvpBoQeO8UvgF lvQzIa4Djg2s2CW5YtE7VcC94FIsUgcvasQF8opVs4lLjtgGNA+okKShJHCFlojc 18D1fiE8Tx5OCkDvJVZ0+tq5yQu2i0DivjgxIa+dDEfyPOrJ0HfJDntUrWcGKYAP H0Gs+yLaH5g2IKiFLNqja4aUMfCSVmzC6C5PMWA1CHOfo2Yx2jkPoC5bNZ0mQDFd Z+A7oyrRX+0Y+OZjZCHPwxX8CdvAlNjP/5bloPR1ddE5sB7VwMfm1SZ+Px5EC/49 PsaUNxwGdJzeL1dpcm/sh+29FjWQ2yfDwHaCkf6YosBKiNdPEwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEJg1AGf0L077Ceuo3LI3E9YrGm1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWQzOGM4ZmMtNGEzMy0z YTIyLTgzOTQtZjAzNGM4MzQ4ODA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQRd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADCOTR4un2wTLEjVY5ea+g/8o7s6YY8GK5/8EkbmXgPTK0qsaDQa BB+ta1/139S7GEypQKA8q2HR9yFfuFTivAP2bQl2Eu+faNZMleX1Elyvo/f+yGns Y7tmMCD0ZltAFXN78dWzceEl5gybbg+Xdy+l+hJaY5wjT6A0EbpgY+EVKrz850iq UGY4BPqxTm/9QJjAhOcTZOD+uzG+S30GyefEyFdX9KtH4xhpr90g09OGKXazge21 Z0CrWNQwwnf293uiM+/sJSYS9Qy9gU9EAFbyHUDV/MCkoxlpjzR5IP/FzEzhdONS RvCy5V2BGorrcq/bEYLKTRQXBKFXDNpfbUI= -----END CERTIFICATE-----Generated at Sat May 4 14:51:44 2024 by rpki-client on console-ams.rpki-client.org