$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d8fe1f2-9b01-3614-bd27-3ff09764da4b.roa File: 5d8fe1f2-9b01-3614-bd27-3ff09764da4b.roa (raw, json) Hash identifier: RMAq0LU09pU1CXXCjkWjNrWtFE8f7VX8dHZ+6q8LC8Q= Subject key identifier: 67:F8:5B:4E:CE:F4:D8:AB:98:4B:2C:4B:DC:0F:14:FF:94:B7:82:37 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAB77B2E4B89A4793BA0580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d8fe1f2-9b01-3614-bd27-3ff09764da4b.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 22258 IP address blocks: 2001:558:6006::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ab:77:b2:e4:b8:9a:47:93:ba:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=0e0ead0b-ed79-4d1d-a2a5-a412dc61c841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:3a:65:65:4e:9a:39:f6:6e:94:31:02:70:92: fb:2b:0b:17:9f:0e:71:f4:31:03:87:c1:b1:ba:a8: 6d:e8:cb:ee:82:32:c1:dc:68:3c:c4:f1:9b:56:21: ad:3b:67:55:9f:92:e5:67:3c:d0:3a:a7:79:7e:de: 8c:81:d5:cf:e8:42:1d:84:ea:5d:c6:5d:a9:89:63: 49:29:ae:de:8f:4e:e1:be:3e:b9:47:aa:e7:f2:b9: a7:9a:46:4c:3d:49:43:c6:39:ba:34:16:2d:20:e9: eb:3a:92:06:3d:48:e9:d8:5c:1a:98:73:38:cb:0d: bc:1d:d0:78:11:28:12:48:81:61:7d:13:ac:09:6d: c2:e0:5d:01:b6:bf:13:c9:0c:26:3d:2a:0c:ba:a7: a1:35:b4:64:b1:5d:de:cd:4d:59:66:d4:35:21:a8: 15:38:51:2d:ee:51:1f:5b:c3:e3:89:94:9e:ee:71: 29:1c:f2:97:ef:9e:42:3c:b2:64:ce:bf:d4:ef:59: 1e:de:f7:59:2d:4a:2b:d7:3b:9f:e6:72:01:e3:33: 48:ac:39:f9:c5:69:3a:b9:fa:63:dc:ca:9d:b8:79: 5a:32:38:ef:c1:5c:f7:d6:ae:42:d7:36:f9:b6:0e: 17:11:57:e6:53:ef:6d:66:53:60:29:44:05:07:b3: 64:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F8:5B:4E:CE:F4:D8:AB:98:4B:2C:4B:DC:0F:14:FF:94:B7:82:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d8fe1f2-9b01-3614-bd27-3ff09764da4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:558:6006::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:b7:99:01:f4:20:dc:96:06:09:cc:7a:1d:72:f4:72:f9:bd: cf:ef:fc:16:f9:17:4b:94:df:08:85:1c:2c:42:d3:3f:c1:16: b7:3e:1a:de:9c:57:9d:52:4b:15:f5:ef:a8:7a:e1:88:69:56: ad:1d:4b:d9:33:61:48:72:75:fa:02:2d:f6:8a:d8:0f:57:52: 0c:16:da:48:49:03:87:17:28:75:fc:9c:7e:d6:bd:25:93:5a: 1a:a6:ee:25:e4:9e:a0:a3:94:a7:f4:68:0f:95:c9:a7:68:bf: bb:84:3d:f0:ed:14:6e:1f:55:a4:78:b6:51:86:ae:38:ba:df: a7:f6:b9:ce:e9:17:4a:e6:e3:2c:89:a7:67:a2:82:1a:09:ed: 72:d0:f7:5e:ee:57:8f:e1:39:fa:ff:2b:1c:c8:19:56:75:67: ce:db:df:6b:0e:15:c3:c6:59:83:3f:3d:e7:28:f4:95:b4:25: 22:ff:e3:3e:a0:15:73:60:58:53:de:d2:c4:0a:1c:38:5d:67: e7:6a:34:a7:30:3c:31:4d:4a:1f:15:e9:ff:db:65:df:0a:fc: de:d1:80:c5:7b:ec:e9:62:e3:6e:67:8b:25:38:66:21:9a:a8: df:3d:55:71:82:b8:f7:85:0b:d7:56:bb:28:fd:6b:ee:c4:14: 4d:df:7a:29 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfq3ey5LiaR5O6BYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk MGUwZWFkMGItZWQ3OS00ZDFkLWEyYTUtYTQxMmRjNjFjODQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9zplZU6aOfZulDECcJL7KwsXnw5x9DEDh8Gx uqht6MvugjLB3Gg8xPGbViGtO2dVn5LlZzzQOqd5ft6MgdXP6EIdhOpdxl2piWNJ Ka7ej07hvj65R6rn8rmnmkZMPUlDxjm6NBYtIOnrOpIGPUjp2FwamHM4yw28HdB4 ESgSSIFhfROsCW3C4F0Btr8TyQwmPSoMuqehNbRksV3ezU1ZZtQ1IagVOFEt7lEf W8PjiZSe7nEpHPKX755CPLJkzr/U71ke3vdZLUor1zuf5nIB4zNIrDn5xWk6ufpj 3MqduHlaMjjvwVz31q5C1zb5tg4XEVfmU+9tZlNgKUQFB7Nk7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGf4W07O9NirmEssS9wPFP+Ut4I3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWQ4ZmUxZjItOWIwMS0z NjE0LWJkMjctM2ZmMDk3NjRkYTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWGAG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADK3mQH0INyWBgnMeh1y9HL5vc/v/Bb5F0uU3wiFHCxC0z/BFrc+ Gt6cV51SSxX176h64YhpVq0dS9kzYUhydfoCLfaK2A9XUgwW2khJA4cXKHX8nH7W vSWTWhqm7iXknqCjlKf0aA+Vyadov7uEPfDtFG4fVaR4tlGGrji636f2uc7pF0rm 4yyJp2eighoJ7XLQ917uV4/hOfr/KxzIGVZ1Z87b32sOFcPGWYM/Peco9JW0JSL/ 4z6gFXNgWFPe0sQKHDhdZ+dqNKcwPDFNSh8V6f/bZd8K/N7RgMV77Oli425niyU4 ZiGaqN89VXGCuPeFC9dWuyj9a+7EFE3feik= -----END CERTIFICATE-----Generated at Sat May 4 14:51:45 2024 by rpki-client on console-ams.rpki-client.org