$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/648d27f8-e4f5-3259-ac11-49d974920231.roa File: 648d27f8-e4f5-3259-ac11-49d974920231.roa (raw, json) Hash identifier: 4iWfNOhX19b7oRxuqNMmx3w6HKFpVZXhP2GB5CbksMY= Subject key identifier: 36:4E:B8:17:83:B1:B7:54:7B:CE:9A:43:80:15:C1:7D:B2:6B:80:5A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285847BEF7840762911CCDCAD5BA80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/648d27f8-e4f5-3259-ac11-49d974920231.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 33662 IP address blocks: 2001:559:1ab::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:f7:84:07:62:91:1c:cd:ca:d5:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=0bdce6fc-71e1-49b0-87a6-3ac81eaf9fe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d6:c7:38:cb:32:04:b6:3d:da:55:1c:01:b8: b6:1e:54:72:81:60:e8:a5:0a:ab:5d:d0:ae:53:a0: d4:5b:bc:0e:e6:f5:34:c2:d9:1d:f7:e4:f7:73:7c: 84:ae:20:43:d3:2e:0f:48:fc:f6:7b:e7:93:a8:d2: 3e:7f:76:bb:e2:dd:69:c3:c9:08:b8:8a:b6:e8:81: dd:37:40:15:92:12:51:f3:49:01:cc:f9:96:df:22: e1:68:95:e9:96:37:5c:08:fc:44:62:46:62:db:ba: f3:b4:db:2d:81:ed:8d:26:8e:92:7e:75:07:3f:08: 25:e7:78:52:5f:fb:17:12:65:55:7f:ec:ee:58:6b: 9d:71:d0:d0:d4:64:f6:63:dd:71:99:17:81:f3:08: 27:90:89:17:21:09:a9:e0:17:aa:ae:64:75:01:78: e8:b1:97:42:98:ea:e4:9e:5c:da:cc:67:da:27:7a: e9:5e:f3:d9:f9:82:20:15:c3:ec:2c:1d:a4:8c:3d: 89:ea:5e:cb:a5:7f:df:06:26:65:d3:f0:9f:fd:0a: be:1c:4a:94:b2:6a:0f:52:91:e9:34:f5:27:9c:52: e4:30:66:d2:6c:56:43:95:af:0f:46:33:a7:39:be: 7d:22:43:97:57:a9:4d:99:42:47:da:08:82:a3:d4: 90:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:4E:B8:17:83:B1:B7:54:7B:CE:9A:43:80:15:C1:7D:B2:6B:80:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/648d27f8-e4f5-3259-ac11-49d974920231.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:1ab::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:e2:b7:28:1f:73:e0:17:31:36:5e:b7:a3:5b:ad:33:62:42: 7e:3f:8a:bb:6f:19:44:33:1c:1a:ef:d4:aa:90:84:37:50:f8: ed:9d:de:1d:10:18:3a:e9:df:f1:96:b2:90:b6:43:26:8f:d2: 1a:2c:1e:e9:37:f4:34:be:e4:3d:ad:ca:17:9e:d7:b5:56:ea: 4b:03:d1:14:76:43:8d:cb:28:84:16:8a:81:79:aa:db:c0:20: 5b:3b:bb:31:cc:dd:47:78:4f:d7:74:52:aa:cf:12:92:cf:89: 6f:3b:6f:c2:38:ac:cb:de:8b:16:67:aa:8e:c7:04:93:ad:21: 09:3d:86:02:40:be:5a:f8:0e:5c:0d:9a:01:eb:3e:40:14:60: 14:7a:6b:c0:89:c5:3e:5f:e6:04:41:68:6c:f2:ce:7a:41:2c: 8a:45:1a:11:79:c3:ba:c9:a8:67:0d:13:e4:59:fb:83:18:cf: 1c:1d:55:65:3f:eb:15:6a:23:ca:b9:8c:1e:f5:70:c0:56:92: 93:1c:ac:4f:1a:c9:0c:a7:52:3d:33:df:51:9c:aa:be:1b:62: 5e:b6:10:72:11:2c:d9:93:3f:1f:7e:67:dc:ad:0e:86:33:a6: 7b:78:08:0c:2a:12:65:b5:19:f1:ea:96:0b:fb:15:b1:11:ae: 13:54:0e:52 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe+94QHYpEczcrVuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk MGJkY2U2ZmMtNzFlMS00OWIwLTg3YTYtM2FjODFlYWY5ZmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNbHOMsyBLY92lUcAbi2HlRygWDopQqrXdCu U6DUW7wO5vU0wtkd9+T3c3yEriBD0y4PSPz2e+eTqNI+f3a74t1pw8kIuIq26IHd N0AVkhJR80kBzPmW3yLhaJXpljdcCPxEYkZi27rztNstge2NJo6SfnUHPwgl53hS X/sXEmVVf+zuWGudcdDQ1GT2Y91xmReB8wgnkIkXIQmp4BeqrmR1AXjosZdCmOrk nlzazGfaJ3rpXvPZ+YIgFcPsLB2kjD2J6l7LpX/fBiZl0/Cf/Qq+HEqUsmoPUpHp NPUnnFLkMGbSbFZDla8PRjOnOb59IkOXV6lNmUJH2giCo9SQjQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDZOuBeDsbdUe86aQ4AVwX2ya4BaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjQ4ZDI3ZjgtZTRmNS0z MjU5LWFjMTEtNDlkOTc0OTIwMjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQGr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADDitygfc+AXMTZet6NbrTNiQn4/irtvGUQzHBrv1KqQhDdQ+O2d 3h0QGDrp3/GWspC2QyaP0hosHuk39DS+5D2tyhee17VW6ksD0RR2Q43LKIQWioF5 qtvAIFs7uzHM3Ud4T9d0UqrPEpLPiW87b8I4rMveixZnqo7HBJOtIQk9hgJAvlr4 DlwNmgHrPkAUYBR6a8CJxT5f5gRBaGzyznpBLIpFGhF5w7rJqGcNE+RZ+4MYzxwd VWU/6xVqI8q5jB71cMBWkpMcrE8ayQynUj0z31Gcqr4bYl62EHIRLNmTPx9+Z9yt DoYzpnt4CAwqEmW1GfHqlgv7FbERrhNUDlI= -----END CERTIFICATE-----Generated at Fri Nov 22 17:03:38 2024 by rpki-client on console-ams.rpki-client.org