$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/655e4a80-0f16-3565-a294-12d79d05b8be.roa File: 655e4a80-0f16-3565-a294-12d79d05b8be.roa (raw, json) Hash identifier: M9/Fvbkb1vsfKJutOH07FltTs6beNYp6vsgv3G6dGZQ= Subject key identifier: 39:B8:8A:EA:82:48:26:C5:1A:6C:5A:69:5B:93:A8:9C:A8:52:5A:E0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285847BEF74B17EA015702F00AA540 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/655e4a80-0f16-3565-a294-12d79d05b8be.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 21508 IP address blocks: 2001:559:c460::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Dec 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:f7:4b:17:ea:01:57:02:f0:0a:a5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=87f5188d-c54c-4869-853d-ccdb55970e46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c3:35:ef:85:3b:fb:7c:c1:5f:bc:ca:44:37: ec:40:38:da:c8:72:eb:bd:8d:66:58:b2:d9:33:5c: 48:c7:94:f2:e3:79:36:2f:52:74:e9:e3:a8:4f:d2: e2:53:6e:40:b6:03:34:2a:22:61:3b:af:ad:3b:88: c5:03:26:75:61:18:49:d7:fe:7e:7c:d3:ca:9d:71: 6f:91:37:e2:dc:7c:44:34:bd:d5:45:c0:1a:c8:62: 1b:61:a1:9f:a3:f4:ef:d3:75:0c:a7:78:ca:a9:07: b6:3a:e8:90:6f:c0:df:83:36:5c:bc:1a:b0:f0:34: cb:96:f5:db:02:9c:77:99:fc:5a:2d:7c:66:97:f3: cd:19:eb:80:a4:c5:11:6d:ba:56:2a:70:02:0b:9e: e8:07:e2:f9:86:a9:4c:d4:49:f3:59:07:3c:38:0b: 62:15:c6:bd:aa:5a:16:30:ae:1e:db:ab:fe:40:5e: cf:90:62:f9:c5:eb:10:c8:fd:47:e1:78:9c:62:78: f4:7a:64:84:d2:68:9f:d1:f8:39:ff:c2:34:51:01: c2:9a:62:34:1b:e0:50:f1:d7:10:64:b7:f0:1a:7f: 13:81:22:0e:2f:01:62:a2:98:90:fd:0e:d7:ed:3b: 5f:9d:1d:fa:1f:ba:04:bc:ac:fc:9f:df:ca:97:ee: 9d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B8:8A:EA:82:48:26:C5:1A:6C:5A:69:5B:93:A8:9C:A8:52:5A:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/655e4a80-0f16-3565-a294-12d79d05b8be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c460::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:54:e9:4a:c5:f2:e5:0b:6c:2a:d5:9d:1d:f2:94:9d:6b:8c: e0:cd:85:78:a4:35:49:af:84:f5:ee:43:d8:1e:f4:ca:59:df: 45:97:0b:55:b4:97:98:5d:86:79:ce:8b:8b:fd:5c:c3:f3:66: ee:73:dd:a1:55:88:97:e0:1e:43:01:07:d9:7a:76:2e:88:6e: f8:6d:83:a6:f9:df:e0:04:22:39:e7:1a:7d:9e:25:b5:b1:32: ae:25:6f:71:89:06:08:cb:52:41:c2:9f:9c:5b:93:74:57:65: f2:91:6a:59:5e:ba:bb:70:27:52:27:6a:f2:24:32:3a:53:92: 0e:ee:69:89:04:cd:8b:2c:05:94:b1:95:f9:93:9d:55:8e:42: cd:43:8e:5b:ee:b8:10:29:d1:85:98:dd:3d:db:13:13:6f:8b: e1:e2:80:e5:90:a7:95:72:45:bb:99:3f:87:ac:32:03:9c:f7: 20:e3:77:c3:64:b5:26:c4:ce:a7:a6:90:5d:cb:cd:28:cb:b7: 4d:7c:f8:b3:55:70:71:be:b3:44:ca:a8:0c:3c:88:55:a9:ac: 29:8f:57:c8:d4:4f:8f:54:90:df:d1:68:e5:9b:47:46:78:db: 5d:4e:85:7b:7d:70:8b:6c:76:30:34:91:b9:27:c2:49:1d:c0: dd:2c:ca:1f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe+90sX6gFXAvAKpUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk ODdmNTE4OGQtYzU0Yy00ODY5LTg1M2QtY2NkYjU1OTcwZTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcM174U7+3zBX7zKRDfsQDjayHLrvY1mWLLZ M1xIx5Ty43k2L1J06eOoT9LiU25AtgM0KiJhO6+tO4jFAyZ1YRhJ1/5+fNPKnXFv kTfi3HxENL3VRcAayGIbYaGfo/Tv03UMp3jKqQe2OuiQb8DfgzZcvBqw8DTLlvXb Apx3mfxaLXxml/PNGeuApMURbbpWKnACC57oB+L5hqlM1EnzWQc8OAtiFca9qloW MK4e26v+QF7PkGL5xesQyP1H4XicYnj0emSE0mif0fg5/8I0UQHCmmI0G+BQ8dcQ ZLfwGn8TgSIOLwFiopiQ/Q7X7TtfnR36H7oEvKz8n9/Kl+6d/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDm4iuqCSCbFGmxaaVuTqJyoUlrgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjU1ZTRhODAtMGYxNi0z NTY1LWEyOTQtMTJkNzlkMDViOGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcRg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAM1U6UrF8uULbCrVnR3ylJ1rjODNhXikNUmvhPXuQ9ge9MpZ30WX C1W0l5hdhnnOi4v9XMPzZu5z3aFViJfgHkMBB9l6di6Ibvhtg6b53+AEIjnnGn2e JbWxMq4lb3GJBgjLUkHCn5xbk3RXZfKRalleurtwJ1InavIkMjpTkg7uaYkEzYss BZSxlfmTnVWOQs1DjlvuuBAp0YWY3T3bExNvi+HigOWQp5VyRbuZP4esMgOc9yDj d8NktSbEzqemkF3LzSjLt018+LNVcHG+s0TKqAw8iFWprCmPV8jUT49UkN/RaOWb R0Z4211OhXt9cItsdjA0kbknwkkdwN0syh8= -----END CERTIFICATE-----Generated at Sun Dec 22 13:01:21 2024 by rpki-client on console-ams.rpki-client.org