$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/656aa5d5-7413-3f2e-b5d7-31cbc3f04589.roa File: 656aa5d5-7413-3f2e-b5d7-31cbc3f04589.roa (raw, json) Hash identifier: LGmzpG5SiPcaiyoZN50D+SwnZYAX1zPHfRvS5zSkEEY= Subject key identifier: E2:B1:47:E4:D3:D7:8C:FF:49:21:C8:5C:A8:58:EC:B0:14:58:1D:16 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285847BEF949D0670F67F5E5016400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/656aa5d5-7413-3f2e-b5d7-31cbc3f04589.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 20214 IP address blocks: 2001:559:ed::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Dec 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:f9:49:d0:67:0f:67:f5:e5:01:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=cf79f9c5-7134-4313-86a6-62e8640e8907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d8:23:db:67:ca:fa:cb:77:5b:68:cd:23:00: 09:89:c3:9e:68:90:30:b5:c5:cc:c8:0a:31:31:dd: 49:b6:26:4b:e3:3d:c5:64:99:7e:ec:4c:65:e7:ce: 72:ce:cd:d2:a3:40:10:80:bb:00:57:02:eb:35:bc: b9:04:ac:b2:db:7b:53:29:6a:f2:6f:57:b8:71:4a: 21:3c:dc:fd:97:e6:23:14:20:4f:d0:51:10:20:b0: aa:2f:e9:5b:1d:cc:3f:7b:be:01:42:c4:96:92:04: dd:50:99:7d:68:e2:7e:f9:8a:cd:1e:1a:9b:0b:6b: 4d:b7:56:67:25:10:3e:c8:e4:3c:78:e9:17:17:61: 2a:63:89:8e:0c:e6:75:9a:64:46:d0:d3:19:85:c6: 3f:58:28:71:66:55:10:59:4e:a6:74:88:b9:7c:bb: e8:76:17:90:cc:bd:f7:68:29:9a:5d:d8:e7:b2:ce: 7a:4e:dc:a8:6e:b7:70:ec:c4:8b:c9:94:1b:01:16: be:aa:11:a3:90:45:e9:f4:02:c9:74:06:88:96:bc: fe:ca:b8:04:a7:c2:9d:c4:fb:b5:5c:23:71:d7:fd: d1:d9:da:27:b8:b7:35:4f:36:35:d0:d1:84:98:1c: 1c:93:45:54:9b:9a:15:0b:d1:65:2b:3e:92:7e:cd: 0a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:B1:47:E4:D3:D7:8C:FF:49:21:C8:5C:A8:58:EC:B0:14:58:1D:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/656aa5d5-7413-3f2e-b5d7-31cbc3f04589.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:ed::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:1b:97:77:ed:a5:ff:46:5f:76:98:04:e0:5c:e4:07:83:32: ee:c3:58:da:9f:87:31:50:05:c0:00:ef:8d:10:93:e4:e9:9a: f8:25:da:dc:b5:a9:1c:2a:d4:75:4e:11:03:2a:0d:43:d0:53: b5:30:fe:0d:87:18:78:7e:80:a9:26:37:f6:e9:a1:66:02:1f: 96:22:39:95:8b:80:d2:fa:ea:3b:42:d9:3a:cc:43:51:01:43: 0c:02:11:c6:70:4b:5a:7d:fa:6e:d2:e6:d7:ef:61:d8:80:f0: 0b:33:9c:0e:f5:7d:3a:59:61:51:77:99:28:2f:1f:bd:9e:fa: bd:d3:48:34:24:b0:df:8c:2e:19:43:94:5e:f4:2e:89:f5:62: 95:17:5b:3a:e7:28:6e:f1:88:6c:eb:51:fb:80:24:40:15:44: bb:a5:33:d4:1e:69:f3:a0:77:83:a2:85:c9:c6:fe:b4:cb:cb: d8:60:12:08:f6:f1:e0:9d:b8:6a:30:08:4b:ee:31:e1:c5:ef: 78:bd:7a:ed:10:43:6d:4c:b2:87:89:63:56:fc:bd:c6:31:cc: 2e:4c:63:40:96:55:43:a1:d9:6c:30:f2:72:af:4b:c5:53:38: f5:17:c1:ef:0f:20:a0:43:e2:f4:45:4b:53:32:e2:a3:fd:22: 2a:ac:1f:6c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe++UnQZw9n9eUBZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk Y2Y3OWY5YzUtNzEzNC00MzEzLTg2YTYtNjJlODY0MGU4OTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Ngj22fK+st3W2jNIwAJicOeaJAwtcXMyAox Md1JtiZL4z3FZJl+7Exl585yzs3So0AQgLsAVwLrNby5BKyy23tTKWryb1e4cUoh PNz9l+YjFCBP0FEQILCqL+lbHcw/e74BQsSWkgTdUJl9aOJ++YrNHhqbC2tNt1Zn JRA+yOQ8eOkXF2EqY4mODOZ1mmRG0NMZhcY/WChxZlUQWU6mdIi5fLvodheQzL33 aCmaXdjnss56Ttyobrdw7MSLyZQbARa+qhGjkEXp9ALJdAaIlrz+yrgEp8KdxPu1 XCNx1/3R2donuLc1TzY10NGEmBwck0VUm5oVC9FlKz6Sfs0K8QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOKxR+TT14z/SSHIXKhY7LAUWB0WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjU2YWE1ZDUtNzQxMy0z ZjJlLWI1ZDctMzFjYmMzZjA0NTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQDt MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD4bl3ftpf9GX3aYBOBc5AeDMu7DWNqfhzFQBcAA740Qk+Tpmvgl 2ty1qRwq1HVOEQMqDUPQU7Uw/g2HGHh+gKkmN/bpoWYCH5YiOZWLgNL66jtC2TrM Q1EBQwwCEcZwS1p9+m7S5tfvYdiA8AsznA71fTpZYVF3mSgvH72e+r3TSDQksN+M LhlDlF70Lon1YpUXWzrnKG7xiGzrUfuAJEAVRLulM9QeafOgd4OihcnG/rTLy9hg Egj28eCduGowCEvuMeHF73i9eu0QQ21MsoeJY1b8vcYxzC5MY0CWVUOh2Www8nKv S8VTOPUXwe8PIKBD4vRFS1My4qP9IiqsH2w= -----END CERTIFICATE-----Generated at Sun Dec 22 15:14:06 2024 by rpki-client on console-fra.rpki-client.org