$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6734996d-b8d8-3cb0-9fb0-3151d2952d18.roa File: 6734996d-b8d8-3cb0-9fb0-3151d2952d18.roa (raw, json) Hash identifier: ND8u6GgOcfuvYTgiT70FJ7bXHHGdvFCGgq2XRUh/riQ= Subject key identifier: 32:F6:FE:BE:05:3F:C2:D7:1B:8A:C3:CC:64:11:10:C0:E1:0F:52:CE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285847BEF78E9E6D552E0FD3FC9B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6734996d-b8d8-3cb0-9fb0-3151d2952d18.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 33667 IP address blocks: 2001:559:13c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:f7:8e:9e:6d:55:2e:0f:d3:fc:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=5e8b675e-02b0-4f96-abd5-5186e61a383e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d7:23:cf:97:bb:ab:f6:84:b3:48:de:02:db: 0e:55:70:dc:95:44:8f:4e:90:0c:59:e7:9e:5e:3d: 91:24:a5:5c:2f:a5:25:00:ea:15:ae:f4:cb:1d:82: 98:10:70:e9:ed:9d:12:89:13:61:75:cb:70:9d:b3: 69:32:dc:26:4d:fb:dd:07:33:d1:d6:5f:41:db:bd: d7:db:64:68:a6:c5:4a:7d:69:6f:93:aa:46:f9:1c: 67:89:4e:e3:d4:3b:58:ba:8e:5e:af:c6:22:d2:49: f9:4c:8b:04:cc:74:81:33:92:7b:77:77:13:2e:10: e7:2c:a9:63:90:28:f7:ab:32:89:a8:9b:58:de:fa: e3:48:53:c3:ca:84:35:0b:40:6d:e1:b9:97:ba:86: 8f:1d:02:c0:57:3f:c9:32:64:e6:5f:68:1d:12:44: 4f:5f:8e:d3:c1:ef:81:ca:85:e6:6b:22:a7:20:ae: 7a:fc:a3:09:93:c3:bc:88:78:5d:04:64:f4:ee:53: 62:ec:c7:89:13:b4:29:cb:c6:ed:28:5f:7c:71:1c: fb:93:ed:6f:39:d9:b4:7a:8d:bd:1f:4c:8e:f0:07: 7a:61:e8:a8:dd:57:31:ad:10:a1:72:76:6c:a2:89: 85:96:6a:cd:11:e2:3e:26:23:d0:8c:67:f5:2d:93: f8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F6:FE:BE:05:3F:C2:D7:1B:8A:C3:CC:64:11:10:C0:E1:0F:52:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6734996d-b8d8-3cb0-9fb0-3151d2952d18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:13c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:84:61:d2:e1:07:f1:92:5a:2b:b5:00:a2:b9:2d:01:c3:05: eb:6c:5f:df:1e:1c:04:34:3a:8f:5a:46:30:2a:35:5f:13:eb: 99:6c:20:03:01:03:45:69:cf:68:2c:a5:50:44:ca:aa:31:7f: 31:18:6e:b9:e5:70:95:f8:0c:76:b4:ce:30:79:36:44:33:82: 13:15:ce:a8:cd:a7:10:af:9e:9a:ed:38:e0:f5:45:e1:88:34: 78:bc:80:48:e6:41:de:d9:d6:4e:d6:25:65:96:5d:81:e5:95: 57:87:67:eb:7f:4d:74:b2:39:c0:d4:42:58:af:37:2d:32:53: a8:72:d6:f9:a9:dd:fe:53:de:1e:7c:ba:b3:98:40:c5:82:fa: 75:35:0d:98:e7:1c:fa:ec:7d:2f:95:f6:26:3d:28:1e:c3:bf: 16:4b:63:ae:21:7d:bc:09:2c:f9:76:2a:d5:dd:25:34:94:2d: fc:f5:8f:dd:90:14:ef:50:e1:11:cd:7a:44:e1:45:22:34:44: 60:df:a5:6c:e5:5f:12:ee:74:84:2f:32:16:ab:c6:b7:77:6e: 02:25:78:82:45:dd:27:9f:b7:ef:25:e1:94:d7:01:f4:dd:18: d4:ec:08:0c:59:be:22:57:33:c4:51:30:01:13:92:14:b6:e8: 4a:c9:02:a9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe+946ebVUuD9P8mwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk NWU4YjY3NWUtMDJiMC00Zjk2LWFiZDUtNTE4NmU2MWEzODNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNcjz5e7q/aEs0jeAtsOVXDclUSPTpAMWeee Xj2RJKVcL6UlAOoVrvTLHYKYEHDp7Z0SiRNhdctwnbNpMtwmTfvdBzPR1l9B273X 22RopsVKfWlvk6pG+RxniU7j1DtYuo5er8Yi0kn5TIsEzHSBM5J7d3cTLhDnLKlj kCj3qzKJqJtY3vrjSFPDyoQ1C0Bt4bmXuoaPHQLAVz/JMmTmX2gdEkRPX47Twe+B yoXmayKnIK56/KMJk8O8iHhdBGT07lNi7MeJE7Qpy8btKF98cRz7k+1vOdm0eo29 H0yO8Ad6Yeio3VcxrRChcnZsoomFlmrNEeI+JiPQjGf1LZP4NwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDL2/r4FP8LXG4rDzGQREMDhD1LOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjczNDk5NmQtYjhkOC0z Y2IwLTlmYjAtMzE1MWQyOTUyZDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQE8 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHGEYdLhB/GSWiu1AKK5LQHDBetsX98eHAQ0Oo9aRjAqNV8T65ls IAMBA0Vpz2gspVBEyqoxfzEYbrnlcJX4DHa0zjB5NkQzghMVzqjNpxCvnprtOOD1 ReGINHi8gEjmQd7Z1k7WJWWWXYHllVeHZ+t/TXSyOcDUQlivNy0yU6hy1vmp3f5T 3h58urOYQMWC+nU1DZjnHPrsfS+V9iY9KB7DvxZLY64hfbwJLPl2KtXdJTSULfz1 j92QFO9Q4RHNekThRSI0RGDfpWzlXxLudIQvMharxrd3bgIleIJF3Seft+8l4ZTX AfTdGNTsCAxZviJXM8RRMAETkhS26ErJAqk= -----END CERTIFICATE-----Generated at Tue Nov 26 02:44:12 2024 by rpki-client on console-ams.rpki-client.org