$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/687412cf-3224-332d-a7e1-d6a1af10ba6c.roa File: 687412cf-3224-332d-a7e1-d6a1af10ba6c.roa (raw, json) Hash identifier: WtQ+H6Y6jmu5sq6PFjdflNoiBDdMiGEwYB4lhSU1NA4= Subject key identifier: B5:5E:18:B4:EE:D9:F9:2B:D4:FB:26:4D:AD:41:BE:A4:EA:B1:C3:19 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAB653AA862957943C691C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/687412cf-3224-332d-a7e1-d6a1af10ba6c.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 20214 IP address blocks: 2001:559:855f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ab:65:3a:a8:62:95:79:43:c6:91:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=e33079aa-785c-41a6-ab67-1e1fea6de80b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:23:03:f5:fb:42:e4:d2:8b:4c:df:67:6a:36: 00:86:3f:f4:f7:f8:25:86:7a:83:f6:a7:ce:8d:44: f4:ed:c7:9d:2a:2a:45:bf:d1:0b:06:2b:f9:05:b8: 9a:98:be:f0:fc:6e:7d:db:20:ea:43:2c:d8:fc:87: 00:f9:43:f0:42:3c:30:89:9f:93:17:8d:92:a9:7a: 7c:dd:25:e4:42:29:51:89:ca:4d:bb:3f:f8:22:29: 30:b8:44:33:bd:f7:00:1d:83:19:21:e4:f5:a4:85: dc:25:86:71:a0:59:d1:bf:d0:69:d5:e5:aa:eb:cd: 9f:25:20:43:e2:37:d9:01:55:7f:83:54:90:fc:95: 8a:f3:b5:52:28:f4:86:6c:af:e7:b6:b0:65:16:f1: 2f:1b:fe:6e:a8:78:8b:9e:b0:31:c4:d7:62:92:df: b0:e9:e7:f4:b8:9f:02:d3:a2:b3:f8:5a:54:f0:55: 83:7d:18:dd:1a:90:e3:25:17:ee:06:ab:c7:12:85: 50:5b:87:88:69:d8:3a:6d:e4:f8:31:d3:54:09:24: 01:26:29:f6:a1:05:50:a4:1c:4f:43:37:81:e9:27: 5c:f7:e5:f8:ec:d2:5f:f9:a8:0a:86:82:87:94:0a: eb:8c:c8:2c:c0:70:e7:b1:09:44:93:5f:81:1c:22: 15:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:5E:18:B4:EE:D9:F9:2B:D4:FB:26:4D:AD:41:BE:A4:EA:B1:C3:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/687412cf-3224-332d-a7e1-d6a1af10ba6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:855f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:f3:fa:27:cb:5f:87:9a:27:f8:52:29:cb:b8:a5:2f:d7:4d: 8a:81:0f:f5:b0:b7:9c:4c:8d:a1:d2:db:c6:7d:35:ba:30:a7: 27:34:07:29:60:3f:ac:27:f0:32:bc:53:ff:2c:00:8c:5f:0e: 16:99:bb:44:fb:ee:9b:f5:30:08:cb:cd:eb:ff:0a:32:b3:14: 6c:73:7c:c7:50:42:51:e4:18:f2:84:fc:58:82:dd:78:68:c6: c6:03:12:d6:ea:2b:43:9c:1c:19:33:74:45:99:0a:07:ed:09: 28:69:57:03:1c:17:2e:d5:43:77:2b:aa:81:ae:b7:80:6f:de: 2f:30:02:75:d6:cc:23:f5:de:f1:99:a8:81:41:8a:f7:6d:35: 4d:c9:ed:ef:82:ea:10:31:16:cc:57:49:00:f7:3a:84:63:39: b3:12:93:ec:74:63:28:40:81:b7:60:56:38:68:23:b2:15:48: 52:07:f1:b6:45:73:95:ab:3f:c4:b7:73:a8:88:1a:51:9c:a0: 97:c0:58:ee:26:c0:b8:4d:b9:6e:c5:79:7e:fe:ef:80:92:20: 97:22:e4:97:33:eb:98:66:6b:bd:61:34:f8:1f:df:e4:28:01: 05:0d:b4:40:af:45:18:19:0b:48:f9:e1:5d:ec:7a:41:39:7e: 83:6d:14:66 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfq2U6qGKVeUPGkcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk ZTMzMDc5YWEtNzg1Yy00MWE2LWFiNjctMWUxZmVhNmRlODBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniMD9ftC5NKLTN9najYAhj/09/glhnqD9qfO jUT07cedKipFv9ELBiv5BbiamL7w/G592yDqQyzY/IcA+UPwQjwwiZ+TF42SqXp8 3SXkQilRicpNuz/4IikwuEQzvfcAHYMZIeT1pIXcJYZxoFnRv9Bp1eWq682fJSBD 4jfZAVV/g1SQ/JWK87VSKPSGbK/ntrBlFvEvG/5uqHiLnrAxxNdikt+w6ef0uJ8C 06Kz+FpU8FWDfRjdGpDjJRfuBqvHEoVQW4eIadg6beT4MdNUCSQBJin2oQVQpBxP QzeB6Sdc9+X47NJf+agKhoKHlArrjMgswHDnsQlEk1+BHCIVGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLVeGLTu2fkr1PsmTa1BvqTqscMZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjg3NDEyY2YtMzIyNC0z MzJkLWE3ZTEtZDZhMWFmMTBiYTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYVf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH7z+ifLX4eaJ/hSKcu4pS/XTYqBD/Wwt5xMjaHS28Z9Nbowpyc0 BylgP6wn8DK8U/8sAIxfDhaZu0T77pv1MAjLzev/CjKzFGxzfMdQQlHkGPKE/FiC 3XhoxsYDEtbqK0OcHBkzdEWZCgftCShpVwMcFy7VQ3crqoGut4Bv3i8wAnXWzCP1 3vGZqIFBivdtNU3J7e+C6hAxFsxXSQD3OoRjObMSk+x0YyhAgbdgVjhoI7IVSFIH 8bZFc5WrP8S3c6iIGlGcoJfAWO4mwLhNuW7FeX7+74CSIJci5Jcz65hma71hNPgf 3+QoAQUNtECvRRgZC0j54V3sekE5foNtFGY= -----END CERTIFICATE-----Generated at Sat May 4 14:50:10 2024 by rpki-client on console-fra.rpki-client.org