$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/75b87d61-a694-3f77-b0b7-3370804a52a2.roa File: 75b87d61-a694-3f77-b0b7-3370804a52a2.roa (raw, json) Hash identifier: IIh/KEWZnt8Z+eP84TvKe7LAQG/JlHr+3/HHxLNJMKY= Subject key identifier: 98:DE:D2:9E:F6:EE:BA:59:6A:C0:5C:E7:6B:72:CA:92:98:8F:6A:81 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285847BEF80C3FA9D789A341A11EC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/75b87d61-a694-3f77-b0b7-3370804a52a2.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 33657 IP address blocks: 2001:559:214::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:f8:0c:3f:a9:d7:89:a3:41:a1:1e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=76e02377-db99-4c31-946b-a1c7f9301df2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:dc:3a:7e:82:4d:37:19:44:48:01:00:b2:37: 66:f4:8a:3e:50:7f:99:e0:0d:84:b9:25:bd:bf:1d: df:76:e3:8d:25:b1:b4:c5:48:c8:44:a0:a0:15:f1: b6:f0:c1:fa:ac:61:da:83:34:95:7d:0c:41:0f:ae: f4:a9:d5:95:e7:5c:35:0f:e4:a0:1a:fa:92:7a:ca: f1:32:11:20:af:e8:c8:de:ed:b1:9f:c7:15:72:dc: 7f:cd:63:1b:0b:5e:67:e7:f8:56:18:6f:6a:7d:d1: 19:d3:e2:b8:0b:b1:86:54:b4:71:2d:00:3a:60:09: cd:a5:03:ba:f9:a1:f6:d1:96:ba:71:e4:80:52:b4: f8:0b:55:ac:3a:40:bc:d6:74:c8:8e:ca:4c:7c:29: 3a:50:30:c9:4c:2e:b4:d7:34:55:c4:3f:94:4f:55: 2a:92:7b:e5:77:6e:ad:32:76:d5:08:91:f9:f8:8e: 3f:a8:a5:68:cf:d1:de:97:18:77:1a:1f:5b:4c:25: 2e:e6:b3:bb:e6:17:48:54:bc:0f:03:e1:42:07:59: a2:30:ca:f1:38:0c:5b:d9:9c:ca:a9:34:78:ef:1b: 23:fc:6f:d3:ac:73:ee:15:00:8b:e9:a9:01:4f:bc: e7:67:97:99:cc:33:ac:bb:c9:6b:e9:48:07:2b:61: b3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:DE:D2:9E:F6:EE:BA:59:6A:C0:5C:E7:6B:72:CA:92:98:8F:6A:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/75b87d61-a694-3f77-b0b7-3370804a52a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:214::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:f7:a0:bc:1b:39:6f:53:b2:b7:32:d0:d6:fe:54:b4:31:c5: e8:59:23:83:38:ee:dd:74:68:06:0e:db:5e:b0:45:06:69:35: c9:9d:49:93:f8:89:cb:24:4d:65:8d:da:fe:c9:ae:1b:3c:13: e7:c0:47:15:62:8a:9b:07:2b:17:3b:1a:d4:16:80:19:30:5b: 31:1e:65:23:bb:1e:84:7a:3a:89:ea:f8:52:cd:7f:3c:28:05: 0b:f0:4e:96:98:53:a8:87:a4:20:1d:e4:1d:d6:a4:2f:e3:56: 39:5d:7d:34:f1:83:b8:3e:34:9a:e5:92:7d:1c:2a:51:1c:d5: 5e:a4:51:65:70:86:1f:78:ce:f2:19:dd:42:bc:ff:de:fb:02: d7:99:35:08:cc:10:02:c9:1d:b4:72:71:6e:e0:69:17:5e:fb: 0d:25:ae:9f:8a:0b:58:d9:88:0d:e5:50:45:c0:3a:fe:4b:34: 4b:35:b7:83:ef:5b:e0:60:9f:7b:95:c5:5c:d6:52:50:15:fe: b8:37:23:7e:2d:4d:a8:9b:d5:02:b0:00:82:fc:12:14:31:60: c7:17:96:30:bb:1e:d1:48:81:51:c4:f1:91:67:db:bd:c6:4a: 43:1d:65:a2:51:3b:cd:c1:67:70:b3:7f:4f:63:42:fb:b5:15: 31:63:a0:d8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe++Aw/qdeJo0GhHsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk NzZlMDIzNzctZGI5OS00YzMxLTk0NmItYTFjN2Y5MzAxZGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNw6foJNNxlESAEAsjdm9Io+UH+Z4A2EuSW9 vx3fduONJbG0xUjIRKCgFfG28MH6rGHagzSVfQxBD670qdWV51w1D+SgGvqSesrx MhEgr+jI3u2xn8cVctx/zWMbC15n5/hWGG9qfdEZ0+K4C7GGVLRxLQA6YAnNpQO6 +aH20Za6ceSAUrT4C1WsOkC81nTIjspMfCk6UDDJTC601zRVxD+UT1Uqknvld26t MnbVCJH5+I4/qKVoz9Helxh3Gh9bTCUu5rO75hdIVLwPA+FCB1miMMrxOAxb2ZzK qTR47xsj/G/TrHPuFQCL6akBT7znZ5eZzDOsu8lr6UgHK2GzuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJje0p727rpZasBc52tyypKYj2qBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzViODdkNjEtYTY5NC0z Zjc3LWIwYjctMzM3MDgwNGE1MmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQIU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACP3oLwbOW9Tsrcy0Nb+VLQxxehZI4M47t10aAYO216wRQZpNcmd SZP4icskTWWN2v7Jrhs8E+fARxViipsHKxc7GtQWgBkwWzEeZSO7HoR6Oonq+FLN fzwoBQvwTpaYU6iHpCAd5B3WpC/jVjldfTTxg7g+NJrlkn0cKlEc1V6kUWVwhh94 zvIZ3UK8/977AteZNQjMEALJHbRycW7gaRde+w0lrp+KC1jZiA3lUEXAOv5LNEs1 t4PvW+Bgn3uVxVzWUlAV/rg3I34tTaib1QKwAIL8EhQxYMcXljC7HtFIgVHE8ZFn 273GSkMdZaJRO83BZ3Czf09jQvu1FTFjoNg= -----END CERTIFICATE-----Generated at Fri Nov 22 11:27:50 2024 by rpki-client on console-fra.rpki-client.org