$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7b842f33-00a6-31af-9136-0a34311eb198.roa File: 7b842f33-00a6-31af-9136-0a34311eb198.roa (raw, json) Hash identifier: Tt6ZMQ2CYJ6HeHxQUWrU0c+gM7mGk1kyqwPEvavc6WQ= Subject key identifier: 20:F3:50:A3:E7:70:9E:A1:49:58:FC:D9:D7:E0:90:B9:EF:C8:F2:89 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285847BEF7A882BBE8C3F5109D9500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7b842f33-00a6-31af-9136-0a34311eb198.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 7015 IP address blocks: 2001:559:823f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:f7:a8:82:bb:e8:c3:f5:10:9d:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=81714d3c-b3d0-4140-b9df-7e16348fc4cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6a:df:cd:c6:ac:28:7f:80:46:cf:b6:85:31: 13:f9:81:ba:c2:25:4c:10:2c:85:55:cf:bb:3a:58: 73:64:28:53:e2:51:2d:9c:18:66:de:ff:2d:e7:1f: 75:d2:08:c7:1a:09:c2:da:dc:e8:29:02:41:de:87: f7:f0:8f:09:18:5d:78:97:43:8b:53:dd:aa:81:10: e8:9b:22:10:6b:d5:a0:f3:7a:f3:a0:f9:63:2a:d5: 6c:58:69:40:4e:95:1f:67:73:1d:20:96:d1:6f:28: 64:31:2a:a1:85:c8:f3:5f:df:6c:77:84:b4:bf:3c: 34:d9:15:94:2d:8c:ab:ae:7d:df:29:04:43:e6:13: 20:e7:ee:17:60:02:ca:f0:7d:45:fb:a5:6d:79:4d: 72:06:a0:63:35:9a:15:dc:e0:77:e9:23:43:53:0e: ca:c5:55:bd:f3:71:6f:5b:21:34:a6:3d:9e:d1:9b: bc:17:e2:25:7f:f7:6f:4d:7b:df:ab:7a:7a:a5:46: 82:34:c8:6e:84:83:b7:c0:de:43:0c:e1:44:75:c9: a1:8d:7f:79:98:9b:d4:32:55:2d:d9:ef:97:5c:ec: 9e:ac:0f:e6:4d:39:91:ac:bf:50:9e:d8:e9:e2:b7: 60:32:b9:c9:d6:92:83:e8:75:f2:fe:c1:93:31:a0: 53:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:F3:50:A3:E7:70:9E:A1:49:58:FC:D9:D7:E0:90:B9:EF:C8:F2:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7b842f33-00a6-31af-9136-0a34311eb198.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:823f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:48:b4:e4:34:f7:c0:e7:bf:80:51:af:16:f9:f5:55:3a:04: d8:a7:97:b7:0e:f2:0e:a4:dc:29:62:db:26:87:78:83:e4:b1: 01:f4:fa:bb:79:1c:3f:03:6d:fb:33:9b:aa:e7:11:e4:fe:62: db:20:27:a8:c9:7b:48:44:83:5d:8f:a4:7f:3a:16:84:30:51: ac:a1:dd:a3:11:f8:51:87:0e:05:70:a3:64:68:0b:9e:66:27: 9f:11:5d:91:02:a3:a1:27:4f:59:f8:8d:9a:a4:6d:8a:8c:47: d8:56:c4:bf:c6:3e:3d:cf:98:83:22:a5:20:02:eb:5d:23:b4: 58:3a:22:48:e6:4f:6b:12:20:f4:3b:58:85:05:2b:44:d0:06: 5e:e0:34:8c:fe:90:56:f7:d9:81:15:82:d2:b5:bd:d2:8b:ae: ce:b0:3f:5c:86:77:5c:be:b1:04:3b:77:d6:7f:0b:c7:15:94: a0:a5:75:84:2a:49:74:ef:1c:e2:c7:56:2d:27:c5:03:bc:fe: 72:04:5e:5b:20:7d:67:09:21:ec:5d:d5:3f:95:9b:7c:0f:6e: 6e:7d:9b:30:fc:f5:73:7b:a7:95:73:f7:f0:5d:b1:e4:a9:69: 5f:3f:37:21:c6:37:d8:7b:6c:70:27:9b:e7:05:b9:ae:3c:27: 79:89:6b:dd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe+96iCu+jD9RCdlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk ODE3MTRkM2MtYjNkMC00MTQwLWI5ZGYtN2UxNjM0OGZjNGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmrfzcasKH+ARs+2hTET+YG6wiVMECyFVc+7 OlhzZChT4lEtnBhm3v8t5x910gjHGgnC2tzoKQJB3of38I8JGF14l0OLU92qgRDo myIQa9Wg83rzoPljKtVsWGlATpUfZ3MdIJbRbyhkMSqhhcjzX99sd4S0vzw02RWU LYyrrn3fKQRD5hMg5+4XYALK8H1F+6VteU1yBqBjNZoV3OB36SNDUw7KxVW983Fv WyE0pj2e0Zu8F+Ilf/dvTXvfq3p6pUaCNMhuhIO3wN5DDOFEdcmhjX95mJvUMlUt 2e+XXOyerA/mTTmRrL9Qntjp4rdgMrnJ1pKD6HXy/sGTMaBTgQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCDzUKPncJ6hSVj82dfgkLnvyPKJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2I4NDJmMzMtMDBhNi0z MWFmLTkxMzYtMGEzNDMxMWViMTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYI/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADhItOQ098Dnv4BRrxb59VU6BNinl7cO8g6k3Cli2yaHeIPksQH0 +rt5HD8Dbfszm6rnEeT+YtsgJ6jJe0hEg12PpH86FoQwUayh3aMR+FGHDgVwo2Ro C55mJ58RXZECo6EnT1n4jZqkbYqMR9hWxL/GPj3PmIMipSAC610jtFg6IkjmT2sS IPQ7WIUFK0TQBl7gNIz+kFb32YEVgtK1vdKLrs6wP1yGd1y+sQQ7d9Z/C8cVlKCl dYQqSXTvHOLHVi0nxQO8/nIEXlsgfWcJIexd1T+Vm3wPbm59mzD89XN7p5Vz9/Bd seSpaV8/NyHGN9h7bHAnm+cFua48J3mJa90= -----END CERTIFICATE-----Generated at Fri Nov 22 11:58:50 2024 by rpki-client on console-ams.rpki-client.org