$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7b891bcd-303e-3f67-8031-db2e437e0a04.roa File: 7b891bcd-303e-3f67-8031-db2e437e0a04.roa (raw, json) Hash identifier: CjKro2bSMZ6vyKDq5fyVvDa4hy0bkXlEpTYEjDTFwVA= Subject key identifier: C0:60:7C:4B:2F:9E:70:E1:73:9F:6E:D8:2F:AA:ED:86:AF:77:EE:81 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAC3A0ABAA00D2426615460 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7b891bcd-303e-3f67-8031-db2e437e0a04.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 33491 IP address blocks: 2001:559:c28c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ac:3a:0a:ba:a0:0d:24:26:61:54:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=f685af81-ea80-47f6-b922-443c49bc207b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c2:34:ff:fb:dd:5c:df:37:26:cd:8e:6b:49: 0d:0f:7b:e9:62:c5:36:63:a6:db:95:12:b3:0e:54: eb:cb:fe:06:9c:7d:d2:22:21:1a:0d:66:f3:16:21: 11:09:cc:fd:0f:de:29:87:9a:24:62:11:cd:a8:15: 5d:21:ad:de:83:59:28:4a:3b:07:e1:55:5d:c7:89: 45:98:f1:27:1d:f3:b0:fc:c0:ad:1e:c6:74:f7:cc: b7:46:aa:f4:13:7f:4a:ae:8c:3f:ea:a4:9b:97:de: 1f:c5:02:32:cb:18:ca:10:31:dc:b3:a4:c2:00:23: a2:09:31:b0:f6:1c:3a:68:9f:b0:fe:fe:a0:01:a0: 65:6b:2d:5c:8f:06:7d:1f:83:f1:21:09:ee:bf:9d: dd:ab:f9:d0:95:25:05:78:99:11:ce:c4:60:e8:11: 93:79:7e:93:c0:5a:4c:64:6d:bc:3c:6a:3f:4c:e4: 57:9c:34:04:75:ed:51:8e:07:ca:c4:37:03:de:53: df:23:df:de:90:ab:81:a2:86:c5:ba:e1:04:12:96: d8:b1:b6:ca:a8:af:0b:50:4f:2d:1a:34:5c:ea:e0: 4b:10:46:3c:cb:11:73:e1:f7:cd:50:2b:b3:2c:7f: 27:33:59:05:fc:96:ef:f4:05:93:fd:5a:35:59:4c: a6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:60:7C:4B:2F:9E:70:E1:73:9F:6E:D8:2F:AA:ED:86:AF:77:EE:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7b891bcd-303e-3f67-8031-db2e437e0a04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c28c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:d2:e2:d0:d6:56:be:48:0c:74:9a:e7:1b:ca:b4:19:e5:6a: 75:be:4b:f8:cd:57:2f:48:fb:2a:c1:30:1b:15:09:32:b2:44: e0:41:c8:d6:1b:53:18:d1:c2:98:71:ef:aa:36:1c:16:b1:b5: ca:c3:ca:0e:bd:1e:b3:9d:b5:c4:04:3c:3e:06:6f:43:23:5b: 63:08:3b:72:3c:0c:56:44:55:14:d1:68:34:e1:b7:9e:79:be: 42:f7:6e:ee:fc:cd:15:2f:d6:eb:4d:c2:3c:15:9b:96:e9:5d: d3:64:9a:c7:e1:04:b9:2b:3d:00:0e:37:96:19:2a:9d:cb:dc: df:75:1f:06:89:68:57:d5:06:d6:40:97:c0:fa:7c:13:fe:ef: 76:e4:4e:87:78:20:e6:45:dd:15:0b:6e:82:4e:23:32:c2:4c: da:67:c2:1b:c9:3f:34:72:b7:46:39:6d:4b:91:85:ad:0d:90: be:d4:d9:3a:fc:f6:76:75:67:7f:86:19:ea:62:ba:39:47:5e: 02:37:72:9f:9e:a2:39:0b:bc:71:fa:3b:98:e9:71:28:10:9a: f9:18:07:d4:10:32:b5:f8:af:5a:a9:9b:db:b3:ea:af:56:91: c2:d6:21:47:6e:43:1d:a0:7d:14:69:e7:94:16:8c:31:0f:4d: d3:0d:1b:4c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfrDoKuqANJCZhVGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk ZjY4NWFmODEtZWE4MC00N2Y2LWI5MjItNDQzYzQ5YmMyMDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMI0//vdXN83Js2Oa0kND3vpYsU2Y6bblRKz DlTry/4GnH3SIiEaDWbzFiERCcz9D94ph5okYhHNqBVdIa3eg1koSjsH4VVdx4lF mPEnHfOw/MCtHsZ098y3Rqr0E39Krow/6qSbl94fxQIyyxjKEDHcs6TCACOiCTGw 9hw6aJ+w/v6gAaBlay1cjwZ9H4PxIQnuv53dq/nQlSUFeJkRzsRg6BGTeX6TwFpM ZG28PGo/TORXnDQEde1RjgfKxDcD3lPfI9/ekKuBoobFuuEEEpbYsbbKqK8LUE8t GjRc6uBLEEY8yxFz4ffNUCuzLH8nM1kF/Jbv9AWT/Vo1WUym5QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMBgfEsvnnDhc59u2C+q7Yavd+6BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2I4OTFiY2QtMzAzZS0z ZjY3LTgwMzEtZGIyZTQzN2UwYTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcKM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACXS4tDWVr5IDHSa5xvKtBnlanW+S/jNVy9I+yrBMBsVCTKyROBB yNYbUxjRwphx76o2HBaxtcrDyg69HrOdtcQEPD4Gb0MjW2MIO3I8DFZEVRTRaDTh t555vkL3bu78zRUv1utNwjwVm5bpXdNkmsfhBLkrPQAON5YZKp3L3N91HwaJaFfV BtZAl8D6fBP+73bkTod4IOZF3RULboJOIzLCTNpnwhvJPzRyt0Y5bUuRha0NkL7U 2Tr89nZ1Z3+GGepiujlHXgI3cp+eojkLvHH6O5jpcSgQmvkYB9QQMrX4r1qpm9uz 6q9WkcLWIUduQx2gfRRp55QWjDEPTdMNG0w= -----END CERTIFICATE-----Generated at Sun May 5 01:19:01 2024 by rpki-client on console-ams.rpki-client.org