$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86a65e17-5352-348b-a623-8b4890533774.roa File: 86a65e17-5352-348b-a623-8b4890533774.roa (raw, json) Hash identifier: WXbnbxTKUNg6TbnB6EZKvDC4tG9ynPSIuJW1gvDhVN0= Subject key identifier: FD:D5:B0:B0:A0:B7:6F:1B:5E:37:E2:35:36:B9:34:81:B0:91:B0:01 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAE67F13DDF6CEF5B0AE680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86a65e17-5352-348b-a623-8b4890533774.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 33650 IP address blocks: 2001:559:8275::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ae:67:f1:3d:df:6c:ef:5b:0a:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=27d30302-5362-4b94-8e01-8ff4c19e8ae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c4:5c:27:79:c8:42:c0:cf:45:28:bf:8f:d7: 43:76:17:1d:2e:18:3e:fb:b3:32:18:55:f6:4e:25: bd:78:0c:18:6c:dc:63:e5:63:73:80:52:a5:58:37: 8f:cf:f4:37:45:d8:e1:d3:5b:55:b4:ad:6d:9b:10: e0:e7:b1:97:f5:65:0f:4e:38:cf:0f:87:21:c8:bf: 8a:2a:a7:15:52:99:0b:e4:e3:06:d7:3e:f9:74:e1: 93:5e:30:4d:5f:0a:cf:a7:bc:d9:46:60:00:fa:13: 22:58:58:37:ea:35:b0:18:3d:51:27:bd:0d:4b:bf: fc:58:cc:43:9b:22:17:42:17:32:5c:29:67:31:10: 72:3c:19:e8:3d:0f:a4:46:b0:40:58:ef:48:57:6a: f1:fd:d8:fc:ed:f2:18:70:51:2b:86:49:67:d5:a0: de:5b:5a:53:22:34:6b:98:82:e5:0f:c1:21:10:5a: da:8d:a6:55:81:bf:1f:c4:09:6b:7f:77:b9:8f:c0: ad:36:b0:89:6c:9f:40:4c:6d:d1:e5:15:9b:c6:8e: 21:4f:60:a2:fa:26:cf:4d:26:eb:cf:cd:72:4d:42: 8e:11:f6:1e:e7:d7:f7:b6:3b:40:80:a3:a1:62:37: 15:50:a6:1f:ff:47:5d:76:26:c8:9f:48:82:a0:be: d0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D5:B0:B0:A0:B7:6F:1B:5E:37:E2:35:36:B9:34:81:B0:91:B0:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86a65e17-5352-348b-a623-8b4890533774.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8275::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:4f:a6:e3:a6:71:12:19:09:1e:2d:21:ee:f4:59:09:cc:40: b6:3c:5e:6f:6a:4f:54:da:1c:76:1b:82:41:b8:99:67:a3:d6: 89:9b:ae:18:fd:27:e9:10:a4:3f:04:33:11:28:1e:24:5f:5f: 6f:c6:be:1d:5e:3e:cd:e1:de:66:40:76:c6:d2:ee:69:7a:37: f8:1e:ac:3f:c8:7e:e2:8f:2b:55:c7:7d:ab:e2:d5:e3:a6:a8: 57:85:b7:ff:cf:bb:1d:1e:24:6a:59:7d:00:07:62:45:a2:d2: 58:4b:5a:25:2c:67:16:af:1d:e6:0c:52:a7:d5:09:a5:3e:8d: 73:8a:74:ae:b2:ae:4b:41:c6:b3:ba:c2:ad:82:cf:f0:85:ba: 99:93:d8:00:f0:80:68:5d:41:d9:c3:01:65:51:1b:07:1d:9f: 2b:f0:7b:c0:0a:04:c6:12:3a:60:96:6c:56:48:36:f4:8e:94: 82:ed:04:42:87:c1:75:ef:74:1c:3e:9e:a8:af:13:3e:ed:8a: 57:d5:d1:17:76:74:03:1a:ec:79:33:7e:43:09:83:5c:09:cb: a1:ac:08:a1:dd:35:e4:c5:a5:70:cd:36:1e:88:0d:aa:31:6a: 01:a3:13:84:e1:4c:e8:24:2c:d5:c5:ea:6e:21:75:f9:61:05: 7a:4f:95:5c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfrmfxPd9s71sK5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk MjdkMzAzMDItNTM2Mi00Yjk0LThlMDEtOGZmNGMxOWU4YWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMRcJ3nIQsDPRSi/j9dDdhcdLhg++7MyGFX2 TiW9eAwYbNxj5WNzgFKlWDePz/Q3Rdjh01tVtK1tmxDg57GX9WUPTjjPD4chyL+K KqcVUpkL5OMG1z75dOGTXjBNXwrPp7zZRmAA+hMiWFg36jWwGD1RJ70NS7/8WMxD myIXQhcyXClnMRByPBnoPQ+kRrBAWO9IV2rx/dj87fIYcFErhkln1aDeW1pTIjRr mILlD8EhEFrajaZVgb8fxAlrf3e5j8CtNrCJbJ9ATG3R5RWbxo4hT2Ci+ibPTSbr z81yTUKOEfYe59f3tjtAgKOhYjcVUKYf/0dddibIn0iCoL7QYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP3VsLCgt28bXjfiNTa5NIGwkbABMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODZhNjVlMTctNTM1Mi0z NDhiLWE2MjMtOGI0ODkwNTMzNzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYJ1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMFPpuOmcRIZCR4tIe70WQnMQLY8Xm9qT1TaHHYbgkG4mWej1omb rhj9J+kQpD8EMxEoHiRfX2/Gvh1ePs3h3mZAdsbS7ml6N/gerD/IfuKPK1XHfavi 1eOmqFeFt//Pux0eJGpZfQAHYkWi0lhLWiUsZxavHeYMUqfVCaU+jXOKdK6yrktB xrO6wq2Cz/CFupmT2ADwgGhdQdnDAWVRGwcdnyvwe8AKBMYSOmCWbFZINvSOlILt BEKHwXXvdBw+nqivEz7tilfV0Rd2dAMa7HkzfkMJg1wJy6GsCKHdNeTFpXDNNh6I DaoxagGjE4ThTOgkLNXF6m4hdflhBXpPlVw= -----END CERTIFICATE-----Generated at Sat May 4 14:53:58 2024 by rpki-client on console-ams.rpki-client.org