$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89d12f43-e4e1-39eb-bbc4-536eedde12a2.roa File: 89d12f43-e4e1-39eb-bbc4-536eedde12a2.roa (raw, json) Hash identifier: gcM86yc33bMRn6IEDp42CZlpsxpFStqIp3uuNdxkG3A= Subject key identifier: E1:1A:CE:36:45:7B:92:4C:0F:A4:0B:A1:D6:77:D5:17:44:44:E5:A1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FABDD688E2AD9D95A4DF800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89d12f43-e4e1-39eb-bbc4-536eedde12a2.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 7015 IP address blocks: 2001:559:c455::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ab:dd:68:8e:2a:d9:d9:5a:4d:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=2ee1966a-6453-441e-9c6d-adf103d94d21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5b:71:8c:4a:4e:0e:46:91:b0:87:73:d3:96: 18:0b:bd:ab:e5:3d:8d:27:2e:f6:a1:f9:89:51:7e: 4a:3c:44:20:b4:b6:cc:e4:d7:3f:c2:b0:66:79:28: 5f:e1:e0:41:f6:53:77:83:1a:c5:2e:f4:8f:a1:de: 36:73:f1:69:2d:8f:b1:9f:81:26:42:5f:5e:40:80: b3:9e:32:9e:25:1c:1f:ca:f0:66:f3:5f:a5:ad:b5: fa:8c:c7:82:95:38:d9:29:4d:d9:2b:21:e9:6d:04: 7e:4a:e2:1d:45:ed:7c:6d:9a:aa:1c:f0:d6:64:67: 7b:fd:8c:79:b8:a7:31:85:77:f8:ef:cf:32:c4:db: ff:08:5b:b6:77:d5:34:3e:33:86:f7:40:7c:aa:13: 4d:e0:80:e9:e2:5f:b1:48:a1:4a:86:2b:ac:40:b1: d3:eb:c7:5f:53:a0:49:bc:65:6f:e1:0c:24:87:53: 6b:51:dd:27:2c:90:e3:a3:e2:5f:3a:8b:77:eb:13: 29:38:13:cc:03:ef:41:8b:58:5b:64:a2:76:93:94: e1:85:be:dd:84:da:b6:a9:8e:0a:4b:fc:4e:69:f9: d9:15:ae:9a:a6:f3:cc:d4:f5:a8:c5:bf:d0:92:7a: 60:d6:6b:83:64:59:0f:23:ea:aa:67:96:8c:e4:7a: 85:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:1A:CE:36:45:7B:92:4C:0F:A4:0B:A1:D6:77:D5:17:44:44:E5:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89d12f43-e4e1-39eb-bbc4-536eedde12a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c455::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:c3:8e:14:79:17:7e:dd:f5:4c:df:93:9d:68:aa:c2:bd:c6: 1a:24:58:72:16:d3:b3:d9:49:18:4b:89:9a:c1:e0:cb:27:15: dc:15:2d:bf:d7:94:8a:dc:8c:ac:65:2c:42:fc:80:15:ea:1d: 51:0f:40:81:d2:29:e1:5b:6b:48:00:cf:30:6d:4d:df:4d:42: 76:a5:ba:ac:a9:81:bb:e9:05:d5:16:8a:b8:47:24:80:dc:7c: c3:eb:28:18:1c:69:83:b1:2f:56:7c:32:0c:9e:95:0b:18:54: 7f:ee:b1:42:8a:4d:74:fc:63:1f:11:7e:6c:0c:24:bc:4d:ea: b6:90:55:21:95:f4:f0:6d:69:32:a0:71:01:22:28:63:27:be: cc:0d:c1:9d:a1:62:33:49:5c:bb:a6:74:95:e7:94:00:35:dd: d7:d8:6c:12:11:50:9e:67:b6:16:4c:9b:ec:be:1e:17:96:56: 8d:8d:6f:51:40:b3:37:1c:9e:da:40:f0:df:34:c7:42:8d:ae: e8:9c:78:39:84:2e:f9:ee:db:0b:b7:63:46:fd:a6:c3:56:e7: 53:2d:99:1e:85:31:26:7c:57:a5:5c:9a:bd:a4:0c:0c:8e:4b: 7f:22:3b:aa:9a:aa:ad:51:1c:eb:99:74:d4:a5:78:26:59:e1: b8:29:1b:d9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfq91ojirZ2VpN+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk MmVlMTk2NmEtNjQ1My00NDFlLTljNmQtYWRmMTAzZDk0ZDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVtxjEpODkaRsIdz05YYC72r5T2NJy72ofmJ UX5KPEQgtLbM5Nc/wrBmeShf4eBB9lN3gxrFLvSPod42c/FpLY+xn4EmQl9eQICz njKeJRwfyvBm81+lrbX6jMeClTjZKU3ZKyHpbQR+SuIdRe18bZqqHPDWZGd7/Yx5 uKcxhXf4788yxNv/CFu2d9U0PjOG90B8qhNN4IDp4l+xSKFKhiusQLHT68dfU6BJ vGVv4Qwkh1NrUd0nLJDjo+JfOot36xMpOBPMA+9Bi1hbZKJ2k5Thhb7dhNq2qY4K S/xOafnZFa6apvPM1PWoxb/Qknpg1muDZFkPI+qqZ5aM5HqFRwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOEazjZFe5JMD6QLodZ31RdEROWhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODlkMTJmNDMtZTRlMS0z OWViLWJiYzQtNTM2ZWVkZGUxMmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcRV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFjDjhR5F37d9Uzfk51oqsK9xhokWHIW07PZSRhLiZrB4MsnFdwV Lb/XlIrcjKxlLEL8gBXqHVEPQIHSKeFba0gAzzBtTd9NQnaluqypgbvpBdUWirhH JIDcfMPrKBgcaYOxL1Z8MgyelQsYVH/usUKKTXT8Yx8RfmwMJLxN6raQVSGV9PBt aTKgcQEiKGMnvswNwZ2hYjNJXLumdJXnlAA13dfYbBIRUJ5nthZMm+y+HheWVo2N b1FAszccntpA8N80x0KNruiceDmELvnu2wu3Y0b9psNW51MtmR6FMSZ8V6Vcmr2k DAyOS38iO6qaqq1RHOuZdNSleCZZ4bgpG9k= -----END CERTIFICATE-----Generated at Sat May 4 14:54:09 2024 by rpki-client on console-ams.rpki-client.org