$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e3d1e82-5f40-38e1-abe2-297f8f5f9e3f.roa File: 8e3d1e82-5f40-38e1-abe2-297f8f5f9e3f.roa (raw, json) Hash identifier: sjTsYlE4j07sBfkb4vahL1L6Y2i/qNXC7mkeh6yi9Sk= Subject key identifier: B5:8F:DB:86:16:52:F2:BC:18:09:4C:6B:71:23:1C:4C:CB:97:4E:A3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285847BEF74354103640338FB93A00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e3d1e82-5f40-38e1-abe2-297f8f5f9e3f.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 20214 IP address blocks: 2001:559:8751::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Dec 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:f7:43:54:10:36:40:33:8f:b9:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=f76d3d46-f8a2-4290-8b62-99c428fd89ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:72:bc:40:b3:b6:73:d1:c1:58:78:33:1c:ff: 92:3a:02:99:2e:81:e6:a5:39:74:b8:bf:41:cc:24: 09:1a:a4:66:79:41:1d:cf:02:db:df:91:9d:76:58: e0:9a:9d:94:b1:62:21:92:04:ae:b2:84:a6:e4:c5: 9f:02:8e:3e:0f:d3:0f:f8:48:dc:fa:d4:e7:5f:4d: 94:c1:8a:15:b9:a9:d9:7e:05:5b:e4:2e:0a:5b:0b: 1d:d7:30:2d:4c:f1:e7:9a:fa:37:71:96:d7:78:39: df:57:d1:71:ef:16:db:7c:a9:f4:58:33:69:3e:ea: 1f:6d:27:0a:63:33:96:dd:fb:12:5d:1c:49:78:c0: e3:7b:88:74:cc:21:1a:68:0e:31:d9:d4:55:93:49: 80:11:eb:d4:1d:25:65:24:eb:05:ad:95:9d:a4:cb: fc:83:c4:a3:fa:d0:0e:24:e8:7f:25:45:8d:2e:6a: 15:cc:a3:65:55:9b:9c:e2:38:0f:18:dc:a0:96:ee: 34:c6:a6:93:37:74:dc:92:24:39:12:a1:4c:31:c8: 7c:bd:7b:74:6e:95:34:1d:67:61:2e:7a:c3:4b:ff: 5d:0f:09:a9:a9:56:a8:24:53:25:41:88:51:69:64: de:9c:93:b1:47:b4:6a:20:da:d9:ee:19:ce:cc:1a: bc:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:8F:DB:86:16:52:F2:BC:18:09:4C:6B:71:23:1C:4C:CB:97:4E:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e3d1e82-5f40-38e1-abe2-297f8f5f9e3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8751::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:58:6e:d0:64:7c:13:b3:12:2a:8e:1f:f2:5e:9c:00:95:5c: de:2a:da:f2:38:9e:af:56:2a:bc:db:cb:ff:24:c0:ed:9c:4d: b5:91:d3:58:fd:83:0b:dd:a8:cf:09:0d:5f:cf:39:9c:06:7d: 67:1f:c4:55:48:96:34:f1:1c:78:96:ef:c6:be:18:8a:0e:03: 7b:65:66:af:2e:5d:fa:a7:18:31:71:f9:e0:22:65:14:4b:cb: 73:3b:ff:ae:ae:ce:8e:39:5e:79:02:e9:70:aa:d2:73:ef:93: a6:56:34:83:35:5e:4a:9a:9d:91:b7:31:ae:0b:4b:26:05:a3: ff:ba:2e:fe:80:8a:a4:0f:63:45:ac:0a:ac:64:3b:57:66:ad: 4d:93:43:64:0e:74:fa:7d:97:71:18:38:c2:6f:4e:1e:75:f3: 30:4b:dc:ec:c8:4a:90:d7:90:04:75:a5:0e:23:84:d3:af:f1: 4a:73:ae:7e:e4:c5:eb:b3:a5:a3:87:c6:56:c7:82:48:0a:9a: e9:01:60:3f:16:ce:f1:8c:4e:0c:4d:c9:69:79:8a:ca:06:0d: 5f:a1:4e:fe:ce:46:9c:a7:46:f9:51:85:66:f7:dc:93:7f:61: 0b:fd:a6:40:30:74:84:8f:e9:5c:1a:76:22:b8:46:61:15:04: cf:e3:54:27 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe+90NUEDZAM4+5OgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk Zjc2ZDNkNDYtZjhhMi00MjkwLThiNjItOTljNDI4ZmQ4OWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnK8QLO2c9HBWHgzHP+SOgKZLoHmpTl0uL9B zCQJGqRmeUEdzwLb35Gddljgmp2UsWIhkgSusoSm5MWfAo4+D9MP+Ejc+tTnX02U wYoVuanZfgVb5C4KWwsd1zAtTPHnmvo3cZbXeDnfV9Fx7xbbfKn0WDNpPuofbScK YzOW3fsSXRxJeMDje4h0zCEaaA4x2dRVk0mAEevUHSVlJOsFrZWdpMv8g8Sj+tAO JOh/JUWNLmoVzKNlVZuc4jgPGNyglu40xqaTN3TckiQ5EqFMMch8vXt0bpU0HWdh LnrDS/9dDwmpqVaoJFMlQYhRaWTenJOxR7RqINrZ7hnOzBq8GwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLWP24YWUvK8GAlMa3EjHEzLl06jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGUzZDFlODItNWY0MC0z OGUxLWFiZTItMjk3ZjhmNWY5ZTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYdR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACJYbtBkfBOzEiqOH/JenACVXN4q2vI4nq9WKrzby/8kwO2cTbWR 01j9gwvdqM8JDV/POZwGfWcfxFVIljTxHHiW78a+GIoOA3tlZq8uXfqnGDFx+eAi ZRRLy3M7/66uzo45XnkC6XCq0nPvk6ZWNIM1XkqanZG3Ma4LSyYFo/+6Lv6AiqQP Y0WsCqxkO1dmrU2TQ2QOdPp9l3EYOMJvTh518zBL3OzISpDXkAR1pQ4jhNOv8Upz rn7kxeuzpaOHxlbHgkgKmukBYD8WzvGMTgxNyWl5isoGDV+hTv7ORpynRvlRhWb3 3JN/YQv9pkAwdISP6VwadiK4RmEVBM/jVCc= -----END CERTIFICATE-----Generated at Sun Dec 22 13:08:15 2024 by rpki-client on console-ams.rpki-client.org