$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/96a07f75-e0a9-36d9-9d25-d5e6fb751880.roa File: 96a07f75-e0a9-36d9-9d25-d5e6fb751880.roa (raw, json) Hash identifier: dLQJdbv5IEEvV2ETdqv6js0AA0eiaJQ2AkIipAZAMW0= Subject key identifier: 9B:20:D8:81:1A:45:3B:16:1B:E0:5B:6A:71:11:67:97:FA:F5:74:76 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAE098016EAE034F18F2500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/96a07f75-e0a9-36d9-9d25-d5e6fb751880.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 20214 IP address blocks: 2001:559:478::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ae:09:80:16:ea:e0:34:f1:8f:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=b5ca37d0-637f-48b6-8ed2-9337c1662a75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:35:19:4c:b8:ea:5d:1d:48:35:b8:f3:f8:a2: a6:85:fb:52:6c:cd:83:b9:ff:d0:72:df:f6:58:47: 2a:4c:42:04:5a:d2:87:05:fb:c2:d0:ee:19:e4:5a: b0:d0:82:d1:17:6a:48:0b:3b:ec:31:88:97:9e:58: 90:a0:66:3f:2f:8c:2a:07:ae:6f:f5:f5:5b:62:18: b8:d7:37:11:4e:5d:6a:6c:e7:7d:c1:12:96:af:44: 86:de:16:44:d7:6b:10:8c:6f:bb:12:6c:53:4f:37: 00:d6:2d:8e:57:61:05:0a:e2:b3:1e:c2:61:3d:a4: 6e:f9:5f:9e:70:e2:9a:3f:69:44:b1:e7:58:07:05: 72:e2:7e:c4:19:83:76:3a:1a:cb:30:4d:12:e0:1e: e2:72:50:e0:e8:1d:0e:91:01:41:05:84:05:e7:ec: fa:30:1f:53:50:4f:aa:3a:76:6a:ff:3a:cd:e7:42: a4:55:b2:40:e0:e5:25:dc:a8:04:cb:e6:bc:a6:c1: 6c:0e:48:33:0c:16:4d:75:30:b4:e8:bc:1a:5c:0a: f9:03:5b:6d:46:30:73:fd:d6:7c:11:27:c7:3f:1d: c7:cd:4a:db:65:8b:04:62:fd:21:6a:1d:5f:bf:3b: 47:b5:ee:28:9a:04:2b:74:2e:b7:dd:bb:b5:3c:81: 80:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:20:D8:81:1A:45:3B:16:1B:E0:5B:6A:71:11:67:97:FA:F5:74:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/96a07f75-e0a9-36d9-9d25-d5e6fb751880.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:478::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:d4:36:33:fa:02:4e:8e:fa:b2:ff:d3:d4:11:29:63:9f:5d: e2:b2:da:f0:14:07:31:a7:43:ce:d2:4f:15:42:2b:17:25:4c: 16:b2:1d:c4:bd:ce:c9:39:68:ed:0b:dc:c8:88:74:a8:eb:f3: 64:c9:2e:83:65:16:e6:14:57:ee:a4:42:cb:b3:8b:f0:63:1b: 57:5c:e9:52:3d:eb:73:cf:60:62:26:3f:0b:7c:da:b2:99:79: d5:73:d6:35:17:4f:43:bd:20:bb:0b:08:1a:b2:13:a4:aa:ee: 59:53:17:f5:5b:57:36:1d:9b:ca:3a:79:cf:1a:27:65:a9:22: b5:a7:0d:d1:6a:ad:7d:28:4b:07:ec:b5:0d:57:6b:cf:e1:a6: e4:32:bd:88:30:a1:94:c8:47:ad:9f:fc:f5:49:98:f3:8e:a8: b4:02:bf:00:0f:28:0d:83:ce:ef:52:88:2c:72:d0:c6:43:31: eb:3f:18:f4:29:d8:ae:6f:fd:b7:8c:79:e9:17:69:3b:d2:00: 74:d4:17:e9:65:4a:71:28:33:27:9b:2b:4d:53:e1:49:67:4f: e3:07:21:b4:1b:9e:31:26:70:5b:64:92:fd:00:a3:bf:3e:40: 33:24:76:44:cf:f7:ab:de:ef:1b:13:a7:e2:3b:43:b9:0e:a9: 37:09:65:a1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfrgmAFurgNPGPJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk YjVjYTM3ZDAtNjM3Zi00OGI2LThlZDItOTMzN2MxNjYyYTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzUZTLjqXR1INbjz+KKmhftSbM2Duf/Qct/2 WEcqTEIEWtKHBfvC0O4Z5Fqw0ILRF2pICzvsMYiXnliQoGY/L4wqB65v9fVbYhi4 1zcRTl1qbOd9wRKWr0SG3hZE12sQjG+7EmxTTzcA1i2OV2EFCuKzHsJhPaRu+V+e cOKaP2lEsedYBwVy4n7EGYN2OhrLME0S4B7iclDg6B0OkQFBBYQF5+z6MB9TUE+q OnZq/zrN50KkVbJA4OUl3KgEy+a8psFsDkgzDBZNdTC06LwaXAr5A1ttRjBz/dZ8 ESfHPx3HzUrbZYsEYv0hah1fvztHte4omgQrdC633bu1PIGAtQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJsg2IEaRTsWG+BbanERZ5f69XR2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTZhMDdmNzUtZTBhOS0z NmQ5LTlkMjUtZDVlNmZiNzUxODgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQR4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKbUNjP6Ak6O+rL/09QRKWOfXeKy2vAUBzGnQ87STxVCKxclTBay HcS9zsk5aO0L3MiIdKjr82TJLoNlFuYUV+6kQsuzi/BjG1dc6VI963PPYGImPwt8 2rKZedVz1jUXT0O9ILsLCBqyE6Sq7llTF/VbVzYdm8o6ec8aJ2WpIrWnDdFqrX0o SwfstQ1Xa8/hpuQyvYgwoZTIR62f/PVJmPOOqLQCvwAPKA2Dzu9SiCxy0MZDMes/ GPQp2K5v/beMeekXaTvSAHTUF+llSnEoMyebK01T4UlnT+MHIbQbnjEmcFtkkv0A o78+QDMkdkTP96ve7xsTp+I7Q7kOqTcJZaE= -----END CERTIFICATE-----Generated at Sat May 4 14:54:48 2024 by rpki-client on console-ams.rpki-client.org