$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98a53856-3ae1-364c-8393-c1494302445a.roa File: 98a53856-3ae1-364c-8393-c1494302445a.roa (raw, json) Hash identifier: zecYhGJSsehO+hDDg5XO17L0L1JfjLuDquMPVwgIaCM= Subject key identifier: 04:A0:05:A6:62:CF:47:53:B5:5E:9A:3D:76:32:9E:DF:B0:15:31:C8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FABB041DAAFD9DD4DD97B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98a53856-3ae1-364c-8393-c1494302445a.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 33662 IP address blocks: 2001:559:397::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ab:b0:41:da:af:d9:dd:4d:d9:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=09cabfea-86ba-4da9-b80d-c7e087a6efca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7f:e9:76:28:6c:9c:66:49:4f:ab:61:6e:be: 90:6d:50:cd:7f:27:47:0d:bc:9a:8b:36:ec:29:0e: d1:a2:a7:2d:4b:62:33:06:5c:ba:a3:55:dd:5f:3f: 38:05:ca:6f:2c:1c:7d:cc:1c:15:fc:23:5a:dc:90: be:6b:0f:4b:5b:83:0e:fe:82:58:99:4f:9a:59:ff: ec:7b:66:b0:2d:c8:34:f8:eb:7d:60:0d:9d:82:ad: c8:9f:74:e2:49:2f:64:5d:5d:f5:f4:91:3e:ea:bd: e3:06:4a:28:14:e2:82:05:54:82:23:75:dd:c6:bf: 77:25:f8:e9:82:0b:04:57:ec:16:4d:f3:47:20:b0: 73:c4:13:bc:f8:4c:53:63:87:5a:75:0f:12:f1:0c: 40:6f:67:f1:14:9a:8a:c8:eb:20:18:ea:da:23:ec: 5b:40:7e:86:ef:48:ca:ae:3c:53:19:51:6a:fe:06: d4:7f:23:55:86:a9:71:e2:2d:50:3e:08:21:fe:5a: 7e:f4:3c:e8:1f:3e:c3:31:c2:da:39:3a:39:85:98: 5c:95:b5:10:e3:8c:05:b1:33:d5:7b:30:b5:f5:47: 73:0e:12:94:7f:ef:8e:b4:c0:7f:cd:97:bb:95:a0: 61:0e:68:70:d2:1f:65:c9:10:25:63:de:32:29:de: 98:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A0:05:A6:62:CF:47:53:B5:5E:9A:3D:76:32:9E:DF:B0:15:31:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98a53856-3ae1-364c-8393-c1494302445a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:397::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:53:ea:8a:df:fc:27:1b:f2:5b:51:f7:d9:6b:44:2e:ac:0c: 5d:5f:84:00:b5:19:0d:74:73:db:19:a1:e5:b1:65:68:ac:c5: c9:fa:f8:63:f2:ba:d2:ee:40:5c:10:93:47:d2:6d:96:8c:d8: 4f:6e:0f:fd:a6:48:20:8f:1d:bf:28:13:80:ef:d9:ee:a9:8b: 52:9c:55:71:38:59:0b:51:4b:80:48:0e:85:3d:63:9a:91:43: b3:59:c4:b9:b2:de:f9:60:db:1a:db:ed:85:6d:76:f1:dc:d4: b7:7e:f2:03:cb:09:6c:18:f6:d6:b8:73:ea:17:e1:f0:ec:b0: 43:c4:2a:85:ea:69:d8:0f:6d:19:38:cb:6c:a1:93:63:7e:2d: f8:a2:8d:11:1e:74:08:17:7e:1b:73:72:7e:cb:97:b6:11:79: 87:8c:1c:ed:90:e3:f2:19:0e:49:1e:e5:da:28:1d:73:b2:af: 66:c6:21:1a:da:57:ca:0f:90:78:af:cd:15:c9:6d:13:cd:e9: f7:ff:1c:42:b2:0e:16:90:82:88:0f:ac:95:a9:b4:7e:b9:b6: e1:48:76:04:92:bd:c6:1d:fe:ac:92:94:a8:5c:5e:0f:b1:ba: d2:55:fb:4d:71:6d:71:cb:5a:14:78:55:c5:fb:e0:60:2c:04: 12:51:10:f3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfq7BB2q/Z3U3ZewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk MDljYWJmZWEtODZiYS00ZGE5LWI4MGQtYzdlMDg3YTZlZmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3/pdihsnGZJT6thbr6QbVDNfydHDbyaizbs KQ7RoqctS2IzBly6o1XdXz84BcpvLBx9zBwV/CNa3JC+aw9LW4MO/oJYmU+aWf/s e2awLcg0+Ot9YA2dgq3In3TiSS9kXV319JE+6r3jBkooFOKCBVSCI3Xdxr93Jfjp ggsEV+wWTfNHILBzxBO8+ExTY4dadQ8S8QxAb2fxFJqKyOsgGOraI+xbQH6G70jK rjxTGVFq/gbUfyNVhqlx4i1QPggh/lp+9DzoHz7DMcLaOTo5hZhclbUQ44wFsTPV ezC19UdzDhKUf++OtMB/zZe7laBhDmhw0h9lyRAlY94yKd6YKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFASgBaZiz0dTtV6aPXYynt+wFTHIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOThhNTM4NTYtM2FlMS0z NjRjLTgzOTMtYzE0OTQzMDI0NDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQOX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHtT6orf/Ccb8ltR99lrRC6sDF1fhAC1GQ10c9sZoeWxZWisxcn6 +GPyutLuQFwQk0fSbZaM2E9uD/2mSCCPHb8oE4Dv2e6pi1KcVXE4WQtRS4BIDoU9 Y5qRQ7NZxLmy3vlg2xrb7YVtdvHc1Ld+8gPLCWwY9ta4c+oX4fDssEPEKoXqadgP bRk4y2yhk2N+LfiijREedAgXfhtzcn7Ll7YReYeMHO2Q4/IZDkke5dooHXOyr2bG IRraV8oPkHivzRXJbRPN6ff/HEKyDhaQgogPrJWptH65tuFIdgSSvcYd/qySlKhc Xg+xutJV+01xbXHLWhR4VcX74GAsBBJREPM= -----END CERTIFICATE-----Generated at Sat May 4 14:54:56 2024 by rpki-client on console-ams.rpki-client.org