$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d17d9ed-ea60-36b8-887f-daad9995aac1.roa File: 9d17d9ed-ea60-36b8-887f-daad9995aac1.roa (raw, json) Hash identifier: PSaT8Npkr2K3vtzd88u/jWY+RXELUj7nV6V6C2mtzHA= Subject key identifier: F3:64:B2:83:EC:30:BE:E1:62:95:DD:6A:AD:22:6E:FF:75:FE:29:93 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FB055B9F7E664A1AC84D6D0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d17d9ed-ea60-36b8-887f-daad9995aac1.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 33657 IP address blocks: 2001:559:86cf::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:b0:55:b9:f7:e6:64:a1:ac:84:d6:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=84e35874-ee37-4eb3-a014-c19f53325ff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:28:6d:68:1d:bd:cd:cd:3c:9f:e3:1a:3e:03: 6e:a7:7e:4d:11:84:7d:04:d4:97:7b:21:7c:96:fa: f2:ab:fb:a2:6b:08:c0:63:06:2a:20:6e:b9:bf:7a: 71:c6:63:98:95:11:e6:1b:75:3f:94:7d:0d:b1:79: e9:ba:0d:fe:5f:9d:48:8c:a9:6e:45:43:b8:4c:e4: a5:2d:52:6b:5b:d4:e2:95:9d:b7:dd:75:a2:e6:54: 62:36:8c:7e:69:6e:1d:eb:a8:1c:46:1d:f8:93:d1: b4:79:01:54:28:1c:27:b1:56:a3:d7:80:00:24:db: a6:ce:e7:61:87:3b:1e:21:ea:df:30:5d:93:ec:ba: 76:fa:c5:46:da:46:87:96:70:85:fd:9b:f3:f7:68: 47:79:0b:fb:52:da:7e:83:ef:b0:1a:41:03:2e:3f: 25:fc:d8:72:6e:8b:8e:8b:5b:c2:56:19:f4:c2:42: da:21:c7:55:b2:ed:10:77:01:80:d9:3b:91:55:f4: 4e:fc:c0:66:b7:30:46:de:42:33:e9:38:9e:85:ee: 44:20:a9:ca:33:6c:66:38:f3:58:08:9b:b4:aa:aa: 6a:36:ae:0c:57:dc:12:e8:50:09:12:1c:f2:90:44: 50:7f:02:42:7f:ed:f9:1c:d4:3a:bf:e6:90:eb:20: 62:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:64:B2:83:EC:30:BE:E1:62:95:DD:6A:AD:22:6E:FF:75:FE:29:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d17d9ed-ea60-36b8-887f-daad9995aac1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:86cf::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:a8:97:5f:4f:9a:c3:81:9d:b3:bc:f4:48:66:60:2e:0f:cd: 30:ac:08:ef:7c:4d:cd:4e:30:0b:b5:47:45:2a:e9:cb:72:76: 23:26:b9:2d:9d:38:3d:a4:78:21:c5:c6:ea:65:c5:1f:20:9b: 19:9f:19:88:93:c8:38:08:58:b4:3d:c8:93:1b:f0:58:9b:69: 23:52:42:4c:ed:6c:69:3e:d7:d7:ad:9c:cd:58:bc:01:b2:34: fb:ef:57:a3:23:b9:cf:cb:43:f0:b7:87:0b:5d:1d:0f:32:cc: be:62:77:47:8d:03:3c:b6:4d:67:d6:61:4e:a7:91:6a:2b:a9: bb:8e:3d:0f:13:22:86:87:f5:4c:72:fc:2c:32:52:76:6c:00: 39:f6:60:0f:93:e2:f6:01:20:60:30:a8:db:8b:d2:8f:80:08: 9c:55:92:4b:90:a0:05:8d:1f:45:a9:7c:d4:d3:33:74:d2:2e: bf:a7:0b:49:1b:54:e6:90:68:a1:b4:30:48:c3:72:ec:3f:51: c9:f7:ce:28:33:1d:cd:43:c7:8f:21:e5:c3:44:bf:d9:b0:fd: 66:0e:57:d2:88:a2:36:2f:9b:10:19:cd:6d:50:60:62:22:bb: 89:3d:c6:42:25:01:b2:a6:ef:8e:ef:2f:7a:d5:52:d6:77:ed: d1:2c:85:3d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfsFW59+ZkoayE1tAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk ODRlMzU4NzQtZWUzNy00ZWIzLWEwMTQtYzE5ZjUzMzI1ZmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ShtaB29zc08n+MaPgNup35NEYR9BNSXeyF8 lvryq/uiawjAYwYqIG65v3pxxmOYlRHmG3U/lH0NsXnpug3+X51IjKluRUO4TOSl LVJrW9TilZ233XWi5lRiNox+aW4d66gcRh34k9G0eQFUKBwnsVaj14AAJNumzudh hzseIerfMF2T7Lp2+sVG2kaHlnCF/Zvz92hHeQv7Utp+g++wGkEDLj8l/NhybouO i1vCVhn0wkLaIcdVsu0QdwGA2TuRVfRO/MBmtzBG3kIz6Tiehe5EIKnKM2xmOPNY CJu0qqpqNq4MV9wS6FAJEhzykERQfwJCf+35HNQ6v+aQ6yBiwQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPNksoPsML7hYpXdaq0ibv91/imTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWQxN2Q5ZWQtZWE2MC0z NmI4LTg4N2YtZGFhZDk5OTVhYWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYbP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD+ol19PmsOBnbO89EhmYC4PzTCsCO98Tc1OMAu1R0Uq6ctydiMm uS2dOD2keCHFxuplxR8gmxmfGYiTyDgIWLQ9yJMb8FibaSNSQkztbGk+19etnM1Y vAGyNPvvV6Mjuc/LQ/C3hwtdHQ8yzL5id0eNAzy2TWfWYU6nkWorqbuOPQ8TIoaH 9Uxy/CwyUnZsADn2YA+T4vYBIGAwqNuL0o+ACJxVkkuQoAWNH0WpfNTTM3TSLr+n C0kbVOaQaKG0MEjDcuw/Ucn3zigzHc1Dx48h5cNEv9mw/WYOV9KIojYvmxAZzW1Q YGIiu4k9xkIlAbKm747vL3rVUtZ37dEshT0= -----END CERTIFICATE-----Generated at Sat May 4 14:55:08 2024 by rpki-client on console-ams.rpki-client.org