$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d36b6b0-5130-3948-b907-a6bba73d0954.roa File: 9d36b6b0-5130-3948-b907-a6bba73d0954.roa (raw, json) Hash identifier: Q+TTERL+NrgOyYVMMzF38gEZY/7uc7JXTz1BG+6A344= Subject key identifier: 71:4B:00:76:3A:45:20:6B:01:1A:3A:F5:6D:09:BE:50:7C:41:FB:34 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAC15DB4BB42063B354CD10 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d36b6b0-5130-3948-b907-a6bba73d0954.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 33287 IP address blocks: 2001:559:1a5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ac:15:db:4b:b4:20:63:b3:54:cd:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=d488ad2b-dfd2-4697-a47a-93d92852e9a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:04:b0:71:a7:39:05:2b:9c:1f:99:33:71:0f: ad:a3:2e:cd:a4:e5:67:db:7a:e6:b8:cf:b5:6c:e5: b3:d3:45:9d:20:27:3e:55:2c:9f:10:7c:91:eb:ea: cb:7a:5c:a5:ac:99:39:16:44:ff:e4:07:cc:3e:09: 9a:39:18:90:45:3e:5b:d7:a7:8e:42:6e:5e:15:ec: f7:25:37:0e:d5:08:5b:63:a4:82:0d:5d:3e:b8:87: 9e:00:f3:62:5d:56:02:5d:5d:25:73:6a:08:e4:36: 59:a7:16:b3:d2:4f:bf:32:bc:d0:fb:82:1a:50:e9: 93:c6:16:73:50:e3:43:0d:09:f6:60:23:96:28:2d: 49:a0:5e:23:e7:9a:f5:ca:41:1a:6f:0f:bf:ef:2d: d2:3d:a3:50:72:32:5f:20:0a:9e:b2:c5:08:5d:1c: 98:c0:f7:ab:2d:a2:da:35:79:cb:ad:15:ed:9f:6c: b1:35:47:5c:ad:30:7b:47:10:1c:5a:0e:65:53:a6: f6:68:b4:1a:6c:f1:60:ff:0f:c8:76:f7:99:d7:79: a5:72:d7:af:33:32:0e:5d:4e:ca:5a:7d:55:b2:e5: 86:42:86:6e:10:e7:3d:a5:63:87:84:25:45:a1:4e: 9c:28:94:90:df:55:c8:13:f8:cf:f0:bc:7a:df:79: 57:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:4B:00:76:3A:45:20:6B:01:1A:3A:F5:6D:09:BE:50:7C:41:FB:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d36b6b0-5130-3948-b907-a6bba73d0954.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:1a5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:81:2e:a2:98:c4:7c:42:01:7c:74:56:f2:23:00:42:eb:13: e6:d2:6e:53:12:55:20:9f:47:1b:16:87:cc:b1:fd:e4:17:d9: 1f:1e:9c:5b:62:ea:7d:07:e5:04:c0:c6:06:e2:e3:d2:6e:a7: 43:1e:32:d8:59:bf:72:e5:a8:9f:8f:d0:62:5a:92:53:3d:2b: d9:ed:ac:36:c0:5c:92:f6:a2:2e:92:75:63:0a:90:27:cb:86: 78:1a:b0:e4:b2:87:9a:fa:1c:a5:27:e5:5c:16:38:98:66:e0: 61:48:45:a0:bd:7d:1f:80:82:de:78:8b:2b:13:1d:da:41:3c: c7:8c:38:a9:1c:ba:8d:b6:88:30:24:25:55:f4:87:aa:a8:8f: 6f:00:9c:91:27:5e:fb:cc:7b:b4:3e:72:5d:e2:56:dd:78:e8: 04:89:7e:68:d5:55:da:5b:90:91:4b:f9:0a:f5:ef:b3:ca:ee: 30:fc:d4:1d:07:a5:9c:cb:aa:f4:06:1b:82:bf:fe:7c:23:f1: b7:1a:e9:42:aa:81:72:8c:a9:0c:f7:cf:ed:ee:fb:8d:14:97: 91:85:66:6a:69:40:3d:da:9b:3b:67:c1:64:2d:1b:d1:97:16: 4c:13:0e:22:6b:3b:aa:c8:ca:2b:65:f3:b9:ee:4c:3e:31:69: 97:56:94:27 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfrBXbS7QgY7NUzRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk ZDQ4OGFkMmItZGZkMi00Njk3LWE0N2EtOTNkOTI4NTJlOWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnASwcac5BSucH5kzcQ+toy7NpOVn23rmuM+1 bOWz00WdICc+VSyfEHyR6+rLelylrJk5FkT/5AfMPgmaORiQRT5b16eOQm5eFez3 JTcO1QhbY6SCDV0+uIeeAPNiXVYCXV0lc2oI5DZZpxaz0k+/MrzQ+4IaUOmTxhZz UONDDQn2YCOWKC1JoF4j55r1ykEabw+/7y3SPaNQcjJfIAqessUIXRyYwPerLaLa NXnLrRXtn2yxNUdcrTB7RxAcWg5lU6b2aLQabPFg/w/IdveZ13mlctevMzIOXU7K Wn1VsuWGQoZuEOc9pWOHhCVFoU6cKJSQ31XIE/jP8Lx633lXUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHFLAHY6RSBrARo69W0JvlB8Qfs0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWQzNmI2YjAtNTEzMC0z OTQ4LWI5MDctYTZiYmE3M2QwOTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQGl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMCBLqKYxHxCAXx0VvIjAELrE+bSblMSVSCfRxsWh8yx/eQX2R8e nFti6n0H5QTAxgbi49Jup0MeMthZv3LlqJ+P0GJaklM9K9ntrDbAXJL2oi6SdWMK kCfLhngasOSyh5r6HKUn5VwWOJhm4GFIRaC9fR+Agt54iysTHdpBPMeMOKkcuo22 iDAkJVX0h6qoj28AnJEnXvvMe7Q+cl3iVt146ASJfmjVVdpbkJFL+Qr177PK7jD8 1B0HpZzLqvQGG4K//nwj8bca6UKqgXKMqQz3z+3u+40Ul5GFZmppQD3amztnwWQt G9GXFkwTDiJrO6rIyitl87nuTD4xaZdWlCc= -----END CERTIFICATE-----Generated at Sat May 4 14:53:24 2024 by rpki-client on console-fra.rpki-client.org