$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e38fc1f-120a-31dc-ae4b-4c1b7a643368.roa File: 9e38fc1f-120a-31dc-ae4b-4c1b7a643368.roa (raw, json) Hash identifier: 7RCQ4KBiEFzSbNQzfQz9xmkLOmsyIL6q/sSE8Z5l6b8= Subject key identifier: C3:B5:CB:8E:3E:A8:C1:27:A8:59:51:82:B7:16:0C:DC:53:74:84:B0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAD1BD8A29529A0558FF000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e38fc1f-120a-31dc-ae4b-4c1b7a643368.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 22909 IP address blocks: 2001:559:840f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ad:1b:d8:a2:95:29:a0:55:8f:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=f201771c-05f4-4dba-bdd1-384f68abcca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3c:72:f4:db:f2:c9:ac:34:6d:09:e6:95:a0: 39:0a:97:e5:b7:07:df:eb:be:c8:23:1b:5f:af:47: 6a:40:6f:7f:76:2d:d4:58:33:e8:94:eb:26:0f:59: eb:05:63:69:c5:6a:ce:e5:dd:69:fb:d1:73:c9:de: 11:d9:e7:ea:0c:aa:65:7b:02:2c:88:af:da:72:dd: ab:c7:f4:67:27:be:44:64:77:54:e6:19:c7:fa:32: d3:47:6d:c7:0d:39:21:41:53:37:7b:5c:6d:25:9d: 4c:04:71:0d:f8:75:a5:69:89:00:8e:c2:81:03:af: 2d:7c:81:ff:f3:41:a3:71:4b:b8:e9:da:8f:e9:41: 60:a6:fa:2b:97:eb:dc:a3:04:87:21:05:bb:68:83: 75:18:ea:96:40:5c:fd:f0:ff:35:a8:d9:ab:64:39: d8:ee:99:ce:4d:2b:42:a1:5a:23:c5:d9:db:cc:b1: 5f:17:d5:d6:de:f3:0e:ff:63:82:2d:fa:b5:58:b3: 3b:64:2d:e3:56:74:c3:78:49:59:ca:27:9a:9f:80: 20:d7:f2:0b:b1:9a:09:db:e0:6d:10:9f:12:44:42: 3d:a4:39:b2:75:a9:1d:78:1f:ae:08:62:c7:a6:09: ad:ca:9e:73:32:e9:b7:48:07:11:ff:32:10:62:d6: d9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B5:CB:8E:3E:A8:C1:27:A8:59:51:82:B7:16:0C:DC:53:74:84:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e38fc1f-120a-31dc-ae4b-4c1b7a643368.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:840f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:13:d5:c6:c5:1f:80:64:0f:dc:2a:a6:1a:1f:cb:a6:a9:26: 38:c9:4a:ba:99:d0:4a:e4:8c:0e:20:74:19:94:2a:2a:f8:b5: ba:e3:ac:b0:e5:ac:1d:1e:e1:81:38:7b:1e:70:db:80:22:42: 90:ed:b8:7e:4d:bd:d7:28:46:b5:c8:b2:e4:0a:9d:cf:6b:d0: 8d:d6:0d:55:00:c3:ec:ba:54:30:41:ae:a4:24:9d:79:2e:78: 8b:5a:a5:d9:4a:ed:b8:a7:59:33:66:8e:29:45:a6:55:b9:8e: 2e:5b:8e:a7:8a:b3:e6:15:81:49:38:13:65:71:66:c0:01:b1: 6e:5d:9b:df:e5:1a:c2:35:38:70:b9:29:9e:b5:fc:48:de:fb: 0d:d0:5f:0c:73:89:ff:1b:c1:3d:5b:13:00:54:e3:3b:bf:6b: 27:f5:c3:d8:2c:8b:ab:88:96:60:b1:e9:34:30:c1:b1:78:58: 34:81:42:69:7a:b3:66:20:e0:b0:45:14:74:77:f3:5b:50:01: c7:50:60:91:18:e0:45:bd:6d:d7:fd:72:0d:0d:94:fe:6c:92: f8:8a:32:bf:49:30:e8:67:10:fc:75:1d:67:06:1d:a5:f0:69: bf:d8:09:85:b7:5e:80:38:84:ac:13:1b:98:8f:b8:21:4a:19: e6:1f:bc:ad -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfrRvYopUpoFWP8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk ZjIwMTc3MWMtMDVmNC00ZGJhLWJkZDEtMzg0ZjY4YWJjY2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjxy9Nvyyaw0bQnmlaA5Cpfltwff677IIxtf r0dqQG9/di3UWDPolOsmD1nrBWNpxWrO5d1p+9Fzyd4R2efqDKplewIsiK/act2r x/RnJ75EZHdU5hnH+jLTR23HDTkhQVM3e1xtJZ1MBHEN+HWlaYkAjsKBA68tfIH/ 80GjcUu46dqP6UFgpvorl+vcowSHIQW7aIN1GOqWQFz98P81qNmrZDnY7pnOTStC oVojxdnbzLFfF9XW3vMO/2OCLfq1WLM7ZC3jVnTDeElZyiean4Ag1/ILsZoJ2+Bt EJ8SREI9pDmydakdeB+uCGLHpgmtyp5zMum3SAcR/zIQYtbZHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMO1y44+qMEnqFlRgrcWDNxTdISwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWUzOGZjMWYtMTIwYS0z MWRjLWFlNGItNGMxYjdhNjQzMzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYQP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGET1cbFH4BkD9wqphofy6apJjjJSrqZ0ErkjA4gdBmUKir4tbrj rLDlrB0e4YE4ex5w24AiQpDtuH5NvdcoRrXIsuQKnc9r0I3WDVUAw+y6VDBBrqQk nXkueItapdlK7binWTNmjilFplW5ji5bjqeKs+YVgUk4E2VxZsABsW5dm9/lGsI1 OHC5KZ61/Eje+w3QXwxzif8bwT1bEwBU4zu/ayf1w9gsi6uIlmCx6TQwwbF4WDSB Qml6s2Yg4LBFFHR381tQAcdQYJEY4EW9bdf9cg0NlP5skviKMr9JMOhnEPx1HWcG HaXwab/YCYW3XoA4hKwTG5iPuCFKGeYfvK0= -----END CERTIFICATE-----Generated at Sun May 5 02:20:05 2024 by rpki-client on console-ams.rpki-client.org