$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a06109f7-dc0e-3be7-bfc8-42c4a425c3c1.roa File: a06109f7-dc0e-3be7-bfc8-42c4a425c3c1.roa (raw, json) Hash identifier: 8W9tupFzOCijF7Rcoxs6UA52c5qeOF8MdB/gc5IYwyg= Subject key identifier: 97:66:37:63:59:6B:57:EF:5D:35:18:73:06:F6:03:9C:F1:DC:A1:B7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285847BEFB9D2B0B2AF5509A7B7440 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a06109f7-dc0e-3be7-bfc8-42c4a425c3c1.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 33287 IP address blocks: 2001:559:558::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:fb:9d:2b:0b:2a:f5:50:9a:7b:74:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=9d66977b-aa69-4d50-9e7c-a1a3a4adc1ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:1e:70:fb:38:2a:9d:2a:87:d8:3d:06:9a:c1: 49:8e:f1:06:47:fe:df:5d:06:54:6b:bc:3c:4f:11: a6:cf:c6:b1:4a:8e:63:25:30:01:3a:2b:f6:d2:65: b9:10:2e:4c:f4:85:31:01:10:47:33:0a:97:2a:ff: ef:40:9e:5d:be:d8:78:31:38:c6:f3:61:12:60:87: 21:03:1e:8e:f2:29:7e:62:bd:d1:f8:18:05:0c:2c: 59:35:1f:78:af:2f:e4:30:e8:bb:a0:55:fc:a5:14: c7:35:c0:e7:ce:cf:82:23:35:32:eb:50:07:4c:02: 25:b8:1a:03:73:34:e7:f8:aa:42:c3:70:24:5f:1c: 16:6c:2c:8d:46:fc:73:5b:57:a5:a6:49:ea:ab:77: 65:0f:1c:a1:9a:5a:47:86:56:12:f8:04:d2:c7:d8: 43:69:d6:72:20:6d:f0:b7:44:a1:0c:cf:dc:0f:cc: 60:9c:64:ac:14:6f:31:17:45:ae:d0:db:b2:98:ad: 86:ce:c6:f8:f1:66:d6:a6:c3:76:d9:91:90:b6:13: 2c:28:ef:7b:a1:f8:ee:24:dd:7b:87:c1:19:d1:62: fd:26:1d:15:e5:f3:91:7a:e9:8a:d0:0f:30:45:b7: 02:9b:b6:4b:02:33:3d:f7:8b:4b:7f:5a:be:b7:21: 9a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:66:37:63:59:6B:57:EF:5D:35:18:73:06:F6:03:9C:F1:DC:A1:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a06109f7-dc0e-3be7-bfc8-42c4a425c3c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:558::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:1a:18:7e:c9:a5:d1:89:66:45:2b:1c:84:ae:61:d9:07:a5: c9:e0:de:02:11:40:79:3c:2c:47:1a:85:cc:ab:3d:fe:c5:f6: da:ad:70:7c:64:1a:30:d8:da:39:62:c8:f5:a1:82:27:e1:f8: d3:85:0e:a6:f2:bb:b6:0b:8c:e3:49:10:09:5c:25:8f:25:eb: 59:2e:00:0c:2a:e4:3b:e4:0f:80:0c:d6:a9:75:06:a5:36:9a: 78:21:4a:80:b2:88:23:58:fb:9e:db:2b:2c:fa:6f:9d:55:54: 74:62:cf:02:60:b6:cc:79:d1:3e:66:ad:e6:e4:da:48:7d:2c: e8:f0:b7:e5:c4:b3:eb:9e:e7:2c:c8:f3:92:8c:a3:a5:25:50: b0:17:1b:c4:4d:a5:a0:b7:f5:3c:c5:42:d2:c4:55:5a:2b:29: a6:04:a2:d5:e5:d2:ed:fe:62:0a:ac:a0:21:24:06:6b:b2:2e: a4:92:30:ac:91:c1:77:94:91:0e:6d:49:5f:be:76:b6:13:53: 21:cb:51:a8:47:36:f8:6b:2a:64:50:ac:e5:15:dd:bb:c8:f4: 62:00:eb:ce:1f:8a:9b:df:1b:8f:b6:4f:4c:2a:49:9a:ab:bc: fd:03:da:55:1e:2b:f2:85:0a:3f:c9:ef:f9:78:3a:d5:db:86: 63:1a:06:b1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe++50rCyr1UJp7dEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk OWQ2Njk3N2ItYWE2OS00ZDUwLTllN2MtYTFhM2E0YWRjMWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3h5w+zgqnSqH2D0GmsFJjvEGR/7fXQZUa7w8 TxGmz8axSo5jJTABOiv20mW5EC5M9IUxARBHMwqXKv/vQJ5dvth4MTjG82ESYIch Ax6O8il+Yr3R+BgFDCxZNR94ry/kMOi7oFX8pRTHNcDnzs+CIzUy61AHTAIluBoD czTn+KpCw3AkXxwWbCyNRvxzW1elpknqq3dlDxyhmlpHhlYS+ATSx9hDadZyIG3w t0ShDM/cD8xgnGSsFG8xF0Wu0NuymK2Gzsb48WbWpsN22ZGQthMsKO97ofjuJN17 h8EZ0WL9Jh0V5fOReumK0A8wRbcCm7ZLAjM994tLf1q+tyGaIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJdmN2NZa1fvXTUYcwb2A5zx3KG3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTA2MTA5ZjctZGMwZS0z YmU3LWJmYzgtNDJjNGE0MjVjM2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQVY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJgaGH7JpdGJZkUrHISuYdkHpcng3gIRQHk8LEcahcyrPf7F9tqt cHxkGjDY2jliyPWhgifh+NOFDqbyu7YLjONJEAlcJY8l61kuAAwq5DvkD4AM1ql1 BqU2mnghSoCyiCNY+57bKyz6b51VVHRizwJgtsx50T5mrebk2kh9LOjwt+XEs+ue 5yzI85KMo6UlULAXG8RNpaC39TzFQtLEVVorKaYEotXl0u3+YgqsoCEkBmuyLqSS MKyRwXeUkQ5tSV++drYTUyHLUahHNvhrKmRQrOUV3bvI9GIA684fipvfG4+2T0wq SZqrvP0D2lUeK/KFCj/J7/l4OtXbhmMaBrE= -----END CERTIFICATE-----Generated at Fri Nov 22 11:31:12 2024 by rpki-client on console-fra.rpki-client.org