$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a08bb9d1-59d9-3358-8686-a9d91b3f0459.roa File: a08bb9d1-59d9-3358-8686-a9d91b3f0459.roa (raw, json) Hash identifier: 8Lk2vXmMTCSK0Y+DQ02rGka8t3EeQjEX8bPMoNZ3Ziw= Subject key identifier: E2:69:AA:45:88:5B:32:E6:E8:CC:49:E9:C8:60:F2:CB:D2:FE:D8:9D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAB7C0C573DAE97BFE27180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a08bb9d1-59d9-3358-8686-a9d91b3f0459.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 33489 IP address blocks: 2001:559:47f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ab:7c:0c:57:3d:ae:97:bf:e2:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=8facfdf5-081a-4e61-902c-ce54937f9c2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fc:65:f6:49:1c:c4:96:bf:19:a9:ab:01:0e: db:90:2c:03:aa:9e:fd:86:c3:c3:ad:fe:0d:8e:e3: 6a:9c:85:7e:b3:aa:1b:45:3e:25:36:d3:ef:32:00: 3f:32:69:fb:0e:7b:14:5c:cc:49:bd:ea:b8:35:45: e0:a2:04:3b:75:4a:5d:d9:c1:e1:4b:e6:aa:14:c0: 98:6a:49:97:76:e5:75:72:ac:ee:d7:35:88:67:5d: 35:b9:fe:92:db:50:7c:f1:66:c2:71:dd:3f:c4:60: 01:c7:d2:48:70:6b:01:88:eb:49:09:b3:81:6f:22: 2b:eb:39:fa:9d:17:0a:bf:dd:82:78:8f:7e:77:76: 3f:a8:05:68:47:0d:0f:02:8c:6e:c5:f4:c8:7b:e4: 2c:31:bd:6f:c6:d0:22:99:5e:50:73:c7:53:34:79: 1b:92:af:9e:1b:f5:31:d3:81:76:01:af:27:58:21: f5:3a:37:35:d2:86:f0:97:c1:87:62:a4:56:a0:de: 1d:04:7c:be:37:07:53:8e:c1:6f:d6:0e:60:18:bf: e4:ca:38:dd:7f:f7:eb:77:9e:23:67:7d:5f:df:67: b2:84:a8:05:e4:62:69:fd:95:cd:21:0b:1f:12:21: ee:cb:83:8c:ad:76:74:ed:49:af:d2:e8:e3:d5:15: 07:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:69:AA:45:88:5B:32:E6:E8:CC:49:E9:C8:60:F2:CB:D2:FE:D8:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a08bb9d1-59d9-3358-8686-a9d91b3f0459.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:47f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:19:bd:aa:0c:4e:8e:eb:d1:c9:68:82:8a:93:71:c0:df:32: d8:41:54:e4:0f:46:9f:24:0d:44:44:ae:e9:de:bc:51:82:42: 12:da:aa:15:8d:ca:c0:82:17:ce:65:c4:20:93:83:f9:dc:75: 75:67:95:fd:4b:af:21:53:89:28:7b:27:f8:93:e8:2b:8d:62: 70:92:49:d8:78:28:bf:f5:0d:ff:7c:12:78:6c:b8:a8:12:13: 75:55:0d:b1:9c:0a:8b:ff:56:3c:5b:0a:cb:55:24:6d:74:bd: 72:52:a5:18:d2:a3:e4:79:71:83:49:41:0f:75:47:18:70:91: 61:cd:15:d9:fe:39:de:c9:3f:49:a3:61:7d:6d:a7:c2:5b:7b: 52:d3:14:58:4b:25:77:68:8f:fa:5b:2d:87:4d:0a:bb:e6:24: 00:3f:01:87:73:1e:84:4b:29:56:96:36:66:ed:5a:a4:27:e7: 63:d0:2f:a4:25:ed:d2:e6:18:10:cf:b3:c0:2a:67:fa:d8:43: 41:dd:85:5c:4a:15:d2:25:32:44:3a:ba:a5:fd:9f:90:60:2a: 3a:2f:d4:9a:e6:4a:47:f7:19:60:e3:c4:48:f2:8b:6a:dd:7b: fb:af:90:45:8f:b5:7a:35:ac:c4:57:95:c6:12:04:52:6f:5d: b7:86:52:04 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfq3wMVz2ul7/icYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk OGZhY2ZkZjUtMDgxYS00ZTYxLTkwMmMtY2U1NDkzN2Y5YzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvxl9kkcxJa/GamrAQ7bkCwDqp79hsPDrf4N juNqnIV+s6obRT4lNtPvMgA/Mmn7DnsUXMxJveq4NUXgogQ7dUpd2cHhS+aqFMCY akmXduV1cqzu1zWIZ101uf6S21B88WbCcd0/xGABx9JIcGsBiOtJCbOBbyIr6zn6 nRcKv92CeI9+d3Y/qAVoRw0PAoxuxfTIe+QsMb1vxtAimV5Qc8dTNHkbkq+eG/Ux 04F2Aa8nWCH1Ojc10obwl8GHYqRWoN4dBHy+NwdTjsFv1g5gGL/kyjjdf/frd54j Z31f32eyhKgF5GJp/ZXNIQsfEiHuy4OMrXZ07Umv0ujj1RUHeQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOJpqkWIWzLm6MxJ6chg8svS/tidMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTA4YmI5ZDEtNTlkOS0z MzU4LTg2ODYtYTlkOTFiM2YwNDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQR/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKUZvaoMTo7r0clogoqTccDfMthBVOQPRp8kDURErunevFGCQhLa qhWNysCCF85lxCCTg/ncdXVnlf1LryFTiSh7J/iT6CuNYnCSSdh4KL/1Df98Enhs uKgSE3VVDbGcCov/VjxbCstVJG10vXJSpRjSo+R5cYNJQQ91RxhwkWHNFdn+Od7J P0mjYX1tp8Jbe1LTFFhLJXdoj/pbLYdNCrvmJAA/AYdzHoRLKVaWNmbtWqQn52PQ L6Ql7dLmGBDPs8AqZ/rYQ0HdhVxKFdIlMkQ6uqX9n5BgKjov1JrmSkf3GWDjxEjy i2rde/uvkEWPtXo1rMRXlcYSBFJvXbeGUgQ= -----END CERTIFICATE-----Generated at Sun May 5 02:20:11 2024 by rpki-client on console-ams.rpki-client.org