$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a120bc54-3cb2-3b53-8265-8c5ca3d3e288.roa File: a120bc54-3cb2-3b53-8265-8c5ca3d3e288.roa (raw, json) Hash identifier: gdGBMyDHObXhwNAXop33sZJi5T0WoSUCCjV5I4iW9JE= Subject key identifier: 69:9C:10:12:71:C8:7C:DF:40:41:83:7B:36:93:89:4B:B3:2F:AC:A5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAC18B72A57582E080AD080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a120bc54-3cb2-3b53-8265-8c5ca3d3e288.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 33287 IP address blocks: 2001:559:57a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ac:18:b7:2a:57:58:2e:08:0a:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=89e841b5-29ff-4e1b-a7a4-5c76f4cd893b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c6:04:ef:03:45:8a:d9:0b:85:29:7c:fe:2c: 6b:77:6d:e3:0e:85:e6:a6:d8:18:a0:e4:14:26:6f: c9:7d:e0:c3:f1:ed:f0:54:83:c2:aa:dd:ee:1d:ae: 64:e9:7b:7c:06:18:6a:4e:8b:d2:bd:30:62:67:19: 8e:f1:e7:73:bf:f8:55:0d:ff:1c:c2:cf:01:b4:47: 04:21:1e:9e:f0:d3:a3:a7:4b:06:c4:37:fd:7e:e3: b7:8b:7f:c8:7d:88:c1:5c:ca:aa:be:6e:17:9d:ff: 44:b4:2d:84:4d:b1:db:fd:2f:8c:8e:d7:51:db:c4: b9:ab:06:13:a1:68:2c:6b:f7:22:ac:1c:b7:90:0c: 9f:d1:9f:e1:31:4d:8e:45:4f:6a:7d:19:e7:95:0b: 35:7a:fe:77:de:c9:87:21:34:1b:19:b7:f6:a7:ca: 34:9a:86:3a:94:fa:f1:96:61:1a:e2:eb:0d:72:cc: b6:4f:c9:68:72:9d:74:05:43:cb:ea:cf:1c:47:d7: 33:14:40:e6:1a:cd:3e:8e:fb:83:03:f8:66:70:60: 98:40:67:cb:cf:e0:b2:2b:2c:18:9e:b7:ff:2c:db: a4:31:37:b4:73:85:f6:10:7c:40:1e:7b:7e:96:22: 6d:61:ab:71:af:63:9f:f2:b6:dc:22:44:d3:1c:02: 81:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:9C:10:12:71:C8:7C:DF:40:41:83:7B:36:93:89:4B:B3:2F:AC:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a120bc54-3cb2-3b53-8265-8c5ca3d3e288.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:57a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:d5:0c:e8:e8:0f:5c:99:f7:53:52:a9:42:75:46:3d:0c:85: ab:dd:32:77:86:71:a0:c6:fe:f1:e7:c3:6e:50:6f:d1:1c:30: f5:a4:2b:ad:eb:94:97:a9:17:1d:2f:c1:69:15:81:a3:8b:ac: fe:e8:7c:5d:16:7d:f3:48:d9:92:61:40:e8:54:8d:be:b6:70: 1f:d8:47:6c:22:b4:8e:b1:61:c9:02:59:19:86:b6:2f:e9:d7: 9a:21:b8:0b:40:61:3c:da:f0:25:9b:00:3a:b2:e5:b0:78:45: a1:15:74:f1:95:81:55:87:6b:f0:f8:1f:30:c7:e0:3e:46:47: 1b:c0:00:e5:19:f3:d8:cd:34:b4:c6:6c:16:01:17:ef:09:49: 09:1b:8c:c8:a5:84:bb:8d:6a:60:ab:36:7d:dd:0f:79:b7:b6: d2:dc:00:69:63:ff:3d:4f:11:29:d3:46:ca:96:6d:e9:26:c6: 66:30:cc:08:7d:db:29:08:b5:ac:cb:29:e0:ec:a7:03:05:f7: b9:fc:1d:59:42:b3:db:62:67:81:03:96:45:ea:1d:45:2f:53: 09:7d:06:38:6e:0a:62:24:8a:17:2f:c5:00:c2:bb:53:f0:b5: 03:8f:11:20:e4:8a:4f:5c:1a:68:ba:2d:b7:72:aa:ad:d5:3b: 55:f5:9f:01 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfrBi3KldYLggK0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk ODllODQxYjUtMjlmZi00ZTFiLWE3YTQtNWM3NmY0Y2Q4OTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6sYE7wNFitkLhSl8/ixrd23jDoXmptgYoOQU Jm/JfeDD8e3wVIPCqt3uHa5k6Xt8BhhqTovSvTBiZxmO8edzv/hVDf8cws8BtEcE IR6e8NOjp0sGxDf9fuO3i3/IfYjBXMqqvm4Xnf9EtC2ETbHb/S+MjtdR28S5qwYT oWgsa/cirBy3kAyf0Z/hMU2ORU9qfRnnlQs1ev533smHITQbGbf2p8o0moY6lPrx lmEa4usNcsy2T8locp10BUPL6s8cR9czFEDmGs0+jvuDA/hmcGCYQGfLz+CyKywY nrf/LNukMTe0c4X2EHxAHnt+liJtYatxr2Of8rbcIkTTHAKBxwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGmcEBJxyHzfQEGDezaTiUuzL6ylMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTEyMGJjNTQtM2NiMi0z YjUzLTgyNjUtOGM1Y2EzZDNlMjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQV6 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKnVDOjoD1yZ91NSqUJ1Rj0MhavdMneGcaDG/vHnw25Qb9EcMPWk K63rlJepFx0vwWkVgaOLrP7ofF0WffNI2ZJhQOhUjb62cB/YR2witI6xYckCWRmG ti/p15ohuAtAYTza8CWbADqy5bB4RaEVdPGVgVWHa/D4HzDH4D5GRxvAAOUZ89jN NLTGbBYBF+8JSQkbjMilhLuNamCrNn3dD3m3ttLcAGlj/z1PESnTRsqWbekmxmYw zAh92ykItazLKeDspwMF97n8HVlCs9tiZ4EDlkXqHUUvUwl9BjhuCmIkihcvxQDC u1PwtQOPESDkik9cGmi6Lbdyqq3VO1X1nwE= -----END CERTIFICATE-----Generated at Sat May 4 14:55:21 2024 by rpki-client on console-ams.rpki-client.org