$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5378bdf-ba54-344d-8d0d-e09060898a1b.roa File: a5378bdf-ba54-344d-8d0d-e09060898a1b.roa (raw, json) Hash identifier: Q6ssH4AHEyJWIu/nak2F58/pT9YS+RuQIqlLwFiNCIA= Subject key identifier: 92:2E:F7:63:0A:30:99:C8:2A:C3:1A:0E:9B:DB:2A:F6:29:7A:48:54 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAE2907FB4756A218AEA380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5378bdf-ba54-344d-8d0d-e09060898a1b.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 22258 IP address blocks: 2001:558:500d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ae:29:07:fb:47:56:a2:18:ae:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=1950776d-ae6e-4103-a9cb-7ebfc07cfdcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f4:68:47:91:74:36:13:6c:ad:82:bf:f2:91: 80:bc:05:59:fc:77:65:86:c0:f0:50:d4:fb:f7:23: 68:ee:49:0f:dd:7a:3a:47:6b:98:13:6e:5a:a1:d5: be:8b:a6:dd:77:93:8e:88:c8:ec:46:39:93:d2:b9: 60:f8:37:53:be:2d:97:e5:c1:b1:5f:3a:d1:c3:a4: 3d:e2:0f:a0:35:07:88:7c:d4:77:8f:5b:7b:3a:82: c2:29:13:fa:7e:5d:6c:91:97:3e:c2:15:d0:e1:9d: 4e:cc:8b:68:d4:e9:b2:2f:8a:3a:e7:04:56:f3:bb: 91:18:77:55:12:01:9f:55:ea:5b:9d:fc:18:a7:ff: 9a:3a:90:a1:92:26:58:25:44:df:ee:fd:e9:bf:a0: e9:7b:47:9e:8b:d2:eb:42:7b:a2:9f:ba:f4:4d:14: 1d:43:84:6a:66:f2:04:05:8e:a6:a7:eb:95:04:07: be:ac:ea:7b:ad:d5:00:69:e6:b5:b1:5b:eb:b9:e9: 55:96:39:02:b4:ea:af:a1:ac:82:46:19:7a:7b:5d: b4:d7:31:ad:6f:84:22:7c:4e:9a:35:30:b6:09:a6: 56:55:68:45:4d:27:b9:71:5c:19:88:69:89:00:6b: 51:33:eb:f7:3f:fc:23:a4:71:cc:2a:0b:e0:7e:1f: fa:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:2E:F7:63:0A:30:99:C8:2A:C3:1A:0E:9B:DB:2A:F6:29:7A:48:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5378bdf-ba54-344d-8d0d-e09060898a1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:558:500d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:f2:f0:6a:63:83:67:8a:e8:e5:bb:91:10:f1:5d:59:a3:39: 5a:dd:f3:b0:32:d4:5b:69:33:7b:f7:72:69:ba:c3:6a:97:3e: 50:ad:94:9b:b4:ef:fb:22:6e:be:a7:c5:37:8b:4c:9a:5f:14: 9b:4a:0f:38:b3:dc:c6:62:cf:b9:99:77:20:c5:53:27:55:48: 8a:d1:b5:51:cf:ff:85:ad:8a:3d:f9:d9:78:e0:0e:97:28:5c: 16:20:10:01:28:5a:36:a5:96:04:d8:68:fd:1d:99:ed:da:d1: 2c:66:27:a2:92:15:7e:a5:0b:40:c7:5c:88:31:75:3a:65:56: bb:0c:44:03:55:9f:6b:1b:25:75:94:77:64:45:b9:5d:f8:9e: 29:a5:f8:34:51:05:b0:b8:42:f8:aa:57:60:f5:c3:eb:07:93: 6b:7e:b6:89:8b:49:fd:97:ed:a7:65:81:58:4d:09:9c:9b:c0: 02:e4:79:d9:f6:14:ea:12:81:85:77:d8:91:d3:1d:25:28:44: e8:b1:09:e3:39:62:99:4c:a5:bb:0b:c8:e8:b2:3e:94:ef:80: 5b:c9:34:c4:9d:c7:17:55:63:0c:dd:10:1c:86:f8:fd:a3:3e: 27:42:bc:96:8d:a0:13:65:b2:00:87:72:bd:c4:24:62:08:de: b2:f3:b5:99 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfrikH+0dWohiuo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk MTk1MDc3NmQtYWU2ZS00MTAzLWE5Y2ItN2ViZmMwN2NmZGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfRoR5F0NhNsrYK/8pGAvAVZ/HdlhsDwUNT7 9yNo7kkP3Xo6R2uYE25aodW+i6bdd5OOiMjsRjmT0rlg+DdTvi2X5cGxXzrRw6Q9 4g+gNQeIfNR3j1t7OoLCKRP6fl1skZc+whXQ4Z1OzIto1OmyL4o65wRW87uRGHdV EgGfVepbnfwYp/+aOpChkiZYJUTf7v3pv6Dpe0eei9LrQnuin7r0TRQdQ4RqZvIE BY6mp+uVBAe+rOp7rdUAaea1sVvruelVljkCtOqvoayCRhl6e1201zGtb4QifE6a NTC2CaZWVWhFTSe5cVwZiGmJAGtRM+v3P/wjpHHMKgvgfh/69wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJIu92MKMJnIKsMaDpvbKvYpekhUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTUzNzhiZGYtYmE1NC0z NDRkLThkMGQtZTA5MDYwODk4YTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWFAN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJjy8Gpjg2eK6OW7kRDxXVmjOVrd87Ay1FtpM3v3cmm6w2qXPlCt lJu07/sibr6nxTeLTJpfFJtKDziz3MZiz7mZdyDFUydVSIrRtVHP/4Wtij352Xjg DpcoXBYgEAEoWjallgTYaP0dme3a0SxmJ6KSFX6lC0DHXIgxdTplVrsMRANVn2sb JXWUd2RFuV34niml+DRRBbC4QviqV2D1w+sHk2t+tomLSf2X7adlgVhNCZybwALk edn2FOoSgYV32JHTHSUoROixCeM5YplMpbsLyOiyPpTvgFvJNMSdxxdVYwzdEByG +P2jPidCvJaNoBNlsgCHcr3EJGII3rLztZk= -----END CERTIFICATE-----Generated at Sun May 5 02:44:10 2024 by rpki-client on console-fra.rpki-client.org