$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5649588-2b39-3853-af8f-d1c858bdb77c.roa File: a5649588-2b39-3853-af8f-d1c858bdb77c.roa (raw, json) Hash identifier: 3qclDElLJ+q7awN6WvXgoPfhqPTBrAVYbj4cLq5lDfg= Subject key identifier: 0A:29:85:43:1A:D4:23:7D:30:B6:95:9F:9A:E2:E7:08:B1:CB:C3:71 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FABD5D119528D53E5448200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5649588-2b39-3853-af8f-d1c858bdb77c.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 7015 IP address blocks: 2001:559:853c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ab:d5:d1:19:52:8d:53:e5:44:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=5f644289-2f91-4078-825b-270440c67123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7b:9f:01:5d:52:d1:b8:8c:58:3d:2f:67:20: 1d:2d:7e:24:95:d5:28:fe:5a:d2:cd:80:2d:90:48: 28:1e:ed:bb:43:30:46:6a:79:2d:7d:65:e6:3d:ba: 59:d9:a9:fd:c8:be:f9:6a:59:44:8b:fd:94:61:ed: 4c:9a:09:42:01:b8:53:95:44:30:b4:c0:29:14:e4: ec:fb:24:16:c5:1a:ac:e2:17:36:78:04:f7:23:53: 43:22:5e:d1:52:36:c1:3f:95:64:3f:dd:8b:d7:0d: e4:53:3c:f9:e2:e3:eb:6d:78:eb:6d:a6:c7:84:6f: e3:1d:7d:f2:e1:e9:0b:26:1f:ee:2a:c9:a4:cf:48: a6:e6:fd:c1:2a:3e:07:a7:a4:ca:b3:09:80:62:40: ea:1c:41:69:c9:67:a8:99:3e:d3:f0:85:ef:e5:3f: fe:99:08:61:61:5c:e7:7f:95:bb:05:de:1c:77:c8: 89:bc:ca:17:67:71:8f:65:f4:78:6e:40:f1:31:16: 1d:3e:c8:a5:fa:e1:43:36:af:b5:22:54:5a:2c:0d: a6:3f:9e:8e:76:49:28:e0:84:33:cc:5e:be:9f:85: 87:79:b2:4c:7c:9c:c2:e4:d2:c7:3b:19:f0:99:12: ae:ba:2e:4c:ca:81:16:63:90:24:e7:cf:3a:c7:2e: 61:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:29:85:43:1A:D4:23:7D:30:B6:95:9F:9A:E2:E7:08:B1:CB:C3:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5649588-2b39-3853-af8f-d1c858bdb77c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:853c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:5f:d0:66:e5:bb:51:08:4a:fe:41:53:5b:ff:b8:69:c5:0b: 33:3a:0e:87:2c:e3:c0:42:84:93:ae:10:0f:95:43:40:bc:d4: 80:ae:ff:46:41:c9:74:13:2f:6d:1f:ad:80:96:93:8d:7f:74: 0b:42:45:7d:dc:56:bb:0d:cf:d4:e7:a1:35:ef:3e:da:50:f3: c1:99:45:67:3a:a4:5b:0f:56:65:dc:2c:4a:fa:cf:fc:15:7f: 05:cd:e8:03:6b:ad:bf:97:69:13:e9:31:9f:59:3a:1d:ab:e1: 8e:96:c3:e8:a3:79:ef:f3:97:3e:90:b2:86:b1:4e:44:9a:7a: 2d:57:ad:57:0f:91:c7:24:41:3c:40:7d:92:d9:e8:8d:41:68: 16:56:79:d4:2d:3b:8e:6a:29:86:49:fe:8f:88:e9:58:02:3b: 3f:32:56:e8:09:3c:97:4e:3a:f6:1a:5f:1b:f5:51:25:ad:a7: 6a:7c:3c:0f:54:15:63:ac:a6:15:c3:05:2b:51:a8:05:36:14: 34:ab:57:49:a3:a2:3b:c0:23:95:48:48:d5:b0:4e:34:41:d3: 28:93:29:d6:8c:ff:7b:48:b6:c1:5a:f0:c7:28:91:05:12:6d: 13:0f:4b:f9:8e:14:2f:e9:75:35:d8:6a:40:8d:cf:80:0e:5c: 86:e6:24:74 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfq9XRGVKNU+VEggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk NWY2NDQyODktMmY5MS00MDc4LTgyNWItMjcwNDQwYzY3MTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonufAV1S0biMWD0vZyAdLX4kldUo/lrSzYAt kEgoHu27QzBGanktfWXmPbpZ2an9yL75allEi/2UYe1MmglCAbhTlUQwtMApFOTs +yQWxRqs4hc2eAT3I1NDIl7RUjbBP5VkP92L1w3kUzz54uPrbXjrbabHhG/jHX3y 4ekLJh/uKsmkz0im5v3BKj4Hp6TKswmAYkDqHEFpyWeomT7T8IXv5T/+mQhhYVzn f5W7Bd4cd8iJvMoXZ3GPZfR4bkDxMRYdPsil+uFDNq+1IlRaLA2mP56Odkko4IQz zF6+n4WHebJMfJzC5NLHOxnwmRKuui5MyoEWY5Ak5886xy5hewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAophUMa1CN9MLaVn5ri5wixy8NxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTU2NDk1ODgtMmIzOS0z ODUzLWFmOGYtZDFjODU4YmRiNzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYU8 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABpf0Gblu1EISv5BU1v/uGnFCzM6Docs48BChJOuEA+VQ0C81ICu /0ZByXQTL20frYCWk41/dAtCRX3cVrsNz9TnoTXvPtpQ88GZRWc6pFsPVmXcLEr6 z/wVfwXN6ANrrb+XaRPpMZ9ZOh2r4Y6Ww+ijee/zlz6QsoaxTkSaei1XrVcPkcck QTxAfZLZ6I1BaBZWedQtO45qKYZJ/o+I6VgCOz8yVugJPJdOOvYaXxv1USWtp2p8 PA9UFWOsphXDBStRqAU2FDSrV0mjojvAI5VISNWwTjRB0yiTKdaM/3tItsFa8Mco kQUSbRMPS/mOFC/pdTXYakCNz4AOXIbmJHQ= -----END CERTIFICATE-----Generated at Sat May 4 14:53:53 2024 by rpki-client on console-fra.rpki-client.org