$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a64ce476-c7aa-3437-b7ec-b94d4d897c7a.roa File: a64ce476-c7aa-3437-b7ec-b94d4d897c7a.roa (raw, json) Hash identifier: jmDYiVHvPAjpB7Y6kH5WjOFfSM8mgXOG7oT8v56ivEY= Subject key identifier: 70:4D:AC:9F:6E:4F:7A:9D:6C:14:61:15:FB:78:02:F1:96:8D:56:05 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285847BEFB04D92EB54E4F028CAA00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a64ce476-c7aa-3437-b7ec-b94d4d897c7a.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 7015 IP address blocks: 2001:559:c05c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:fb:04:d9:2e:b5:4e:4f:02:8c:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=413fed64-90f4-498c-a8c8-d5b6f1607083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:58:37:55:f3:db:f1:d8:f4:9b:6e:bd:62:ab: 6a:08:33:12:75:47:99:c9:02:b7:99:49:06:98:74: 1b:bf:7d:de:23:36:91:30:b2:3f:88:41:55:31:a3: 48:e1:24:5d:37:ec:8c:de:ce:a1:b8:77:68:40:78: fa:da:22:b3:ee:4f:55:6a:2e:98:f9:e7:0c:30:91: a7:0a:37:84:ff:c8:72:78:8e:e8:b6:d5:b2:3f:32: 13:67:2d:41:7f:77:e2:a8:a4:02:e0:3d:01:05:54: e9:9b:2c:db:7b:b6:41:b0:26:67:f2:9f:ac:e3:fe: c9:98:b4:68:ac:98:fd:e1:a1:5f:81:3a:8d:0e:9d: 7c:20:21:a9:04:fb:8f:fc:ad:a0:c5:45:60:fa:36: 0b:d9:33:92:56:31:ea:a3:86:5d:57:04:7a:87:65: e7:33:1f:fe:e2:a9:b2:08:c5:97:a8:dd:5e:b7:25: 70:1c:6f:69:ec:7e:81:26:30:3f:53:7a:f8:e4:c6: a6:ec:9c:ad:9b:08:c7:0a:54:4c:b7:df:14:73:3e: c3:6a:20:0d:20:72:4e:75:78:15:86:c7:9a:2d:28: 43:02:71:10:7f:01:a4:53:bd:62:90:15:10:c3:08: 3c:bd:39:6b:58:ca:76:d5:73:32:c3:a2:fd:52:ea: ba:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:4D:AC:9F:6E:4F:7A:9D:6C:14:61:15:FB:78:02:F1:96:8D:56:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a64ce476-c7aa-3437-b7ec-b94d4d897c7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c05c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:af:37:dd:1d:84:60:e8:67:66:b1:41:38:fa:cf:2d:c8:ac: 05:19:f9:38:2b:07:a9:88:56:4b:e9:a6:6a:1a:14:2d:4d:1c: d9:ec:07:eb:2f:56:e6:62:c6:ce:1f:73:77:d2:ce:98:24:4a: 23:1b:65:0c:ff:69:49:42:3c:db:32:4c:bd:6f:55:33:92:0a: 04:22:74:f2:22:35:1b:bb:00:16:a9:9a:91:7a:8b:04:18:d7: 97:f4:54:c9:40:58:d1:29:32:8e:d4:58:8d:86:66:02:d0:09: 9c:d3:a8:8c:bb:4e:81:a0:8b:4c:f0:09:f7:d6:54:ca:75:b8: 6b:25:59:31:4d:f2:06:9c:29:41:3a:9b:76:37:17:77:4f:96: 45:c2:b6:b0:1d:18:3d:e9:52:18:db:40:8d:f6:92:01:43:22: fb:9a:c8:14:71:27:f3:e8:68:32:51:b2:e9:49:79:68:68:93: b4:78:d2:94:22:b8:63:42:1b:25:d3:6d:f7:78:11:05:e3:77: 8b:dd:f7:9a:c1:2e:36:3a:46:05:f9:54:05:97:41:ee:ad:e1: 33:d9:46:0f:1a:6a:99:d8:95:24:61:9d:3e:4c:f6:f6:11:ed: e9:00:41:55:5e:7d:99:46:76:ac:9f:1a:49:1f:b0:94:60:fc: 59:33:34:c8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe++wTZLrVOTwKMqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk NDEzZmVkNjQtOTBmNC00OThjLWE4YzgtZDViNmYxNjA3MDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1g3VfPb8dj0m269YqtqCDMSdUeZyQK3mUkG mHQbv33eIzaRMLI/iEFVMaNI4SRdN+yM3s6huHdoQHj62iKz7k9Vai6Y+ecMMJGn CjeE/8hyeI7ottWyPzITZy1Bf3fiqKQC4D0BBVTpmyzbe7ZBsCZn8p+s4/7JmLRo rJj94aFfgTqNDp18ICGpBPuP/K2gxUVg+jYL2TOSVjHqo4ZdVwR6h2XnMx/+4qmy CMWXqN1etyVwHG9p7H6BJjA/U3r45Mam7JytmwjHClRMt98Ucz7DaiANIHJOdXgV hseaLShDAnEQfwGkU71ikBUQwwg8vTlrWMp21XMyw6L9Uuq60wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHBNrJ9uT3qdbBRhFft4AvGWjVYFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTY0Y2U0NzYtYzdhYS0z NDM3LWI3ZWMtYjk0ZDRkODk3YzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcBc MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGyvN90dhGDoZ2axQTj6zy3IrAUZ+TgrB6mIVkvppmoaFC1NHNns B+svVuZixs4fc3fSzpgkSiMbZQz/aUlCPNsyTL1vVTOSCgQidPIiNRu7ABapmpF6 iwQY15f0VMlAWNEpMo7UWI2GZgLQCZzTqIy7ToGgi0zwCffWVMp1uGslWTFN8gac KUE6m3Y3F3dPlkXCtrAdGD3pUhjbQI32kgFDIvuayBRxJ/PoaDJRsulJeWhok7R4 0pQiuGNCGyXTbfd4EQXjd4vd95rBLjY6RgX5VAWXQe6t4TPZRg8aapnYlSRhnT5M 9vYR7ekAQVVefZlGdqyfGkkfsJRg/FkzNMg= -----END CERTIFICATE-----Generated at Fri Nov 22 12:02:40 2024 by rpki-client on console-ams.rpki-client.org