$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7421a2c-bbdb-3c9d-b663-e6a64ac34273.roa File: a7421a2c-bbdb-3c9d-b663-e6a64ac34273.roa (raw, json) Hash identifier: c112QJN/VxDfI+a83wUvYTh8O6G5zePQAPzBaF8JM10= Subject key identifier: 6E:24:C9:C5:32:70:C4:78:36:BF:F8:E8:AE:9E:35:64:F7:22:EC:62 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAB2B6C6B5567C619C3E180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7421a2c-bbdb-3c9d-b663-e6a64ac34273.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 22909 IP address blocks: 2001:559:83df::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ab:2b:6c:6b:55:67:c6:19:c3:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=0ef1d4c7-8548-4158-9c29-01fc156e4781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8b:1a:05:dc:54:61:f2:24:c9:62:77:ff:10: ba:61:7d:2c:65:18:58:65:9d:31:48:95:fa:48:27: c7:56:cf:57:4a:9a:d3:94:a6:ce:5d:95:9a:32:8d: 86:4d:47:92:bb:4a:d4:4c:2a:23:03:ff:db:99:df: d5:5f:07:73:59:0d:b2:64:6e:ab:cd:4d:84:45:be: 47:81:08:25:f0:d7:63:f3:39:86:b6:c1:62:5a:4e: 86:b8:b8:7d:da:7c:2f:bd:76:4c:b5:26:84:b3:ee: 2d:d1:a4:8b:d4:5f:ea:d3:44:7b:ca:6b:ee:c5:5d: b1:84:f3:f1:2f:6b:60:ec:94:7e:18:62:50:bb:87: e6:53:45:3e:d1:b7:a8:0a:80:b0:ab:90:cf:cb:a1: fd:40:ad:36:ae:2d:84:1e:d0:70:ee:86:b1:a7:4e: e9:d4:a8:4a:af:a5:f1:3d:2f:4a:48:e4:aa:da:f0: 7e:64:06:15:14:45:8e:d1:1e:7c:10:68:73:0b:85: b4:63:4b:bb:b4:82:52:2d:ec:42:a8:f7:26:b6:23: 63:2e:3e:ec:e3:a6:d8:41:2c:94:4f:3f:79:45:a4: c1:26:23:67:bb:f3:c3:c0:52:05:e4:84:82:8b:40: d6:b5:50:a5:1d:6c:54:96:6c:1a:10:3a:98:96:ab: d2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:24:C9:C5:32:70:C4:78:36:BF:F8:E8:AE:9E:35:64:F7:22:EC:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7421a2c-bbdb-3c9d-b663-e6a64ac34273.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:83df::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:52:4e:a3:5c:6d:6b:e2:ce:c6:ff:43:09:c4:9b:25:ce:b3: 1b:8b:96:8f:13:a8:bc:87:1f:5b:ca:34:0a:c0:51:47:3e:f1: ad:44:e1:03:af:9d:bf:c1:29:eb:c0:22:87:25:99:ae:d9:f5: 61:0e:3e:eb:49:fe:ce:12:64:c7:4f:31:29:e2:d8:32:c4:8b: da:28:c5:85:bd:99:13:9e:b8:05:c2:9f:bf:dd:3f:1f:84:0d: 55:46:1b:0e:77:fd:ec:bb:b5:1e:67:f2:86:b3:5c:49:5c:db: 1e:c7:71:bb:33:f2:3f:c6:ad:e4:92:b0:88:d3:05:60:01:b9: c6:2a:54:3e:98:1c:08:d9:84:9c:db:03:a6:0d:80:23:22:a4: 31:b3:0c:97:93:f5:78:1e:08:98:27:25:ce:1e:c0:61:b2:30: 93:18:4f:a5:d6:23:57:bb:3e:95:2b:2b:af:90:d5:ff:29:b5: 9e:32:92:cd:b1:a6:ad:7f:90:7e:e5:42:d4:17:cd:74:ec:e3: 11:40:a4:55:c5:44:dc:4c:24:2e:70:ef:80:bd:5a:29:63:71: dd:c9:c1:a5:80:31:73:d7:39:86:29:40:4d:dc:3b:8a:c8:b1: aa:b8:d3:62:d6:b5:44:b9:98:86:15:61:d2:66:e4:b4:73:5c: 10:55:bd:82 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfqytsa1VnxhnD4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk MGVmMWQ0YzctODU0OC00MTU4LTljMjktMDFmYzE1NmU0NzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIsaBdxUYfIkyWJ3/xC6YX0sZRhYZZ0xSJX6 SCfHVs9XSprTlKbOXZWaMo2GTUeSu0rUTCojA//bmd/VXwdzWQ2yZG6rzU2ERb5H gQgl8Ndj8zmGtsFiWk6GuLh92nwvvXZMtSaEs+4t0aSL1F/q00R7ymvuxV2xhPPx L2tg7JR+GGJQu4fmU0U+0beoCoCwq5DPy6H9QK02ri2EHtBw7oaxp07p1KhKr6Xx PS9KSOSq2vB+ZAYVFEWO0R58EGhzC4W0Y0u7tIJSLexCqPcmtiNjLj7s46bYQSyU Tz95RaTBJiNnu/PDwFIF5ISCi0DWtVClHWxUlmwaEDqYlqvSjQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG4kycUycMR4Nr/46K6eNWT3IuxiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTc0MjFhMmMtYmJkYi0z YzlkLWI2NjMtZTZhNjRhYzM0MjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYPf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKNSTqNcbWvizsb/QwnEmyXOsxuLlo8TqLyHH1vKNArAUUc+8a1E 4QOvnb/BKevAIoclma7Z9WEOPutJ/s4SZMdPMSni2DLEi9ooxYW9mROeuAXCn7/d Px+EDVVGGw53/ey7tR5n8oazXElc2x7Hcbsz8j/GreSSsIjTBWABucYqVD6YHAjZ hJzbA6YNgCMipDGzDJeT9XgeCJgnJc4ewGGyMJMYT6XWI1e7PpUrK6+Q1f8ptZ4y ks2xpq1/kH7lQtQXzXTs4xFApFXFRNxMJC5w74C9Wiljcd3JwaWAMXPXOYYpQE3c O4rIsaq402LWtUS5mIYVYdJm5LRzXBBVvYI= -----END CERTIFICATE-----Generated at Sun May 5 02:44:19 2024 by rpki-client on console-fra.rpki-client.org