$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a99da104-c59b-3de6-90db-6b8b1f664c7c.roa File: a99da104-c59b-3de6-90db-6b8b1f664c7c.roa (raw, json) Hash identifier: Wbsm/S/G4fMA6Y2lBTKkjVrgH1D/MX18CB07xtOXX9o= Subject key identifier: A1:1D:3D:52:1B:6A:8E:9B:17:80:FB:B6:A0:9D:E3:C8:E5:10:06:45 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAB40ECE26D4D41AF14A2C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a99da104-c59b-3de6-90db-6b8b1f664c7c.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 7016 IP address blocks: 2001:559:14d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ab:40:ec:e2:6d:4d:41:af:14:a2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=27f88161-03d5-4d93-9ed3-2cb76c7496a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:47:b3:aa:86:0f:ab:55:e8:1c:7d:de:b0:a0: 9e:ee:b6:b4:d1:17:8a:82:d9:0f:10:44:48:99:73: ca:08:5e:de:4d:53:ba:4f:96:e0:08:aa:ed:21:39: fa:2c:04:d1:10:ad:a5:7d:c9:6d:14:af:57:44:fa: 24:3d:79:36:b2:08:37:c7:08:0c:f6:40:54:3c:bb: 26:9d:4b:e3:1a:53:e4:90:2e:cb:dd:7e:4f:f9:c6: 2f:07:81:62:11:c7:0e:11:db:39:94:e3:07:25:5a: 71:b7:4d:74:05:48:c8:43:e0:ef:60:4e:70:1e:6a: a1:65:79:b9:0e:b2:63:ac:0b:c5:33:8c:5a:7e:12: 0a:75:34:62:67:c2:3a:0c:dd:8d:41:fe:42:36:de: 4f:be:ae:b5:dd:4a:5e:64:b2:26:18:04:f5:0e:14: 87:cb:d0:54:7b:a4:b5:6e:89:0d:67:07:68:08:25: 3c:87:5d:18:26:bf:7d:4d:65:80:d7:59:20:d7:eb: c1:81:24:34:d4:6b:65:5d:69:d2:07:56:7b:7c:6c: 05:59:07:d8:7c:ee:16:53:8a:35:fa:0e:4f:3e:37: 11:22:7e:19:c9:b4:af:ac:1d:be:92:ea:b0:0d:63: fb:cc:b7:e5:1b:d6:11:b4:ea:49:db:0b:8a:d5:d9: a0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:1D:3D:52:1B:6A:8E:9B:17:80:FB:B6:A0:9D:E3:C8:E5:10:06:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a99da104-c59b-3de6-90db-6b8b1f664c7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:14d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:82:96:48:57:72:2e:8a:df:4c:d8:e2:4c:52:ac:00:61:a2: fb:85:bc:2f:6f:d4:d6:81:86:d3:30:d9:04:39:a5:11:94:6f: f5:d2:e2:d3:66:ab:c6:d0:e3:7d:3b:30:aa:b6:97:04:41:b6: 02:39:44:8b:12:40:77:9d:c5:31:b4:d2:06:4e:dc:59:e7:77: 11:64:1a:21:ae:63:d5:20:86:66:a6:f9:cc:43:e7:ba:f3:45: b5:a7:99:ed:8f:27:2c:0a:8d:f6:3b:cf:35:47:38:f4:af:ec: 5f:4d:f3:fe:e6:52:a1:eb:b3:4e:50:73:c9:44:d6:6b:b2:1c: d2:78:a8:e0:ae:39:87:7e:2b:85:bf:3c:9f:4f:92:3f:34:aa: ae:7d:11:bf:12:d7:2a:cb:0b:a9:46:00:96:e3:7d:51:65:21: 4e:9d:5b:f0:b9:d1:d2:f5:db:13:d2:34:5e:7e:7c:ef:6a:91: 54:23:bc:e1:59:84:bd:87:c9:d4:b3:88:39:92:dd:ca:f5:54: ac:90:32:3f:4e:10:a7:ea:ca:fe:c6:c3:2e:b7:ce:86:25:62: d8:ed:b9:81:8b:92:7a:25:57:a4:2a:2b:9b:90:3c:16:2d:58: db:48:07:fb:21:00:52:23:c3:13:a5:c5:2c:87:1f:a8:44:ac: 63:75:83:5a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfq0Ds4m1NQa8UosAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk MjdmODgxNjEtMDNkNS00ZDkzLTllZDMtMmNiNzZjNzQ5NmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7EezqoYPq1XoHH3esKCe7ra00ReKgtkPEERI mXPKCF7eTVO6T5bgCKrtITn6LATREK2lfcltFK9XRPokPXk2sgg3xwgM9kBUPLsm nUvjGlPkkC7L3X5P+cYvB4FiEccOEds5lOMHJVpxt010BUjIQ+DvYE5wHmqhZXm5 DrJjrAvFM4xafhIKdTRiZ8I6DN2NQf5CNt5Pvq613UpeZLImGAT1DhSHy9BUe6S1 bokNZwdoCCU8h10YJr99TWWA11kg1+vBgSQ01GtlXWnSB1Z7fGwFWQfYfO4WU4o1 +g5PPjcRIn4ZybSvrB2+kuqwDWP7zLflG9YRtOpJ2wuK1dmgRQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKEdPVIbao6bF4D7tqCd48jlEAZFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTk5ZGExMDQtYzU5Yi0z ZGU2LTkwZGItNmI4YjFmNjY0YzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQFN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMqClkhXci6K30zY4kxSrABhovuFvC9v1NaBhtMw2QQ5pRGUb/XS 4tNmq8bQ4307MKq2lwRBtgI5RIsSQHedxTG00gZO3FnndxFkGiGuY9Ughmam+cxD 57rzRbWnme2PJywKjfY7zzVHOPSv7F9N8/7mUqHrs05Qc8lE1muyHNJ4qOCuOYd+ K4W/PJ9Pkj80qq59Eb8S1yrLC6lGAJbjfVFlIU6dW/C50dL12xPSNF5+fO9qkVQj vOFZhL2HydSziDmS3cr1VKyQMj9OEKfqyv7Gwy63zoYlYtjtuYGLknolV6QqK5uQ PBYtWNtIB/shAFIjwxOlxSyHH6hErGN1g1o= -----END CERTIFICATE-----Generated at Sun May 5 01:21:01 2024 by rpki-client on console-ams.rpki-client.org