$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa31be93-1fcd-3fc4-a307-0461bbef61ed.roa File: aa31be93-1fcd-3fc4-a307-0461bbef61ed.roa (raw, json) Hash identifier: GyMPO3H30yrzz611ZCCBKPPmOgj7SE5s+C4t0zJr78M= Subject key identifier: BC:83:51:92:09:3C:93:B5:D2:B4:2F:12:70:47:50:37:60:B7:91:F0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAC18D2CE758B572CB93580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa31be93-1fcd-3fc4-a307-0461bbef61ed.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 33287 IP address blocks: 2001:559:593::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ac:18:d2:ce:75:8b:57:2c:b9:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=3bb2e117-a36a-4c5a-8126-d1fb8f0c077b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fa:a2:40:e0:0d:34:32:c1:e3:52:20:71:37: d3:c2:eb:f6:ca:88:dc:5b:3d:92:c6:44:d7:2e:2a: e8:01:d4:b3:4f:f9:06:c2:02:09:b5:96:3e:6f:2a: a3:09:4a:57:02:ce:31:f0:c3:38:74:32:d4:be:fa: 66:81:b2:c0:8f:f9:a2:dd:c0:51:77:7c:50:56:59: 27:86:da:b6:cf:d0:bf:ad:51:05:63:af:34:15:40: 05:14:f5:e6:85:99:88:5c:cb:a7:1b:63:fd:05:a7: da:dc:b9:de:6a:9c:6b:d6:86:a3:b4:a8:43:89:70: 57:d2:2b:2f:23:ec:52:bb:d3:a1:ac:90:d4:65:c1: 55:31:ef:30:5b:71:b8:49:3f:39:c1:d8:61:df:a8: 26:67:02:9a:2b:8c:1c:6d:8a:a5:0e:68:24:5f:f2: 51:b1:02:7b:98:31:11:6f:b8:00:06:26:af:4c:41: 4b:3e:5a:f8:a7:31:63:29:c6:d5:3d:d0:88:98:b1: 12:e1:53:09:44:85:4a:12:24:7a:5a:eb:5e:a7:d0: c1:03:f8:bd:e3:67:c0:b4:7d:9f:80:ff:13:ec:25: 3d:a5:ad:46:8c:6a:65:09:fa:07:c5:a4:b5:39:52: ee:30:59:9f:ca:27:ac:7a:6f:6e:2d:92:d6:34:8d: d2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:83:51:92:09:3C:93:B5:D2:B4:2F:12:70:47:50:37:60:B7:91:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa31be93-1fcd-3fc4-a307-0461bbef61ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:593::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:50:fe:0a:1d:dc:98:8a:70:5f:ca:3b:ef:bf:5c:93:49:23: a0:d5:e7:e0:24:fb:53:40:6e:ba:5e:d8:5b:62:83:4e:d5:de: 49:59:52:11:f0:75:25:9e:9d:a9:5e:65:93:bc:c3:2f:b5:5e: 31:29:98:c1:9e:e5:db:34:5b:ff:75:d0:db:ff:7f:72:fd:2e: 99:67:d0:72:fb:91:8a:a3:01:06:26:d0:1e:5e:bb:87:2c:42: d6:75:8c:2b:36:76:1c:ec:7c:93:7c:0c:3e:20:88:23:08:f9: 24:5c:1d:0c:af:73:d1:15:a5:ac:dd:4a:75:77:f6:a6:a3:dd: 84:83:e2:e5:e8:6e:b5:e3:1c:f1:dc:31:84:52:7a:18:43:dc: af:90:95:e6:44:5b:66:d1:4c:18:b8:aa:28:f9:fd:c1:4b:bd: f8:e5:d0:80:25:52:c4:b0:e9:3c:e1:66:95:be:3d:72:7a:b2: 10:7d:59:e0:42:46:1e:fb:75:59:1d:fd:f2:2f:e1:1a:56:e9: 00:fe:a3:6d:81:de:a7:e8:56:71:18:20:dc:06:d3:91:28:44: a1:df:99:01:7d:e9:3f:ca:02:9e:8f:1d:fc:e8:68:e8:af:60: 7a:b0:14:4c:2b:ee:58:7a:bc:fe:21:f2:47:70:db:10:bb:f4: 52:fe:a1:26 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfrBjSznWLVyy5NYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk M2JiMmUxMTctYTM2YS00YzVhLTgxMjYtZDFmYjhmMGMwNzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvqiQOANNDLB41IgcTfTwuv2yojcWz2SxkTX LiroAdSzT/kGwgIJtZY+byqjCUpXAs4x8MM4dDLUvvpmgbLAj/mi3cBRd3xQVlkn htq2z9C/rVEFY680FUAFFPXmhZmIXMunG2P9Bafa3Lneapxr1oajtKhDiXBX0isv I+xSu9OhrJDUZcFVMe8wW3G4ST85wdhh36gmZwKaK4wcbYqlDmgkX/JRsQJ7mDER b7gABiavTEFLPlr4pzFjKcbVPdCImLES4VMJRIVKEiR6Wutep9DBA/i942fAtH2f gP8T7CU9pa1GjGplCfoHxaS1OVLuMFmfyiesem9uLZLWNI3SOQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLyDUZIJPJO10rQvEnBHUDdgt5HwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWEzMWJlOTMtMWZjZC0z ZmM0LWEzMDctMDQ2MWJiZWY2MWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQWT MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJVQ/god3JiKcF/KO++/XJNJI6DV5+Ak+1NAbrpe2Ftig07V3klZ UhHwdSWenaleZZO8wy+1XjEpmMGe5ds0W/910Nv/f3L9Lpln0HL7kYqjAQYm0B5e u4csQtZ1jCs2dhzsfJN8DD4giCMI+SRcHQyvc9EVpazdSnV39qaj3YSD4uXobrXj HPHcMYRSehhD3K+QleZEW2bRTBi4qij5/cFLvfjl0IAlUsSw6TzhZpW+PXJ6shB9 WeBCRh77dVkd/fIv4RpW6QD+o22B3qfoVnEYINwG05EoRKHfmQF96T/KAp6PHfzo aOivYHqwFEwr7lh6vP4h8kdw2xC79FL+oSY= -----END CERTIFICATE-----Generated at Sat May 4 14:55:53 2024 by rpki-client on console-ams.rpki-client.org