$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa645be4-5972-375f-be5f-d5c9a3c95953.roa File: aa645be4-5972-375f-be5f-d5c9a3c95953.roa (raw, json) Hash identifier: DG2M1U6EIq8U9X6YJ+4wcKOeI4KZgVYKoDzxbbFSlvQ= Subject key identifier: 6A:CA:FC:CE:CF:82:E4:9E:34:56:34:5A:17:9E:C2:29:5B:B2:9F:78 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285847BEFA8498457EDCF9E3635840 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa645be4-5972-375f-be5f-d5c9a3c95953.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 33660 IP address blocks: 2001:559:876a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:fa:84:98:45:7e:dc:f9:e3:63:58:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=47e28750-3b90-48b7-9cf6-74da7f28ac52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a6:ca:46:40:8c:0c:37:74:51:fe:5e:44:b7: 26:fe:40:5c:06:2f:a4:14:60:31:02:24:bb:12:ae: e9:ee:08:f5:f0:b8:17:74:ab:f0:47:a2:af:62:af: 70:c8:09:c6:7d:45:f2:1e:64:7f:16:1d:e0:1f:3f: d7:f9:82:55:1e:cf:93:7a:a3:60:23:f4:bb:c4:8c: 38:db:de:e7:32:87:05:17:19:e9:35:c0:c4:9e:92: 5e:be:d9:60:db:21:9f:53:5c:10:5b:22:91:5a:e3: 0b:26:0d:ea:38:eb:23:e1:30:cd:67:37:fd:6f:81: 45:19:0f:dc:a0:4b:9b:10:85:30:57:1e:c7:17:07: 90:11:98:4c:5c:a3:e0:5e:c1:65:d3:66:29:05:ea: 6b:38:e0:61:45:ca:e4:86:f9:a2:65:9f:f8:fe:49: 0f:c9:12:f8:c0:e6:68:14:80:c9:5a:26:59:01:30: 07:e3:06:cb:c1:71:53:e5:d1:37:da:b5:c4:5f:8a: 71:e9:5c:7c:de:c1:ab:b3:87:66:d7:2b:52:54:80: fd:e0:76:90:d3:64:5f:74:5e:ec:6e:52:8e:68:55: ce:5a:cc:fb:10:f8:d2:a9:af:f8:4b:9b:1b:20:9f: cb:32:5d:61:fd:8e:72:b9:68:28:7a:b0:17:76:9b: 12:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:CA:FC:CE:CF:82:E4:9E:34:56:34:5A:17:9E:C2:29:5B:B2:9F:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa645be4-5972-375f-be5f-d5c9a3c95953.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:876a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:c3:07:b9:71:55:9b:1d:54:ef:ab:52:8c:80:9b:d8:b3:2f: ea:c5:e4:d9:46:74:d1:c6:31:28:d6:1e:5e:21:dd:9a:3b:57: 95:fc:00:e7:35:ea:34:02:71:e0:b4:36:e6:5f:cb:96:be:70: 99:b5:3d:1b:56:5b:58:32:29:26:fa:ef:1a:12:f9:f7:3a:a4: aa:71:ff:fc:8b:43:40:bc:15:55:a3:af:fb:09:14:66:b4:41: 21:ff:87:c2:32:32:e8:89:0f:c0:5e:5d:2f:a3:62:b2:9c:91: b3:f4:41:36:14:67:84:65:1b:3f:b1:42:bf:56:b2:e1:89:03: 9e:d0:23:4f:29:12:2d:14:37:3b:72:17:a2:fc:bd:d1:23:a4: 98:05:c8:8f:36:79:b6:76:0b:0f:7c:51:b1:92:9d:0e:47:e5: a0:c4:3f:98:50:ff:8a:1b:22:bc:41:cc:e7:a3:cf:1e:1f:32: 12:c9:fc:53:c5:43:3c:21:85:9e:c8:f3:74:38:b5:5b:88:96: 63:20:03:84:2e:a4:e4:2a:a3:ab:a7:18:f9:df:81:e1:31:27: a0:37:c6:51:68:60:aa:b1:ef:5e:73:15:e0:13:23:82:00:19: 22:58:13:f3:11:fd:40:d6:65:25:56:28:a0:57:01:d3:25:65: 6e:a4:7d:89 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe++oSYRX7c+eNjWEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk NDdlMjg3NTAtM2I5MC00OGI3LTljZjYtNzRkYTdmMjhhYzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoabKRkCMDDd0Uf5eRLcm/kBcBi+kFGAxAiS7 Eq7p7gj18LgXdKvwR6KvYq9wyAnGfUXyHmR/Fh3gHz/X+YJVHs+TeqNgI/S7xIw4 297nMocFFxnpNcDEnpJevtlg2yGfU1wQWyKRWuMLJg3qOOsj4TDNZzf9b4FFGQ/c oEubEIUwVx7HFweQEZhMXKPgXsFl02YpBeprOOBhRcrkhvmiZZ/4/kkPyRL4wOZo FIDJWiZZATAH4wbLwXFT5dE32rXEX4px6Vx83sGrs4dm1ytSVID94HaQ02RfdF7s blKOaFXOWsz7EPjSqa/4S5sbIJ/LMl1h/Y5yuWgoerAXdpsSoQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGrK/M7PguSeNFY0Wheewilbsp94MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWE2NDViZTQtNTk3Mi0z NzVmLWJlNWYtZDVjOWEzYzk1OTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYdq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFDDB7lxVZsdVO+rUoyAm9izL+rF5NlGdNHGMSjWHl4h3Zo7V5X8 AOc16jQCceC0NuZfy5a+cJm1PRtWW1gyKSb67xoS+fc6pKpx//yLQ0C8FVWjr/sJ FGa0QSH/h8IyMuiJD8BeXS+jYrKckbP0QTYUZ4RlGz+xQr9WsuGJA57QI08pEi0U NztyF6L8vdEjpJgFyI82ebZ2Cw98UbGSnQ5H5aDEP5hQ/4obIrxBzOejzx4fMhLJ /FPFQzwhhZ7I83Q4tVuIlmMgA4QupOQqo6unGPnfgeExJ6A3xlFoYKqx715zFeAT I4IAGSJYE/MR/UDWZSVWKKBXAdMlZW6kfYk= -----END CERTIFICATE-----Generated at Fri Nov 22 15:42:53 2024 by rpki-client on console-fra.rpki-client.org