$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ab0c340f-af18-3f25-b0d3-8ab6d7978878.roa File: ab0c340f-af18-3f25-b0d3-8ab6d7978878.roa (raw, json) Hash identifier: gjNHtDWY86suNGZdgGbZbCWcbL1vtTpMsSD2l+FSiQ4= Subject key identifier: B4:8E:90:A2:99:7E:EC:21:37:63:5E:61:AF:C7:20:BF:1E:8F:8D:E9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAB9E86D22FFB2F96ADA9C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ab0c340f-af18-3f25-b0d3-8ab6d7978878.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 33652 IP address blocks: 2001:559:2c4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ab:9e:86:d2:2f:fb:2f:96:ad:a9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=3a010efb-e48b-43d1-a4f3-c2e12fe244ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3f:b7:93:80:60:84:cc:ef:a3:43:d2:48:10: a4:17:bb:39:17:ff:48:ab:08:06:1b:40:9c:1a:c0: 43:bd:ff:ef:26:15:39:02:95:a4:43:aa:4b:e2:45: c6:52:ac:3e:87:5a:f1:9b:b4:37:63:cc:3a:d6:78: 8b:5c:f8:2b:ac:78:a7:77:3c:4c:42:7f:f2:5d:54: ff:36:7a:ea:d6:f5:89:97:49:7f:0e:cb:69:57:55: df:33:c8:57:d6:67:19:80:7d:ab:26:03:a6:32:1f: cd:78:08:d3:1e:2b:3e:0e:5b:dc:ba:dc:11:27:3d: a5:59:d6:cc:16:10:6f:d7:95:2b:b3:61:7e:4c:e3: b1:d2:9f:38:fe:03:9f:cb:87:35:04:fe:e4:f9:5e: bb:6c:a3:cc:60:23:71:b3:54:29:93:8a:0f:2e:66: b7:fd:67:69:fc:3d:13:a8:d8:30:70:67:2b:e6:4b: 1d:cc:0b:fa:15:a2:41:1b:04:46:43:e9:f6:36:be: e5:1c:d4:3d:af:b0:fc:b4:c4:c2:8e:53:ad:f3:f6: 54:cd:20:30:66:6a:53:2f:b5:85:32:10:d3:3f:0e: 88:07:52:11:1e:a1:52:57:92:93:64:46:dc:2e:8e: 27:cd:3e:f1:c6:52:38:21:4c:26:74:28:6d:01:e8: 80:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:8E:90:A2:99:7E:EC:21:37:63:5E:61:AF:C7:20:BF:1E:8F:8D:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ab0c340f-af18-3f25-b0d3-8ab6d7978878.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:2c4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:29:31:3e:97:2b:d2:3f:06:3d:06:06:80:16:76:19:36:35: aa:54:04:7b:2d:21:37:fe:eb:57:4f:0c:29:6e:ac:db:67:a4: 0f:c1:7e:b3:9b:c9:43:d6:9c:78:94:74:bd:f9:47:e1:59:17: f8:4d:6c:ab:bb:52:21:6f:51:ad:1a:2c:79:1d:6e:e7:b3:db: d4:a7:72:91:02:45:1f:9d:87:52:d9:5e:fa:65:f6:51:de:b1: b6:1e:09:55:82:6f:bd:3f:79:10:65:e2:fa:58:27:86:bf:22: b4:aa:dd:d6:30:6a:51:dc:45:53:c9:7a:ce:10:9a:bb:b5:3a: e4:a7:5f:94:23:ed:12:e8:a9:36:08:64:68:52:d8:65:e4:4e: 61:ef:f8:9b:6d:5c:b3:36:e2:73:20:f6:40:3d:ce:3e:48:92: 57:0e:ec:b0:d2:68:bc:4d:e5:b9:e6:b4:46:df:b5:ef:01:e3: e5:dd:71:75:13:1c:e7:c8:45:a0:77:29:4b:47:ba:30:52:3e: 99:d5:e9:61:7c:62:27:e4:bd:e7:50:bb:78:0c:c4:2f:bf:86: 8c:06:27:9b:1f:bc:2a:a1:20:e6:f8:9f:26:a2:6b:0f:3a:b8: 87:8c:c0:47:f4:18:cd:b6:0e:e8:1f:2d:2e:ed:5b:13:70:2a: 5a:08:5b:81 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfq56G0i/7L5atqcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk M2EwMTBlZmItZTQ4Yi00M2QxLWE0ZjMtYzJlMTJmZTI0NGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkD+3k4BghMzvo0PSSBCkF7s5F/9IqwgGG0Cc GsBDvf/vJhU5ApWkQ6pL4kXGUqw+h1rxm7Q3Y8w61niLXPgrrHindzxMQn/yXVT/ Nnrq1vWJl0l/DstpV1XfM8hX1mcZgH2rJgOmMh/NeAjTHis+DlvcutwRJz2lWdbM FhBv15Urs2F+TOOx0p84/gOfy4c1BP7k+V67bKPMYCNxs1Qpk4oPLma3/Wdp/D0T qNgwcGcr5ksdzAv6FaJBGwRGQ+n2Nr7lHNQ9r7D8tMTCjlOt8/ZUzSAwZmpTL7WF MhDTPw6IB1IRHqFSV5KTZEbcLo4nzT7xxlI4IUwmdChtAeiA4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLSOkKKZfuwhN2NeYa/HIL8ej43pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWIwYzM0MGYtYWYxOC0z ZjI1LWIwZDMtOGFiNmQ3OTc4ODc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQLE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAUpMT6XK9I/Bj0GBoAWdhk2NapUBHstITf+61dPDClurNtnpA/B frObyUPWnHiUdL35R+FZF/hNbKu7UiFvUa0aLHkdbuez29SncpECRR+dh1LZXvpl 9lHesbYeCVWCb70/eRBl4vpYJ4a/IrSq3dYwalHcRVPJes4Qmru1OuSnX5Qj7RLo qTYIZGhS2GXkTmHv+JttXLM24nMg9kA9zj5IklcO7LDSaLxN5bnmtEbfte8B4+Xd cXUTHOfIRaB3KUtHujBSPpnV6WF8YifkvedQu3gMxC+/howGJ5sfvCqhIOb4nyai aw86uIeMwEf0GM22DugfLS7tWxNwKloIW4E= -----END CERTIFICATE-----Generated at Sat May 4 14:55:56 2024 by rpki-client on console-ams.rpki-client.org