$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae41e551-a27e-3223-bb9f-6e870aa2b1d1.roa File: ae41e551-a27e-3223-bb9f-6e870aa2b1d1.roa (raw, json) Hash identifier: 3bQIMbNgTUjTsWp2Rkj57+7vrd7k04g+Olj4nDWqRjs= Subject key identifier: 4E:44:6B:C2:B3:5B:0F:4A:84:D4:06:70:66:C7:BB:66:84:F2:04:43 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285847BEF78E5654E41C892B974000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae41e551-a27e-3223-bb9f-6e870aa2b1d1.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 33667 IP address blocks: 2001:559:77::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:f7:8e:56:54:e4:1c:89:2b:97:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=925c5056-8681-4c9e-8f63-93d6a8ff86d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:eb:8e:d9:b9:c9:b7:c7:6b:33:47:e4:19:65: 57:be:d0:9b:b0:75:c5:a2:29:73:75:75:df:51:35: 6c:71:3e:62:ff:86:06:c8:18:eb:b6:67:64:d5:6f: 7b:8f:c1:c3:d2:03:5c:ea:6a:9b:ba:97:02:a1:96: fa:06:6a:79:21:6f:92:f6:d8:6b:b1:bc:be:66:35: 1d:ac:aa:86:77:3b:f0:9a:71:20:a6:e5:45:f1:84: 1b:3f:14:f2:b1:19:0e:df:37:fa:19:cd:7d:53:98: a6:27:15:f9:88:4c:0a:fb:2b:49:74:be:ff:02:5e: a7:fb:b4:af:65:16:eb:ea:a2:35:67:38:58:60:d5: 18:54:a5:13:97:79:87:4f:79:b6:aa:4e:25:07:af: ea:38:55:27:95:d3:28:13:63:c9:bb:4c:f4:f2:74: 63:82:2a:8d:36:83:c3:3e:68:e3:d4:1b:f5:a8:da: 38:d9:d6:a5:ef:b4:d6:a8:cb:77:1f:0b:db:59:75: e4:14:39:b3:c4:2e:cc:74:ef:49:b9:5e:1e:82:97: e0:4d:f8:71:03:18:26:a1:ac:a8:33:33:7c:b9:bd: d7:b4:44:68:85:0c:9c:06:7b:d8:ed:4d:99:69:c7: c1:b1:3d:fa:53:3d:68:e7:5b:ab:af:40:b6:ad:fc: 28:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:44:6B:C2:B3:5B:0F:4A:84:D4:06:70:66:C7:BB:66:84:F2:04:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae41e551-a27e-3223-bb9f-6e870aa2b1d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:77::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:cd:79:1e:e1:b5:66:c1:7d:cd:5b:34:c8:b0:d2:23:df:98: e6:3f:8e:b9:f8:8c:32:12:95:37:00:d7:44:fc:99:70:93:b5: 8a:c6:83:40:39:1f:6c:3b:3c:ea:1d:8d:13:f1:f5:34:3d:14: 32:a7:fe:6b:81:79:01:04:43:c8:d7:5f:51:fb:c6:4c:30:44: dd:0b:86:6a:c5:ec:5a:47:15:3a:e6:ae:a4:82:96:26:b1:e0: b0:d8:4b:71:fc:3c:f5:35:ed:92:7b:1e:c7:ae:63:1b:60:18: fe:5d:d2:e4:97:01:d6:33:87:0b:25:13:8c:93:d4:62:a8:14: 83:88:a3:fe:cc:da:4d:24:85:a3:9f:10:0e:01:34:7d:f8:ce: 72:fa:00:4d:77:d0:0b:9f:17:80:ff:14:c7:06:94:91:87:f0: 0c:13:a2:a6:d7:1e:db:ad:46:fd:20:c1:2e:15:6f:bd:c6:a3: 64:4c:53:a6:59:f8:d5:f5:09:9f:91:92:84:4a:ad:c1:66:fc: bf:5e:b9:87:07:6c:85:63:63:37:da:fa:95:93:e0:41:8b:71: 2d:ce:59:8a:fe:94:a6:ac:a6:b0:b0:e1:d2:4b:10:8b:7e:ca: 5a:45:dd:14:80:35:63:6d:fa:50:eb:93:71:9c:6c:03:ee:b8: 91:35:8a:ff -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe+945WVOQciSuXQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk OTI1YzUwNTYtODY4MS00YzllLThmNjMtOTNkNmE4ZmY4NmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleuO2bnJt8drM0fkGWVXvtCbsHXFoilzdXXf UTVscT5i/4YGyBjrtmdk1W97j8HD0gNc6mqbupcCoZb6Bmp5IW+S9thrsby+ZjUd rKqGdzvwmnEgpuVF8YQbPxTysRkO3zf6Gc19U5imJxX5iEwK+ytJdL7/Al6n+7Sv ZRbr6qI1ZzhYYNUYVKUTl3mHT3m2qk4lB6/qOFUnldMoE2PJu0z08nRjgiqNNoPD Pmjj1Bv1qNo42dal77TWqMt3HwvbWXXkFDmzxC7MdO9JuV4egpfgTfhxAxgmoayo MzN8ub3XtERohQycBnvY7U2ZacfBsT36Uz1o51urr0C2rfwoNQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE5Ea8KzWw9KhNQGcGbHu2aE8gRDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWU0MWU1NTEtYTI3ZS0z MjIzLWJiOWYtNmU4NzBhYTJiMWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQB3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFrNeR7htWbBfc1bNMiw0iPfmOY/jrn4jDISlTcA10T8mXCTtYrG g0A5H2w7POodjRPx9TQ9FDKn/muBeQEEQ8jXX1H7xkwwRN0LhmrF7FpHFTrmrqSC liax4LDYS3H8PPU17ZJ7HseuYxtgGP5d0uSXAdYzhwslE4yT1GKoFIOIo/7M2k0k haOfEA4BNH34znL6AE130AufF4D/FMcGlJGH8AwToqbXHtutRv0gwS4Vb73Go2RM U6ZZ+NX1CZ+RkoRKrcFm/L9euYcHbIVjYzfa+pWT4EGLcS3OWYr+lKasprCw4dJL EIt+ylpF3RSANWNt+lDrk3GcbAPuuJE1iv8= -----END CERTIFICATE-----Generated at Tue Nov 26 02:50:03 2024 by rpki-client on console-ams.rpki-client.org