$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3908500-91be-3967-a155-42a6142a8b6a.roa File: b3908500-91be-3967-a155-42a6142a8b6a.roa (raw, json) Hash identifier: eWaYj9RzDn3e5FSZ4SsKByYajVXDeUwvBsuQGjFfga8= Subject key identifier: 99:C1:6B:C5:FE:BA:23:05:8E:A8:29:A3:90:5B:17:04:07:11:18:30 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAB934E44AB3C84BF28B080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3908500-91be-3967-a155-42a6142a8b6a.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 33651 IP address blocks: 2001:559:259::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ab:93:4e:44:ab:3c:84:bf:28:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=b2df501b-7c3e-432e-806f-0bb328ccc145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:0e:5a:78:e4:ed:c3:23:ff:1d:5f:90:11:d1: 2e:43:0f:03:fb:02:d4:db:fb:0e:30:32:f9:a9:58: bb:7e:46:13:4c:e7:1a:3c:a2:ce:69:69:f3:e8:0b: 80:a1:b5:84:a9:80:1d:f3:06:88:b8:d8:10:a4:a7: df:b4:b0:64:cd:be:7f:70:3c:f0:c4:9d:20:61:fd: e2:ba:17:18:e7:07:78:38:85:12:5f:24:91:66:2e: e7:d8:8e:01:af:90:0d:42:91:74:12:7c:fd:90:1a: 31:3a:e5:b4:8a:13:0a:ec:23:82:24:65:b1:17:0d: b1:b2:9c:d6:a2:48:67:eb:b8:cf:ee:ee:0e:55:e0: 92:66:4a:00:f0:69:b2:30:b9:f4:25:34:be:c8:83: 45:05:af:d8:fa:bf:4f:5a:75:81:07:7c:eb:1e:99: 46:97:d3:24:bb:94:26:d0:93:38:78:7c:16:9b:86: d0:5b:6e:1e:54:b8:94:43:7e:d9:4a:2d:6f:74:ae: 04:0c:0f:48:ea:aa:9f:9e:6b:c7:13:ec:0d:33:5a: 26:c9:72:e4:7a:e9:aa:bf:38:0a:08:19:7a:1b:81: 2c:8a:2b:a8:0d:b7:f3:52:5f:99:0e:ef:0f:fc:10: ec:3c:12:a0:bd:4b:3d:7a:b1:1f:0e:41:dc:ed:ea: c5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C1:6B:C5:FE:BA:23:05:8E:A8:29:A3:90:5B:17:04:07:11:18:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3908500-91be-3967-a155-42a6142a8b6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:259::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:2a:d1:f1:84:62:54:d3:6a:b8:98:43:ac:0d:6e:25:cf:2d: db:e6:f8:09:c9:e3:55:15:d6:8f:45:dd:78:dd:34:5e:68:43: 57:e4:f1:8f:0c:1b:61:39:df:86:77:63:8a:fa:9c:9a:a6:8f: fc:e7:b2:b6:5f:66:48:5d:16:e4:d1:bb:db:c5:19:aa:af:0f: 6d:02:e9:12:36:2a:d5:7c:51:d2:06:52:a4:c5:69:09:e3:61: 7a:36:5f:b6:e6:db:a8:e4:1c:ef:77:83:56:60:44:1b:5c:30: 3c:8f:07:99:9f:dc:45:6c:d0:90:19:d8:34:f7:69:d4:30:20: 42:f1:6e:79:fc:a0:06:7b:80:9b:41:ab:a9:90:a1:34:b3:f1: 69:a1:90:49:28:80:02:7f:97:12:74:6a:42:0a:91:35:1a:4d: de:d4:9f:8c:d2:ac:bf:43:02:de:92:45:e0:24:0f:5f:b9:79: 73:56:1b:76:2e:99:15:60:3e:ea:6d:61:fc:7d:49:82:da:14: 06:0c:50:98:8a:b2:7b:37:2b:6b:bb:37:10:dd:1f:a2:7d:ef: 9f:54:06:cc:20:38:16:d4:8c:85:1a:f8:87:44:0d:8e:a1:cb: c1:e5:31:5d:6c:bf:e3:31:86:52:63:91:df:6f:b6:44:9e:6b: 85:3f:e3:11 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfq5NORKs8hL8osIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk YjJkZjUwMWItN2MzZS00MzJlLTgwNmYtMGJiMzI4Y2NjMTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQ5aeOTtwyP/HV+QEdEuQw8D+wLU2/sOMDL5 qVi7fkYTTOcaPKLOaWnz6AuAobWEqYAd8waIuNgQpKfftLBkzb5/cDzwxJ0gYf3i uhcY5wd4OIUSXySRZi7n2I4Br5ANQpF0Enz9kBoxOuW0ihMK7COCJGWxFw2xspzW okhn67jP7u4OVeCSZkoA8GmyMLn0JTS+yINFBa/Y+r9PWnWBB3zrHplGl9Mku5Qm 0JM4eHwWm4bQW24eVLiUQ37ZSi1vdK4EDA9I6qqfnmvHE+wNM1omyXLkeumqvzgK CBl6G4EsiiuoDbfzUl+ZDu8P/BDsPBKgvUs9erEfDkHc7erFZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJnBa8X+uiMFjqgpo5BbFwQHERgwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjM5MDg1MDAtOTFiZS0z OTY3LWExNTUtNDJhNjE0MmE4YjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQJZ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIQq0fGEYlTTariYQ6wNbiXPLdvm+AnJ41UV1o9F3XjdNF5oQ1fk 8Y8MG2E534Z3Y4r6nJqmj/znsrZfZkhdFuTRu9vFGaqvD20C6RI2KtV8UdIGUqTF aQnjYXo2X7bm26jkHO93g1ZgRBtcMDyPB5mf3EVs0JAZ2DT3adQwIELxbnn8oAZ7 gJtBq6mQoTSz8WmhkEkogAJ/lxJ0akIKkTUaTd7Un4zSrL9DAt6SReAkD1+5eXNW G3YumRVgPuptYfx9SYLaFAYMUJiKsns3K2u7NxDdH6J9759UBswgOBbUjIUa+IdE DY6hy8HlMV1sv+MxhlJjkd9vtkSea4U/4xE= -----END CERTIFICATE-----Generated at Sun May 5 02:21:05 2024 by rpki-client on console-ams.rpki-client.org