$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b42c4e40-b8f0-3844-aa8d-66e26858a5e6.roa File: b42c4e40-b8f0-3844-aa8d-66e26858a5e6.roa (raw, json) Hash identifier: sfm2V+Y2tDOuUP+k78wBYDZ/hDkq9S9rQAkUBxODKaY= Subject key identifier: 5E:E2:0C:AD:6E:81:8B:3C:70:38:3B:D2:67:2D:54:79:87:02:50:31 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAE216D4975E4F35D675C00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b42c4e40-b8f0-3844-aa8d-66e26858a5e6.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 21508 IP address blocks: 2001:559:c0fa::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ae:21:6d:49:75:e4:f3:5d:67:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=6cf87797-3776-46c4-bd68-ec0fd29a4c67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5c:99:ce:96:de:15:02:17:9d:4f:0c:78:b2: 7c:e5:bd:e0:6a:d9:b2:2d:0a:d9:4e:c6:fc:c0:15: e3:a4:df:c9:55:46:28:fb:5d:2e:ca:cf:36:3d:ed: 50:12:8a:2b:5b:4e:98:43:62:93:ba:7e:9a:15:a8: 0c:6b:69:4b:2f:be:a4:75:01:d2:2b:31:a5:d7:ba: 1c:d3:e2:b4:2f:72:15:92:f9:40:e0:55:d8:94:19: a9:f2:d1:18:cc:36:31:37:7f:bd:ba:19:1b:7e:40: 0f:9a:bd:3b:15:01:5f:bb:b8:ee:a4:a0:cb:1b:0b: 1b:8d:cd:7f:ee:65:ad:d3:26:e5:11:0d:a7:cc:6e: 25:2d:17:1c:3f:fa:68:2b:a4:8c:2d:24:de:a2:35: 13:3a:ed:f5:64:62:d9:f4:6b:48:5a:f1:04:71:16: 7d:9e:47:85:75:bc:86:35:c1:a3:a0:2f:69:0c:aa: f6:94:01:a8:2c:5d:06:e2:13:1e:f3:8a:60:25:2c: ac:87:fa:c6:2a:be:1c:84:16:88:21:53:e0:56:d2: c5:31:35:76:4d:65:94:d4:a0:c7:39:9b:19:b0:1a: 2c:e1:1d:da:1a:d2:31:a0:e4:f0:54:24:29:3a:8b: 0c:8e:a2:93:0b:49:94:ad:f9:b1:23:a2:db:89:e4: 5e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E2:0C:AD:6E:81:8B:3C:70:38:3B:D2:67:2D:54:79:87:02:50:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b42c4e40-b8f0-3844-aa8d-66e26858a5e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c0fa::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:49:d1:68:93:c9:50:e2:73:3d:c7:f2:66:f0:e5:fd:4b:b5: f9:15:fe:5e:dd:67:f3:e5:38:b8:b2:49:17:27:b9:58:14:28: a8:0a:ba:77:3f:1a:f9:f2:d8:5e:08:1d:8e:93:ce:a9:68:3d: 29:44:3c:40:d5:76:62:26:a9:c3:0f:8f:43:49:3e:74:e3:97: 86:cc:db:5b:90:4f:5a:bd:01:00:44:66:25:2f:26:6b:53:81: 10:52:82:3a:1c:a5:20:cf:08:d1:e2:b8:4a:90:48:d7:26:34: c4:c3:a7:e9:9b:47:52:60:30:e4:3c:65:40:6f:26:d7:ec:7a: b3:15:b1:5f:9c:11:20:b8:bc:62:5f:29:bc:da:5a:76:75:a0: 56:16:51:ed:9c:cf:bc:2d:72:b4:75:19:0a:a9:5d:59:0d:f5: 54:ab:c7:77:30:0d:ef:e9:3f:94:9d:4d:3b:8c:cb:61:01:2a: 5f:03:c5:67:4f:08:51:05:3f:80:ad:b8:d4:df:02:99:78:6a: d0:72:65:ff:fb:0b:25:6a:2a:b0:88:73:07:28:1b:72:5e:68: de:d7:75:32:20:15:ee:3f:01:a3:84:c8:da:7d:01:d5:b8:f1: 5f:ee:11:cb:e3:03:b7:3a:a6:f5:54:14:11:f6:52:ff:9c:03: 54:c0:cd:ab -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfriFtSXXk811nXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk NmNmODc3OTctMzc3Ni00NmM0LWJkNjgtZWMwZmQyOWE0YzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlyZzpbeFQIXnU8MeLJ85b3gatmyLQrZTsb8 wBXjpN/JVUYo+10uys82Pe1QEoorW06YQ2KTun6aFagMa2lLL76kdQHSKzGl17oc 0+K0L3IVkvlA4FXYlBmp8tEYzDYxN3+9uhkbfkAPmr07FQFfu7jupKDLGwsbjc1/ 7mWt0yblEQ2nzG4lLRccP/poK6SMLSTeojUTOu31ZGLZ9GtIWvEEcRZ9nkeFdbyG NcGjoC9pDKr2lAGoLF0G4hMe84pgJSysh/rGKr4chBaIIVPgVtLFMTV2TWWU1KDH OZsZsBos4R3aGtIxoOTwVCQpOosMjqKTC0mUrfmxI6LbieReaQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF7iDK1ugYs8cDg70mctVHmHAlAxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjQyYzRlNDAtYjhmMC0z ODQ0LWFhOGQtNjZlMjY4NThhNWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcD6 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC9J0WiTyVDicz3H8mbw5f1LtfkV/l7dZ/PlOLiySRcnuVgUKKgK unc/Gvny2F4IHY6TzqloPSlEPEDVdmImqcMPj0NJPnTjl4bM21uQT1q9AQBEZiUv JmtTgRBSgjocpSDPCNHiuEqQSNcmNMTDp+mbR1JgMOQ8ZUBvJtfserMVsV+cESC4 vGJfKbzaWnZ1oFYWUe2cz7wtcrR1GQqpXVkN9VSrx3cwDe/pP5SdTTuMy2EBKl8D xWdPCFEFP4CtuNTfApl4atByZf/7CyVqKrCIcwcoG3JeaN7XdTIgFe4/AaOEyNp9 AdW48V/uEcvjA7c6pvVUFBH2Uv+cA1TAzas= -----END CERTIFICATE-----Generated at Sat May 4 14:56:27 2024 by rpki-client on console-ams.rpki-client.org