$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4e5df25-58eb-350b-bb1b-34ab65945f7a.roa File: b4e5df25-58eb-350b-bb1b-34ab65945f7a.roa (raw, json) Hash identifier: pSlpqcgK0gUt+zWkWKIr0QGam5z969Ivt8EWNtJaBaQ= Subject key identifier: 63:C0:EE:08:C0:43:1E:D5:5E:50:F2:25:14:63:C6:F8:67:C4:03:E1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAC239CCE4218A4A91ECBC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4e5df25-58eb-350b-bb1b-34ab65945f7a.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 33287 IP address blocks: 2001:559:c2d8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ac:23:9c:ce:42:18:a4:a9:1e:cb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=bad04e22-fb73-413b-a15b-0a7fb2b9ea57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e1:90:69:40:72:28:23:9c:b5:79:13:95:c1: 47:27:ba:c8:3d:41:a3:32:a6:7b:f9:82:08:2a:98: c4:3c:9c:91:18:b4:26:f6:75:4b:b9:00:ae:63:06: 35:fd:50:17:c1:4c:e6:34:45:e9:45:d6:af:57:03: 72:97:66:9d:5a:a1:e0:e1:c1:9b:f4:84:e3:14:31: e6:ac:5f:0e:96:e3:b4:3d:83:a7:84:cd:69:19:02: f0:d9:e1:64:03:38:58:d9:71:5e:3a:06:b9:00:80: da:fe:8c:a3:b5:20:15:6d:07:f4:b4:1d:5b:e4:3d: 00:ec:1d:3c:8f:68:d6:d0:7e:e6:4c:77:ab:33:b7: e4:e3:39:59:d6:a5:32:fb:87:71:04:4e:24:9a:79: 19:33:80:32:89:71:87:47:c8:ab:69:75:73:e9:e5: 17:05:fc:33:a8:c2:ce:b1:c8:51:31:b6:be:68:b4: 6d:c7:2b:8b:6f:3d:c2:d0:64:2d:51:5c:67:d6:47: 2c:a8:65:1f:26:40:e9:82:dd:04:66:68:b5:b0:6f: 95:11:6a:b9:0f:3c:56:f0:76:d6:2f:ce:ff:09:f9: a7:cb:0c:c9:0d:89:df:33:bc:32:33:0d:03:24:d5: 96:7a:fb:45:f4:96:91:97:c2:d6:08:89:41:a5:16: 00:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C0:EE:08:C0:43:1E:D5:5E:50:F2:25:14:63:C6:F8:67:C4:03:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4e5df25-58eb-350b-bb1b-34ab65945f7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c2d8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:0b:f8:9c:b6:d0:80:99:50:7d:d8:a3:c0:15:ec:aa:3b:5d: 62:82:a7:6f:2a:b2:e3:6a:cd:5c:c5:ca:83:11:de:b2:30:b1: f2:d8:b2:d4:68:96:9b:37:7f:67:11:69:79:5c:71:dc:d9:aa: f7:35:c7:2c:f1:7b:de:a6:33:1e:2a:7b:2d:f9:c5:07:34:17: 43:b1:1d:4c:13:a0:ca:7d:ab:a2:36:be:1f:95:2b:98:73:13: 14:2e:93:b6:60:d5:10:85:c4:42:25:1b:d1:f9:8e:e0:52:e4: 76:75:77:c9:f5:95:4c:5e:1a:0d:2e:a4:d1:02:92:73:aa:48: ee:3e:1b:15:d5:6b:6c:85:5a:7e:29:9e:77:3b:39:8d:f4:36: 5c:f9:33:f3:8d:e7:ea:a0:bf:15:2e:92:8d:87:c0:bf:10:85: ef:3d:79:ae:44:f7:db:f3:02:94:b9:d4:d8:07:13:db:c7:b1: 4f:1a:57:d4:8b:a3:4a:53:50:b5:ac:c6:0d:7c:90:89:48:f8: f1:2f:5a:bc:e9:57:45:11:7b:0a:39:f3:f7:ee:ea:53:18:fa: e9:7a:3d:16:4b:84:66:1e:c3:e7:11:b4:40:5e:b4:be:1d:f7: 3d:5c:04:64:52:68:ac:dd:f8:3c:e5:95:f8:4e:1f:64:cc:69: 86:8a:40:3e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfrCOczkIYpKkey8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk YmFkMDRlMjItZmI3My00MTNiLWExNWItMGE3ZmIyYjllYTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeGQaUByKCOctXkTlcFHJ7rIPUGjMqZ7+YII KpjEPJyRGLQm9nVLuQCuYwY1/VAXwUzmNEXpRdavVwNyl2adWqHg4cGb9ITjFDHm rF8OluO0PYOnhM1pGQLw2eFkAzhY2XFeOga5AIDa/oyjtSAVbQf0tB1b5D0A7B08 j2jW0H7mTHerM7fk4zlZ1qUy+4dxBE4kmnkZM4AyiXGHR8iraXVz6eUXBfwzqMLO schRMba+aLRtxyuLbz3C0GQtUVxn1kcsqGUfJkDpgt0EZmi1sG+VEWq5DzxW8HbW L87/CfmnywzJDYnfM7wyMw0DJNWWevtF9JaRl8LWCIlBpRYAtQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGPA7gjAQx7VXlDyJRRjxvhnxAPhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjRlNWRmMjUtNThlYi0z NTBiLWJiMWItMzRhYjY1OTQ1ZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcLY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEgL+Jy20ICZUH3Yo8AV7Ko7XWKCp28qsuNqzVzFyoMR3rIwsfLY stRolps3f2cRaXlccdzZqvc1xyzxe96mMx4qey35xQc0F0OxHUwToMp9q6I2vh+V K5hzExQuk7Zg1RCFxEIlG9H5juBS5HZ1d8n1lUxeGg0upNECknOqSO4+GxXVa2yF Wn4pnnc7OY30Nlz5M/ON5+qgvxUuko2HwL8Qhe89ea5E99vzApS51NgHE9vHsU8a V9SLo0pTULWsxg18kIlI+PEvWrzpV0URewo58/fu6lMY+ul6PRZLhGYew+cRtEBe tL4d9z1cBGRSaKzd+DzllfhOH2TMaYaKQD4= -----END CERTIFICATE-----Generated at Sun May 5 02:21:09 2024 by rpki-client on console-ams.rpki-client.org