$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b563958d-b09e-3f10-a2f7-a14d23d9a47c.roa File: b563958d-b09e-3f10-a2f7-a14d23d9a47c.roa (raw, json) Hash identifier: bdfawASiVWptq/fdHbCdhRgOe9jPAjgbPZll06IEfUM= Subject key identifier: 65:C2:51:EE:90:68:C9:CC:0D:33:F0:19:E5:29:76:88:91:E2:64:45 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FABDCD6BB03D70ACE8C8D00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b563958d-b09e-3f10-a2f7-a14d23d9a47c.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 7015 IP address blocks: 2001:559:c418::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ab:dc:d6:bb:03:d7:0a:ce:8c:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=a30da205-eed9-4153-bd1c-872c9e0a16dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:87:cd:b3:6a:7b:1b:01:6a:c3:97:1f:50:aa: e7:b6:61:60:9e:37:9b:24:6a:fc:61:41:5d:2a:7f: 02:d3:53:95:1a:56:74:52:ca:0e:34:9b:7f:09:18: 38:99:6c:07:05:4a:85:8f:00:58:b6:cb:05:98:ca: 9a:eb:05:e7:30:fb:97:13:86:01:05:57:d2:6a:7a: b3:f0:ce:b7:85:a6:bb:0d:11:38:4f:e0:f4:d6:5a: 19:bf:17:fa:30:70:c4:a8:a7:87:52:c2:b0:7e:b3: 29:47:84:b2:88:7a:08:10:82:23:5b:cc:12:06:c3: 76:3f:9f:cf:a2:c3:d4:05:e0:2d:d5:38:ee:f3:98: 87:30:da:f5:cb:c8:ef:58:a1:cf:a4:e3:bf:66:0b: 93:06:92:26:91:72:5f:b7:56:23:2f:c4:af:b1:5a: 0f:43:78:a3:5e:4c:07:ba:bf:2b:57:c2:5c:5b:25: 64:6f:f2:a7:4f:86:39:18:16:53:dc:a5:92:c0:7c: 1a:aa:8e:a6:61:21:aa:8c:0b:cc:ab:3c:0d:f8:fc: 77:4e:c8:31:72:b8:cf:9d:f4:96:05:53:34:c1:7c: 6c:27:17:79:67:48:54:22:5e:55:8d:44:5f:fd:b6: a2:44:40:0d:72:e1:58:35:76:e5:3d:bb:50:66:81: ef:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C2:51:EE:90:68:C9:CC:0D:33:F0:19:E5:29:76:88:91:E2:64:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b563958d-b09e-3f10-a2f7-a14d23d9a47c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c418::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:30:9d:64:20:a8:75:f5:20:9d:45:33:95:46:73:2a:37:ed: 61:ea:63:21:1f:5e:63:8c:58:9b:56:32:2a:47:21:6a:33:a4: 6a:a8:7c:48:74:cd:60:55:30:24:3f:6c:43:93:54:99:d5:20: d1:61:dc:c9:4c:89:84:cc:18:59:ec:2d:e0:2e:3a:e7:95:a9: 9d:57:66:50:1c:b0:c8:33:1c:2f:17:10:32:65:f4:b9:ef:7d: 7e:5e:36:53:3b:c9:a9:bf:04:59:7a:3f:5f:71:38:fe:0e:af: f8:99:ab:1d:11:6d:d0:c6:8d:bc:a8:46:81:38:8e:f2:6b:98: eb:27:e4:e2:6c:8e:6e:c6:78:5e:f2:b5:82:f1:4f:fd:df:e4: dd:4c:a6:33:09:d9:ae:bf:4a:af:69:23:f6:cf:0e:22:d6:7b: bb:90:dc:81:ec:7f:b7:0e:ad:e5:81:fc:29:e5:06:f2:4d:a0: 81:8e:fd:19:45:16:dd:85:0d:b2:74:aa:68:72:57:a8:bb:49: 9b:47:20:bb:79:c9:93:ec:87:c8:a0:d6:90:a5:fc:04:a8:04: a2:09:e7:45:fd:99:5b:18:73:06:18:fb:23:ff:73:f5:ab:c2: 98:22:ea:c1:ba:51:e8:93:d1:e2:a5:d5:27:b2:ea:93:ef:70: a5:7c:9f:0a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfq9zWuwPXCs6MjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk YTMwZGEyMDUtZWVkOS00MTUzLWJkMWMtODcyYzllMGExNmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlofNs2p7GwFqw5cfUKrntmFgnjebJGr8YUFd Kn8C01OVGlZ0UsoONJt/CRg4mWwHBUqFjwBYtssFmMqa6wXnMPuXE4YBBVfSanqz 8M63haa7DRE4T+D01loZvxf6MHDEqKeHUsKwfrMpR4SyiHoIEIIjW8wSBsN2P5/P osPUBeAt1Tju85iHMNr1y8jvWKHPpOO/ZguTBpImkXJft1YjL8SvsVoPQ3ijXkwH ur8rV8JcWyVkb/KnT4Y5GBZT3KWSwHwaqo6mYSGqjAvMqzwN+Px3TsgxcrjPnfSW BVM0wXxsJxd5Z0hUIl5VjURf/baiREANcuFYNXblPbtQZoHvnQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGXCUe6QaMnMDTPwGeUpdoiR4mRFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjU2Mzk1OGQtYjA5ZS0z ZjEwLWEyZjctYTE0ZDIzZDlhNDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcQY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACkwnWQgqHX1IJ1FM5VGcyo37WHqYyEfXmOMWJtWMipHIWozpGqo fEh0zWBVMCQ/bEOTVJnVINFh3MlMiYTMGFnsLeAuOueVqZ1XZlAcsMgzHC8XEDJl 9LnvfX5eNlM7yam/BFl6P19xOP4Or/iZqx0RbdDGjbyoRoE4jvJrmOsn5OJsjm7G eF7ytYLxT/3f5N1MpjMJ2a6/Sq9pI/bPDiLWe7uQ3IHsf7cOreWB/CnlBvJNoIGO /RlFFt2FDbJ0qmhyV6i7SZtHILt5yZPsh8ig1pCl/ASoBKIJ50X9mVsYcwYY+yP/ c/Wrwpgi6sG6UeiT0eKl1Sey6pPvcKV8nwo= -----END CERTIFICATE-----Generated at Sun May 5 02:21:10 2024 by rpki-client on console-ams.rpki-client.org