$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5f71aa1-ff46-3caa-954a-6e42529fa08e.roa File: b5f71aa1-ff46-3caa-954a-6e42529fa08e.roa (raw, json) Hash identifier: 5A6CCfnlzoo0zH8lK548dcIrxe2PBZeNAjEpdiMkVo8= Subject key identifier: 56:77:90:44:2D:EC:15:23:ED:95:FB:2C:7C:C8:D7:F9:5C:E1:FD:24 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAB97062E6E2BF456C74880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5f71aa1-ff46-3caa-954a-6e42529fa08e.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 33651 IP address blocks: 2001:559:c058::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ab:97:06:2e:6e:2b:f4:56:c7:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=ef3b9412-4305-4d52-99da-82de2e764a4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1f:c8:8c:4e:22:95:63:9a:15:40:3e:1e:91: e2:1d:e9:db:00:a1:ba:b2:f3:d5:c8:88:e9:a4:58: f6:9a:ca:76:c0:c6:b6:59:fd:43:0e:a3:43:52:68: 77:82:6b:f6:1a:67:c5:3e:53:40:ff:06:12:71:88: ab:db:f1:5a:bc:53:c8:08:5a:dc:d6:f9:01:d3:c5: 6d:f6:bd:fd:15:62:67:91:3e:8e:1c:0f:0e:79:89: f6:d9:6c:59:98:d3:b2:4b:6a:f1:04:80:ea:70:4b: 1d:9d:9e:f8:29:53:75:71:b7:3a:c0:ca:cf:59:df: b1:00:f6:d3:90:ee:de:bd:d2:6e:66:7d:b0:e5:fa: dd:21:9d:b2:bb:fe:9e:dc:79:3b:2b:95:ce:41:e3: 3f:bc:1b:27:b2:40:fb:cb:25:54:09:58:18:0c:40: de:17:22:64:e5:6f:b1:c8:4a:3b:91:24:d7:e7:54: 38:60:84:22:ba:b7:49:21:33:29:8f:c6:d2:83:8a: 3c:5c:84:ad:b1:1d:69:83:a5:59:6e:0a:08:c4:22: 6e:08:66:a8:47:3a:da:9e:b0:0e:25:1d:98:30:de: 65:73:26:bb:48:91:7d:cc:ac:47:a4:81:23:9a:9d: 69:f5:7d:6b:92:e4:02:46:30:ed:41:00:e0:40:73: ae:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:77:90:44:2D:EC:15:23:ED:95:FB:2C:7C:C8:D7:F9:5C:E1:FD:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5f71aa1-ff46-3caa-954a-6e42529fa08e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c058::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:62:7f:f5:26:4d:0f:e0:2d:19:ad:55:66:6b:9c:4e:51:79: 6e:a3:55:da:cb:e0:7e:81:2c:0b:ee:9d:d1:e1:3b:3a:a7:1e: 45:e8:2f:39:f5:67:54:55:e2:c1:37:25:e4:0b:29:a4:93:5f: be:d6:50:07:6b:7d:f0:22:d6:87:8c:c1:65:f8:91:32:f4:3a: 8c:99:9a:89:c2:d6:24:5f:e7:12:6d:c2:2f:2b:1f:9d:cf:13: 95:9f:c0:69:40:c9:a6:b4:0c:ec:09:62:07:18:71:a0:10:c0: a9:9d:98:28:60:3a:50:69:d9:db:39:85:9f:11:ed:cc:58:44: da:c4:ad:b5:01:7e:e5:cc:52:02:78:ff:a6:ca:68:35:6e:b8: 1b:a7:ed:0a:b9:d2:6a:99:4f:b7:9f:88:87:3c:da:8e:2c:3a: bb:42:31:ac:28:5f:78:c4:29:e5:11:90:bd:4f:3c:9b:5d:58: a8:b7:b8:2c:9a:58:13:03:a3:32:d3:9a:82:f1:9d:75:fb:6e: 19:de:fc:98:0b:64:af:64:cf:1a:8d:61:ab:1a:11:f7:99:ec: 24:9e:68:0e:34:b6:aa:63:0d:d5:7a:00:92:99:ce:c9:2d:59: 56:92:38:9c:fc:6f:83:c6:df:0f:4e:89:1b:03:97:63:b3:a9: bb:90:53:1f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfq5cGLm4r9FbHSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk ZWYzYjk0MTItNDMwNS00ZDUyLTk5ZGEtODJkZTJlNzY0YTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAth/IjE4ilWOaFUA+HpHiHenbAKG6svPVyIjp pFj2msp2wMa2Wf1DDqNDUmh3gmv2GmfFPlNA/wYScYir2/FavFPICFrc1vkB08Vt 9r39FWJnkT6OHA8OeYn22WxZmNOyS2rxBIDqcEsdnZ74KVN1cbc6wMrPWd+xAPbT kO7evdJuZn2w5frdIZ2yu/6e3Hk7K5XOQeM/vBsnskD7yyVUCVgYDEDeFyJk5W+x yEo7kSTX51Q4YIQiurdJITMpj8bSg4o8XIStsR1pg6VZbgoIxCJuCGaoRzranrAO JR2YMN5lcya7SJF9zKxHpIEjmp1p9X1rkuQCRjDtQQDgQHOuOQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFZ3kEQt7BUj7ZX7LHzI1/lc4f0kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjVmNzFhYTEtZmY0Ni0z Y2FhLTk1NGEtNmU0MjUyOWZhMDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcBY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIRif/UmTQ/gLRmtVWZrnE5ReW6jVdrL4H6BLAvundHhOzqnHkXo Lzn1Z1RV4sE3JeQLKaSTX77WUAdrffAi1oeMwWX4kTL0OoyZmonC1iRf5xJtwi8r H53PE5WfwGlAyaa0DOwJYgcYcaAQwKmdmChgOlBp2ds5hZ8R7cxYRNrErbUBfuXM UgJ4/6bKaDVuuBun7Qq50mqZT7efiIc82o4sOrtCMawoX3jEKeURkL1PPJtdWKi3 uCyaWBMDozLTmoLxnXX7bhne/JgLZK9kzxqNYasaEfeZ7CSeaA40tqpjDdV6AJKZ zsktWVaSOJz8b4PG3w9OiRsDl2OzqbuQUx8= -----END CERTIFICATE-----Generated at Sun May 5 02:21:11 2024 by rpki-client on console-ams.rpki-client.org