$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b65edd95-b058-3210-8d59-10c3de7f4501.roa File: b65edd95-b058-3210-8d59-10c3de7f4501.roa (raw, json) Hash identifier: 70TAl6bIYfrwVa2bsopZbVoHWjfN1X0bZSymFFvYrQ4= Subject key identifier: 4D:7D:8D:37:D0:A8:73:7D:9F:0C:E3:28:5F:BE:EE:A0:26:E7:05:7E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAF36470CCE6ED69D6A4300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b65edd95-b058-3210-8d59-10c3de7f4501.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 7015 IP address blocks: 2001:559:291::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:af:36:47:0c:ce:6e:d6:9d:6a:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=481324ed-73da-42af-9fde-aba713e22c11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:93:1b:2a:e3:ab:c4:ec:07:0c:2e:ad:c4:93: 05:b9:26:c3:78:fb:1e:15:ff:2e:ba:4e:0b:06:c6: f9:6b:a1:59:06:62:dd:ae:90:13:62:b5:00:f2:43: 15:8f:96:16:57:3c:7a:5e:22:c9:14:82:27:c6:a4: 49:e9:cc:51:96:f1:5a:b9:9c:6e:f1:fa:b6:64:77: a8:42:d5:f1:eb:b6:95:71:13:d4:7b:b5:c6:b5:84: a4:b4:da:d3:ea:fd:c8:8f:45:81:77:55:59:12:88: e1:48:02:5a:26:b7:e4:7d:19:48:59:55:69:ff:4d: be:61:94:ec:cd:c8:77:a8:b8:8b:6e:3a:53:5e:77: ea:22:4d:82:f4:d7:94:9b:ad:9f:3b:ef:8a:75:cf: c8:69:0a:21:cf:bb:06:97:e1:ec:10:91:75:bb:76: 2b:f5:2c:31:30:84:81:6e:dd:07:8f:71:78:74:4b: a4:3b:f0:89:a5:46:5a:7b:32:b2:aa:ba:3f:9e:fb: 82:85:a4:56:80:f0:93:6a:1c:7d:5c:04:e1:3e:78: 5a:37:da:a9:a9:48:a5:d4:55:42:4f:cd:f0:c1:ec: f8:7d:64:92:d6:d2:41:c6:19:7e:5f:9b:75:b2:92: 2b:e7:43:e1:5f:04:d2:60:d1:49:2f:ac:8f:c3:23: 17:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:7D:8D:37:D0:A8:73:7D:9F:0C:E3:28:5F:BE:EE:A0:26:E7:05:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b65edd95-b058-3210-8d59-10c3de7f4501.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:291::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:43:3d:a3:23:94:c8:55:33:3e:b7:98:89:26:03:64:5a:18: 88:bc:ec:cd:da:a3:01:54:b6:4f:1a:32:8e:8b:c6:68:5a:4c: b1:9a:9b:4a:d1:50:cb:26:cf:d6:57:a5:fd:18:7c:91:4a:ba: 3b:df:8e:9e:7f:67:dd:9b:60:82:ab:c3:fb:02:b1:4c:33:dc: 65:16:87:2f:86:29:f8:de:fe:df:4a:70:c2:84:c4:21:2c:4b: 05:4e:f4:c1:61:f6:9b:8e:19:65:35:be:71:fc:a4:f2:d9:34: 1b:8d:ea:7d:98:eb:8f:7a:d9:75:02:72:68:80:a9:f7:e4:46: ff:bc:1e:27:59:7e:ff:65:28:28:63:c9:00:5f:bf:8a:6f:9e: 76:e8:d0:b8:37:26:d5:3d:9c:79:5e:dc:41:b3:50:ff:6a:4c: 96:74:89:3e:23:ce:c0:ca:82:b1:85:d5:14:26:e6:bb:0a:8b: e7:15:f0:42:96:1e:d7:a0:35:01:48:de:ce:6e:f5:36:77:72: a2:58:0e:d0:49:cd:18:cd:57:55:3b:0b:83:0e:93:ad:a5:25: b5:ae:51:93:5e:7d:54:75:29:81:02:84:5d:51:9f:36:a5:33: 82:c5:5a:be:74:a5:b4:e4:2a:59:af:4a:f3:d7:0a:8b:e5:35: 57:ab:59:2c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfrzZHDM5u1p1qQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk NDgxMzI0ZWQtNzNkYS00MmFmLTlmZGUtYWJhNzEzZTIyYzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJMbKuOrxOwHDC6txJMFuSbDePseFf8uuk4L Bsb5a6FZBmLdrpATYrUA8kMVj5YWVzx6XiLJFIInxqRJ6cxRlvFauZxu8fq2ZHeo QtXx67aVcRPUe7XGtYSktNrT6v3Ij0WBd1VZEojhSAJaJrfkfRlIWVVp/02+YZTs zch3qLiLbjpTXnfqIk2C9NeUm62fO++Kdc/IaQohz7sGl+HsEJF1u3Yr9SwxMISB bt0Hj3F4dEukO/CJpUZaezKyqro/nvuChaRWgPCTahx9XAThPnhaN9qpqUil1FVC T83wwez4fWSS1tJBxhl+X5t1spIr50PhXwTSYNFJL6yPwyMXkQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE19jTfQqHN9nwzjKF++7qAm5wV+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjY1ZWRkOTUtYjA1OC0z MjEwLThkNTktMTBjM2RlN2Y0NTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQKR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIlDPaMjlMhVMz63mIkmA2RaGIi87M3aowFUtk8aMo6LxmhaTLGa m0rRUMsmz9ZXpf0YfJFKujvfjp5/Z92bYIKrw/sCsUwz3GUWhy+GKfje/t9KcMKE xCEsSwVO9MFh9puOGWU1vnH8pPLZNBuN6n2Y64962XUCcmiAqffkRv+8HidZfv9l KChjyQBfv4pvnnbo0Lg3JtU9nHle3EGzUP9qTJZ0iT4jzsDKgrGF1RQm5rsKi+cV 8EKWHtegNQFI3s5u9TZ3cqJYDtBJzRjNV1U7C4MOk62lJbWuUZNefVR1KYEChF1R nzalM4LFWr50pbTkKlmvSvPXCovlNVerWSw= -----END CERTIFICATE-----Generated at Sat May 4 14:54:58 2024 by rpki-client on console-fra.rpki-client.org