$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc3c88b9-53d2-3b94-a2fc-71a0887263de.roa File: bc3c88b9-53d2-3b94-a2fc-71a0887263de.roa (raw, json) Hash identifier: /JM4mMVA+Mh8U8vIaAHa0cfpBePtoN0LhaV4814fKFM= Subject key identifier: C1:05:DC:B9:23:2A:5A:3B:26:21:88:E5:D2:54:04:73:03:E5:90:6E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285847BEF7AD6C5F1F36A2BD86BAC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc3c88b9-53d2-3b94-a2fc-71a0887263de.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 7015 IP address blocks: 2001:559:8737::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:f7:ad:6c:5f:1f:36:a2:bd:86:ba:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=216dc2b8-20b3-47d6-8572-56712f16315e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:71:79:82:c9:80:d4:36:9b:91:ae:12:ca:36: bb:b3:09:ec:af:58:d3:71:53:46:13:9c:2e:8b:8e: dc:e3:9e:9f:c4:9c:49:15:5b:35:a6:87:bb:31:5c: 12:fa:47:92:ad:f0:9e:ee:99:19:8f:5d:25:a2:c7: 61:d2:79:36:69:5b:9f:0e:32:09:bc:2a:37:45:dc: 6f:1c:e9:05:45:a2:73:99:c7:93:09:fb:64:1e:6c: 68:9d:49:0d:04:a2:af:93:a7:3d:8c:b7:74:81:59: a1:18:d5:3a:6e:7f:dc:62:31:a2:01:92:e6:73:df: 66:4c:5e:d7:38:ea:3c:4b:5c:6a:82:6d:8f:60:2c: 1b:b5:a6:96:6e:75:18:34:7c:96:75:4f:8f:dd:23: 99:af:7b:2b:e6:6d:5a:94:04:73:3a:6e:66:fc:52: ca:7f:ec:65:6a:97:0b:34:86:b9:95:23:57:59:6e: 1f:92:db:d8:8b:9f:f8:88:9b:4b:09:d6:8e:75:df: ca:5e:86:3d:6b:20:49:bc:db:2e:c2:57:1b:71:31: 75:7d:22:bf:f7:37:d6:b7:86:0a:09:64:7c:d4:20: 44:2b:f3:59:97:29:de:21:15:ac:87:cb:8b:84:0c: 1b:fb:d9:d0:ce:1a:a0:de:09:e6:4f:05:8b:e7:7c: 3d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:05:DC:B9:23:2A:5A:3B:26:21:88:E5:D2:54:04:73:03:E5:90:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc3c88b9-53d2-3b94-a2fc-71a0887263de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8737::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:a0:11:d2:0a:d7:e8:95:6d:f5:3a:5d:79:f8:1d:67:e8:2e: 93:d0:7e:bb:b2:27:d8:82:22:c7:a3:84:57:bc:1e:64:3f:f4: 9c:56:87:77:65:76:4a:df:8e:64:10:d9:63:98:23:9a:6c:34: 83:2f:a7:75:01:00:27:5a:f7:1d:32:7d:f3:2a:69:05:61:19: fb:72:98:6e:0e:10:47:fa:de:6b:6d:52:d4:c1:76:9a:79:08: 74:31:99:08:0e:fe:2b:22:33:b7:e8:b5:24:ee:83:f9:9c:98: f1:45:9a:29:80:25:1e:65:fe:2f:83:da:0a:45:a1:f8:50:da: ef:8d:8a:37:95:c8:6f:0b:09:ad:4f:44:b7:5f:19:05:e3:e0: 1a:a2:c8:b4:fc:e3:05:05:21:45:26:05:28:f3:52:a0:6b:fe: e7:fb:c2:13:a3:77:91:f6:8e:3e:0a:89:6c:3d:89:26:7e:07: 73:44:c6:1f:ec:77:50:42:fb:55:4d:17:37:7f:bc:ef:3e:45: 04:14:7b:ce:9d:70:d0:5d:36:f5:27:9c:7e:a0:63:d7:4e:da: 9a:4a:77:77:0d:29:b2:ab:5c:15:3c:22:5a:9c:76:25:c7:b2: 3c:da:eb:9f:70:74:5b:d0:0f:b4:0c:76:5f:48:4f:d9:12:8c: 41:07:4b:b7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe+961sXx82or2GusAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk MjE2ZGMyYjgtMjBiMy00N2Q2LTg1NzItNTY3MTJmMTYzMTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHF5gsmA1Dabka4Syja7swnsr1jTcVNGE5wu i47c456fxJxJFVs1poe7MVwS+keSrfCe7pkZj10losdh0nk2aVufDjIJvCo3Rdxv HOkFRaJzmceTCftkHmxonUkNBKKvk6c9jLd0gVmhGNU6bn/cYjGiAZLmc99mTF7X OOo8S1xqgm2PYCwbtaaWbnUYNHyWdU+P3SOZr3sr5m1alARzOm5m/FLKf+xlapcL NIa5lSNXWW4fktvYi5/4iJtLCdaOdd/KXoY9ayBJvNsuwlcbcTF1fSK/9zfWt4YK CWR81CBEK/NZlyneIRWsh8uLhAwb+9nQzhqg3gnmTwWL53w97wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMEF3LkjKlo7JiGI5dJUBHMD5ZBuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmMzYzg4YjktNTNkMi0z Yjk0LWEyZmMtNzFhMDg4NzI2M2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYc3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADGgEdIK1+iVbfU6XXn4HWfoLpPQfruyJ9iCIsejhFe8HmQ/9JxW h3dldkrfjmQQ2WOYI5psNIMvp3UBACda9x0yffMqaQVhGftymG4OEEf63mttUtTB dpp5CHQxmQgO/isiM7fotSTug/mcmPFFmimAJR5l/i+D2gpFofhQ2u+NijeVyG8L Ca1PRLdfGQXj4BqiyLT84wUFIUUmBSjzUqBr/uf7whOjd5H2jj4KiWw9iSZ+B3NE xh/sd1BC+1VNFzd/vO8+RQQUe86dcNBdNvUnnH6gY9dO2ppKd3cNKbKrXBU8Ilqc diXHsjza659wdFvQD7QMdl9IT9kSjEEHS7c= -----END CERTIFICATE-----Generated at Fri Nov 22 11:33:33 2024 by rpki-client on console-fra.rpki-client.org