$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd0577e2-f263-31cb-8f3b-a3c6d91ca285.roa File: bd0577e2-f263-31cb-8f3b-a3c6d91ca285.roa (raw, json) Hash identifier: 5Xojtd3d4kRyDWiLyay+202MykvZofB6Wa5In9yL6Uc= Subject key identifier: D9:14:A4:4C:14:DD:8E:B0:00:62:E1:E0:1C:0F:99:6E:A4:41:3A:F4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FB02E35DF3473B0268BAA00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd0577e2-f263-31cb-8f3b-a3c6d91ca285.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 33491 IP address blocks: 2001:559:c042::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:b0:2e:35:df:34:73:b0:26:8b:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=6e225728-f061-4cf6-82f7-54b49bce850a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:64:f7:68:4a:39:ae:d0:8d:07:f7:50:8c:6d: 73:4e:79:e7:60:1a:e7:f0:34:09:79:6f:a3:ec:a2: a0:e6:f0:c2:da:20:78:5b:d9:23:93:9e:25:6f:94: 38:ad:f6:9a:69:5f:6c:de:f7:10:d8:48:de:d8:22: c7:01:22:ad:e1:86:4f:b0:2d:62:16:e6:3b:47:8d: 17:a5:b1:dd:9d:3b:d2:8c:31:4c:a5:5f:36:8c:0e: a4:e1:7c:ef:01:d6:c0:75:92:54:24:9b:ca:67:a9: b3:c5:54:f6:d8:3c:2d:69:e4:b5:70:db:ea:2c:59: 08:00:3e:e8:f3:9b:16:bf:f6:36:d5:64:46:5d:8d: 7e:f7:e4:8e:1e:7b:76:0b:1c:c2:2b:03:97:11:43: b9:05:5f:9c:55:28:dc:57:6e:ec:51:a1:1d:e0:ab: 4d:b9:13:58:09:b1:09:0d:42:0e:04:f6:78:e5:4e: 9b:f8:ca:6c:25:33:bd:33:4a:7a:69:b4:e5:53:bf: ff:44:4c:51:ec:ad:34:2c:d5:0d:88:1f:70:6c:89: de:16:ea:2c:41:c0:b3:50:16:75:1d:1d:69:74:82: 9a:9b:4e:b5:37:75:b7:12:85:f0:a9:d4:d6:70:68: 41:2b:f7:e7:3d:8e:d3:c7:e5:a7:1f:de:7c:60:55: 4f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:14:A4:4C:14:DD:8E:B0:00:62:E1:E0:1C:0F:99:6E:A4:41:3A:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd0577e2-f263-31cb-8f3b-a3c6d91ca285.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c042::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:63:a6:f8:f1:ae:f9:fd:c3:d1:bd:ed:24:c7:a9:78:a1:26: df:60:63:7c:ce:da:8b:eb:76:a5:2f:60:c9:f5:34:34:c0:08: 9d:65:ba:24:7b:a5:56:f2:32:83:70:fc:51:10:72:b7:f5:83: d2:1f:c4:b1:e5:6d:ae:50:12:f1:6a:fc:1f:74:cd:df:8b:5a: 36:25:32:81:c9:5e:20:ef:c6:b2:f8:ea:62:ef:e6:e8:23:87: 3d:f4:17:df:96:12:7f:2c:52:ea:0e:2f:02:b1:a4:63:f6:e3: b9:c9:3d:ea:8d:e6:54:35:ad:24:2d:35:e2:f8:35:d8:48:a2: 52:55:be:b3:4c:68:78:b8:43:bb:76:44:71:a2:36:b1:fe:92: ed:db:e6:ac:74:65:9d:5e:23:aa:a2:30:70:37:29:bd:a7:9d: 45:43:75:cf:29:7b:38:95:81:0c:8f:de:4c:03:22:b3:99:e9: af:8f:17:3c:c1:35:e0:fb:41:d9:3e:10:4f:e6:98:84:bf:e0: 28:8a:8f:cc:f2:da:85:5a:2c:ae:14:ec:ec:45:9e:16:ba:86: b3:bd:d4:6b:d5:c5:60:eb:7a:3f:7d:a1:2b:16:c8:0d:83:24: 3c:75:60:47:12:d3:51:1d:7e:f4:08:37:8c:e5:2f:68:e7:10: 9c:7b:cb:73 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfsC413zRzsCaLqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk NmUyMjU3MjgtZjA2MS00Y2Y2LTgyZjctNTRiNDliY2U4NTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2T3aEo5rtCNB/dQjG1zTnnnYBrn8DQJeW+j 7KKg5vDC2iB4W9kjk54lb5Q4rfaaaV9s3vcQ2Eje2CLHASKt4YZPsC1iFuY7R40X pbHdnTvSjDFMpV82jA6k4XzvAdbAdZJUJJvKZ6mzxVT22DwtaeS1cNvqLFkIAD7o 85sWv/Y21WRGXY1+9+SOHnt2CxzCKwOXEUO5BV+cVSjcV27sUaEd4KtNuRNYCbEJ DUIOBPZ45U6b+MpsJTO9M0p6abTlU7//RExR7K00LNUNiB9wbIneFuosQcCzUBZ1 HR1pdIKam061N3W3EoXwqdTWcGhBK/fnPY7Tx+WnH958YFVPbQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNkUpEwU3Y6wAGLh4BwPmW6kQTr0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmQwNTc3ZTItZjI2My0z MWNiLThmM2ItYTNjNmQ5MWNhMjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcBC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIljpvjxrvn9w9G97STHqXihJt9gY3zO2ovrdqUvYMn1NDTACJ1l uiR7pVbyMoNw/FEQcrf1g9IfxLHlba5QEvFq/B90zd+LWjYlMoHJXiDvxrL46mLv 5ugjhz30F9+WEn8sUuoOLwKxpGP247nJPeqN5lQ1rSQtNeL4NdhIolJVvrNMaHi4 Q7t2RHGiNrH+ku3b5qx0ZZ1eI6qiMHA3Kb2nnUVDdc8peziVgQyP3kwDIrOZ6a+P FzzBNeD7Qdk+EE/mmIS/4CiKj8zy2oVaLK4U7OxFnha6hrO91GvVxWDrej99oSsW yA2DJDx1YEcS01EdfvQIN4zlL2jnEJx7y3M= -----END CERTIFICATE-----Generated at Sat May 4 14:55:24 2024 by rpki-client on console-fra.rpki-client.org