$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bdb01c8a-c3e5-3f4c-b2bc-5407e03a6b1e.roa File: bdb01c8a-c3e5-3f4c-b2bc-5407e03a6b1e.roa (raw, json) Hash identifier: dpjiccYp8Ir+NiBhCVXfVWB1GNhU8I4oQ51eZzqVpEU= Subject key identifier: 1B:CC:8D:1E:D5:C8:ED:94:09:63:DE:CC:E1:DE:D0:52:20:2E:37:0C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAD136C278A63AB04055300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bdb01c8a-c3e5-3f4c-b2bc-5407e03a6b1e.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 22909 IP address blocks: 2001:559:2d1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ad:13:6c:27:8a:63:ab:04:05:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=8adbc7e1-be8f-4ffc-a0a4-55b33eb44ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:73:d3:fc:4b:59:ed:64:ab:9e:70:4f:51:cb: 64:75:14:5a:27:fe:2a:c8:1d:cf:44:35:87:3a:94: 65:00:11:b6:fb:a7:4e:31:6f:0f:22:69:cb:cd:33: b9:e8:81:66:3f:f8:c5:4a:00:4a:02:46:21:ff:39: 35:0e:5e:39:18:cf:9c:cc:18:ca:3d:ae:cb:cd:35: 30:d5:18:e3:78:9d:20:67:4c:c5:b3:de:25:64:4d: 4b:96:db:f5:c2:2d:d2:65:4c:57:68:86:e1:3a:10: 20:12:cf:34:f0:b8:04:f2:bc:25:a2:5c:c1:e8:d5: 3a:66:42:03:35:0c:fb:1c:e8:a0:82:a4:f3:d2:bf: f1:f0:ae:9e:fb:13:aa:45:86:f3:7c:75:0b:44:81: c0:fd:51:55:00:c0:75:44:f5:0d:66:b7:3f:e3:7d: 52:88:59:7c:49:38:59:3d:61:c8:a4:21:98:b6:fa: e1:8f:6a:1f:12:61:42:95:3e:d9:4b:5b:e3:fe:bf: af:8a:37:76:b8:48:1a:d2:80:ce:e1:4f:0f:3d:0d: 7f:a1:5e:bf:3c:8b:1f:1c:6d:1b:b4:3b:48:75:e1: da:22:e4:69:e8:6b:b2:dd:9b:06:e7:1f:f4:14:99: a2:a3:f9:a1:a9:73:5d:dd:38:71:43:67:2f:2d:dd: d6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:CC:8D:1E:D5:C8:ED:94:09:63:DE:CC:E1:DE:D0:52:20:2E:37:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bdb01c8a-c3e5-3f4c-b2bc-5407e03a6b1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:2d1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:7b:a4:af:f5:e9:e3:eb:37:9e:7f:d7:e4:b7:6f:96:71:a2: e9:e9:de:50:1d:ec:4a:b5:14:b6:8c:91:e5:8c:22:6b:3c:bc: 39:07:1e:ea:fc:71:ef:84:67:0f:0e:78:61:10:a1:51:9c:1c: a5:dd:89:2d:c4:26:46:7c:04:ed:3e:c2:ff:de:ea:c1:c5:9b: b8:6e:01:c4:f7:41:d1:e2:49:c6:19:1c:11:80:56:24:3d:60: 23:b7:b4:a2:41:24:02:c8:9b:eb:14:cf:7a:c4:52:66:63:a3: 2c:a5:57:2f:3e:be:d2:3e:6d:90:83:c8:af:97:40:ba:1a:dd: fa:92:3b:55:f1:21:de:06:8a:62:55:ca:35:81:cd:4b:09:16: ad:32:27:6d:a2:2a:84:03:2c:67:2c:51:35:8a:ff:4a:72:5a: da:16:0f:da:b3:d0:fd:27:f3:2f:49:e4:e9:f2:37:b3:2c:39: 5d:ae:15:4b:c8:c8:55:8e:e7:c0:68:c2:7c:b1:d1:c8:ba:62: b8:87:14:54:aa:d2:c8:0b:bf:27:01:1c:e9:3f:49:8e:ca:db: 67:d6:01:d2:eb:09:6d:af:ae:57:6c:6d:9b:3f:2c:ed:68:2b: 1c:c7:80:dc:34:a5:02:d5:f9:24:9e:38:f1:97:98:b2:25:ee: 11:c3:29:01 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfrRNsJ4pjqwQFUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk OGFkYmM3ZTEtYmU4Zi00ZmZjLWEwYTQtNTViMzNlYjQ0Y2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3PT/EtZ7WSrnnBPUctkdRRaJ/4qyB3PRDWH OpRlABG2+6dOMW8PImnLzTO56IFmP/jFSgBKAkYh/zk1Dl45GM+czBjKPa7LzTUw 1RjjeJ0gZ0zFs94lZE1Lltv1wi3SZUxXaIbhOhAgEs808LgE8rwlolzB6NU6ZkID NQz7HOiggqTz0r/x8K6e+xOqRYbzfHULRIHA/VFVAMB1RPUNZrc/431SiFl8SThZ PWHIpCGYtvrhj2ofEmFClT7ZS1vj/r+vijd2uEga0oDO4U8PPQ1/oV6/PIsfHG0b tDtIdeHaIuRp6Guy3ZsG5x/0FJmio/mhqXNd3ThxQ2cvLd3WIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBvMjR7VyO2UCWPezOHe0FIgLjcMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmRiMDFjOGEtYzNlNS0z ZjRjLWIyYmMtNTQwN2UwM2E2YjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQLR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABp7pK/16ePrN55/1+S3b5Zxounp3lAd7Eq1FLaMkeWMIms8vDkH Hur8ce+EZw8OeGEQoVGcHKXdiS3EJkZ8BO0+wv/e6sHFm7huAcT3QdHiScYZHBGA ViQ9YCO3tKJBJALIm+sUz3rEUmZjoyylVy8+vtI+bZCDyK+XQLoa3fqSO1XxId4G imJVyjWBzUsJFq0yJ22iKoQDLGcsUTWK/0pyWtoWD9qz0P0n8y9J5OnyN7MsOV2u FUvIyFWO58Bownyx0ci6YriHFFSq0sgLvycBHOk/SY7K22fWAdLrCW2vrldsbZs/ LO1oKxzHgNw0pQLV+SSeOPGXmLIl7hHDKQE= -----END CERTIFICATE-----Generated at Sat May 4 14:55:26 2024 by rpki-client on console-fra.rpki-client.org