$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfbc9c82-94bd-3892-8784-fe0e946eaa8e.roa File: bfbc9c82-94bd-3892-8784-fe0e946eaa8e.roa (raw, json) Hash identifier: dLNdmrFMOxBpn8wkXJtRBFFaCV/fhg7JcaCKHyJn9d0= Subject key identifier: E1:08:46:03:87:BA:1E:28:DC:8E:5B:D9:D1:BE:CD:05:EE:F8:1D:09 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAD9D0805F4B353CEE13900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfbc9c82-94bd-3892-8784-fe0e946eaa8e.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 7016 IP address blocks: 2001:559:4001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ad:9d:08:05:f4:b3:53:ce:e1:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=f9d7817b-2b07-4036-a31b-7baa7cc23153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:41:60:5a:38:1b:59:47:cf:a2:59:91:a0:71: 4c:97:5f:66:b8:41:f8:6e:ab:68:31:7f:6f:7f:01: 15:f3:c0:e6:56:f8:02:dd:5c:14:de:7b:ca:ff:5a: 2c:15:d8:d9:16:32:5c:91:45:cd:c2:96:dd:79:52: cc:6d:9e:e7:52:bc:c6:7c:2a:c1:f7:bb:61:48:88: 8f:8a:de:aa:58:f6:eb:84:91:71:9e:a6:13:e7:a0: cc:33:de:03:83:75:ab:cf:ed:d1:c2:22:ba:63:6d: 4b:2c:cd:28:01:98:8e:68:87:73:a0:b6:0b:51:d4: 15:a9:4a:dc:44:35:da:6f:6f:1b:fc:83:f3:a7:41: 4d:8b:9d:31:41:c8:49:12:92:d9:30:cb:cc:a6:f2: 56:7c:49:65:fd:5f:0a:6e:9b:f9:74:8f:27:de:0b: 6f:e5:10:04:28:bd:e9:86:b5:93:c5:35:a7:0e:bd: 24:e6:83:44:de:d3:5e:5d:6a:f1:85:53:f7:9d:34: d9:5b:72:e1:80:b0:bf:01:02:c0:04:11:5b:66:e6: f0:fa:ed:7a:03:9d:b0:cf:51:74:dd:f2:d1:5a:cd: e6:38:25:72:92:28:26:de:06:9a:55:c5:95:57:c6: a7:4b:60:1d:5e:70:67:6f:5e:62:5c:40:ef:d9:7b: 0a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:08:46:03:87:BA:1E:28:DC:8E:5B:D9:D1:BE:CD:05:EE:F8:1D:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfbc9c82-94bd-3892-8784-fe0e946eaa8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:4001::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:8c:40:8f:2a:61:0d:2b:61:f0:c9:38:aa:47:b3:49:0e:d9: 0d:6b:0a:68:6f:e5:05:f2:b6:e2:98:88:96:a0:fb:59:c4:b6: 78:f7:07:2a:37:e7:bd:11:45:10:30:93:e7:27:51:05:20:46: f8:ac:c2:4a:cd:e5:84:91:77:db:0d:55:1a:0b:1e:6d:29:9a: a8:e7:f4:85:e8:94:8d:54:5c:db:6b:35:53:b3:7d:16:72:0f: f1:62:e0:3d:07:85:bd:99:72:8a:df:0d:63:d0:06:1e:59:cc: 5a:96:42:1b:63:f1:b5:52:cc:1d:9a:e4:22:ff:bc:59:82:d1: fe:bf:cc:ee:53:dc:d7:dd:54:df:25:9a:df:b3:0a:85:69:a8: f2:4d:52:5e:89:fe:21:41:25:6f:a2:06:a3:9c:51:ef:9a:ae: 12:60:31:33:85:42:71:05:d6:1f:f8:f9:72:1f:3f:df:e0:b4: 9d:76:b4:2a:84:bb:12:b9:c7:1f:ef:8a:6f:2e:34:97:48:59: 09:d6:c9:9d:8a:49:08:78:c0:fb:49:7f:2d:10:78:74:e8:89: f9:d3:95:6d:a3:78:d8:95:e8:59:e1:cb:14:c9:97:22:50:d4: c6:ab:4e:40:92:19:34:25:f1:0b:1a:23:22:4d:78:51:a2:4c: 83:b8:99:b7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfrZ0IBfSzU87hOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk ZjlkNzgxN2ItMmIwNy00MDM2LWEzMWItN2JhYTdjYzIzMTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkFgWjgbWUfPolmRoHFMl19muEH4bqtoMX9v fwEV88DmVvgC3VwU3nvK/1osFdjZFjJckUXNwpbdeVLMbZ7nUrzGfCrB97thSIiP it6qWPbrhJFxnqYT56DMM94Dg3Wrz+3RwiK6Y21LLM0oAZiOaIdzoLYLUdQVqUrc RDXab28b/IPzp0FNi50xQchJEpLZMMvMpvJWfEll/V8Kbpv5dI8n3gtv5RAEKL3p hrWTxTWnDr0k5oNE3tNeXWrxhVP3nTTZW3LhgLC/AQLABBFbZubw+u16A52wz1F0 3fLRWs3mOCVykigm3gaaVcWVV8anS2AdXnBnb15iXEDv2XsK3wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOEIRgOHuh4o3I5b2dG+zQXu+B0JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmZiYzljODItOTRiZC0z ODkyLTg3ODQtZmUwZTk0NmVhYThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWUAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKCMQI8qYQ0rYfDJOKpHs0kO2Q1rCmhv5QXytuKYiJag+1nEtnj3 Byo3570RRRAwk+cnUQUgRviswkrN5YSRd9sNVRoLHm0pmqjn9IXolI1UXNtrNVOz fRZyD/Fi4D0Hhb2ZcorfDWPQBh5ZzFqWQhtj8bVSzB2a5CL/vFmC0f6/zO5T3Nfd VN8lmt+zCoVpqPJNUl6J/iFBJW+iBqOcUe+arhJgMTOFQnEF1h/4+XIfP9/gtJ12 tCqEuxK5xx/vim8uNJdIWQnWyZ2KSQh4wPtJfy0QeHToifnTlW2jeNiV6FnhyxTJ lyJQ1MarTkCSGTQl8QsaIyJNeFGiTIO4mbc= -----END CERTIFICATE-----Generated at Sat May 4 14:57:04 2024 by rpki-client on console-ams.rpki-client.org