$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfd10aea-83aa-32fb-b166-1901f4d3f67e.roa File: bfd10aea-83aa-32fb-b166-1901f4d3f67e.roa (raw, json) Hash identifier: KKWunwQmvPL4eOb8/48J3bz6JOSjz81QHVuHrYLxrBc= Subject key identifier: D0:F2:62:FA:2C:69:22:2F:0E:60:8F:0A:A8:66:E1:AB:CA:3F:80:F8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FABCF65F85ACC540A1B7600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfd10aea-83aa-32fb-b166-1901f4d3f67e.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 7015 IP address blocks: 2001:559:713::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ab:cf:65:f8:5a:cc:54:0a:1b:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=f8d0ace4-bb55-473a-a30f-0aa50eb7b6ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:58:75:76:86:a9:df:ca:86:e2:06:41:9b:e0: c2:f9:89:76:4f:8b:b4:86:ef:0e:3f:0c:2f:81:d5: 8e:61:0f:a9:ba:16:ee:09:36:71:df:54:11:59:d3: f5:e4:04:af:e5:82:b3:5d:d8:57:47:29:d9:a9:91: 6b:ba:5f:8b:f2:e7:af:4d:2d:1b:50:36:3d:ca:91: 6d:51:17:eb:c1:ff:72:89:5f:3f:f8:2e:82:71:7e: b0:d5:40:9c:b5:9b:fa:d0:6e:13:38:73:08:34:12: 50:b6:f4:a1:d0:8e:06:6a:bb:42:45:14:a6:0c:10: 63:84:5b:25:a3:05:90:7a:e2:c8:48:11:7d:40:d9: ab:af:f2:7b:45:01:74:d6:b8:1c:fd:1c:4a:95:72: 18:1e:92:60:df:ab:ec:26:71:67:00:c1:08:fa:4f: 6b:82:05:1f:fc:d4:17:6d:e8:46:db:15:e6:23:0b: d8:d2:27:73:b0:2f:ab:04:06:2e:a2:13:44:2c:36: c8:da:68:d7:c1:92:41:1d:26:fe:13:f8:45:e2:e9: 45:9a:69:bd:e6:6e:df:9c:86:3e:0c:d2:f0:f3:d7: ef:a9:45:1b:8a:a1:c0:f1:59:7c:c9:b3:33:56:ab: 01:50:20:f7:7d:f2:f0:15:5c:2c:cc:9c:1b:10:03: 6e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F2:62:FA:2C:69:22:2F:0E:60:8F:0A:A8:66:E1:AB:CA:3F:80:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfd10aea-83aa-32fb-b166-1901f4d3f67e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:713::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:7f:2a:36:e4:e7:19:b1:a1:77:a0:d2:13:44:ca:73:87:60: 3b:50:28:94:f3:68:38:94:ba:c5:70:38:41:77:d1:90:de:4e: 89:c4:f3:5b:65:74:29:c9:6d:52:78:4c:ed:48:40:30:cf:4a: cb:5b:82:93:35:c8:47:b5:fd:46:55:4d:1d:93:f2:b0:cd:23: f3:6c:ec:ca:85:43:cd:ac:2d:21:04:a1:1f:a9:7b:00:96:ab: 3a:62:b7:27:88:0c:59:00:1d:aa:0e:52:e4:d6:ca:5f:b4:08: 62:ad:7b:0e:97:9b:ca:9f:ef:d3:8a:4e:fa:f2:f6:63:d7:1e: 11:1a:fc:d3:47:6a:7f:49:76:22:ee:e8:96:f1:1d:ad:06:86: e1:e2:67:17:22:84:60:06:d6:0b:3f:22:1f:67:9f:72:da:d6: e8:3c:8d:c8:10:22:55:58:65:d8:4d:e3:22:96:c9:e2:49:8f: 55:66:10:e8:65:f9:0d:db:e4:d6:33:40:58:ac:aa:c6:91:c8: d3:03:48:9d:52:23:14:f2:bd:92:61:19:b9:8c:b8:a0:9c:63: bd:d6:f1:1c:d8:07:64:a8:35:6e:1e:f4:71:4c:ca:3b:b3:96: 47:0e:ad:cc:18:1b:a8:aa:7f:ab:58:d1:4a:ca:0d:35:af:36: 88:13:35:72 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfq89l+FrMVAobdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk ZjhkMGFjZTQtYmI1NS00NzNhLWEzMGYtMGFhNTBlYjdiNmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlh1doap38qG4gZBm+DC+Yl2T4u0hu8OPwwv gdWOYQ+puhbuCTZx31QRWdP15ASv5YKzXdhXRynZqZFrul+L8uevTS0bUDY9ypFt URfrwf9yiV8/+C6CcX6w1UCctZv60G4TOHMINBJQtvSh0I4GartCRRSmDBBjhFsl owWQeuLISBF9QNmrr/J7RQF01rgc/RxKlXIYHpJg36vsJnFnAMEI+k9rggUf/NQX behG2xXmIwvY0idzsC+rBAYuohNELDbI2mjXwZJBHSb+E/hF4ulFmmm95m7fnIY+ DNLw89fvqUUbiqHA8Vl8ybMzVqsBUCD3ffLwFVwszJwbEANuaQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNDyYvosaSIvDmCPCqhm4avKP4D4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmZkMTBhZWEtODNhYS0z MmZiLWIxNjYtMTkwMWY0ZDNmNjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQcT MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGd/Kjbk5xmxoXeg0hNEynOHYDtQKJTzaDiUusVwOEF30ZDeTonE 81tldCnJbVJ4TO1IQDDPSstbgpM1yEe1/UZVTR2T8rDNI/Ns7MqFQ82sLSEEoR+p ewCWqzpityeIDFkAHaoOUuTWyl+0CGKtew6Xm8qf79OKTvry9mPXHhEa/NNHan9J diLu6JbxHa0GhuHiZxcihGAG1gs/Ih9nn3La1ug8jcgQIlVYZdhN4yKWyeJJj1Vm EOhl+Q3b5NYzQFisqsaRyNMDSJ1SIxTyvZJhGbmMuKCcY73W8RzYB2SoNW4e9HFM yjuzlkcOrcwYG6iqf6tY0UrKDTWvNogTNXI= -----END CERTIFICATE-----Generated at Sun May 5 01:34:55 2024 by rpki-client on console-fra.rpki-client.org