$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfd10aea-83aa-32fb-b166-1901f4d3f67e.roa File: bfd10aea-83aa-32fb-b166-1901f4d3f67e.roa (raw, json) Hash identifier: D2uG907vH5g0g9ktCA0AwK70cS4WRqPbqIKsFx9XkhA= Subject key identifier: 33:EE:45:C2:1E:24:19:7B:D0:02:04:6B:1A:6C:E4:39:E9:A3:E1:E4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285847BEF7A6CBA25E5051742D6D00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfd10aea-83aa-32fb-b166-1901f4d3f67e.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 7015 IP address blocks: 2001:559:713::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:f7:a6:cb:a2:5e:50:51:74:2d:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=ffacba57-c5ec-48b0-b521-11fb5c8119c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:fd:0b:15:07:d9:6c:f8:b2:a6:91:59:58:47: 80:52:df:54:aa:48:0b:46:99:d8:02:d2:06:1b:4a: 9e:51:40:c7:5b:c3:c7:5d:99:20:a8:3e:3b:96:08: 85:54:a5:e9:ce:09:61:74:16:67:5c:d7:67:23:96: f0:f2:26:16:84:b9:0f:f2:22:1d:ab:e4:71:8c:b6: 34:ec:84:3d:df:20:a5:cb:4c:dc:5c:f0:24:10:5a: 31:7e:6d:30:8a:b8:a4:09:94:d8:54:57:e8:b8:b5: 86:af:42:73:56:80:d9:e8:e4:ac:f0:a7:c9:d2:1a: 6b:f8:f3:1e:8e:eb:29:5c:54:52:23:a5:0e:ee:e0: 5d:e1:04:82:6a:e1:89:23:9f:5f:02:5b:52:3e:31: 89:a8:80:5e:79:c6:27:b2:70:b5:91:9d:98:0f:77: 0e:1d:c8:fe:8b:dc:a2:b3:d1:30:1f:d8:5b:7f:60: 7e:3a:4d:f6:7c:43:21:a4:29:be:b7:97:2a:b4:70: 88:09:fe:49:e5:da:98:df:07:58:d4:0d:b6:d7:36: 13:65:07:6e:2b:0e:6a:20:e2:19:48:f4:3b:5e:36: f3:68:47:a3:2a:69:63:ee:79:1f:9f:05:8a:d7:7c: 13:be:e4:01:38:a3:f3:17:04:46:6e:16:07:90:66: ea:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:EE:45:C2:1E:24:19:7B:D0:02:04:6B:1A:6C:E4:39:E9:A3:E1:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfd10aea-83aa-32fb-b166-1901f4d3f67e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:713::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:93:ca:57:4f:da:e8:ed:d4:db:67:ac:4b:a6:ee:4c:5b:ae: e4:89:7d:1d:04:e0:73:cf:5f:19:a1:82:9b:71:f3:b7:46:db: d4:66:28:fe:83:a1:53:f4:bd:10:44:ef:b4:23:34:2d:ed:1f: 6c:f8:2f:a9:e1:9f:5f:8c:28:fb:b0:f7:d0:ff:86:b0:c4:9b: b3:8e:18:f5:52:40:8c:49:bf:00:bf:b1:d0:51:70:0a:d1:ed: 1d:cc:bd:44:f5:07:da:30:7f:b2:37:be:02:f0:c9:52:44:53: f6:d8:6f:a6:99:6c:50:03:0f:17:6d:d4:8c:71:04:24:fd:1e: de:d3:74:56:b8:7b:67:f3:8f:29:ef:96:a8:8b:72:f8:d1:5a: 0f:a7:77:2f:d4:7b:13:a7:ca:ba:91:24:8b:f5:64:ad:4f:97: 2d:d5:12:5d:36:2f:18:04:27:b3:b8:f1:fa:da:4e:6d:fa:c9: 81:ea:10:c4:54:7a:ca:bd:02:e1:ac:bf:e2:50:a9:7f:41:38: 1b:8c:44:95:4d:b9:1e:37:ea:85:f0:38:da:7f:37:dc:84:b2: 1d:28:a6:8c:b3:1b:5f:61:b7:25:31:25:4c:d3:2d:bb:82:79: ca:0b:3e:00:bd:68:b9:07:15:51:3e:93:05:1e:f8:6a:6d:fb: 5a:37:fe:70 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe+96bLol5QUXQtbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk ZmZhY2JhNTctYzVlYy00OGIwLWI1MjEtMTFmYjVjODExOWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgv0LFQfZbPiyppFZWEeAUt9UqkgLRpnYAtIG G0qeUUDHW8PHXZkgqD47lgiFVKXpzglhdBZnXNdnI5bw8iYWhLkP8iIdq+RxjLY0 7IQ93yCly0zcXPAkEFoxfm0wirikCZTYVFfouLWGr0JzVoDZ6OSs8KfJ0hpr+PMe juspXFRSI6UO7uBd4QSCauGJI59fAltSPjGJqIBeecYnsnC1kZ2YD3cOHcj+i9yi s9EwH9hbf2B+Ok32fEMhpCm+t5cqtHCICf5J5dqY3wdY1A221zYTZQduKw5qIOIZ SPQ7XjbzaEejKmlj7nkfnwWK13wTvuQBOKPzFwRGbhYHkGbqoQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDPuRcIeJBl70AIEaxps5Dnpo+HkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmZkMTBhZWEtODNhYS0z MmZiLWIxNjYtMTkwMWY0ZDNmNjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQcT MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJGTyldP2ujt1NtnrEum7kxbruSJfR0E4HPPXxmhgptx87dG29Rm KP6DoVP0vRBE77QjNC3tH2z4L6nhn1+MKPuw99D/hrDEm7OOGPVSQIxJvwC/sdBR cArR7R3MvUT1B9owf7I3vgLwyVJEU/bYb6aZbFADDxdt1IxxBCT9Ht7TdFa4e2fz jynvlqiLcvjRWg+ndy/UexOnyrqRJIv1ZK1Ply3VEl02LxgEJ7O48fraTm36yYHq EMRUesq9AuGsv+JQqX9BOBuMRJVNuR436oXwONp/N9yEsh0opoyzG19htyUxJUzT LbuCecoLPgC9aLkHFVE+kwUe+Gpt+1o3/nA= -----END CERTIFICATE-----Generated at Mon Nov 25 20:07:23 2024 by rpki-client on console-fra.rpki-client.org