$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8be00b9-e489-3c5c-a6de-82634840a10f.roa File: c8be00b9-e489-3c5c-a6de-82634840a10f.roa (raw, json) Hash identifier: ZFYcLwFKGb37mBPXG4Mh1ajkpxBmno2HtOPx1BSRLnc= Subject key identifier: 12:AD:05:03:AA:4D:A0:6C:08:ED:07:AB:D7:1A:A3:84:D4:BE:7F:4C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FB06DAB82A9838821D6CA60 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8be00b9-e489-3c5c-a6de-82634840a10f.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 33659 IP address blocks: 2001:559:2f1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:b0:6d:ab:82:a9:83:88:21:d6:ca:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=9efe1e5b-7d57-429d-b401-374b47ff1ad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9e:1c:d0:cb:4d:f5:86:21:c1:cc:7b:73:15: 6f:f3:e4:fa:e7:a3:87:13:57:15:2d:47:a3:a7:f1: ad:64:59:08:3d:b7:86:1e:ae:ea:3d:23:81:c4:0e: b3:ae:2a:3e:d4:75:74:75:84:bb:41:06:89:1f:6e: 54:c6:97:9f:27:02:2f:6b:a1:d7:cd:4b:f9:f0:e6: 68:69:4f:c5:2d:79:32:98:27:19:8f:ec:6a:d0:53: be:80:78:c4:2a:78:b1:25:cc:8e:7b:76:55:97:77: 31:02:79:ff:f8:07:87:0e:ae:f0:92:33:30:dc:9b: 05:e6:32:32:93:8f:2d:e1:c8:ad:ff:ef:44:c6:84: c5:da:05:66:68:fd:21:00:38:c4:46:38:d8:c0:f1: ae:6d:8e:a3:7d:e6:d4:2c:7d:5e:d7:74:5b:f6:25: ee:a6:e9:07:6b:c8:e3:0d:fc:90:a0:82:7b:e6:d9: d6:d7:37:87:84:19:40:07:43:4b:9b:87:f3:3b:a1: 51:03:e3:02:8b:2c:8e:2a:4e:b3:31:3e:6b:fd:32: e8:2c:cf:16:97:ec:14:eb:0b:90:08:06:84:11:e9: c4:6c:6b:20:4b:c6:ef:21:50:bf:17:43:1f:ad:81: 9d:39:c5:c3:c4:28:fd:0d:38:26:20:76:ce:33:72: fc:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:AD:05:03:AA:4D:A0:6C:08:ED:07:AB:D7:1A:A3:84:D4:BE:7F:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8be00b9-e489-3c5c-a6de-82634840a10f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:2f1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:cc:71:c1:99:0b:e2:78:b2:2f:12:9d:c9:dd:09:70:d9:6a: ed:9c:84:d3:40:66:4b:e3:af:11:fc:f2:58:e5:5e:fd:95:89: 07:13:79:db:7f:98:15:05:72:f4:2d:11:43:4b:e3:e0:a1:9e: 96:9b:70:fc:e2:89:b3:a5:1b:39:a4:9d:2a:84:48:6f:93:fd: df:68:76:10:81:1d:39:31:6f:bf:e5:8c:32:c7:ea:83:ff:ff: ad:16:8b:db:ad:ec:18:2e:d2:cf:a6:20:36:f6:86:08:77:87: 07:38:af:f8:bd:01:21:be:d6:a0:60:c9:59:5c:19:06:a6:c8: a8:26:67:92:ce:ae:61:83:a2:db:8c:3f:28:e8:9c:be:0b:6e: 14:e4:ae:64:17:2a:2f:1e:b1:cd:19:ec:40:8f:72:66:8a:94: 9d:b6:ba:e1:12:aa:c1:e1:9a:4e:d3:47:e3:29:90:5f:55:3f: 4b:dc:f9:f5:99:12:07:a5:2a:2b:61:ad:f5:a4:85:5c:a0:02: 31:ab:16:96:4d:08:a9:4f:83:83:b1:02:6a:86:e8:35:80:6b: 6f:3e:e9:50:0d:70:ab:87:fa:5a:4c:d0:a3:4b:ad:74:cf:24: fd:0c:fe:b8:f4:6b:b1:0a:9e:00:d3:e7:4f:67:7f:d2:76:32: 4c:44:36:86 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfsG2rgqmDiCHWymAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk OWVmZTFlNWItN2Q1Ny00MjlkLWI0MDEtMzc0YjQ3ZmYxYWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZ4c0MtN9YYhwcx7cxVv8+T656OHE1cVLUej p/GtZFkIPbeGHq7qPSOBxA6zrio+1HV0dYS7QQaJH25UxpefJwIva6HXzUv58OZo aU/FLXkymCcZj+xq0FO+gHjEKnixJcyOe3ZVl3cxAnn/+AeHDq7wkjMw3JsF5jIy k48t4cit/+9ExoTF2gVmaP0hADjERjjYwPGubY6jfebULH1e13Rb9iXupukHa8jj DfyQoIJ75tnW1zeHhBlAB0NLm4fzO6FRA+MCiyyOKk6zMT5r/TLoLM8Wl+wU6wuQ CAaEEenEbGsgS8bvIVC/F0MfrYGdOcXDxCj9DTgmIHbOM3L84QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBKtBQOqTaBsCO0Hq9cao4TUvn9MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzhiZTAwYjktZTQ4OS0z YzVjLWE2ZGUtODI2MzQ4NDBhMTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQLx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJTMccGZC+J4si8SncndCXDZau2chNNAZkvjrxH88ljlXv2ViQcT edt/mBUFcvQtEUNL4+ChnpabcPziibOlGzmknSqESG+T/d9odhCBHTkxb7/ljDLH 6oP//60Wi9ut7Bgu0s+mIDb2hgh3hwc4r/i9ASG+1qBgyVlcGQamyKgmZ5LOrmGD otuMPyjonL4LbhTkrmQXKi8esc0Z7ECPcmaKlJ22uuESqsHhmk7TR+MpkF9VP0vc +fWZEgelKithrfWkhVygAjGrFpZNCKlPg4OxAmqG6DWAa28+6VANcKuH+lpM0KNL rXTPJP0M/rj0a7EKngDT509nf9J2MkxENoY= -----END CERTIFICATE-----Generated at Sun May 5 02:46:29 2024 by rpki-client on console-fra.rpki-client.org