$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf99fb2e-993b-3c5a-bb4e-7ac65f645def.roa File: cf99fb2e-993b-3c5a-bb4e-7ac65f645def.roa (raw, json) Hash identifier: 5s1ZJ72tNXAQhz2cSYrH6cqlYNErm6Nwg2zVEs7DFcQ= Subject key identifier: 24:D0:0B:C9:8D:DF:D4:CE:65:1B:0C:F2:16:BC:76:46:96:6F:E3:B2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAB9383EF8E27E763F09D00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf99fb2e-993b-3c5a-bb4e-7ac65f645def.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 33651 IP address blocks: 2001:559:344::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ab:93:83:ef:8e:27:e7:63:f0:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=3c3868f1-e46c-4c11-92a1-4aa44a01e45b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:6d:64:c2:c5:63:06:71:94:09:63:39:f6:8e: c6:98:6b:d6:5e:c9:75:27:09:a5:29:50:c7:7c:d2: 56:d3:89:12:56:b7:97:c0:15:5e:86:97:50:b1:e4: 76:88:c2:66:5a:88:4f:7d:71:21:64:d7:86:ea:a4: 10:79:61:af:9c:d1:62:54:03:a2:aa:00:2f:e9:9c: 10:08:97:b2:8d:f6:95:1f:83:b9:47:b6:f1:4b:c6: 91:67:70:5f:d0:ed:ac:f8:5c:64:a4:2e:29:27:5e: 21:7a:10:26:c0:d3:e9:8b:31:66:6c:c4:1b:14:e3: b1:2c:bb:a4:f1:40:e7:58:57:48:a7:ba:c8:a0:93: 41:49:79:a0:28:d6:73:60:b2:b8:5d:ab:98:89:c5: a1:e8:43:6b:cc:d9:8c:df:a4:e7:5d:0d:8d:db:32: 5d:39:5a:7c:bd:fa:1c:3d:dd:c3:77:0b:d2:1d:74: 74:ac:3d:3d:92:04:5d:45:41:4e:d0:17:cc:60:be: 91:20:d8:1c:b7:c0:9c:0f:ac:ff:32:5f:00:b9:0a: d2:68:ef:a4:ac:53:f4:18:4a:0a:2b:8b:79:5a:81: 4d:fe:5c:8d:37:9f:11:d7:96:62:a1:ad:7c:1b:06: 89:55:07:d1:ba:e0:9f:14:17:9a:8f:95:cf:33:2f: a5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D0:0B:C9:8D:DF:D4:CE:65:1B:0C:F2:16:BC:76:46:96:6F:E3:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf99fb2e-993b-3c5a-bb4e-7ac65f645def.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:344::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:46:3a:cb:ba:c4:14:72:bb:3f:df:22:5c:59:31:e0:2e:1a: fd:66:d6:10:2b:ff:01:9d:f3:78:64:90:e9:72:dd:d8:76:4e: 6e:30:cc:36:71:fa:91:d4:f2:fc:85:9d:38:44:30:bd:77:1a: bf:7e:c6:1b:41:16:0f:08:47:10:b7:14:e6:8b:53:25:07:1a: 52:7e:a9:bf:10:a7:a7:fc:a7:79:c0:a4:8d:d4:62:47:d1:13: e7:af:fe:8d:e4:44:c7:f1:1d:69:b8:01:2c:fa:c2:aa:4c:0f: df:ce:49:ec:4f:8b:0f:0d:a1:04:b1:ab:52:a5:79:5f:46:3a: 87:d2:b5:c2:e5:51:1b:b8:3b:31:4d:5a:8f:22:20:8e:d9:b4: 26:91:8a:cc:6b:25:b2:6f:d0:23:7a:38:5d:78:b9:5d:a8:ff: a4:a5:e1:36:c6:88:4c:3a:45:6f:66:30:1f:e8:1c:12:37:58: 45:cf:7d:f3:1d:01:06:b8:2b:a9:61:22:fe:ae:23:c2:cd:13: 93:b0:7f:b2:fc:53:73:48:dd:20:91:a2:83:f1:42:85:c9:3b: f7:f1:62:92:f3:ec:e0:bd:56:24:36:56:72:fa:56:0e:f9:b1: eb:5d:54:32:87:2e:43:a9:65:52:19:50:b3:d2:8e:cc:25:a1: d0:52:34:52 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfq5OD744n52PwnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk M2MzODY4ZjEtZTQ2Yy00YzExLTkyYTEtNGFhNDRhMDFlNDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhG1kwsVjBnGUCWM59o7GmGvWXsl1JwmlKVDH fNJW04kSVreXwBVehpdQseR2iMJmWohPfXEhZNeG6qQQeWGvnNFiVAOiqgAv6ZwQ CJeyjfaVH4O5R7bxS8aRZ3Bf0O2s+FxkpC4pJ14hehAmwNPpizFmbMQbFOOxLLuk 8UDnWFdIp7rIoJNBSXmgKNZzYLK4XauYicWh6ENrzNmM36TnXQ2N2zJdOVp8vfoc Pd3DdwvSHXR0rD09kgRdRUFO0BfMYL6RINgct8CcD6z/Ml8AuQrSaO+krFP0GEoK K4t5WoFN/lyNN58R15Zioa18GwaJVQfRuuCfFBeaj5XPMy+lywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCTQC8mN39TOZRsM8ha8dkaWb+OyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2Y5OWZiMmUtOTkzYi0z YzVhLWJiNGUtN2FjNjVmNjQ1ZGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQNE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMJGOsu6xBRyuz/fIlxZMeAuGv1m1hAr/wGd83hkkOly3dh2Tm4w zDZx+pHU8vyFnThEML13Gr9+xhtBFg8IRxC3FOaLUyUHGlJ+qb8Qp6f8p3nApI3U YkfRE+ev/o3kRMfxHWm4ASz6wqpMD9/OSexPiw8NoQSxq1KleV9GOofStcLlURu4 OzFNWo8iII7ZtCaRisxrJbJv0CN6OF14uV2o/6Sl4TbGiEw6RW9mMB/oHBI3WEXP ffMdAQa4K6lhIv6uI8LNE5Owf7L8U3NI3SCRooPxQoXJO/fxYpLz7OC9ViQ2VnL6 Vg75setdVDKHLkOpZVIZULPSjswlodBSNFI= -----END CERTIFICATE-----Generated at Sun May 5 01:35:57 2024 by rpki-client on console-fra.rpki-client.org