$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0e8136b-ad07-3d1e-bd8a-f682903e6a1e.roa File: d0e8136b-ad07-3d1e-bd8a-f682903e6a1e.roa (raw, json) Hash identifier: 6TpJuPSm9AE9++uD419tWFZfMT7cLVmOw+Es8Qh0hxw= Subject key identifier: 60:78:29:59:9B:32:97:C4:55:ED:D9:79:77:4D:96:41:25:B9:17:29 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAB97720B152DC2BE009080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0e8136b-ad07-3d1e-bd8a-f682903e6a1e.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 33651 IP address blocks: 2001:559:c21f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ab:97:72:0b:15:2d:c2:be:00:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=072e930a-83b4-462f-8e0f-cac6cee22b56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:78:70:bd:68:d6:da:3d:94:44:74:19:9d:e0: 32:b7:8a:bc:7b:02:c6:07:6e:d2:2d:67:83:3e:fc: e1:42:8b:3e:d8:69:fc:4d:62:4f:ee:fb:2e:44:36: 4e:07:25:87:49:d4:e5:4e:a4:1c:f2:fb:b0:54:0a: fc:a5:68:b4:fb:84:2a:49:86:2b:b3:7c:82:bd:3b: 9c:b7:41:30:df:c1:b5:22:64:ec:22:ac:8d:a3:34: f6:83:36:69:e8:ad:7c:db:5d:32:d0:78:15:e7:63: 5b:68:80:bb:ca:cf:b8:4e:e7:5b:82:f8:75:27:9a: 8e:53:4f:61:22:57:b5:ba:b9:41:e3:4c:e8:fb:2f: 6b:b7:c1:33:fe:dc:28:f1:1f:64:f8:c8:92:11:83: f6:86:e7:c8:f2:96:b0:be:bd:1f:da:23:eb:4e:d6: 96:c5:23:7f:a7:3c:11:d1:11:9d:95:02:c2:b4:57: 9b:11:c9:0f:ee:bd:2d:17:e7:38:77:a3:ed:11:ca: 41:f6:41:08:21:f5:56:79:e0:71:3a:5a:a9:da:8d: eb:dd:d0:e7:71:a3:6b:c0:5d:22:94:ec:f1:79:d4: 63:b8:91:08:8b:35:d9:86:cc:79:13:68:6c:d1:f9: e7:da:31:3c:cc:cf:7e:92:1f:77:34:02:fc:cb:6d: 5b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:78:29:59:9B:32:97:C4:55:ED:D9:79:77:4D:96:41:25:B9:17:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0e8136b-ad07-3d1e-bd8a-f682903e6a1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c21f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:25:ed:59:29:f2:45:ca:18:71:93:0e:3d:dc:91:d2:9c:00: e6:fa:29:45:d3:cf:77:c5:45:c1:d5:63:bb:0b:34:0c:b9:63: 4a:b7:d7:8f:9f:98:73:8b:fa:a8:83:1f:b7:19:45:66:57:23: f4:7b:70:ac:75:47:89:d0:57:00:f0:c0:09:c8:c4:51:22:91: 5c:3e:be:0b:9b:a1:d9:e7:e0:7e:be:80:22:17:f3:15:e5:67: 46:ab:90:9e:6e:45:f4:8d:d1:fb:4c:e5:eb:23:98:db:10:e0: 84:53:4e:aa:3f:46:dd:23:f2:86:6e:71:df:66:bf:40:ff:1b: f5:d7:73:1a:78:a5:4f:ff:83:17:52:29:cc:bb:66:f8:a8:98: 1a:bb:f8:a6:cd:40:ae:e0:c1:51:60:09:f6:3f:5b:8d:ba:62: 64:a6:aa:5d:29:af:cb:10:a8:e0:e5:90:b6:60:23:e2:ce:4d: f7:36:e1:c8:7b:ad:15:c4:51:e0:97:6c:19:9c:fc:5c:83:b4: d9:b7:cb:9a:88:24:8a:32:c1:6a:66:3c:7a:e7:47:3c:47:77: 3a:dd:f4:d6:d5:c2:f9:d1:cb:fa:10:8b:c6:e1:05:20:9f:b8: 6a:27:3f:68:ed:80:d3:88:3d:23:de:7f:2f:ce:2a:10:7f:98: ed:72:ed:a3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfq5dyCxUtwr4AkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk MDcyZTkzMGEtODNiNC00NjJmLThlMGYtY2FjNmNlZTIyYjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHhwvWjW2j2URHQZneAyt4q8ewLGB27SLWeD PvzhQos+2Gn8TWJP7vsuRDZOByWHSdTlTqQc8vuwVAr8pWi0+4QqSYYrs3yCvTuc t0Ew38G1ImTsIqyNozT2gzZp6K18210y0HgV52NbaIC7ys+4Tudbgvh1J5qOU09h Ile1urlB40zo+y9rt8Ez/two8R9k+MiSEYP2hufI8pawvr0f2iPrTtaWxSN/pzwR 0RGdlQLCtFebEckP7r0tF+c4d6PtEcpB9kEIIfVWeeBxOlqp2o3r3dDncaNrwF0i lOzxedRjuJEIizXZhsx5E2hs0fnn2jE8zM9+kh93NAL8y21bAQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGB4KVmbMpfEVe3ZeXdNlkEluRcpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDBlODEzNmItYWQwNy0z ZDFlLWJkOGEtZjY4MjkwM2U2YTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcIf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMQl7Vkp8kXKGHGTDj3ckdKcAOb6KUXTz3fFRcHVY7sLNAy5Y0q3 14+fmHOL+qiDH7cZRWZXI/R7cKx1R4nQVwDwwAnIxFEikVw+vgubodnn4H6+gCIX 8xXlZ0arkJ5uRfSN0ftM5esjmNsQ4IRTTqo/Rt0j8oZucd9mv0D/G/XXcxp4pU// gxdSKcy7ZviomBq7+KbNQK7gwVFgCfY/W426YmSmql0pr8sQqODlkLZgI+LOTfc2 4ch7rRXEUeCXbBmc/FyDtNm3y5qIJIoywWpmPHrnRzxHdzrd9NbVwvnRy/oQi8bh BSCfuGonP2jtgNOIPSPefy/OKhB/mO1y7aM= -----END CERTIFICATE-----Generated at Sat May 4 14:57:54 2024 by rpki-client on console-ams.rpki-client.org