$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d14c9cd0-c784-3111-8e81-a63f1a3f50d1.roa File: d14c9cd0-c784-3111-8e81-a63f1a3f50d1.roa (raw, json) Hash identifier: 5bo/yFA10b5fW/VRIGRBZlDclzgZIQxqjYIQRgisMV0= Subject key identifier: CE:D5:AE:AF:B2:A7:08:4C:49:42:C8:C7:6A:59:DF:A3:B5:AD:E6:B0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285847BEF8616503EFBF2DAC8BD940 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d14c9cd0-c784-3111-8e81-a63f1a3f50d1.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 19047 IP address blocks: 2001:559:0:f::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:f8:61:65:03:ef:bf:2d:ac:8b:d9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=e25234c6-aa81-43ce-b048-bc7251246701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:bb:0e:dd:8a:43:f3:08:74:7c:6c:10:79:0a: 32:55:43:32:63:44:22:cc:4f:e0:fa:3b:cb:fe:21: a6:af:03:2d:3d:a9:6f:37:88:4a:35:68:b0:77:cb: 0d:ae:79:84:91:9f:99:9b:27:ed:63:7d:b8:b9:fa: ff:47:3f:84:fb:90:3e:d1:79:7e:e6:d3:8e:62:8e: 4f:82:5f:33:bd:58:17:45:1a:93:b0:05:52:4e:61: d2:ed:87:0c:8b:c5:86:4b:92:f5:4a:4e:7d:fa:56: 25:fc:bd:39:eb:57:77:75:f8:2b:a9:ca:a9:71:a1: cc:25:c7:e0:86:ec:53:fb:80:c0:21:1a:c4:6f:0a: 2b:55:8e:ed:a4:b5:b1:3e:c3:dd:c2:e9:6f:58:85: d6:73:11:90:cc:53:14:8f:2b:b1:26:64:ec:e8:36: 17:9f:53:b5:3e:dd:0f:29:b8:b9:2a:bc:01:ff:58: ff:99:82:67:82:7d:e9:37:bd:2e:b7:4b:9f:42:76: c2:a9:bd:90:7c:70:e8:cb:82:47:15:39:2f:8d:38: 46:13:5c:4d:09:bc:56:55:c9:d3:5b:da:e0:39:5f: 01:35:56:fe:15:5b:3b:c3:37:12:99:83:88:97:76: 4b:29:88:c1:28:20:ec:43:3e:64:df:b7:89:94:a4: 31:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D5:AE:AF:B2:A7:08:4C:49:42:C8:C7:6A:59:DF:A3:B5:AD:E6:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d14c9cd0-c784-3111-8e81-a63f1a3f50d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:0:f::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:9d:c7:c4:97:d3:f9:8c:98:32:a4:79:91:e4:8b:df:66:06: 70:66:f0:41:a1:ae:d8:c1:a6:2c:7a:fe:43:42:17:34:cd:d8: 92:e4:58:14:83:f7:f7:4a:86:c7:c5:5c:fb:0a:2e:d2:bc:e1: c5:0f:5a:15:57:7a:63:cb:c3:ad:7b:c0:36:40:83:af:39:7f: 9a:b9:44:6b:c0:3a:4e:21:ba:ac:6e:f3:05:b8:d8:e2:26:c4: 7d:aa:5f:6e:08:e6:1f:45:cc:a5:3f:61:27:bf:23:2e:e5:a6: c0:bf:b0:87:8d:9c:ed:20:12:b7:87:45:98:49:7d:6f:8f:c7: de:46:8c:f2:4e:ea:6f:21:bd:c5:e3:c6:43:97:63:58:14:5d: a3:4b:ec:ff:7d:4e:de:17:5f:1d:b7:fe:dd:3a:72:5e:13:36: ca:17:4a:bb:81:8b:60:d6:bf:b1:1d:ec:10:5f:d7:1b:4f:4b: 7b:d9:61:9b:9d:23:2f:b1:0e:ba:1c:d0:1f:02:f6:2a:7a:20: 36:f3:33:c1:a0:a7:53:64:47:4e:64:d3:db:25:84:f4:68:87: 5c:87:be:a8:1d:fa:c7:ee:10:1f:2b:c7:a8:ad:77:2c:03:8e: 0c:ad:6a:d7:8f:c3:d5:b3:8d:39:28:4a:6f:6e:6e:0f:d8:8a: a1:fb:f1:06 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEe++GFlA++/LayL2UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk ZTI1MjM0YzYtYWE4MS00M2NlLWIwNDgtYmM3MjUxMjQ2NzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LsO3YpD8wh0fGwQeQoyVUMyY0QizE/g+jvL /iGmrwMtPalvN4hKNWiwd8sNrnmEkZ+ZmyftY324ufr/Rz+E+5A+0Xl+5tOOYo5P gl8zvVgXRRqTsAVSTmHS7YcMi8WGS5L1Sk59+lYl/L0561d3dfgrqcqpcaHMJcfg huxT+4DAIRrEbworVY7tpLWxPsPdwulvWIXWcxGQzFMUjyuxJmTs6DYXn1O1Pt0P Kbi5KrwB/1j/mYJngn3pN70ut0ufQnbCqb2QfHDoy4JHFTkvjThGE1xNCbxWVcnT W9rgOV8BNVb+FVs7wzcSmYOIl3ZLKYjBKCDsQz5k37eJlKQxFQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFM7Vrq+ypwhMSULIx2pZ36O1reawMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDE0YzljZDAtYzc4NC0z MTExLThlODEtYTYzZjFhM2Y1MGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEFWQAA AA8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEA1p3HxJfT+YyYMqR5keSL32YGcGbwQaGu2MGmLHr+Q0IXNM3Y kuRYFIP390qGx8Vc+wou0rzhxQ9aFVd6Y8vDrXvANkCDrzl/mrlEa8A6TiG6rG7z BbjY4ibEfapfbgjmH0XMpT9hJ78jLuWmwL+wh42c7SASt4dFmEl9b4/H3kaM8k7q byG9xePGQ5djWBRdo0vs/31O3hdfHbf+3TpyXhM2yhdKu4GLYNa/sR3sEF/XG09L e9lhm50jL7EOuhzQHwL2KnogNvMzwaCnU2RHTmTT2yWE9GiHXIe+qB36x+4QHyvH qK13LAOODK1q14/D1bONOShKb25uD9iKofvxBg== -----END CERTIFICATE-----Generated at Fri Nov 22 11:35:21 2024 by rpki-client on console-fra.rpki-client.org