$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1dab619-b896-3615-8f36-d3d35a47832b.roa File: d1dab619-b896-3615-8f36-d3d35a47832b.roa (raw, json) Hash identifier: Z0RjhEPDHSmsXiYGWCqejQprsURfINZPBQgmsfYD5S8= Subject key identifier: 52:37:69:2E:70:CA:1E:F0:AF:63:9F:C9:4F:F8:AA:53:0A:11:26:3C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FABBBCE7949A78A04E213C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1dab619-b896-3615-8f36-d3d35a47832b.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 33667 IP address blocks: 2001:559:345::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ab:bb:ce:79:49:a7:8a:04:e2:13:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=2d796b49-4870-48af-8857-77622e9a84a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:da:bd:23:76:14:1c:08:26:cb:5b:d2:56:91: ec:16:9c:54:08:ed:0f:49:85:c2:1e:3a:22:86:5f: bb:e9:03:01:3c:2d:82:1a:57:b9:93:6e:a4:fe:dc: e4:d8:fa:c7:e1:27:32:bf:e1:df:43:6e:f4:09:d8: da:5f:03:f9:9c:e7:da:70:1e:83:14:5d:00:3e:07: 93:be:00:49:3c:a6:03:28:f7:4a:60:66:cc:0c:00: c5:73:f5:96:df:8d:01:3e:f9:80:62:fc:83:ab:48: 77:dd:f8:2c:f7:9d:c0:5d:98:d8:3a:06:cf:c2:9e: 40:57:f0:7f:b8:3d:19:3f:53:71:45:eb:55:b9:6b: a4:be:fa:72:ef:d9:e0:97:ff:4c:a5:a5:22:8e:b6: c3:07:3a:55:59:c8:f0:35:6c:1b:b8:74:bb:a8:ff: 6d:ae:95:ea:dd:ac:98:93:37:a5:2e:04:82:52:ac: 58:ec:9d:a3:ed:89:3c:b6:0c:06:9e:6a:98:6b:92: 96:4e:fa:a4:8f:7a:7f:07:49:9a:61:44:b2:d4:70: 8c:1f:e4:aa:c4:b2:57:11:2a:87:ec:a6:45:b5:2e: c4:36:4a:17:a1:ca:f9:8a:0c:2b:21:af:02:77:56: 66:13:08:1a:b2:2b:68:21:5a:bd:a2:83:0e:cb:e7: 78:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:37:69:2E:70:CA:1E:F0:AF:63:9F:C9:4F:F8:AA:53:0A:11:26:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1dab619-b896-3615-8f36-d3d35a47832b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:345::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:c5:cb:2e:99:9f:92:1e:b1:6e:f9:b0:c0:bf:cb:4f:dc:86: 63:a6:67:f0:b6:ca:2f:ae:8a:ca:44:c0:e3:00:15:e4:8b:3e: 0f:da:3f:48:9a:d2:da:81:f1:fe:88:70:52:3c:b5:f4:d9:af: 43:a4:9c:67:24:f0:fe:08:e6:80:cc:d6:5c:4c:a3:ed:68:73: 71:8b:ee:1d:25:4f:48:33:bc:5e:6d:39:db:50:6f:40:57:88: aa:07:2a:19:6f:ed:ce:0c:d0:a0:84:08:85:db:ec:34:12:27: 4d:d0:20:70:d5:ff:54:4c:d7:7c:25:d7:cb:2d:ee:7a:7f:44: d7:99:bb:23:01:43:1d:f6:c5:60:ab:73:0f:a9:ea:16:71:df: 05:71:38:80:91:d5:9c:04:e5:92:44:d9:f0:02:b6:50:14:81: 58:a6:37:48:d2:43:1b:b3:46:1a:fe:5f:23:53:21:32:5f:b5: 0e:43:9c:eb:9e:51:67:72:c5:9e:0f:54:86:93:b7:37:76:32: 9d:75:9e:6c:18:6b:10:28:f4:1c:7b:1d:c3:21:3e:ef:37:2f: a7:d1:c7:c6:74:ae:aa:e5:36:1e:ca:62:3c:65:a5:32:f4:e5: 7a:49:df:54:18:9d:6b:bd:ef:30:1d:c1:19:6f:7a:67:19:6f: 33:dd:42:d9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfq7vOeUmnigTiE8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk MmQ3OTZiNDktNDg3MC00OGFmLTg4NTctNzc2MjJlOWE4NGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytq9I3YUHAgmy1vSVpHsFpxUCO0PSYXCHjoi hl+76QMBPC2CGle5k26k/tzk2PrH4Scyv+HfQ270CdjaXwP5nOfacB6DFF0APgeT vgBJPKYDKPdKYGbMDADFc/WW340BPvmAYvyDq0h33fgs953AXZjYOgbPwp5AV/B/ uD0ZP1NxRetVuWukvvpy79ngl/9MpaUijrbDBzpVWcjwNWwbuHS7qP9trpXq3ayY kzelLgSCUqxY7J2j7Yk8tgwGnmqYa5KWTvqkj3p/B0maYUSy1HCMH+SqxLJXESqH 7KZFtS7ENkoXocr5igwrIa8Cd1ZmEwgasitoIVq9ooMOy+d4TwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFI3aS5wyh7wr2OfyU/4qlMKESY8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDFkYWI2MTktYjg5Ni0z NjE1LThmMzYtZDNkMzVhNDc4MzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQNF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHnFyy6Zn5IesW75sMC/y0/chmOmZ/C2yi+uispEwOMAFeSLPg/a P0ia0tqB8f6IcFI8tfTZr0OknGck8P4I5oDM1lxMo+1oc3GL7h0lT0gzvF5tOdtQ b0BXiKoHKhlv7c4M0KCECIXb7DQSJ03QIHDV/1RM13wl18st7np/RNeZuyMBQx32 xWCrcw+p6hZx3wVxOICR1ZwE5ZJE2fACtlAUgVimN0jSQxuzRhr+XyNTITJftQ5D nOueUWdyxZ4PVIaTtzd2Mp11nmwYaxAo9Bx7HcMhPu83L6fRx8Z0rqrlNh7KYjxl pTL05XpJ31QYnWu97zAdwRlvemcZbzPdQtk= -----END CERTIFICATE-----Generated at Sun May 5 01:36:06 2024 by rpki-client on console-fra.rpki-client.org