$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1dfa218-70a9-308a-98bb-b3d0f39fd52f.roa File: d1dfa218-70a9-308a-98bb-b3d0f39fd52f.roa (raw, json) Hash identifier: jhnUa4gP6YvAvuqu8qlSJW/NEZ29qMlFIWi26jmYAAU= Subject key identifier: 1C:D6:03:AE:F1:F9:C5:4A:E4:A0:CC:D3:55:42:6E:5E:32:1E:D5:BD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAE1CB7A98CCF488F7AFC80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1dfa218-70a9-308a-98bb-b3d0f39fd52f.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 21508 IP address blocks: 2001:559:49b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ae:1c:b7:a9:8c:cf:48:8f:7a:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=08336413-d60d-49b4-a2d8-f25473d65e2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:4e:e3:48:55:c9:4a:f1:fd:57:08:dd:90:16: 11:19:59:4d:d9:2a:24:f3:c7:d2:c9:19:71:94:5d: c1:e4:aa:5a:cb:af:87:e5:a0:8e:db:96:5e:29:ec: 29:ab:15:4f:c9:45:f6:4a:1c:8e:0e:ff:46:03:2f: 91:d7:7c:b2:46:f9:ea:db:e6:73:81:98:58:d5:53: 86:f6:0e:54:c0:91:73:df:8c:15:a2:4f:89:2f:c3: f0:b1:9b:fa:5f:78:20:6b:57:e3:ee:03:d7:05:91: fc:fd:1b:36:b6:3f:4a:ec:e2:a2:35:f4:06:67:97: 3c:fd:52:94:f5:f3:6d:bc:42:95:cc:63:7c:e5:b4: 03:04:94:e2:7b:ca:48:13:d7:d1:31:5c:9a:84:1e: c5:98:c6:14:90:ef:55:c7:f9:d9:53:bd:15:e9:1f: 77:0d:c1:5a:6b:8f:e8:6c:be:58:03:bb:fa:a3:d8: f2:73:a3:a0:fb:b6:24:4a:e4:dc:e5:cc:42:da:8d: da:d5:99:b9:86:61:52:56:83:f3:af:7a:6f:d2:c5: f0:2f:d6:b1:3f:36:e1:fe:c3:99:f7:10:b1:c8:6d: 19:21:fe:f8:11:42:ac:69:9e:38:cf:f2:20:c7:b6: 73:a0:ff:fb:73:81:f6:86:a2:00:d1:0c:1c:4b:e5: 27:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D6:03:AE:F1:F9:C5:4A:E4:A0:CC:D3:55:42:6E:5E:32:1E:D5:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1dfa218-70a9-308a-98bb-b3d0f39fd52f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:49b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:4d:38:ce:4c:99:12:9d:46:25:32:3d:29:28:83:41:6a:9a: 94:cb:15:be:b9:24:40:f8:99:ad:c9:ee:45:84:d8:b1:47:ee: ef:db:c8:9c:23:72:19:7c:65:fe:5c:54:0d:4f:2e:89:2e:4d: 89:0d:e6:cb:a5:7e:f9:e2:b6:5a:58:c4:f6:b6:47:0a:a4:e0: 46:96:37:44:3b:43:a0:4f:d4:4a:52:cb:b6:b8:84:30:97:52: 33:96:dc:9a:c8:e2:6d:72:50:9e:71:e8:6d:c1:92:d2:a5:5e: 3e:0d:b4:62:87:91:1a:eb:db:24:20:77:58:f9:57:c8:15:88: 29:57:e8:30:08:a6:38:73:26:17:41:12:d3:22:b6:d2:b7:dd: f7:a8:d2:a1:68:f7:12:2c:1a:eb:8d:53:ff:c6:e5:ae:ba:b7: c9:6f:3a:a7:3e:48:16:b1:7e:10:74:5e:49:66:7d:29:6e:c6: 70:d7:3f:bc:3c:17:a0:1d:98:0f:74:77:21:e2:01:f3:83:46: d2:55:15:97:a0:db:11:d2:9e:c3:af:ca:f4:36:dd:5f:03:55: 7b:0d:8a:ba:8b:04:63:b1:53:9f:06:3b:b7:e5:b3:0b:8b:92: 81:d6:7b:ea:11:c7:fa:0c:0a:c6:ca:e0:84:24:f1:b5:ea:f1: f9:ad:7e:29 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfrhy3qYzPSI96/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk MDgzMzY0MTMtZDYwZC00OWI0LWEyZDgtZjI1NDczZDY1ZTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhk7jSFXJSvH9VwjdkBYRGVlN2Sok88fSyRlx lF3B5Kpay6+H5aCO25ZeKewpqxVPyUX2ShyODv9GAy+R13yyRvnq2+ZzgZhY1VOG 9g5UwJFz34wVok+JL8PwsZv6X3gga1fj7gPXBZH8/Rs2tj9K7OKiNfQGZ5c8/VKU 9fNtvEKVzGN85bQDBJTie8pIE9fRMVyahB7FmMYUkO9Vx/nZU70V6R93DcFaa4/o bL5YA7v6o9jyc6Og+7YkSuTc5cxC2o3a1Zm5hmFSVoPzr3pv0sXwL9axPzbh/sOZ 9xCxyG0ZIf74EUKsaZ44z/Igx7ZzoP/7c4H2hqIA0QwcS+UnuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBzWA67x+cVK5KDM01VCbl4yHtW9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDFkZmEyMTgtNzBhOS0z MDhhLTk4YmItYjNkMGYzOWZkNTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQSb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKdNOM5MmRKdRiUyPSkog0FqmpTLFb65JED4ma3J7kWE2LFH7u/b yJwjchl8Zf5cVA1PLokuTYkN5sulfvnitlpYxPa2Rwqk4EaWN0Q7Q6BP1EpSy7a4 hDCXUjOW3JrI4m1yUJ5x6G3BktKlXj4NtGKHkRrr2yQgd1j5V8gViClX6DAIpjhz JhdBEtMittK33feo0qFo9xIsGuuNU//G5a66t8lvOqc+SBaxfhB0XklmfSluxnDX P7w8F6AdmA90dyHiAfODRtJVFZeg2xHSnsOvyvQ23V8DVXsNirqLBGOxU58GO7fl swuLkoHWe+oRx/oMCsbK4IQk8bXq8fmtfik= -----END CERTIFICATE-----Generated at Sun May 5 02:47:05 2024 by rpki-client on console-fra.rpki-client.org