$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d289fb67-6127-3980-b6a3-d5d7f89eef4d.roa File: d289fb67-6127-3980-b6a3-d5d7f89eef4d.roa (raw, json) Hash identifier: Dko8P7ilO+LhmM7498xOIi4f5RTqivhprwd71i+75o8= Subject key identifier: 14:C8:B5:82:5D:FF:56:28:C9:0D:E4:8E:97:86:B3:B6:BB:93:01:09 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285847BEF811C09978A8106FFCF2C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d289fb67-6127-3980-b6a3-d5d7f89eef4d.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 33657 IP address blocks: 2001:559:a01a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:f8:11:c0:99:78:a8:10:6f:fc:f2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=4bfaa42a-5dca-41d8-b9de-b3355928575b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f0:29:25:03:db:8a:6c:e6:4b:0a:82:fb:ab: de:83:57:72:63:22:55:1e:85:c0:1b:58:a4:c7:57: 4d:05:3e:ef:ce:db:02:7f:f7:83:36:50:34:e5:ad: 43:26:7c:e9:83:c1:c5:cf:4b:f3:70:0a:df:8f:aa: ac:29:29:11:61:c3:9a:d0:76:5d:2f:39:9d:3d:10: e8:22:18:fe:aa:3d:fd:8c:7e:69:eb:9e:9e:50:34: 67:a8:d7:93:d9:de:6a:4b:97:fd:88:a8:89:3e:3b: 78:73:07:11:0a:5f:22:09:ea:d8:a4:d4:ca:89:bd: da:cd:04:81:2d:39:3d:56:fc:b3:77:3c:5c:2f:76: 7f:84:8c:79:ca:89:6e:67:0b:d2:59:be:13:d2:4c: 9c:c5:f2:3b:8c:4d:86:67:2b:76:13:50:e9:28:e5: 4f:da:23:b6:13:e1:38:54:fb:04:df:a4:31:0a:05: 86:b4:80:e5:7a:46:52:d7:66:32:94:f9:4d:c7:8a: dc:07:38:4d:ec:77:09:ce:a9:0f:4a:b2:1c:eb:26: b6:e5:ba:fd:14:aa:48:7e:f9:9f:76:02:cb:33:ae: cc:d2:a6:ca:3d:c4:1c:c9:bd:84:54:9e:bc:5c:f1: cc:13:ca:c2:ee:90:97:5e:49:9f:19:fd:1c:24:9f: 9c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C8:B5:82:5D:FF:56:28:C9:0D:E4:8E:97:86:B3:B6:BB:93:01:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d289fb67-6127-3980-b6a3-d5d7f89eef4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:a01a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:a1:db:e1:c7:af:90:e1:a2:89:f3:7a:bf:b2:d1:32:d5:53: 69:7a:dd:4d:f9:04:54:15:9d:3f:86:d3:51:75:7f:41:36:f9: c0:eb:4b:87:fd:04:1f:c0:ec:f5:f3:c4:ce:fc:ec:dc:23:34: b0:bd:b1:c3:df:dc:53:c8:00:52:27:57:93:38:f5:18:a7:72: 37:fa:28:c0:8a:4e:a3:65:13:54:1b:60:60:5f:dd:64:53:ac: 58:2d:98:55:70:0b:f7:c6:b9:d4:65:b3:d0:2e:1e:49:5e:95: ca:93:04:c7:a3:8e:9b:c0:9e:1a:35:15:02:92:43:59:08:d0: 82:50:6a:c5:ed:4b:3a:c8:04:0e:15:2a:91:5b:5e:27:ed:63: 32:b2:8f:a3:59:1d:4a:af:20:1c:6b:7b:c2:db:c8:02:db:d7: be:aa:ea:7d:47:fe:81:85:c0:4c:a8:20:65:8a:c1:b8:a3:09: 2f:8c:92:a7:30:1a:74:07:b1:ad:02:29:42:f6:60:00:18:29: 55:ba:0d:8f:be:34:1b:fa:f3:24:17:f9:0e:fd:e6:7b:ed:7f: 0c:de:12:6a:c5:51:79:5d:47:97:da:99:ed:5e:61:d4:15:6a: 0d:75:e6:43:77:8a:92:48:e4:bf:ff:9a:71:41:06:d0:39:a5: e3:c9:22:49 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe++BHAmXioEG/88sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk NGJmYWE0MmEtNWRjYS00MWQ4LWI5ZGUtYjMzNTU5Mjg1NzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/ApJQPbimzmSwqC+6veg1dyYyJVHoXAG1ik x1dNBT7vztsCf/eDNlA05a1DJnzpg8HFz0vzcArfj6qsKSkRYcOa0HZdLzmdPRDo Ihj+qj39jH5p656eUDRnqNeT2d5qS5f9iKiJPjt4cwcRCl8iCerYpNTKib3azQSB LTk9VvyzdzxcL3Z/hIx5yoluZwvSWb4T0kycxfI7jE2GZyt2E1DpKOVP2iO2E+E4 VPsE36QxCgWGtIDlekZS12YylPlNx4rcBzhN7HcJzqkPSrIc6ya25br9FKpIfvmf dgLLM67M0qbKPcQcyb2EVJ68XPHME8rC7pCXXkmfGf0cJJ+cTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBTItYJd/1YoyQ3kjpeGs7a7kwEJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDI4OWZiNjctNjEyNy0z OTgwLWI2YTMtZDVkN2Y4OWVlZjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWaAa MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADuh2+HHr5Dhoonzer+y0TLVU2l63U35BFQVnT+G01F1f0E2+cDr S4f9BB/A7PXzxM787NwjNLC9scPf3FPIAFInV5M49Rincjf6KMCKTqNlE1QbYGBf 3WRTrFgtmFVwC/fGudRls9AuHklelcqTBMejjpvAnho1FQKSQ1kI0IJQasXtSzrI BA4VKpFbXiftYzKyj6NZHUqvIBxre8LbyALb176q6n1H/oGFwEyoIGWKwbijCS+M kqcwGnQHsa0CKUL2YAAYKVW6DY++NBv68yQX+Q795nvtfwzeEmrFUXldR5fame1e YdQVag115kN3ipJI5L//mnFBBtA5pePJIkk= -----END CERTIFICATE-----Generated at Fri Nov 22 11:35:27 2024 by rpki-client on console-fra.rpki-client.org