$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da533914-1577-366b-829c-1aee59e0715d.roa File: da533914-1577-366b-829c-1aee59e0715d.roa (raw, json) Hash identifier: R9gpvJPbOR9EH1vhogGSazzz4DisuYUeOJ0j1D9e/CA= Subject key identifier: 65:CF:DB:6B:DA:4B:87:52:53:35:D3:99:B8:17:C0:C5:C3:F1:76:19 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAB8A86B32CC96F5B507C00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da533914-1577-366b-829c-1aee59e0715d.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 33650 IP address blocks: 2001:559:870d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ab:8a:86:b3:2c:c9:6f:5b:50:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=1fbe123a-de89-4317-b7fd-2435a90f0b12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8a:0c:11:5c:d5:2d:48:9a:6e:56:b4:d1:b6: cb:44:43:a5:ff:1b:6a:49:39:b3:e1:83:31:30:21: 22:f9:a2:57:26:a2:6b:bf:e7:d2:74:eb:aa:2b:83: ac:42:ad:ce:33:6e:2e:cf:77:9b:51:c2:c5:8e:a7: 78:d7:1d:c9:34:32:9c:69:6d:87:e7:e0:f7:91:98: c7:e0:2f:05:56:35:10:d5:fc:4e:5e:53:d8:31:d9: 05:f7:09:64:e3:33:ce:17:c2:c5:04:46:68:bd:d3: ac:41:49:5a:51:d0:e9:b6:ca:13:f2:94:9e:cd:2b: f2:fa:e0:12:b3:d9:80:c6:9e:21:bf:48:1a:ae:b5: 26:22:45:55:21:74:6c:2a:31:d5:4e:e8:b1:1a:3f: 21:1b:33:48:66:ea:02:7d:9a:b3:5b:cc:7f:ad:69: e8:82:e0:50:05:a1:c6:ac:a5:c1:9c:14:33:34:13: 52:a6:92:05:8e:25:12:11:f7:54:66:48:ff:a1:f0: 82:1d:b7:92:9b:d6:73:cf:ff:ae:77:db:86:66:c4: 32:eb:29:9c:2a:f4:54:ff:7f:6a:a7:54:25:4a:49: 40:49:9c:14:53:80:dd:82:8d:7a:4c:78:ab:71:a3: 92:79:94:43:f6:13:49:94:b3:c1:7d:89:02:33:b2: 65:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:CF:DB:6B:DA:4B:87:52:53:35:D3:99:B8:17:C0:C5:C3:F1:76:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da533914-1577-366b-829c-1aee59e0715d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:870d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:f9:74:29:a8:b5:22:d4:0a:de:1d:4f:7d:ca:26:a1:03:6c: 35:fb:ab:34:62:1a:ef:db:28:59:3d:f6:fc:bd:59:ff:37:a3: ce:cc:c0:57:7c:ca:38:1e:6e:34:15:47:0d:be:e2:6b:56:59: af:70:42:1a:ff:7a:98:f8:fd:3e:20:88:76:2d:30:f9:2e:ab: 37:00:cc:2e:95:10:81:42:16:60:30:60:af:de:58:4e:e2:64: 09:c6:92:e2:37:29:c0:f0:bd:ea:b0:51:42:d7:c1:09:5b:5a: c2:68:65:e7:a4:7a:f2:cb:35:82:91:5f:ee:a4:76:85:bc:4b: 05:35:56:17:ec:ee:6e:1f:c7:2b:38:7e:86:c9:8b:7c:de:00: 48:7f:6c:a5:64:d0:38:3a:0e:a3:c0:ca:65:01:c5:32:eb:8d: 27:76:57:20:de:09:4d:a7:65:b1:67:7a:29:5a:25:4c:34:6a: 76:19:1b:99:f9:de:01:41:33:1c:62:51:b9:3c:c3:68:d2:27: 05:fa:20:1c:3f:3e:64:b5:bf:fa:24:18:39:89:d7:5c:9f:e5: f6:12:5b:62:5a:4f:92:27:56:c9:f4:fe:83:7c:11:c5:d7:49: 47:4f:62:5c:ed:10:c0:92:55:fe:86:77:a2:45:f1:1c:83:95: 7e:0d:8d:fe -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfq4qGsyzJb1tQfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk MWZiZTEyM2EtZGU4OS00MzE3LWI3ZmQtMjQzNWE5MGYwYjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIoMEVzVLUiabla00bbLREOl/xtqSTmz4YMx MCEi+aJXJqJrv+fSdOuqK4OsQq3OM24uz3ebUcLFjqd41x3JNDKcaW2H5+D3kZjH 4C8FVjUQ1fxOXlPYMdkF9wlk4zPOF8LFBEZovdOsQUlaUdDptsoT8pSezSvy+uAS s9mAxp4hv0garrUmIkVVIXRsKjHVTuixGj8hGzNIZuoCfZqzW8x/rWnoguBQBaHG rKXBnBQzNBNSppIFjiUSEfdUZkj/ofCCHbeSm9Zzz/+ud9uGZsQy6ymcKvRU/39q p1QlSklASZwUU4Ddgo16THircaOSeZRD9hNJlLPBfYkCM7JlsQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGXP22vaS4dSUzXTmbgXwMXD8XYZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGE1MzM5MTQtMTU3Ny0z NjZiLTgyOWMtMWFlZTU5ZTA3MTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYcN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACD5dCmotSLUCt4dT33KJqEDbDX7qzRiGu/bKFk99vy9Wf83o87M wFd8yjgebjQVRw2+4mtWWa9wQhr/epj4/T4giHYtMPkuqzcAzC6VEIFCFmAwYK/e WE7iZAnGkuI3KcDwveqwUULXwQlbWsJoZeekevLLNYKRX+6kdoW8SwU1Vhfs7m4f xys4fobJi3zeAEh/bKVk0Dg6DqPAymUBxTLrjSd2VyDeCU2nZbFneilaJUw0anYZ G5n53gFBMxxiUbk8w2jSJwX6IBw/PmS1v/okGDmJ11yf5fYSW2JaT5InVsn0/oN8 EcXXSUdPYlztEMCSVf6Gd6JF8RyDlX4Njf4= -----END CERTIFICATE-----Generated at Sun May 5 02:22:52 2024 by rpki-client on console-ams.rpki-client.org