$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/debe4fe5-ed88-37f7-a6a4-ff3769a18393.roa File: debe4fe5-ed88-37f7-a6a4-ff3769a18393.roa (raw, json) Hash identifier: id5lG12Vc/f19JS5c+DwtxAyVUoq57qSjj/QPrFKl5w= Subject key identifier: DA:AB:C1:75:F9:81:88:DF:3E:32:7F:D7:57:D0:04:84:39:C6:40:04 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FB07AC9DC151A4BC1818380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/debe4fe5-ed88-37f7-a6a4-ff3769a18393.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 33659 IP address blocks: 2001:559:83b5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:b0:7a:c9:dc:15:1a:4b:c1:81:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=91f0225c-7760-4595-a0fc-4358603a81b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2f:3a:72:60:2e:90:c6:a8:c7:7e:1f:95:48: 16:99:61:89:55:8a:77:2d:74:b2:48:4e:68:24:84: dd:37:a5:0c:34:b3:cc:de:1d:99:c4:b1:13:79:d3: 79:f3:b2:54:45:49:8e:e1:34:13:fc:3b:4c:c5:31: 37:4a:29:47:6c:ea:65:9a:15:b1:3e:ca:12:1c:e9: c2:84:ab:e5:28:95:ac:71:1c:8c:7b:57:6b:24:87: 7d:b9:70:fd:fe:29:34:76:57:ce:b1:0a:90:f2:09: b2:91:25:f1:6a:4b:5f:65:d2:64:87:de:58:07:2c: 01:f7:74:fb:62:ac:fa:12:37:35:84:c8:19:f9:30: 6d:3b:92:fc:7e:a9:82:25:eb:66:16:60:a6:fd:40: cb:73:fb:bb:ce:3d:3c:6d:62:de:d5:ac:06:92:7f: 66:95:f4:72:c0:ce:51:1c:1d:50:e0:d8:2e:70:84: 97:3e:e3:0c:20:2f:32:0f:5f:f0:4a:87:7d:9a:b7: 15:02:76:14:11:31:08:08:49:24:a3:d2:01:30:c7: 2e:e3:62:bc:fb:2b:be:91:38:b9:c3:fb:53:96:a7: 40:1c:d0:d8:92:a9:2f:ea:72:0f:12:2c:64:0e:ca: 99:be:80:33:da:c8:89:1d:8a:76:9a:3f:c4:05:1b: 18:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:AB:C1:75:F9:81:88:DF:3E:32:7F:D7:57:D0:04:84:39:C6:40:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/debe4fe5-ed88-37f7-a6a4-ff3769a18393.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:83b5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:ad:72:05:8f:2a:8a:03:b1:3c:42:f7:5b:50:b9:6b:18:d2: 8c:a0:39:e7:1f:9e:f4:a5:71:21:b1:16:49:a5:86:78:2c:25: 57:5c:d0:42:c7:96:46:53:3a:09:97:fe:9b:b8:70:d0:3c:8a: 35:3d:b5:af:67:f3:22:e1:07:6a:17:44:07:dc:18:24:5a:58: 15:1f:fc:e2:5e:e5:c7:2b:af:0a:56:9b:61:fa:3a:d0:f1:29: a5:11:65:a9:70:f9:08:76:ed:6f:41:75:a7:1c:d1:8c:23:9e: 94:c9:d7:f3:00:55:b0:37:41:a2:d6:cd:c1:82:cb:64:39:18: bd:09:9f:65:07:47:54:50:9c:36:e1:2a:d7:15:7e:7c:4d:ee: e8:65:fa:e7:d8:23:84:fd:34:e8:f7:0d:0e:02:59:cb:c3:2c: b5:b9:df:11:69:a7:32:b4:63:56:c7:bc:4c:3f:dc:9d:fa:d6: c5:7d:fb:b4:ea:e4:1d:f2:99:30:a2:09:60:d7:1b:0c:1f:04: b0:c2:f9:84:d7:10:6c:bd:ee:08:bb:b3:80:99:7a:29:9c:2f: 6d:62:20:9b:67:e7:28:97:06:cc:89:52:83:4d:92:a7:e1:13: 1d:56:fa:63:33:08:cc:a5:08:5d:4f:e3:d1:01:3e:0b:51:66: 0d:eb:d5:45 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfsHrJ3BUaS8GBg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk OTFmMDIyNWMtNzc2MC00NTk1LWEwZmMtNDM1ODYwM2E4MWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmS86cmAukMaox34flUgWmWGJVYp3LXSySE5o JITdN6UMNLPM3h2ZxLETedN587JURUmO4TQT/DtMxTE3SilHbOplmhWxPsoSHOnC hKvlKJWscRyMe1drJId9uXD9/ik0dlfOsQqQ8gmykSXxaktfZdJkh95YBywB93T7 Yqz6Ejc1hMgZ+TBtO5L8fqmCJetmFmCm/UDLc/u7zj08bWLe1awGkn9mlfRywM5R HB1Q4NgucISXPuMMIC8yD1/wSod9mrcVAnYUETEICEkko9IBMMcu42K8+yu+kTi5 w/tTlqdAHNDYkqkv6nIPEixkDsqZvoAz2siJHYp2mj/EBRsY/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNqrwXX5gYjfPjJ/11fQBIQ5xkAEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGViZTRmZTUtZWQ4OC0z N2Y3LWE2YTQtZmYzNzY5YTE4MzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYO1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKKtcgWPKooDsTxC91tQuWsY0oygOecfnvSlcSGxFkmlhngsJVdc 0ELHlkZTOgmX/pu4cNA8ijU9ta9n8yLhB2oXRAfcGCRaWBUf/OJe5ccrrwpWm2H6 OtDxKaURZalw+Qh27W9Bdacc0YwjnpTJ1/MAVbA3QaLWzcGCy2Q5GL0Jn2UHR1RQ nDbhKtcVfnxN7uhl+ufYI4T9NOj3DQ4CWcvDLLW53xFppzK0Y1bHvEw/3J361sV9 +7Tq5B3ymTCiCWDXGwwfBLDC+YTXEGy97gi7s4CZeimcL21iIJtn5yiXBsyJUoNN kqfhEx1W+mMzCMylCF1P49EBPgtRZg3r1UU= -----END CERTIFICATE-----Generated at Sun May 5 02:47:51 2024 by rpki-client on console-fra.rpki-client.org