$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f867a999-21c3-3ea4-b9e8-22acd90fbcf6.roa File: f867a999-21c3-3ea4-b9e8-22acd90fbcf6.roa (raw, json) Hash identifier: ynXTR1DBrHLzOOt3QgXfE+l8TPcuP9QYBZBTrMq6TP4= Subject key identifier: 6C:F4:D8:A1:65:56:F5:B0:0A:E8:36:1C:56:3E:CF:7B:58:88:64:1D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAB8C01159B671BC46A5D40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f867a999-21c3-3ea4-b9e8-22acd90fbcf6.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 33650 IP address blocks: 2001:559:c463::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ab:8c:01:15:9b:67:1b:c4:6a:5d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=ce1b8200-3181-47b8-a5b5-519bb378584b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c7:f7:3f:61:8b:6b:60:3b:f9:11:fa:7a:55: 3e:67:3b:32:65:f5:ff:1d:f5:d2:76:c5:5b:75:db: fe:bd:e9:4c:7e:78:85:7f:09:b4:5d:9e:4d:c3:e6: 1b:e5:f4:f2:69:cd:6d:f4:78:55:8c:f2:75:1f:5c: 6b:da:03:92:01:f7:ce:11:a4:18:b8:2c:24:14:06: 37:f9:85:14:7e:ff:f1:31:d7:f6:2d:04:d6:5e:cc: 00:84:a8:60:42:8a:9a:39:cd:9f:73:56:26:15:27: 37:72:b2:e0:65:5e:56:77:ca:10:41:c8:0d:38:5a: cc:dc:97:2b:60:d7:4f:7c:2f:07:d4:d2:b6:fe:1f: ed:5b:0d:be:ac:df:10:f3:bf:db:72:15:61:40:6e: ec:ee:bb:e0:16:d8:2b:a0:f1:9b:c7:b8:3e:3a:24: b6:69:87:20:da:a3:1f:50:0c:e1:c8:b6:e0:5c:d8: bb:04:9f:c5:59:3d:ee:6b:dd:1f:67:93:af:6f:20: cc:12:0b:50:fa:ea:51:3c:66:d6:34:e5:3d:d6:7c: 4e:36:0e:1f:35:fa:fd:74:8d:9c:8b:42:88:b4:34: e2:a1:bb:22:83:3b:8c:0b:29:da:a6:47:bd:fc:b5: 35:fc:0f:7a:c2:1a:c6:97:32:bb:e2:58:d1:4c:6c: cb:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:F4:D8:A1:65:56:F5:B0:0A:E8:36:1C:56:3E:CF:7B:58:88:64:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f867a999-21c3-3ea4-b9e8-22acd90fbcf6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c463::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:16:19:cf:1c:f5:5b:e1:35:19:d0:0a:b6:fb:a9:7c:64:df: 95:17:36:e5:3d:ae:c5:dd:33:6c:21:ce:3a:e7:8d:c7:26:ff: fb:99:89:ed:b4:7b:e9:b5:c4:d9:2b:fa:f9:b5:5a:4c:c0:56: e0:21:19:17:39:e8:78:fc:3c:52:ca:fb:68:11:b4:d8:9a:41: 90:cd:01:1d:76:f6:82:61:d6:1f:b4:28:3a:3f:af:ea:07:0c: d8:3f:37:3c:72:7b:51:03:a9:97:e4:d1:3c:fb:81:52:65:c6: 60:88:cd:d0:b3:b1:f2:f0:f0:7a:f2:55:38:0a:bc:e3:d5:62: d4:e1:65:f7:e2:e1:4e:4d:f0:25:67:b2:13:6e:92:81:9d:35: 0e:85:40:ee:7c:50:19:f3:42:6a:92:72:15:b3:60:8a:c3:62: 63:dd:f1:51:20:a5:69:aa:cf:f7:57:10:37:7e:37:32:06:46: 16:53:af:46:3c:26:48:ac:bb:51:74:0a:46:05:11:0d:44:85: d6:0d:c4:0e:af:6b:ec:84:98:7a:61:e7:b5:e0:b6:36:30:f5: 32:6a:1c:d9:c0:c0:c9:87:df:e4:16:09:da:1f:27:67:47:67: 88:0d:33:da:29:55:43:a6:ae:34:3f:0d:3d:35:55:66:79:db: b0:c4:f9:9d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfq4wBFZtnG8RqXUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk Y2UxYjgyMDAtMzE4MS00N2I4LWE1YjUtNTE5YmIzNzg1ODRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsf3P2GLa2A7+RH6elU+ZzsyZfX/HfXSdsVb ddv+velMfniFfwm0XZ5Nw+Yb5fTyac1t9HhVjPJ1H1xr2gOSAffOEaQYuCwkFAY3 +YUUfv/xMdf2LQTWXswAhKhgQoqaOc2fc1YmFSc3crLgZV5Wd8oQQcgNOFrM3Jcr YNdPfC8H1NK2/h/tWw2+rN8Q87/bchVhQG7s7rvgFtgroPGbx7g+OiS2aYcg2qMf UAzhyLbgXNi7BJ/FWT3ua90fZ5OvbyDMEgtQ+upRPGbWNOU91nxONg4fNfr9dI2c i0KItDTiobsigzuMCynapke9/LU1/A96whrGlzK74ljRTGzLMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGz02KFlVvWwCug2HFY+z3tYiGQdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjg2N2E5OTktMjFjMy0z ZWE0LWI5ZTgtMjJhY2Q5MGZiY2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcRj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMgWGc8c9VvhNRnQCrb7qXxk35UXNuU9rsXdM2whzjrnjccm//uZ ie20e+m1xNkr+vm1WkzAVuAhGRc56Hj8PFLK+2gRtNiaQZDNAR129oJh1h+0KDo/ r+oHDNg/Nzxye1EDqZfk0Tz7gVJlxmCIzdCzsfLw8HryVTgKvOPVYtThZffi4U5N 8CVnshNukoGdNQ6FQO58UBnzQmqSchWzYIrDYmPd8VEgpWmqz/dXEDd+NzIGRhZT r0Y8Jkisu1F0CkYFEQ1EhdYNxA6va+yEmHph57XgtjYw9TJqHNnAwMmH3+QWCdof J2dHZ4gNM9opVUOmrjQ/DT01VWZ527DE+Z0= -----END CERTIFICATE-----Generated at Sat May 4 15:00:13 2024 by rpki-client on console-ams.rpki-client.org