$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9a6a343-0940-36a7-9b7e-eac15fbf10ed.roa File: f9a6a343-0940-36a7-9b7e-eac15fbf10ed.roa (raw, json) Hash identifier: R4m3Thq2wNC9MrdO3TZkPonbiIDJMjy7n2Z0Jo138wU= Subject key identifier: 46:17:7B:B8:07:87:6C:C6:23:7F:F6:B6:7F:0C:1B:4B:2B:CA:21:32 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FADE4A5E0CAF336AE1A7AC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9a6a343-0940-36a7-9b7e-eac15fbf10ed.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 7725 IP address blocks: 2001:559:8455::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ad:e4:a5:e0:ca:f3:36:ae:1a:7a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=56f4063e-4f64-4bd6-b95e-85e4a13b72f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b5:57:36:83:56:5f:18:46:f1:69:f4:27:76: a3:76:04:93:21:65:8b:15:93:65:e7:7b:b4:88:81: c7:32:75:8d:09:3a:d7:7e:80:65:02:ad:cd:84:67: fc:f7:21:4f:1f:4e:5d:fc:1a:99:98:f9:4e:15:a2: 20:1e:3e:98:77:15:fd:9a:32:36:4e:fa:dd:a0:1d: c3:3d:54:2e:23:7e:68:51:d6:7d:d3:59:2c:61:33: 27:d2:2c:ce:30:e6:ef:aa:f4:d5:17:76:ed:b2:08: 22:e0:c6:99:5f:01:27:38:eb:f2:3c:28:87:e0:95: c9:78:2c:52:84:a4:1a:0d:68:06:e2:d6:c7:48:89: ae:0e:b2:25:2f:fc:16:3d:ac:6d:e0:b1:26:51:e7: 80:3c:58:56:45:28:6d:7f:02:f6:f8:02:85:04:3e: 54:0b:b4:f4:4d:0f:76:08:31:d9:e1:cb:6b:45:5e: b7:f4:07:05:59:eb:cc:22:af:a4:80:69:26:f3:32: e2:42:88:c5:7e:44:b2:57:55:fd:41:45:ee:e6:27: d0:66:1c:7c:e4:b1:9e:0b:43:4e:29:15:48:24:b2: 98:3d:df:65:70:c7:ce:77:90:29:50:60:2e:96:d2: 32:3b:4f:c5:55:10:d6:4d:3b:62:96:17:96:74:fd: ea:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:17:7B:B8:07:87:6C:C6:23:7F:F6:B6:7F:0C:1B:4B:2B:CA:21:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9a6a343-0940-36a7-9b7e-eac15fbf10ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8455::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:96:7e:25:58:b0:9f:0c:56:6a:8f:a1:68:7c:a6:50:61:3d: 70:fa:31:89:28:ac:91:45:d2:ef:cc:fd:d0:3d:45:58:74:1f: 81:61:9a:17:81:c6:3f:41:3a:fd:d5:0e:79:34:61:50:39:21: d2:d8:50:f0:60:b2:c0:17:75:c0:4c:5e:f8:b8:29:1d:fd:aa: 45:87:57:a3:a6:8c:a2:b8:63:34:9d:f3:69:04:d6:f4:4d:19: 09:50:96:50:ae:88:1f:ac:f3:54:c4:4c:78:77:10:01:0c:0f: d2:ff:8e:e3:65:78:5d:ec:02:9d:0d:99:a0:2c:48:d2:ae:7b: 33:92:fa:54:db:ae:f6:80:88:92:ff:9a:f0:63:5d:1c:53:c4: dd:73:1c:8e:d6:32:ec:77:d5:c0:5e:9d:7d:55:fc:6c:e5:b6: e0:34:14:3c:1e:6b:2e:a2:72:ff:4e:42:9d:e3:8e:8e:3c:77: 53:7b:d6:e2:f6:d8:20:89:94:f3:4b:2e:4c:42:8d:4a:e6:7e: 89:c4:54:01:df:84:c6:b3:9c:ec:e8:5b:32:ec:6e:75:3c:35: 6e:ad:a0:1d:cd:38:3c:65:24:a7:bf:61:b9:11:13:8a:22:44: 52:85:71:aa:cb:a6:c3:4e:59:4a:84:31:55:29:b3:41:99:f8: 9b:6d:25:c1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfreSl4MrzNq4aesAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk NTZmNDA2M2UtNGY2NC00YmQ2LWI5NWUtODVlNGExM2I3MmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorVXNoNWXxhG8Wn0J3ajdgSTIWWLFZNl53u0 iIHHMnWNCTrXfoBlAq3NhGf89yFPH05d/BqZmPlOFaIgHj6YdxX9mjI2TvrdoB3D PVQuI35oUdZ901ksYTMn0izOMObvqvTVF3btsggi4MaZXwEnOOvyPCiH4JXJeCxS hKQaDWgG4tbHSImuDrIlL/wWPaxt4LEmUeeAPFhWRShtfwL2+AKFBD5UC7T0TQ92 CDHZ4ctrRV639AcFWevMIq+kgGkm8zLiQojFfkSyV1X9QUXu5ifQZhx85LGeC0NO KRVIJLKYPd9lcMfOd5ApUGAultIyO0/FVRDWTTtilheWdP3qcQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEYXe7gHh2zGI3/2tn8MG0sryiEyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjlhNmEzNDMtMDk0MC0z NmE3LTliN2UtZWFjMTVmYmYxMGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYRV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD6WfiVYsJ8MVmqPoWh8plBhPXD6MYkorJFF0u/M/dA9RVh0H4Fh mheBxj9BOv3VDnk0YVA5IdLYUPBgssAXdcBMXvi4KR39qkWHV6OmjKK4YzSd82kE 1vRNGQlQllCuiB+s81TETHh3EAEMD9L/juNleF3sAp0NmaAsSNKuezOS+lTbrvaA iJL/mvBjXRxTxN1zHI7WMux31cBenX1V/GzltuA0FDweay6icv9OQp3jjo48d1N7 1uL22CCJlPNLLkxCjUrmfonEVAHfhMaznOzoWzLsbnU8NW6toB3NODxlJKe/YbkR E4oiRFKFcarLpsNOWUqEMVUps0GZ+JttJcE= -----END CERTIFICATE-----Generated at Sat May 4 15:00:16 2024 by rpki-client on console-ams.rpki-client.org