$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fafb1af3-af8a-3e4c-af04-9f09009f11a4.roa File: fafb1af3-af8a-3e4c-af04-9f09009f11a4.roa (raw, json) Hash identifier: 2Kz20jjGFYosx9bU7i1UlS8yblkEg4rKg0X6YT8K15Y= Subject key identifier: 30:F0:7E:05:C1:09:CE:53:72:CE:35:DE:1F:E9:E8:07:2A:9B:F0:CE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAFD166A7F1053CEC2B4200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fafb1af3-af8a-3e4c-af04-9f09009f11a4.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 13367 IP address blocks: 2001:559:c50d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:af:d1:66:a7:f1:05:3c:ec:2b:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=aa17b4a0-2e76-455a-8a92-0f2e33b0eb48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:32:71:e4:53:6a:d1:b5:a0:a0:86:d5:95:a9: df:aa:65:d4:4b:9c:87:de:2d:35:f3:4e:a1:c0:30: 1b:ee:71:f6:86:e9:c2:40:9a:3d:1c:be:a6:27:be: 1b:38:58:48:af:5e:56:05:a2:5a:aa:ee:09:3c:92: 08:43:83:eb:8c:b0:9c:c9:5c:25:d8:9f:2b:1d:84: 27:83:7a:d4:30:5a:04:82:d3:f7:e2:4c:4a:ec:c8: b5:d4:6a:d1:3a:ce:e1:9a:d9:b1:18:3a:b0:c4:2d: ce:43:58:db:ff:07:64:c0:0b:8f:2f:68:5e:8a:ae: b9:cd:c5:33:5c:19:1d:a9:58:b4:be:31:bd:3e:09: af:52:d5:1c:be:b3:fe:9e:34:1e:bd:8c:76:1b:c4: e1:bf:bd:b7:ab:67:42:86:0d:8a:1f:e5:b8:f3:be: 51:1a:e4:53:c9:b8:b5:b4:e1:f8:ab:46:db:dd:91: dd:2d:2e:bf:d9:2e:b5:9e:4e:04:64:af:a7:e8:90: 80:57:15:1e:c3:5c:a5:06:7a:2e:c7:40:27:97:e5: 7d:96:3a:46:2a:54:91:1f:3f:2f:a7:07:b7:2c:06: e1:79:31:ad:fc:69:68:32:e7:be:5b:4a:7e:ae:5c: 96:05:79:b6:4d:9e:c9:ea:0d:cb:07:6c:e8:24:69: ae:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:F0:7E:05:C1:09:CE:53:72:CE:35:DE:1F:E9:E8:07:2A:9B:F0:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fafb1af3-af8a-3e4c-af04-9f09009f11a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c50d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:73:14:4a:81:f7:7b:ea:c7:33:df:00:50:a1:d0:82:98:39: 7e:9a:21:02:fd:80:43:4b:42:5d:c7:95:69:20:41:67:42:52: 74:45:86:c9:b2:fb:73:ed:95:84:80:89:59:af:41:21:76:4a: 54:80:32:fe:4e:12:84:81:b0:07:28:60:c2:e3:e8:64:21:0e: 00:28:11:b1:28:82:9a:d0:10:a7:03:d5:4a:9d:8a:7f:ca:77: 58:7e:78:59:26:79:1a:19:74:9e:61:77:9c:a6:21:d7:7a:1e: 62:d9:07:33:01:c9:17:32:35:e9:a0:e9:d3:fb:19:89:91:ac: 67:84:53:aa:14:5e:5a:94:09:0e:a8:91:82:6c:8e:90:2f:12: 03:57:11:19:42:da:5d:25:30:54:ce:98:3b:39:a8:a4:14:b7: 5f:92:fd:19:73:07:52:75:4b:70:27:36:41:b4:95:67:e0:9a: 8f:0b:d3:1f:38:2a:9b:0b:35:9e:2d:dd:68:da:91:85:2e:43: 0e:5a:40:df:c0:a8:d5:31:b7:77:7f:f8:0b:27:81:c5:66:c6: d2:ce:87:93:3c:f6:8d:ff:df:74:ef:24:26:b5:d4:d1:4c:98: f1:4e:a6:6a:28:6d:45:0d:ce:75:8d:78:29:d0:4c:0d:34:f8: cb:22:d9:b7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfr9Fmp/EFPOwrQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk YWExN2I0YTAtMmU3Ni00NTVhLThhOTItMGYyZTMzYjBlYjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTJx5FNq0bWgoIbVlanfqmXUS5yH3i01806h wDAb7nH2hunCQJo9HL6mJ74bOFhIr15WBaJaqu4JPJIIQ4PrjLCcyVwl2J8rHYQn g3rUMFoEgtP34kxK7Mi11GrROs7hmtmxGDqwxC3OQ1jb/wdkwAuPL2heiq65zcUz XBkdqVi0vjG9PgmvUtUcvrP+njQevYx2G8Thv723q2dChg2KH+W4875RGuRTybi1 tOH4q0bb3ZHdLS6/2S61nk4EZK+n6JCAVxUew1ylBnoux0Anl+V9ljpGKlSRHz8v pwe3LAbheTGt/GloMue+W0p+rlyWBXm2TZ7J6g3LB2zoJGmuMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDDwfgXBCc5Tcs413h/p6Acqm/DOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmFmYjFhZjMtYWY4YS0z ZTRjLWFmMDQtOWYwOTAwOWYxMWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcUN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHRzFEqB93vqxzPfAFCh0IKYOX6aIQL9gENLQl3HlWkgQWdCUnRF hsmy+3PtlYSAiVmvQSF2SlSAMv5OEoSBsAcoYMLj6GQhDgAoEbEogprQEKcD1Uqd in/Kd1h+eFkmeRoZdJ5hd5ymIdd6HmLZBzMByRcyNemg6dP7GYmRrGeEU6oUXlqU CQ6okYJsjpAvEgNXERlC2l0lMFTOmDs5qKQUt1+S/RlzB1J1S3AnNkG0lWfgmo8L 0x84KpsLNZ4t3WjakYUuQw5aQN/AqNUxt3d/+AsngcVmxtLOh5M89o3/33TvJCa1 1NFMmPFOpmoobUUNznWNeCnQTA00+Msi2bc= -----END CERTIFICATE-----Generated at Sat May 4 15:00:22 2024 by rpki-client on console-ams.rpki-client.org