$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb6bd13f-26a9-38e0-93a3-d4be59f8ea36.roa File: fb6bd13f-26a9-38e0-93a3-d4be59f8ea36.roa (raw, json) Hash identifier: fQrLkTODuENXpJk40qaOsryvdOkQTT+EZxfw6TKVswo= Subject key identifier: A8:65:95:54:43:0C:DA:C2:28:00:8F:B2:A6:D1:14:EC:63:CF:BE:4A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FADE43DC92948C97F999320 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb6bd13f-26a9-38e0-93a3-d4be59f8ea36.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 7725 IP address blocks: 2001:559:843c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ad:e4:3d:c9:29:48:c9:7f:99:93:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=0f7e204f-2a93-4d70-a367-0cab694687f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d8:2e:63:2b:24:ce:8a:3f:11:b2:47:02:7d: 84:eb:02:87:d7:1c:c1:17:75:30:24:17:5c:56:e7: 76:82:87:7a:f0:74:d8:a3:50:39:eb:dd:2a:c6:56: c3:bf:f4:8e:5f:a2:b1:ad:09:1b:ad:84:22:09:b0: 12:f1:6c:5e:bd:fe:ab:ef:ca:86:6a:63:50:6e:20: 25:db:da:18:c9:f4:7c:67:35:88:74:b3:75:60:5b: ba:2e:fc:aa:75:76:44:49:3a:b7:c1:ba:e5:5b:b4: 5f:04:ff:c0:66:5a:25:45:5a:10:e7:8c:e9:37:b2: ea:47:1e:53:05:02:b1:7a:0b:cb:9a:56:a7:7a:58: 6a:51:9c:ca:f1:d3:00:5d:d3:df:8f:38:3d:1d:fe: 9b:54:36:d9:86:e2:ce:91:d4:a1:3b:7d:bf:3b:a8: de:da:58:ca:91:66:b7:26:6a:2c:b0:76:19:b2:1c: 38:4c:d3:5a:c1:c8:f2:19:f8:ab:bf:6d:6d:9e:6a: ab:b0:fd:28:a0:63:84:47:2f:ef:4b:8d:b0:c1:59: ca:cf:7b:62:3d:33:7a:76:4a:f4:94:06:9a:a4:7d: a7:96:45:45:e3:a6:23:7c:41:ee:7f:06:b9:9e:54: 3b:f0:46:e1:cb:5d:83:40:80:3e:06:94:17:a7:4c: 1b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:65:95:54:43:0C:DA:C2:28:00:8F:B2:A6:D1:14:EC:63:CF:BE:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb6bd13f-26a9-38e0-93a3-d4be59f8ea36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:843c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:77:a5:91:53:f7:f2:c8:43:4a:e7:b1:d4:7f:53:23:81:e8: cb:64:55:d0:1e:10:1a:cd:11:6d:0b:2e:54:f8:1e:0a:66:4f: fa:90:23:f1:a0:5a:3c:d9:b8:ec:4e:8a:48:39:14:1f:a0:08: 0c:52:f9:6b:e2:fc:7f:dd:0c:ce:49:13:92:d8:7d:c5:9f:a7: 4b:12:e6:ec:65:49:64:f2:6d:fa:99:3b:52:08:77:b6:20:27: 73:fa:a0:18:50:c9:11:06:f5:0c:d2:d8:9a:da:0f:a8:5c:5d: cc:86:0a:75:7d:fc:03:48:ac:01:a9:7a:02:5a:47:1b:f5:35: 2f:a5:73:fc:9d:73:ea:e4:73:ce:ce:14:34:17:75:89:d7:ff: f3:07:ee:b4:2e:0a:f3:e3:d7:09:b0:51:b4:e4:75:df:78:d0: 4a:2b:a7:c4:9f:10:0d:82:dd:79:02:73:92:c0:6c:9b:6c:72: 66:21:a4:53:ff:9d:46:91:71:b7:3b:e8:ef:66:8c:97:35:df: 96:87:6d:bf:c9:47:78:93:e1:b3:9f:63:a9:56:c2:b8:ca:e1: 3f:83:e5:17:42:45:9b:d0:60:94:b0:47:c3:3e:7a:9d:3c:cf: 8a:e8:b3:4a:a8:fd:df:01:71:20:24:c5:b4:44:05:e3:33:0c: 0b:4e:cf:48 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfreQ9ySlIyX+ZkyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk MGY3ZTIwNGYtMmE5My00ZDcwLWEzNjctMGNhYjY5NDY4N2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNguYyskzoo/EbJHAn2E6wKH1xzBF3UwJBdc Vud2god68HTYo1A5690qxlbDv/SOX6KxrQkbrYQiCbAS8Wxevf6r78qGamNQbiAl 29oYyfR8ZzWIdLN1YFu6LvyqdXZESTq3wbrlW7RfBP/AZlolRVoQ54zpN7LqRx5T BQKxegvLmlanelhqUZzK8dMAXdPfjzg9Hf6bVDbZhuLOkdShO32/O6je2ljKkWa3 JmossHYZshw4TNNawcjyGfirv21tnmqrsP0ooGOERy/vS42wwVnKz3tiPTN6dkr0 lAaapH2nlkVF46YjfEHufwa5nlQ78Ebhy12DQIA+BpQXp0wb9QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKhllVRDDNrCKACPsqbRFOxjz75KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmI2YmQxM2YtMjZhOS0z OGUwLTkzYTMtZDRiZTU5ZjhlYTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYQ8 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAJ3pZFT9/LIQ0rnsdR/UyOB6MtkVdAeEBrNEW0LLlT4HgpmT/qQ I/GgWjzZuOxOikg5FB+gCAxS+Wvi/H/dDM5JE5LYfcWfp0sS5uxlSWTybfqZO1II d7YgJ3P6oBhQyREG9QzS2JraD6hcXcyGCnV9/ANIrAGpegJaRxv1NS+lc/ydc+rk c87OFDQXdYnX//MH7rQuCvPj1wmwUbTkdd940Eorp8SfEA2C3XkCc5LAbJtscmYh pFP/nUaRcbc76O9mjJc135aHbb/JR3iT4bOfY6lWwrjK4T+D5RdCRZvQYJSwR8M+ ep08z4ros0qo/d8BcSAkxbREBeMzDAtOz0g= -----END CERTIFICATE-----Generated at Sat May 4 15:00:23 2024 by rpki-client on console-ams.rpki-client.org