$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ffa7d759-59a6-3b3b-8e93-e51d2887ba6a.roa File: ffa7d759-59a6-3b3b-8e93-e51d2887ba6a.roa (raw, json) Hash identifier: lKf2vSfoTtjBdr4nk+GZaA5u+8Jfi1QPbPzqdLvhHuk= Subject key identifier: 8C:B1:8C:DA:A4:1E:C9:10:96:03:9D:E6:A7:F7:ED:F2:6E:02:B8:EE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285847BEF868C26B64E1CB7F4617C9 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ffa7d759-59a6-3b3b-8e93-e51d2887ba6a.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 33654 IP address blocks: 2001:559:87cd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Dec 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:f8:68:c2:6b:64:e1:cb:7f:46:17:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=24483c2f-5cce-46a7-8051-ec5971cd4bb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:86:60:a0:3b:a1:e4:b6:10:04:c8:18:eb:70: 0f:7d:e8:25:f8:39:b6:5f:4c:89:1e:db:f8:60:0f: ee:33:1b:c5:b9:e6:e8:9e:9d:48:f7:d9:3a:ef:56: cc:97:1a:5e:67:f8:38:94:ae:7c:cc:08:68:d1:18: ee:dd:a6:c7:25:d7:bb:16:79:91:02:9d:6c:61:29: cf:cd:d8:6a:c4:70:90:f9:fa:01:57:2a:79:0a:b9: 47:e6:2b:24:ab:92:ed:34:cd:40:af:24:67:95:4e: 86:32:84:47:3d:17:46:ca:1e:f4:ed:09:02:f3:53: b3:26:09:bc:7e:e2:d6:e5:54:a9:75:5d:57:ad:79: ce:2f:9f:84:b6:79:56:22:9e:4f:c8:72:b0:a3:a6: 4e:f6:24:3f:ba:0b:ec:8e:85:56:5c:bf:ed:c6:64: 38:a7:f2:67:13:95:ff:ff:61:6e:fb:c1:c0:8f:6c: 49:05:c1:24:1c:65:f2:b9:30:f3:f1:e0:4a:09:2a: 23:ca:4c:ec:60:a4:4c:23:8f:3b:08:66:aa:08:01: e7:f7:43:e4:47:5a:03:aa:92:16:3f:ce:1c:04:d0: 6a:7a:57:be:08:d2:aa:89:b6:49:a5:8e:19:d7:33: 7c:c1:54:7b:c3:b8:b6:bb:52:5d:7c:4b:4a:c3:c1: 91:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B1:8C:DA:A4:1E:C9:10:96:03:9D:E6:A7:F7:ED:F2:6E:02:B8:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ffa7d759-59a6-3b3b-8e93-e51d2887ba6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:87cd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:b5:d8:2a:43:0b:9a:41:09:5f:b2:65:d3:ca:b4:0c:12:b1: ad:c0:d7:b9:c7:12:93:46:56:26:34:0a:05:2d:34:d8:b5:38: de:cd:43:35:16:6f:bb:04:f0:c7:6b:a0:27:f5:16:b3:2d:ba: 53:34:8f:58:4b:b4:c7:6c:18:a4:29:60:81:0f:a0:80:10:e2: d2:0a:68:0f:a5:39:9c:fc:81:db:56:25:fc:56:55:6c:b0:9d: 82:00:29:96:d0:21:9d:2e:ea:63:28:d4:7d:42:8f:8d:06:0e: 92:0c:b4:4c:fe:34:91:07:a3:66:08:53:a8:f4:02:03:14:52: 3f:d5:4b:eb:e1:d2:e1:c1:bf:1f:ee:b7:e8:12:f4:c8:ff:56: f6:cd:db:83:d1:74:6b:c5:47:b2:a9:ad:26:6c:0c:4c:5a:18: a3:7b:27:43:ba:49:47:ea:e5:79:83:f1:ba:7e:0a:2f:33:5b: 92:59:e7:27:5b:f0:b2:df:1e:0b:d9:3f:c7:57:ab:c5:01:d6: b9:a1:78:e0:ed:de:2c:6f:dc:a5:e9:73:75:3a:65:f6:84:98: 51:77:11:09:5d:af:e9:9c:ac:07:17:ae:ff:e9:ad:93:2d:c2: a2:b5:b2:d5:ce:8d:0e:fd:9c:85:26:c7:27:22:1b:3b:d6:a7: 8a:07:7d:f4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe++GjCa2Thy39GF8kwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk MjQ0ODNjMmYtNWNjZS00NmE3LTgwNTEtZWM1OTcxY2Q0YmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoZgoDuh5LYQBMgY63APfegl+Dm2X0yJHtv4 YA/uMxvFuebonp1I99k671bMlxpeZ/g4lK58zAho0Rju3abHJde7FnmRAp1sYSnP zdhqxHCQ+foBVyp5CrlH5iskq5LtNM1AryRnlU6GMoRHPRdGyh707QkC81OzJgm8 fuLW5VSpdV1XrXnOL5+EtnlWIp5PyHKwo6ZO9iQ/ugvsjoVWXL/txmQ4p/JnE5X/ /2Fu+8HAj2xJBcEkHGXyuTDz8eBKCSojykzsYKRMI487CGaqCAHn90PkR1oDqpIW P84cBNBqele+CNKqibZJpY4Z1zN8wVR7w7i2u1JdfEtKw8GRnQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIyxjNqkHskQlgOd5qf37fJuArjuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmZhN2Q3NTktNTlhNi0z YjNiLThlOTMtZTUxZDI4ODdiYTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYfN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL+12CpDC5pBCV+yZdPKtAwSsa3A17nHEpNGViY0CgUtNNi1ON7N QzUWb7sE8MdroCf1FrMtulM0j1hLtMdsGKQpYIEPoIAQ4tIKaA+lOZz8gdtWJfxW VWywnYIAKZbQIZ0u6mMo1H1Cj40GDpIMtEz+NJEHo2YIU6j0AgMUUj/VS+vh0uHB vx/ut+gS9Mj/VvbN24PRdGvFR7KprSZsDExaGKN7J0O6SUfq5XmD8bp+Ci8zW5JZ 5ydb8LLfHgvZP8dXq8UB1rmheODt3ixv3KXpc3U6ZfaEmFF3EQldr+mcrAcXrv/p rZMtwqK1stXOjQ79nIUmxyciGzvWp4oHffQ= -----END CERTIFICATE-----Generated at Sun Dec 22 13:25:49 2024 by rpki-client on console-ams.rpki-client.org