$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/e955d497-3567-35ca-af2a-62ffdc30b1c1.roa File: e955d497-3567-35ca-af2a-62ffdc30b1c1.roa (raw, json) Hash identifier: 3nE3ERS1XQcP+WsrDjovGcyL+/VEMBDtJ3kAX93XYmc= Subject key identifier: 1C:F8:46:C7:99:21:0E:55:0C:E4:A4:24:48:57:A6:45:BD:84:58:1A Certificate issuer: /CN=bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5 Certificate serial: 010D0C9F432858480BDA6F0443115681546AED40 Authority key identifier: 95:AD:7A:BE:8F:70:2F:0D:84:54:C8:09:29:F5:57:2B:71:9D:0A:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/e955d497-3567-35ca-af2a-62ffdc30b1c1.roa Signing time: Sat 30 Nov 2024 02:00:39 +0000 ROA not before: Sat 30 Nov 2024 02:00:39 +0000 ROA not after: Fri 28 Feb 2025 02:00:39 +0000 asID: 5050 IP address blocks: 2001:5e8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0b:da:6f:04:43:11:56:81:54:6a:ed:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5 Validity Not Before: Nov 30 02:00:39 2024 GMT Not After : Feb 28 02:00:39 2025 GMT Subject: CN=32787a2e-9202-4e4f-80f3-a4c77fb42639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1e:2c:14:76:13:eb:b7:81:57:56:b4:3d:9e: 0e:b1:42:0f:5c:32:f6:79:b1:a6:c8:ff:b5:f9:bc: 1e:78:57:02:f7:ec:6c:3f:b3:54:17:bb:aa:5d:1b: 0c:ed:f6:e1:5b:4f:af:8a:a5:cf:4f:b9:cf:9a:93: bc:15:3e:db:32:9e:8f:76:01:ee:81:12:35:48:50: 1b:2e:f8:cc:7c:a4:41:35:28:30:0c:c7:33:45:20: 80:17:61:2f:23:e8:39:10:b9:d5:47:b4:f3:1c:8b: 95:77:10:cc:18:b4:b6:99:8e:5f:88:81:7e:63:f0: c7:a9:77:ee:1d:16:5a:e0:8c:7c:e9:92:47:1f:e1: fe:c9:31:03:19:80:73:ac:ea:20:ab:2b:0e:49:84: d6:7b:9a:51:9c:37:ce:82:c4:0a:be:4a:4c:30:c9: 79:9a:0c:3c:97:a8:98:b8:69:39:4d:33:4a:5d:99: 72:2b:f7:c1:82:e1:36:12:cb:d4:f1:94:58:29:77: 20:fb:b2:f7:e0:9d:2e:23:5e:f1:14:07:2d:16:44: c7:e7:47:79:ec:78:dc:84:f1:2f:27:9f:0c:e7:63: a6:81:33:42:8c:44:8b:6a:f3:33:9d:3f:d3:9c:e5: be:62:ce:cd:9b:77:89:00:1f:1a:2a:88:72:45:52: 30:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F8:46:C7:99:21:0E:55:0C:E4:A4:24:48:57:A6:45:BD:84:58:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/e955d497-3567-35ca-af2a-62ffdc30b1c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.crl X509v3 Authority Key Identifier: keyid:95:AD:7A:BE:8F:70:2F:0D:84:54:C8:09:29:F5:57:2B:71:9D:0A:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer sbgp-ipAddrBlock: critical IPv6: 2001:5e8::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:c6:c1:a1:0c:0b:ac:b0:4d:13:47:8f:79:09:d9:a9:e4:a5: 65:49:04:c3:ce:4e:5d:b4:01:8a:31:05:4e:41:17:69:9e:3c: ae:ff:eb:1f:50:7d:b8:25:8f:9c:65:87:87:28:58:47:66:c8: e3:97:e1:56:68:f9:16:88:24:65:57:38:2a:5e:28:e2:bb:3d: 49:12:7e:de:89:6f:65:57:9e:2a:ca:94:64:2b:fe:dd:e1:a6: 04:cc:04:52:29:f1:85:00:27:4f:8e:f6:78:44:f3:a5:7a:f0: e0:da:59:fd:d5:ee:10:6b:bc:b0:ea:e3:e8:9e:1f:59:3a:2c: 29:de:55:b2:27:8f:3e:f4:da:50:6b:80:33:30:45:65:f4:f9: 1a:1f:69:c6:56:e4:b7:6d:7c:de:20:35:9b:83:94:93:79:c6: 79:ba:e3:61:9e:f1:bb:38:62:d5:91:8d:e5:32:62:63:c6:33: f7:6a:18:2c:a6:e0:9a:63:7d:6e:68:e1:bc:24:7a:36:69:d3: c6:4a:e1:8a:54:c4:42:2a:df:01:a7:15:c4:68:3c:e7:ff:16: 93:dc:e0:e2:1b:29:d6:8c:8c:57:bf:e5:92:a8:6d:1e:0d:9b: 6a:d6:6f:27:24:57:0b:06:67:d9:12:04:cb:71:df:26:fc:25: db:9a:96:37 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEgL2m8EQxFWgVRq7UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzZDhjZjAtZThjNS00YmZlLWE4YTctMjhlYTYxOGJj YWY1MB4XDTI0MTEzMDAyMDAzOVoXDTI1MDIyODAyMDAzOVowLzEtMCsGA1UEAxMk MzI3ODdhMmUtOTIwMi00ZTRmLTgwZjMtYTRjNzdmYjQyNjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3x4sFHYT67eBV1a0PZ4OsUIPXDL2ebGmyP+1 +bweeFcC9+xsP7NUF7uqXRsM7fbhW0+viqXPT7nPmpO8FT7bMp6PdgHugRI1SFAb LvjMfKRBNSgwDMczRSCAF2EvI+g5ELnVR7TzHIuVdxDMGLS2mY5fiIF+Y/DHqXfu HRZa4Ix86ZJHH+H+yTEDGYBzrOogqysOSYTWe5pRnDfOgsQKvkpMMMl5mgw8l6iY uGk5TTNKXZlyK/fBguE2EsvU8ZRYKXcg+7L34J0uI17xFActFkTH50d57HjchPEv J58M52OmgTNCjESLavMznT/TnOW+Ys7Nm3eJAB8aKohyRVIwJQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBz4RseZIQ5VDOSkJEhXpkW9hFgaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iYzNk OGNmMC1lOGM1LTRiZmUtYThhNy0yOGVhNjE4YmNhZjUvZTk1NWQ0OTctMzU2Ny0z NWNhLWFmMmEtNjJmZmRjMzBiMWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmMzZDhjZjAtZThjNS00YmZlLWE4 YTctMjhlYTYxOGJjYWY1L2JjM2Q4Y2YwLWU4YzUtNGJmZS1hOGE3LTI4ZWE2MThi Y2FmNS5jcmwwHwYDVR0jBBgwFoAUla16vo9wLw2EVMgJKfVXK3GdClcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iYzNkOGNmMC1lOGM1LTRiZmUtYThhNy0yOGVh NjE4YmNhZjUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEF6DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBexsGhDAussE0TR495Cdmp5KVlSQTDzk5dtAGKMQVOQRdpnjyu/+sf UH24JY+cZYeHKFhHZsjjl+FWaPkWiCRlVzgqXijiuz1JEn7eiW9lV54qypRkK/7d 4aYEzARSKfGFACdPjvZ4RPOlevDg2ln91e4Qa7yw6uPonh9ZOiwp3lWyJ48+9NpQ a4AzMEVl9PkaH2nGVuS3bXzeIDWbg5STecZ5uuNhnvG7OGLVkY3lMmJjxjP3ahgs puCaY31uaOG8JHo2adPGSuGKVMRCKt8BpxXEaDzn/xaT3ODiGynWjIxXv+WSqG0e DZtq1m8nJFcLBmfZEgTLcd8m/CXbmpY3 -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:59 2025 by rpki-client