$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c45b1d3c-0946-3d67-ba1d-f4d78826ce27.roa File: c45b1d3c-0946-3d67-ba1d-f4d78826ce27.roa (raw, json) Hash identifier: mqMfkgIP8jZW7q6syVht/mNFBPJDBs4izGC9HUHUfZY= Subject key identifier: C8:81:AE:F0:03:F0:35:BC:99:48:57:E2:A2:36:B1:D1:28:D3:91:40 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285844FB5FFCF73BAB357A9876F100 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c45b1d3c-0946-3d67-ba1d-f4d78826ce27.roa Signing time: Fri 23 Feb 2024 02:00:26 +0000 ROA not before: Fri 23 Feb 2024 02:00:26 +0000 ROA not after: Thu 23 May 2024 01:00:26 +0000 asID: 46997 IP address blocks: 2001:470:139::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:fb:5f:fc:f7:3b:ab:35:7a:98:76:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:26 2024 GMT Not After : May 23 01:00:26 2024 GMT Subject: CN=782d81e3-6126-47d3-aa64-2d9f44ad4c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:33:a3:01:cc:49:a1:1d:52:ca:08:88:76:4c: 45:54:85:ff:56:dd:54:85:4e:24:00:47:c6:68:fa: 81:22:0d:d6:10:3e:7e:c9:e0:49:2f:a3:a7:18:94: e4:59:2b:e0:46:d8:34:72:1c:b4:a9:8d:84:64:bc: f5:8a:14:69:dd:4a:da:eb:e5:8d:d8:b2:c4:df:f4: d4:3b:08:12:59:4e:40:7a:a8:22:9c:43:6d:d3:bc: d8:6d:0c:f7:91:44:b7:c7:d0:0d:2f:df:b2:32:ed: 0f:fd:5c:56:e3:65:6d:06:92:1b:7e:d1:16:52:67: e6:f9:fe:29:34:fc:9f:98:77:2b:2b:23:a2:02:4b: d0:91:a9:e2:04:25:b9:6c:a1:62:b8:9b:a5:0c:07: 14:1a:7c:06:7c:58:df:a6:82:cc:83:69:68:9c:5e: 2d:f7:62:59:62:16:c5:84:48:5c:d6:51:56:a2:27: ea:f9:1f:20:5f:71:0d:2a:79:f1:e6:0c:eb:cb:6b: 0d:2a:60:78:9f:00:26:69:7d:4d:51:4c:1c:5b:2a: d8:f2:ef:f6:e1:ca:52:c8:71:43:ca:d7:92:1d:68: 37:5f:1f:85:7f:37:78:74:ac:fb:ac:3d:d3:45:a6: 40:21:23:4b:67:d7:2f:59:ae:2e:85:88:ad:04:f2: 06:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:81:AE:F0:03:F0:35:BC:99:48:57:E2:A2:36:B1:D1:28:D3:91:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c45b1d3c-0946-3d67-ba1d-f4d78826ce27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:139::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:2c:02:c5:c6:20:f2:82:23:25:5b:a5:7c:31:f7:37:48:c0: 6f:5c:0e:6d:eb:85:53:10:39:37:1b:da:6f:ad:d2:fe:d9:7b: 63:37:cf:40:14:1e:62:19:20:fb:33:42:43:86:ea:b1:86:2f: 39:0b:b1:e3:22:75:5e:6d:0d:fe:7d:d5:10:85:0f:47:f6:21: 61:46:7f:25:9d:1a:53:66:52:99:60:4c:06:eb:30:8a:6e:df: 71:9e:95:e6:16:ef:7a:e3:6c:9f:05:c9:c6:56:c8:47:06:99: d5:89:ab:2c:77:a6:d8:82:24:12:07:17:e0:d6:a9:82:5c:a6: b5:05:ee:c0:ed:98:da:60:91:b8:a3:b2:b3:86:1b:ad:a7:bc: ae:2c:65:be:55:c9:d4:0c:d3:e2:46:8b:b5:48:45:26:ea:b2: 14:7e:3c:83:37:7d:97:5f:f4:4d:02:2a:19:00:99:d7:30:59: 3e:fb:ec:7a:6d:45:0d:ba:4c:b2:33:bd:17:b9:95:f5:8d:21: dc:d1:82:b2:57:95:73:79:c1:ef:94:8c:54:b0:f7:f3:21:74: e7:25:ce:be:6a:0e:5b:b5:93:55:00:57:50:ca:f2:78:1b:1e: f2:b3:23:99:3d:60:4c:d6:93:5b:b1:f8:ee:13:74:2a:fb:19: 8b:1c:c1:b9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWET7X/z3O6s1eph28QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDIyMzAyMDAyNloXDTI0MDUyMzAxMDAyNlowLzEtMCsGA1UEAxMk NzgyZDgxZTMtNjEyNi00N2QzLWFhNjQtMmQ5ZjQ0YWQ0YzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DOjAcxJoR1SygiIdkxFVIX/Vt1UhU4kAEfG aPqBIg3WED5+yeBJL6OnGJTkWSvgRtg0chy0qY2EZLz1ihRp3Ura6+WN2LLE3/TU OwgSWU5AeqginENt07zYbQz3kUS3x9ANL9+yMu0P/VxW42VtBpIbftEWUmfm+f4p NPyfmHcrKyOiAkvQkaniBCW5bKFiuJulDAcUGnwGfFjfpoLMg2lonF4t92JZYhbF hEhc1lFWoifq+R8gX3ENKnnx5gzry2sNKmB4nwAmaX1NUUwcWyrY8u/24cpSyHFD yteSHWg3Xx+Ffzd4dKz7rD3TRaZAISNLZ9cvWa4uhYitBPIGMQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMiBrvAD8DW8mUhX4qI2sdEo05FAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzQ1YjFkM2MtMDk0Ni0z ZDY3LWJhMWQtZjRkNzg4MjZjZTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAE5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADIsAsXGIPKCIyVbpXwx9zdIwG9cDm3rhVMQOTcb2m+t0v7Ze2M3 z0AUHmIZIPszQkOG6rGGLzkLseMidV5tDf591RCFD0f2IWFGfyWdGlNmUplgTAbr MIpu33GeleYW73rjbJ8FycZWyEcGmdWJqyx3ptiCJBIHF+DWqYJcprUF7sDtmNpg kbijsrOGG62nvK4sZb5VydQM0+JGi7VIRSbqshR+PIM3fZdf9E0CKhkAmdcwWT77 7HptRQ26TLIzvRe5lfWNIdzRgrJXlXN5we+UjFSw9/MhdOclzr5qDlu1k1UAV1DK 8ngbHvKzI5k9YEzWk1ux+O4TdCr7GYscwbk= -----END CERTIFICATE-----Generated at Mon May 6 12:47:27 2024 by rpki-client on console-ams.rpki-client.org