$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/036398e6-d14c-3bf1-a476-230009286ee8.roa File: 036398e6-d14c-3bf1-a476-230009286ee8.roa (raw, json) Hash identifier: 40ga6wziQQQPGDsgoXS+pvxpSNdg03pyeFDlRhC98l4= Subject key identifier: 24:04:9F:94:09:8E:24:68:A6:A0:52:34:91:A2:85:8D:2C:48:99:9B Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285847BAD5570571EF466D5B094780 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/036398e6-d14c-3bf1-a476-230009286ee8.roa Signing time: Fri 01 Nov 2024 01:30:09 +0000 ROA not before: Fri 01 Nov 2024 01:30:09 +0000 ROA not after: Thu 30 Jan 2025 02:30:09 +0000 asID: 21723 IP address blocks: 2001:470:35f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ba:d5:57:05:71:ef:46:6d:5b:09:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Nov 1 01:30:09 2024 GMT Not After : Jan 30 02:30:09 2025 GMT Subject: CN=600bd484-c21f-489e-860b-841d4ac3c683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c8:3b:79:de:d9:59:b2:51:23:8c:8a:c4:d2: b6:94:85:9a:50:ad:7f:bf:96:cb:a4:b8:86:2a:bf: 5f:ee:b0:a3:fc:d9:55:82:c7:fa:eb:40:8e:a6:07: 75:3d:6c:2a:ce:32:2d:74:79:8b:58:2a:57:50:bd: de:2f:64:b7:41:69:10:79:84:f0:b1:38:10:2a:e9: 51:f9:08:58:a9:8a:02:80:c3:5a:63:ba:46:28:f6: d2:61:61:94:75:e4:c1:fb:ae:1e:fc:1b:34:3f:b6: ac:23:10:59:2d:f8:0b:9c:16:56:5e:92:61:7b:ea: 0c:30:48:77:9b:c0:12:48:e1:4d:d5:b2:d7:e9:1f: 03:1a:89:71:e8:16:79:e3:a1:80:43:8c:e9:06:7d: bf:4e:cc:da:12:67:4d:2b:47:9f:2b:59:15:24:73: bb:b8:c0:32:85:44:04:c4:84:69:7f:86:8d:f0:f1: 6f:0f:59:84:e1:35:96:79:35:a3:9b:ed:63:3b:77: a4:1f:ca:95:4a:1e:d1:95:d2:79:29:ed:cb:15:f6: 27:fb:c1:33:ea:ae:31:bd:df:b2:c0:f2:c4:6f:22: 51:78:28:c6:92:2d:03:f8:9d:1a:37:fd:4a:c7:aa: c9:08:0f:ef:ea:05:7b:38:ee:32:c6:3c:0e:46:44: d2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:04:9F:94:09:8E:24:68:A6:A0:52:34:91:A2:85:8D:2C:48:99:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/036398e6-d14c-3bf1-a476-230009286ee8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:35f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:41:b7:20:c4:e9:2b:29:e8:10:bc:90:7f:73:3b:aa:e4:21: b9:27:0e:34:0b:2f:31:c7:1f:fb:fa:28:f3:a1:13:1b:e2:a7: c1:e9:13:86:6e:6c:aa:4d:46:a5:c1:e4:dd:30:ef:c2:1a:ae: 40:3c:91:1c:cb:1b:63:2d:c2:7c:2b:2c:53:39:33:70:2e:e6: 00:6b:e6:dc:9f:b3:22:1e:77:fa:13:09:6c:d3:f6:75:9a:06: b0:23:4b:5c:8d:33:38:50:68:9c:7d:ee:05:79:c4:16:c2:d3: bc:98:40:77:9b:87:83:ab:b0:3d:ff:bf:8f:80:e0:68:ab:de: fc:bd:64:a0:2e:64:b2:34:45:28:8d:fa:76:1f:6d:37:ff:34: 95:cb:1d:7b:b2:5a:54:93:0f:d0:24:b6:c6:10:f4:5a:1f:dd: 1f:a0:ac:4f:bc:20:b6:40:12:1e:09:54:8e:b5:75:3a:78:11: 2a:47:17:e0:1a:3e:f4:03:56:38:6d:1b:08:5b:5a:36:4f:78: ac:60:74:6d:53:42:d5:5a:0e:66:38:b1:34:e7:2a:4e:66:ab: 17:bc:3d:3d:e2:e5:e8:4a:6a:b0:4b:b8:b2:11:fe:ab:88:94: 2f:96:b6:79:ab:87:50:1e:2b:12:2c:d0:99:de:07:70:8e:f8: d5:8e:91:38 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe61VcFce9GbVsJR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MTEwMTAxMzAwOVoXDTI1MDEzMDAyMzAwOVowLzEtMCsGA1UEAxMk NjAwYmQ0ODQtYzIxZi00ODllLTg2MGItODQxZDRhYzNjNjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sg7ed7ZWbJRI4yKxNK2lIWaUK1/v5bLpLiG Kr9f7rCj/NlVgsf660COpgd1PWwqzjItdHmLWCpXUL3eL2S3QWkQeYTwsTgQKulR +QhYqYoCgMNaY7pGKPbSYWGUdeTB+64e/Bs0P7asIxBZLfgLnBZWXpJhe+oMMEh3 m8ASSOFN1bLX6R8DGolx6BZ546GAQ4zpBn2/TszaEmdNK0efK1kVJHO7uMAyhUQE xIRpf4aN8PFvD1mE4TWWeTWjm+1jO3ekH8qVSh7RldJ5Ke3LFfYn+8Ez6q4xvd+y wPLEbyJReCjGki0D+J0aN/1Kx6rJCA/v6gV7OO4yxjwORkTS6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCQEn5QJjiRopqBSNJGihY0sSJmbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDM2Mzk4ZTYtZDE0Yy0z YmYxLWE0NzYtMjMwMDA5Mjg2ZWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcANf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC1BtyDE6Ssp6BC8kH9zO6rkIbknDjQLLzHHH/v6KPOhExvip8Hp E4ZubKpNRqXB5N0w78IarkA8kRzLG2MtwnwrLFM5M3Au5gBr5tyfsyIed/oTCWzT 9nWaBrAjS1yNMzhQaJx97gV5xBbC07yYQHebh4OrsD3/v4+A4Gir3vy9ZKAuZLI0 RSiN+nYfbTf/NJXLHXuyWlSTD9AktsYQ9Fof3R+grE+8ILZAEh4JVI61dTp4ESpH F+AaPvQDVjhtGwhbWjZPeKxgdG1TQtVaDmY4sTTnKk5mqxe8PT3i5ehKarBLuLIR /quIlC+Wtnmrh1AeKxIs0JneB3CO+NWOkTg= -----END CERTIFICATE-----Generated at Fri Nov 22 04:32:34 2024 by rpki-client on console-fra.rpki-client.org