$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0c5e964e-cfb4-3448-8e74-1dd3455e17b4.roa File: 0c5e964e-cfb4-3448-8e74-1dd3455e17b4.roa (raw, json) Hash identifier: SNLFNNXtPziEIdwv2Owif9C5U6rz2CWW+2Q7FciGcPE= Subject key identifier: B4:90:40:01:E7:68:C7:5C:57:6E:5E:E9:A7:5A:5D:C3:6E:93:26:43 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858452110513CD22314DE883AD7C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0c5e964e-cfb4-3448-8e74-1dd3455e17b4.roa Signing time: Thu 07 Mar 2024 14:00:32 +0000 ROA not before: Thu 07 Mar 2024 14:00:32 +0000 ROA not after: Wed 05 Jun 2024 13:00:32 +0000 asID: 54133 IP address blocks: 2001:470:1bf::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:21:10:51:3c:d2:23:14:de:88:3a:d7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 7 14:00:32 2024 GMT Not After : Jun 5 13:00:32 2024 GMT Subject: CN=7fbed06d-612a-436a-985f-1fb7ce93ac35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:60:ce:f7:cb:55:be:2a:09:ca:d5:86:fd:c6: e8:19:50:ef:29:d9:ca:41:55:de:31:3a:82:ad:30: ba:33:3e:0a:e2:f1:ad:0a:f1:d9:a6:02:4f:0b:36: 40:1a:ed:e7:fb:9f:cf:96:2d:3d:d1:8a:3c:f7:a8: c2:55:dd:df:3e:34:5f:a7:21:dc:a8:44:3c:d3:ca: 85:51:5c:9d:34:2b:a6:3b:2e:b4:75:b0:b8:79:b3: 86:42:97:1a:8b:6c:18:b5:32:bf:e5:11:85:e5:6e: 64:98:59:48:b7:b1:ba:86:3a:8c:5f:c6:ca:bd:93: ee:c3:36:25:52:3d:16:70:bd:22:8e:d1:5d:6e:58: 70:f9:69:79:f5:3f:62:1c:d5:05:fe:da:ea:43:9d: a9:2a:92:3f:61:fb:e5:95:d2:c3:f8:6e:c8:66:89: a3:e1:83:ae:25:f9:f1:79:09:6b:b5:47:d3:97:15: c8:c8:61:1f:cc:ca:e2:2b:66:73:3b:a5:8d:d1:96: 5a:a3:09:1c:11:c0:65:10:b4:ad:46:97:35:62:b5: a9:ba:8b:c3:33:f9:b4:21:78:8e:20:a1:0c:a8:e7: be:5c:3f:57:5c:32:b3:3b:f1:83:ad:77:24:f8:f1: c9:ed:f2:6d:b8:13:72:91:ac:54:56:0c:16:3a:59: 83:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:90:40:01:E7:68:C7:5C:57:6E:5E:E9:A7:5A:5D:C3:6E:93:26:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0c5e964e-cfb4-3448-8e74-1dd3455e17b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1bf::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:90:06:af:35:06:ad:bb:d9:af:89:5a:ed:62:d8:da:4b:b3: 70:8f:b6:9e:ea:50:c4:a3:11:04:49:a0:69:55:33:d8:5b:34: a8:2f:d2:05:47:20:9f:85:9c:c8:d8:d8:c7:9a:20:9c:26:f8: 82:7b:3a:6b:e5:c3:db:31:27:7d:85:4b:68:fc:08:db:2c:db: e3:af:7d:2a:32:22:e2:e7:84:8c:a6:70:df:31:4a:ed:ff:c1: db:c1:b1:00:43:06:ca:25:fb:90:f7:73:18:1e:48:4e:98:7f: 55:df:a4:b5:a6:c0:6a:2e:1d:4a:d7:b5:9b:bf:6c:14:da:0f: 23:e2:89:dc:87:f8:39:53:1d:e6:1d:e7:a0:66:14:34:d5:05: 0f:44:a0:5c:d6:52:67:53:8e:7d:a2:e9:07:33:2d:11:ac:3b: b6:f2:47:bc:99:84:8a:45:c6:ed:e9:d2:4a:e0:e1:5b:f3:14: 0e:de:92:ad:96:a9:c4:dd:fd:f8:e1:bd:62:13:7f:47:a9:80: a5:fc:b7:ca:52:a5:27:a3:fd:bb:c1:64:8b:5d:d2:6b:91:b9: 4e:a1:5f:b2:e4:78:3c:db:51:c5:13:d9:df:0e:9b:90:c9:a1: c5:b1:41:92:03:4b:1f:fd:0b:2f:13:be:38:84:36:b4:f8:1e: 0b:21:f8:72 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUhEFE80iMU3og618AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDMwNzE0MDAzMloXDTI0MDYwNTEzMDAzMlowLzEtMCsGA1UEAxMk N2ZiZWQwNmQtNjEyYS00MzZhLTk4NWYtMWZiN2NlOTNhYzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2DO98tVvioJytWG/cboGVDvKdnKQVXeMTqC rTC6Mz4K4vGtCvHZpgJPCzZAGu3n+5/Pli090Yo896jCVd3fPjRfpyHcqEQ808qF UVydNCumOy60dbC4ebOGQpcai2wYtTK/5RGF5W5kmFlIt7G6hjqMX8bKvZPuwzYl Uj0WcL0ijtFdblhw+Wl59T9iHNUF/trqQ52pKpI/YfvlldLD+G7IZomj4YOuJfnx eQlrtUfTlxXIyGEfzMriK2ZzO6WN0ZZaowkcEcBlELStRpc1YrWpuovDM/m0IXiO IKEMqOe+XD9XXDKzO/GDrXck+PHJ7fJtuBNykaxUVgwWOlmDdQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLSQQAHnaMdcV25e6adaXcNukyZDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMGM1ZTk2NGUtY2ZiNC0z NDQ4LThlNzQtMWRkMzQ1NWUxN2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAG/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAASQBq81Bq272a+JWu1i2NpLs3CPtp7qUMSjEQRJoGlVM9hbNKgv 0gVHIJ+FnMjY2MeaIJwm+IJ7Omvlw9sxJ32FS2j8CNss2+OvfSoyIuLnhIymcN8x Su3/wdvBsQBDBsol+5D3cxgeSE6Yf1XfpLWmwGouHUrXtZu/bBTaDyPiidyH+DlT HeYd56BmFDTVBQ9EoFzWUmdTjn2i6QczLRGsO7byR7yZhIpFxu3p0krg4VvzFA7e kq2WqcTd/fjhvWITf0epgKX8t8pSpSej/bvBZItd0muRuU6hX7LkeDzbUcUT2d8O m5DJocWxQZIDSx/9Cy8TvjiENrT4Hgsh+HI= -----END CERTIFICATE-----Generated at Mon May 6 15:20:34 2024 by rpki-client on console-ams.rpki-client.org