$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0f062223-d965-3ab2-a4dd-cc747b345810.roa File: 0f062223-d965-3ab2-a4dd-cc747b345810.roa (raw, json) Hash identifier: YS5vuhknIS5CLqL7Lr3hBJW00bRgJGGowdTy6SVKS50= Subject key identifier: 4C:2A:31:42:F6:16:84:D6:EC:63:CB:E9:05:4B:52:3D:01:D1:11:82 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285844F89563FE20BEC45466E7EFC0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0f062223-d965-3ab2-a4dd-cc747b345810.roa Signing time: Thu 22 Feb 2024 02:00:27 +0000 ROA not before: Thu 22 Feb 2024 02:00:27 +0000 ROA not after: Wed 22 May 2024 01:00:27 +0000 asID: 12266 IP address blocks: 2001:470:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f8:95:63:fe:20:be:c4:54:66:e7:ef:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 22 02:00:27 2024 GMT Not After : May 22 01:00:27 2024 GMT Subject: CN=47b8b5de-912c-4c3a-b72d-e1c8c2380cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:aa:e1:4a:b1:cf:fe:83:d5:59:dd:a7:7e:02: 17:00:fd:00:82:6c:cd:20:2a:09:c9:b7:56:e6:0e: 4e:86:f2:79:4c:b7:19:53:ee:87:9d:36:ea:0f:e4: e3:f9:cf:66:77:c9:14:98:03:43:6d:b3:61:ee:3a: 68:74:d1:97:d6:a6:d0:66:b8:e9:32:a4:53:7f:fb: d2:82:8e:16:53:81:ca:7b:67:f9:7d:3a:fc:cb:2e: f7:0f:98:7d:8e:f7:4f:40:71:83:49:a8:91:82:b4: 73:b4:6a:9f:dd:f7:bd:2d:05:e5:02:f3:af:6d:6e: a2:4a:76:5a:4c:ac:cb:c9:d5:7e:22:1a:44:70:54: fa:2e:29:a7:d7:f4:16:22:79:82:6b:8c:30:f5:23: f5:3d:f5:e8:40:81:3b:d7:d3:9f:e3:ae:51:c3:a0: 43:2c:c5:cd:8a:06:4f:d6:51:aa:e8:8b:98:4d:20: d8:79:6f:c3:7f:8b:0a:b4:3f:9a:a1:1a:c3:15:b8: 58:14:fc:ef:93:c0:4c:3a:d1:3a:03:1e:1f:51:84: 37:40:35:cd:85:f8:30:27:ce:c9:68:e2:77:a7:e4: 36:e4:5a:57:06:2e:43:18:63:e9:c7:a4:2a:01:ca: 6e:29:7b:e5:0a:69:16:db:32:24:a8:32:a6:c5:7e: 2e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:2A:31:42:F6:16:84:D6:EC:63:CB:E9:05:4B:52:3D:01:D1:11:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0f062223-d965-3ab2-a4dd-cc747b345810.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:a9:24:55:d5:e8:6a:40:77:79:3c:d5:a2:f8:42:90:90:42: a1:b2:67:46:09:ff:51:44:7f:bd:45:7d:ea:67:29:a0:60:44: 0b:5c:a7:04:76:4e:55:5b:8f:f9:a4:69:59:de:17:0e:12:5e: 80:1d:17:28:3c:b0:25:02:46:fe:f4:73:51:60:64:7b:6b:0b: 0c:4d:70:94:45:72:b2:66:d4:45:03:18:05:43:5e:48:d1:1f: d2:bf:04:89:e8:7b:71:99:87:86:ce:ff:f7:3b:73:84:7c:28: fe:37:d7:5d:38:29:20:06:7c:d3:c1:0f:6f:82:90:30:d0:14: ac:5d:81:fa:1e:b9:16:ff:ad:7e:71:e7:27:f1:f3:7e:10:45: 70:c4:30:e6:3b:89:fb:fc:76:2c:98:cb:00:b1:36:5d:ec:ec: a8:4d:5a:dc:33:a8:7d:09:47:9c:88:3d:72:07:b6:3e:c6:6c: 3d:7e:8a:91:9a:3a:2a:e5:eb:50:c3:23:e7:79:b2:fb:67:d3: 36:b3:05:57:80:5b:16:d3:8a:7d:22:16:91:b3:91:00:40:00: ad:ba:b0:b9:d7:a0:07:4b:70:e3:1d:88:d2:dc:f2:9c:ce:25: ff:8c:a1:eb:0c:29:1d:48:d1:49:58:3c:35:00:3e:a1:a5:8c: 39:54:24:8f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWET4lWP+IL7EVGbn78AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDIyMjAyMDAyN1oXDTI0MDUyMjAxMDAyN1owLzEtMCsGA1UEAxMk NDdiOGI1ZGUtOTEyYy00YzNhLWI3MmQtZTFjOGMyMzgwY2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiarhSrHP/oPVWd2nfgIXAP0AgmzNICoJybdW 5g5OhvJ5TLcZU+6HnTbqD+Tj+c9md8kUmANDbbNh7jpodNGX1qbQZrjpMqRTf/vS go4WU4HKe2f5fTr8yy73D5h9jvdPQHGDSaiRgrRztGqf3fe9LQXlAvOvbW6iSnZa TKzLydV+IhpEcFT6Limn1/QWInmCa4ww9SP1PfXoQIE719Of465Rw6BDLMXNigZP 1lGq6IuYTSDYeW/Df4sKtD+aoRrDFbhYFPzvk8BMOtE6Ax4fUYQ3QDXNhfgwJ87J aOJ3p+Q25FpXBi5DGGPpx6QqAcpuKXvlCmkW2zIkqDKmxX4uEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEwqMUL2FoTW7GPL6QVLUj0B0RGCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMGYwNjIyMjMtZDk2NS0z YWIyLWE0ZGQtY2M3NDdiMzQ1ODEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABCpJFXV6GpAd3k81aL4QpCQQqGyZ0YJ/1FEf71FfepnKaBgRAtc pwR2TlVbj/mkaVneFw4SXoAdFyg8sCUCRv70c1FgZHtrCwxNcJRFcrJm1EUDGAVD XkjRH9K/BInoe3GZh4bO//c7c4R8KP431104KSAGfNPBD2+CkDDQFKxdgfoeuRb/ rX5x5yfx834QRXDEMOY7ifv8diyYywCxNl3s7KhNWtwzqH0JR5yIPXIHtj7GbD1+ ipGaOirl61DDI+d5svtn0zazBVeAWxbTin0iFpGzkQBAAK26sLnXoAdLcOMdiNLc 8pzOJf+MoesMKR1I0UlYPDUAPqGljDlUJI8= -----END CERTIFICATE-----Generated at Mon May 6 12:02:15 2024 by rpki-client on console-fra.rpki-client.org