$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/129fc07a-b159-3420-9874-f95f1778c451.roa File: 129fc07a-b159-3420-9874-f95f1778c451.roa (raw, json) Hash identifier: 8du97zVC6tR3Z7NFrPl1DIrRRUZ7tqT9cQ6B4gEC6l4= Subject key identifier: 3A:84:CB:E0:00:73:08:F4:35:17:EC:50:EC:57:44:F8:B2:09:3F:6F Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285844F46552F93509B706D0297E80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/129fc07a-b159-3420-9874-f95f1778c451.roa Signing time: Tue 20 Feb 2024 14:00:31 +0000 ROA not before: Tue 20 Feb 2024 14:00:31 +0000 ROA not after: Mon 20 May 2024 13:00:31 +0000 asID: 2728 IP address blocks: 2001:470:237::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f4:65:52:f9:35:09:b7:06:d0:29:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 20 14:00:31 2024 GMT Not After : May 20 13:00:31 2024 GMT Subject: CN=284f327a-50f3-4e88-977d-83bccb057f39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1b:1d:bf:4d:2d:d7:0a:bf:8e:7a:1d:ab:14: 61:e3:c1:8b:b0:9f:45:12:86:8f:9d:9d:6f:6e:ab: d7:c6:4f:14:44:86:d3:34:ab:85:7b:84:8d:e7:ce: 6c:b1:5d:e3:20:6f:b2:ee:ed:3e:79:da:d3:78:b4: 88:df:e5:0a:fd:70:f8:02:51:a3:3c:14:3d:6f:2a: b0:de:be:a4:92:d9:7b:67:82:b3:2f:77:cb:ac:22: e3:86:08:56:25:12:ad:33:41:d0:f2:8d:8b:d2:07: 3d:45:ba:50:1b:ae:32:cb:aa:96:4a:17:95:c1:b8: 5d:ed:fe:8d:e6:dd:6a:c1:2f:d7:53:3b:e4:53:c9: f0:6a:b0:03:48:72:31:be:3e:b8:6b:c8:60:2a:98: 8c:ad:9b:11:0c:c6:c4:71:06:6c:cc:45:a1:e8:58: 63:a4:b1:40:d5:85:7d:25:2c:12:54:4b:d2:34:19: 2f:de:ac:f7:c9:95:3f:51:96:2f:84:cb:1c:24:74: a3:02:da:1d:23:70:ff:b0:eb:1b:b2:29:2a:b8:47: a5:d4:1c:b9:01:2e:c0:00:71:25:95:b7:36:1e:88: 21:db:ff:fc:7e:e3:4a:f8:e7:c4:de:13:b0:ed:5d: a7:4c:e6:d0:27:c2:38:23:86:97:ac:47:96:a1:8a: b9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:84:CB:E0:00:73:08:F4:35:17:EC:50:EC:57:44:F8:B2:09:3F:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/129fc07a-b159-3420-9874-f95f1778c451.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:237::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:f3:4e:53:15:88:f0:5c:6b:3c:31:7b:45:07:65:b8:43:0f: 40:a4:0e:ac:0d:83:2e:d6:50:e5:5d:12:5b:bb:6f:57:f9:a7: 33:d9:f0:3f:1a:00:6c:95:9b:6c:fb:ad:dd:fd:ba:4d:e6:bf: ae:6c:3e:98:79:3a:a0:f2:19:14:50:13:93:c4:a4:27:09:4f: 9d:83:09:52:13:00:e2:cd:62:d1:ae:27:88:58:dc:ce:c1:7b: b9:f5:ef:d5:c9:bc:d2:77:1a:d5:f3:fd:0b:38:12:b1:20:b9: c9:0c:3a:16:c9:d2:05:81:fe:fb:6e:05:08:7f:02:5a:72:57: bd:45:bd:37:c9:2e:cc:53:12:b0:7c:3b:82:6d:6f:1d:9d:b4: 0f:c6:41:4d:b8:ed:db:75:47:df:af:ed:e2:c8:68:25:c7:56: 37:6f:60:fc:63:6f:c6:b5:8e:ce:21:ea:03:e6:9f:7d:6d:4a: f0:dd:9d:6e:4a:df:5e:c4:1e:52:67:53:13:a4:9a:63:fd:1a: a4:11:c2:ab:04:67:4d:ed:e3:67:30:c4:eb:59:36:58:ac:e6: 78:a2:82:31:a7:99:e9:43:4c:59:e0:78:97:4a:7f:56:2d:1d: d6:84:f2:45:6a:28:42:a7:57:31:bc:fb:f6:0d:89:24:6f:4d: 21:06:0d:ea -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWET0ZVL5NQm3BtApfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDIyMDE0MDAzMVoXDTI0MDUyMDEzMDAzMVowLzEtMCsGA1UEAxMk Mjg0ZjMyN2EtNTBmMy00ZTg4LTk3N2QtODNiY2NiMDU3ZjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhsdv00t1wq/jnodqxRh48GLsJ9FEoaPnZ1v bqvXxk8URIbTNKuFe4SN585ssV3jIG+y7u0+edrTeLSI3+UK/XD4AlGjPBQ9byqw 3r6kktl7Z4KzL3fLrCLjhghWJRKtM0HQ8o2L0gc9RbpQG64yy6qWSheVwbhd7f6N 5t1qwS/XUzvkU8nwarADSHIxvj64a8hgKpiMrZsRDMbEcQZszEWh6FhjpLFA1YV9 JSwSVEvSNBkv3qz3yZU/UZYvhMscJHSjAtodI3D/sOsbsikquEel1By5AS7AAHEl lbc2Hogh2//8fuNK+OfE3hOw7V2nTObQJ8I4I4aXrEeWoYq5LQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDqEy+AAcwj0NRfsUOxXRPiyCT9vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMTI5ZmMwN2EtYjE1OS0z NDIwLTk4NzQtZjk1ZjE3NzhjNDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJrzTlMViPBcazwxe0UHZbhDD0CkDqwNgy7WUOVdElu7b1f5pzPZ 8D8aAGyVm2z7rd39uk3mv65sPph5OqDyGRRQE5PEpCcJT52DCVITAOLNYtGuJ4hY 3M7Be7n179XJvNJ3GtXz/Qs4ErEguckMOhbJ0gWB/vtuBQh/AlpyV71FvTfJLsxT ErB8O4Jtbx2dtA/GQU247dt1R9+v7eLIaCXHVjdvYPxjb8a1js4h6gPmn31tSvDd nW5K317EHlJnUxOkmmP9GqQRwqsEZ03t42cwxOtZNlis5niigjGnmelDTFngeJdK f1YtHdaE8kVqKEKnVzG8+/YNiSRvTSEGDeo= -----END CERTIFICATE-----Generated at Mon May 6 12:47:25 2024 by rpki-client on console-ams.rpki-client.org