$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/17314e91-3d55-33b3-b357-16e857b17199.roa File: 17314e91-3d55-33b3-b357-16e857b17199.roa (raw, json) Hash identifier: WIsjtI8MHq5RJkdfKMm9RmIslEdUDLxyg3CXyftL/hw= Subject key identifier: 47:16:B4:8D:74:B5:E7:73:8B:DA:68:F9:CE:FA:0A:EB:75:CD:EF:48 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584518B04AD675804D5E68883100 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/17314e91-3d55-33b3-b357-16e857b17199.roa Signing time: Mon 04 Mar 2024 14:00:33 +0000 ROA not before: Mon 04 Mar 2024 14:00:33 +0000 ROA not after: Sun 02 Jun 2024 13:00:33 +0000 asID: 10561 IP address blocks: 2001:470:1b8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:18:b0:4a:d6:75:80:4d:5e:68:88:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 4 14:00:33 2024 GMT Not After : Jun 2 13:00:33 2024 GMT Subject: CN=987e5875-888b-4ab2-9808-8fdfa466b0be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cd:b4:5e:78:59:a4:ca:63:f6:54:6a:76:f6: 49:d8:0e:e1:a4:9a:db:b9:41:be:b2:bc:6b:6b:93: c6:a6:b8:ec:52:a9:b2:e1:2f:1f:17:ca:ec:87:a0: 96:b5:97:cd:78:04:69:46:e4:7e:a0:e0:1b:aa:8c: fd:d2:b5:a7:9a:db:33:ca:61:25:39:e6:c9:28:34: 44:44:fe:11:62:b2:d2:95:90:ee:06:e7:c1:5c:69: 64:9b:c0:47:97:33:39:d6:90:1d:d7:6e:65:63:63: 5c:b9:09:f5:c0:58:75:84:57:5b:98:26:e5:11:a2: 56:0a:7b:0c:67:a5:7d:79:a1:ce:5e:b2:71:17:31: 23:75:42:bd:0b:9e:53:6d:99:40:68:7d:42:61:46: 99:26:fb:02:b5:16:dd:26:9c:87:cd:2b:4f:1e:5b: fa:16:40:2f:82:30:f8:6a:eb:75:bf:e1:aa:ac:e4: 0a:56:21:ec:af:00:26:60:b8:f2:00:ea:54:9c:99: 06:fb:28:c3:24:a7:b3:5f:45:8e:13:d1:63:96:3c: 74:af:83:07:e1:d0:ff:23:0c:68:2b:12:bb:a5:21: f0:6b:ce:b1:0e:ba:bd:92:bc:40:32:c2:ca:9c:cc: 74:59:71:fe:de:3d:5c:50:52:e2:56:32:39:a3:b1: 08:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:16:B4:8D:74:B5:E7:73:8B:DA:68:F9:CE:FA:0A:EB:75:CD:EF:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/17314e91-3d55-33b3-b357-16e857b17199.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1b8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:9a:04:a8:70:1d:66:d4:db:3c:83:87:9c:40:6b:84:02:7d: 3c:e8:83:37:fb:bb:23:e7:a5:c0:67:fe:37:82:a2:00:82:2e: 6f:fd:da:04:ab:86:51:e5:c9:c0:a3:de:50:f3:a6:e3:b7:c2: 88:e6:79:8b:ef:fb:60:23:ab:91:84:d2:2e:ee:ba:a8:b8:00: 75:bc:91:73:21:4e:21:f7:14:8e:02:92:db:0e:66:e9:69:53: 1d:a3:1e:13:8f:61:47:84:8b:36:1e:7f:e1:87:c2:4e:f7:50: 87:6a:eb:7f:db:f8:69:ae:83:62:23:73:05:1a:21:5a:80:7c: 50:1f:ce:c8:f5:cc:4c:be:08:e3:e1:2c:50:c4:c0:86:11:16: 17:34:05:a4:26:0a:88:4e:52:31:1e:47:14:75:83:f0:b1:9b: 2f:23:7f:94:57:49:33:7f:22:08:85:14:b6:f5:40:17:79:70: 03:f3:70:c6:0f:86:3d:52:d9:c9:5c:95:52:a8:2b:57:2a:b8: b1:85:6b:03:d9:e9:73:f3:5e:df:9f:55:da:fa:8f:d7:40:7e: c7:85:f8:6c:c5:07:d4:bd:8f:d4:b4:5e:cb:19:a6:2b:f3:ee: d5:dd:d7:5e:7a:0f:c7:6b:1f:d2:d8:4c:73:99:05:d3:56:70: 44:23:5d:b5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUYsErWdYBNXmiIMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDMwNDE0MDAzM1oXDTI0MDYwMjEzMDAzM1owLzEtMCsGA1UEAxMk OTg3ZTU4NzUtODg4Yi00YWIyLTk4MDgtOGZkZmE0NjZiMGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAls20XnhZpMpj9lRqdvZJ2A7hpJrbuUG+srxr a5PGprjsUqmy4S8fF8rsh6CWtZfNeARpRuR+oOAbqoz90rWnmtszymElOebJKDRE RP4RYrLSlZDuBufBXGlkm8BHlzM51pAd125lY2NcuQn1wFh1hFdbmCblEaJWCnsM Z6V9eaHOXrJxFzEjdUK9C55TbZlAaH1CYUaZJvsCtRbdJpyHzStPHlv6FkAvgjD4 aut1v+GqrOQKViHsrwAmYLjyAOpUnJkG+yjDJKezX0WOE9Fjljx0r4MH4dD/Iwxo KxK7pSHwa86xDrq9krxAMsLKnMx0WXH+3j1cUFLiVjI5o7EIxQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEcWtI10tedzi9po+c76Cut1ze9IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMTczMTRlOTEtM2Q1NS0z M2IzLWIzNTctMTZlODU3YjE3MTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAG4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHyaBKhwHWbU2zyDh5xAa4QCfTzogzf7uyPnpcBn/jeCogCCLm/9 2gSrhlHlycCj3lDzpuO3wojmeYvv+2Ajq5GE0i7uuqi4AHW8kXMhTiH3FI4CktsO ZulpUx2jHhOPYUeEizYef+GHwk73UIdq63/b+Gmug2IjcwUaIVqAfFAfzsj1zEy+ COPhLFDEwIYRFhc0BaQmCohOUjEeRxR1g/Cxmy8jf5RXSTN/IgiFFLb1QBd5cAPz cMYPhj1S2clclVKoK1cquLGFawPZ6XPzXt+fVdr6j9dAfseF+GzFB9S9j9S0XssZ pivz7tXd1156D8drH9LYTHOZBdNWcEQjXbU= -----END CERTIFICATE-----Generated at Mon May 6 12:47:25 2024 by rpki-client on console-ams.rpki-client.org