$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/178af2c1-bb4c-360a-9cf4-d36d005e11c0.roa File: 178af2c1-bb4c-360a-9cf4-d36d005e11c0.roa (raw, json) Hash identifier: fHKbXz/U2zNoC4joV76f+iO5VZLzt6KVwtZIKVVkXWw= Subject key identifier: E5:12:D1:C4:1F:1D:E5:68:91:7C:59:20:B1:7C:9F:17:8A:3F:DB:C0 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285845C8739D2E696638A5961BCE80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/178af2c1-bb4c-360a-9cf4-d36d005e11c0.roa Signing time: Mon 06 May 2024 13:00:34 +0000 ROA not before: Mon 06 May 2024 13:00:34 +0000 ROA not after: Sun 04 Aug 2024 13:00:34 +0000 asID: 20432 IP address blocks: 2001:470:295::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:c8:73:9d:2e:69:66:38:a5:96:1b:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 6 13:00:34 2024 GMT Not After : Aug 4 13:00:34 2024 GMT Subject: CN=ae9b7335-97bf-4097-a28c-c4be0f645e32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:2d:cd:63:17:85:87:08:74:74:7a:2c:7a:a1: a9:4f:cc:47:66:45:1c:ce:48:03:37:a8:80:81:80: 45:79:62:fe:81:bd:cf:35:17:8e:56:0a:4c:45:d2: 23:8a:57:9c:63:a8:18:77:dc:54:6f:fc:7e:38:21: f3:30:8a:1a:e8:a9:b0:00:90:dc:c3:b9:1a:6f:de: c8:78:b6:29:27:d9:f7:a1:23:f0:d7:4e:c7:09:ec: 21:30:c6:ee:90:b4:ca:09:30:96:3b:6a:31:69:4d: 76:ea:01:8c:0b:8a:b3:5a:d4:bb:f7:60:b0:6d:22: 03:86:a7:26:ca:87:23:15:0a:dd:59:99:47:c3:df: 37:fd:36:d4:8f:37:ed:27:46:8b:4d:27:e2:ef:02: e7:0c:1b:ac:04:e5:8c:61:d8:c8:8e:97:3b:b5:58: 22:75:25:94:bf:a2:3b:74:ab:d0:7e:c8:ab:c7:7e: 29:8c:39:6e:c1:bc:0b:39:de:f0:bb:7f:ca:5d:ef: 95:95:40:cf:8a:10:da:e3:17:ea:08:56:ab:ef:63: 51:57:63:9c:d0:93:04:4d:89:12:05:30:8a:8c:28: 41:b7:e2:72:a2:84:e5:d6:2c:51:90:fe:51:ee:ab: 2a:6e:b2:ba:a4:16:8b:fa:5f:00:12:e7:58:d1:89: 27:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:12:D1:C4:1F:1D:E5:68:91:7C:59:20:B1:7C:9F:17:8A:3F:DB:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/178af2c1-bb4c-360a-9cf4-d36d005e11c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:295::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:37:b2:73:81:f2:ec:77:b7:3f:87:33:48:63:b9:ff:a3:e4: 80:00:5c:99:ef:2e:16:95:6b:6f:25:e7:d0:86:86:d3:0f:e6: 51:98:1d:74:f7:38:fc:07:aa:02:da:e0:53:33:eb:cd:d1:f1: 07:3a:73:00:bd:87:cc:7a:57:87:22:89:3e:25:12:3f:81:ad: b1:9e:29:2f:53:69:ed:c3:41:85:5b:89:8b:65:9e:22:a1:e8: c3:09:8b:89:ab:17:20:f3:73:2e:0b:b3:5c:2e:31:96:46:25: 7f:84:38:e1:2d:30:43:b9:85:17:26:c7:8d:ad:88:51:09:1f: cf:39:db:3d:a2:e7:b6:78:23:8f:b6:d9:b6:3a:b1:ea:7f:9e: f2:19:ae:8b:a2:db:c0:bf:a7:1f:05:44:9c:7a:88:c8:07:49: 95:9e:a3:6a:e5:cd:25:5e:53:93:4f:29:0a:9f:e8:fd:af:b0: 9e:17:6b:83:a1:aa:a6:55:26:e7:e5:ac:33:da:aa:04:9d:0c: e8:07:6c:fe:96:87:1f:60:ec:43:21:b7:84:82:05:9e:81:1c: 3b:1b:b9:1e:fd:5f:06:3a:28:53:96:7b:d4:b4:c0:63:c4:4e: 68:ae:d3:82:97:ff:30:6f:d2:0c:06:fc:05:7e:03:8d:61:45: a5:1c:12:21 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEXIc50uaWY4pZYbzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDUwNjEzMDAzNFoXDTI0MDgwNDEzMDAzNFowLzEtMCsGA1UEAxMk YWU5YjczMzUtOTdiZi00MDk3LWEyOGMtYzRiZTBmNjQ1ZTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjC3NYxeFhwh0dHoseqGpT8xHZkUczkgDN6iA gYBFeWL+gb3PNReOVgpMRdIjilecY6gYd9xUb/x+OCHzMIoa6KmwAJDcw7kab97I eLYpJ9n3oSPw107HCewhMMbukLTKCTCWO2oxaU126gGMC4qzWtS792CwbSIDhqcm yocjFQrdWZlHw983/TbUjzftJ0aLTSfi7wLnDBusBOWMYdjIjpc7tVgidSWUv6I7 dKvQfsirx34pjDluwbwLOd7wu3/KXe+VlUDPihDa4xfqCFar72NRV2Oc0JMETYkS BTCKjChBt+JyooTl1ixRkP5R7qsqbrK6pBaL+l8AEudY0YknzQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOUS0cQfHeVokXxZILF8nxeKP9vAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMTc4YWYyYzEtYmI0Yy0z NjBhLTljZjQtZDM2ZDAwNWUxMWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAo3snOB8ux3tz+HM0hjuf+j5IAAXJnvLhaVa28l59CGhtMP5lGY HXT3OPwHqgLa4FMz683R8Qc6cwC9h8x6V4ciiT4lEj+BrbGeKS9Tae3DQYVbiYtl niKh6MMJi4mrFyDzcy4Ls1wuMZZGJX+EOOEtMEO5hRcmx42tiFEJH8852z2i57Z4 I4+22bY6sep/nvIZroui28C/px8FRJx6iMgHSZWeo2rlzSVeU5NPKQqf6P2vsJ4X a4OhqqZVJuflrDPaqgSdDOgHbP6Whx9g7EMht4SCBZ6BHDsbuR79XwY6KFOWe9S0 wGPETmiu04KX/zBv0gwG/AV+A41hRaUcEiE= -----END CERTIFICATE-----Generated at Mon May 6 22:50:41 2024 by rpki-client on console-ams.rpki-client.org