$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/17a52a82-f3b9-3996-8f68-5b69658e0fb5.roa File: 17a52a82-f3b9-3996-8f68-5b69658e0fb5.roa (raw, json) Hash identifier: InqC/AS4q1N/rOo8ys70BLTrba90Oihh+QHvNFhu9v0= Subject key identifier: FA:A2:4C:C1:5F:66:17:FD:95:23:A5:71:3B:61:BD:97:65:5C:D0:85 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285845628D883C7C96C91998360DC0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/17a52a82-f3b9-3996-8f68-5b69658e0fb5.roa Signing time: Sun 31 Mar 2024 01:00:26 +0000 ROA not before: Sun 31 Mar 2024 01:00:26 +0000 ROA not after: Sat 29 Jun 2024 01:00:26 +0000 asID: 8851 IP address blocks: 2001:470:161::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:62:8d:88:3c:7c:96:c9:19:98:36:0d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 31 01:00:26 2024 GMT Not After : Jun 29 01:00:26 2024 GMT Subject: CN=7bd15da3-27d6-4fc0-8625-13a1598889a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:18:5a:ef:aa:70:ae:72:72:4c:5c:0b:ac:ac: 83:a1:9d:91:10:0a:f1:ff:12:0b:75:11:9b:4c:2a: 0c:36:9a:50:39:6f:13:fa:76:45:01:0e:f0:46:67: 01:74:0b:eb:a8:e0:ad:2c:08:a5:38:f5:97:41:c7: 63:fd:42:25:ea:ae:b1:df:3d:07:ba:01:f8:38:49: 4c:87:57:57:f9:f1:1d:2c:b1:6e:c9:6f:b4:01:f4: 87:21:63:56:5a:ad:61:17:6b:ef:8d:45:12:f3:f9: 55:ff:f1:ad:67:c6:24:2b:86:14:a2:70:b4:cb:05: e6:f9:67:62:f1:81:58:52:c5:c6:19:39:b8:40:c4: 7e:8d:5a:0c:85:a3:7d:ef:43:8f:37:21:29:57:70: 7c:1f:a6:63:f5:1e:d1:ae:f8:bb:8e:d4:3f:2a:c5: 77:6f:39:77:28:97:88:10:38:81:41:87:41:1f:69: 9c:e7:8b:6b:46:67:09:0a:2b:dd:0b:a1:b1:0a:71: ed:8d:f4:3d:c8:0d:e0:ed:98:c5:24:2b:af:8e:49: 24:c3:a4:f2:47:19:2a:b6:fe:05:ce:e2:ac:40:1d: 0b:87:c3:9a:fd:69:36:20:68:de:47:52:57:d2:b4: de:09:9d:8c:8b:bb:b7:10:75:57:4d:fb:5f:7a:cb: e5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A2:4C:C1:5F:66:17:FD:95:23:A5:71:3B:61:BD:97:65:5C:D0:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/17a52a82-f3b9-3996-8f68-5b69658e0fb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:161::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:e2:01:43:a4:a4:98:e5:4c:04:29:b2:2d:4c:a1:d9:19:5e: 6c:15:9c:73:ef:b4:18:6a:69:5d:93:3b:87:b7:0f:59:84:86: d8:59:0e:9d:ba:87:99:94:43:0c:f6:f2:76:a3:b1:ec:5d:d3: 25:a5:71:57:00:f2:2f:21:c3:f1:8b:c0:fa:74:30:9e:b6:b8: 00:52:ec:19:ae:d5:66:b9:9e:2a:77:cb:a1:52:4b:db:e0:be: 78:89:57:61:c6:0d:6e:24:b1:1c:4b:eb:1f:4e:dc:7b:6f:03: 58:ef:47:09:83:81:71:bc:97:ee:2d:ea:6d:40:70:82:09:34: 0a:50:56:0c:b2:d6:19:41:d1:aa:8c:79:e4:9a:26:6e:25:6c: 44:2b:05:6a:e7:5e:01:66:d4:43:a4:79:07:d2:fe:86:aa:99: 9c:9d:56:e4:20:b9:e6:da:af:dd:45:c2:02:13:ec:0a:59:16: 89:fb:65:9c:22:87:b9:b2:58:33:c8:e5:ab:93:82:4c:61:7f: f9:2d:6e:ee:c1:30:f0:48:1a:46:b5:bb:cd:47:f4:29:32:f3: 20:ee:4f:12:a6:5d:5b:ca:70:68:4a:02:9e:e0:4a:cb:e4:43: ae:4c:42:f8:71:a3:5b:2d:11:22:b4:bc:69:b3:7e:28:3f:9f: 46:42:f8:53 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVijYg8fJbJGZg2DcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDMzMTAxMDAyNloXDTI0MDYyOTAxMDAyNlowLzEtMCsGA1UEAxMk N2JkMTVkYTMtMjdkNi00ZmMwLTg2MjUtMTNhMTU5ODg4OWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRha76pwrnJyTFwLrKyDoZ2REArx/xILdRGb TCoMNppQOW8T+nZFAQ7wRmcBdAvrqOCtLAilOPWXQcdj/UIl6q6x3z0HugH4OElM h1dX+fEdLLFuyW+0AfSHIWNWWq1hF2vvjUUS8/lV//GtZ8YkK4YUonC0ywXm+Wdi 8YFYUsXGGTm4QMR+jVoMhaN970OPNyEpV3B8H6Zj9R7Rrvi7jtQ/KsV3bzl3KJeI EDiBQYdBH2mc54trRmcJCivdC6GxCnHtjfQ9yA3g7ZjFJCuvjkkkw6TyRxkqtv4F zuKsQB0Lh8Oa/Wk2IGjeR1JX0rTeCZ2Mi7u3EHVXTftfesvl4QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPqiTMFfZhf9lSOlcTthvZdlXNCFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMTdhNTJhODItZjNiOS0z OTk2LThmNjgtNWI2OTY1OGUwZmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAFh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKbiAUOkpJjlTAQpsi1ModkZXmwVnHPvtBhqaV2TO4e3D1mEhthZ Dp26h5mUQwz28najsexd0yWlcVcA8i8hw/GLwPp0MJ62uABS7Bmu1Wa5nip3y6FS S9vgvniJV2HGDW4ksRxL6x9O3HtvA1jvRwmDgXG8l+4t6m1AcIIJNApQVgyy1hlB 0aqMeeSaJm4lbEQrBWrnXgFm1EOkeQfS/oaqmZydVuQguebar91FwgIT7ApZFon7 ZZwih7myWDPI5auTgkxhf/ktbu7BMPBIGka1u81H9Cky8yDuTxKmXVvKcGhKAp7g SsvkQ65MQvhxo1stESK0vGmzfig/n0ZC+FM= -----END CERTIFICATE-----Generated at Mon May 6 12:02:16 2024 by rpki-client on console-fra.rpki-client.org