$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1a51a1de-0053-3e36-b3c7-288e4c9b0971.roa File: 1a51a1de-0053-3e36-b3c7-288e4c9b0971.roa (raw, json) Hash identifier: JoHB+wraRfxkhCCMgMzYsKyChcC/ZaG0Ayt/zVeOXqg= Subject key identifier: 87:CE:99:4D:86:28:12:FE:C6:3A:B0:B7:FB:C1:CB:85:28:84:30:32 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858476F662BA9849FB962372B4000 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1a51a1de-0053-3e36-b3c7-288e4c9b0971.roa Signing time: Sat 05 Oct 2024 01:00:31 +0000 ROA not before: Sat 05 Oct 2024 01:00:31 +0000 ROA not after: Fri 03 Jan 2025 02:00:31 +0000 asID: 40263 IP address blocks: 2001:470:32b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6f:66:2b:a9:84:9f:b9:62:37:2b:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 5 01:00:31 2024 GMT Not After : Jan 3 02:00:31 2025 GMT Subject: CN=70b62a79-e00d-4a8f-9268-369d9c2f49ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0e:fa:f5:d1:44:31:68:70:8d:39:ce:64:b3: db:77:4e:3b:16:9b:f4:ae:10:95:d7:4a:10:9e:29: 2e:40:9c:07:0f:9b:6e:4e:41:9f:0a:fd:24:f3:78: dc:b1:57:d6:91:15:eb:91:85:7b:b9:29:f9:cf:77: 13:36:32:c8:01:2f:b4:44:5a:34:f5:0a:34:9f:13: 6b:8c:eb:de:96:5d:86:6c:07:b0:16:98:df:90:67: 18:76:f5:af:a3:e0:37:44:f4:0f:35:75:22:4f:0e: a1:49:b9:0f:2f:b7:b9:af:34:12:e6:1f:bf:b8:cc: 0c:ca:11:59:b5:8d:8b:d2:c6:d0:90:f4:e6:aa:2f: ee:0f:98:5e:30:81:67:4b:96:bf:ec:d2:13:12:fe: 6f:d3:ee:d9:87:c4:e0:bb:5d:8a:69:53:a1:9f:b6: e7:cb:d1:22:43:2d:bb:35:8d:ee:04:71:1f:a4:a9: 08:92:d4:59:c4:d8:7b:f7:c7:c3:72:3f:a9:5e:a7: ad:c9:be:3e:ea:ae:d6:d5:2f:20:85:74:31:c2:81: 3e:38:d7:6d:ea:93:83:ce:65:93:a4:fb:8e:88:05: 72:2a:99:34:0e:9f:85:26:83:86:79:65:e1:26:73: 4a:77:aa:3e:25:33:ba:d9:56:ba:b5:f6:f4:c0:0e: b4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:CE:99:4D:86:28:12:FE:C6:3A:B0:B7:FB:C1:CB:85:28:84:30:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1a51a1de-0053-3e36-b3c7-288e4c9b0971.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:32b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:b4:11:74:2b:a0:8c:05:93:e3:6c:81:f0:c6:46:d3:a1:37: ab:f7:36:6f:ae:75:1f:b9:d0:ed:0b:f6:76:c4:07:22:7f:25: 3e:98:6e:24:62:e8:67:79:47:5c:25:df:9e:48:4c:5f:9c:13: 1c:35:81:41:2c:da:84:15:99:94:82:f0:3b:7e:42:5e:0e:f3: f2:ce:de:19:05:9c:6d:f5:75:04:a8:fc:67:b9:15:8a:fa:03: 3a:36:5a:d2:37:cd:b9:86:e3:5d:c3:bd:4d:3f:cb:ec:ee:f5: d6:02:80:8b:34:12:d1:c7:f2:a3:24:a6:2b:a6:18:a1:60:4b: c5:90:b3:ee:7c:10:08:8a:9e:4a:bc:3f:48:02:a6:e3:ed:7d: b4:f9:a7:0e:be:6c:1f:fe:c0:98:cc:1e:e5:a0:0f:a7:e5:07: 0e:af:eb:b9:75:27:23:19:03:30:fa:5c:5f:cb:82:b6:d8:c1: 56:de:c9:c2:13:57:8f:88:40:2c:1e:40:44:43:e2:aa:52:dc: 20:74:f1:07:24:92:84:cb:36:e3:3b:b2:8f:53:eb:42:59:85: d0:e1:35:ff:f0:87:d9:29:77:30:aa:ec:37:fe:fb:a0:73:0d: db:43:b1:ef:a5:81:86:7c:13:da:00:0c:31:3d:1c:c3:91:73: 41:92:25:fd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdvZiuphJ+5YjcrQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MTAwNTAxMDAzMVoXDTI1MDEwMzAyMDAzMVowLzEtMCsGA1UEAxMk NzBiNjJhNzktZTAwZC00YThmLTkyNjgtMzY5ZDljMmY0OWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ769dFEMWhwjTnOZLPbd047Fpv0rhCV10oQ nikuQJwHD5tuTkGfCv0k83jcsVfWkRXrkYV7uSn5z3cTNjLIAS+0RFo09Qo0nxNr jOvell2GbAewFpjfkGcYdvWvo+A3RPQPNXUiTw6hSbkPL7e5rzQS5h+/uMwMyhFZ tY2L0sbQkPTmqi/uD5heMIFnS5a/7NITEv5v0+7Zh8Tgu12KaVOhn7bny9EiQy27 NY3uBHEfpKkIktRZxNh798fDcj+pXqetyb4+6q7W1S8ghXQxwoE+ONdt6pODzmWT pPuOiAVyKpk0Dp+FJoOGeWXhJnNKd6o+JTO62Va6tfb0wA60XQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIfOmU2GKBL+xjqwt/vBy4UohDAyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMWE1MWExZGUtMDA1My0z ZTM2LWIzYzctMjg4ZTRjOWIwOTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAMr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEq0EXQroIwFk+NsgfDGRtOhN6v3Nm+udR+50O0L9nbEByJ/JT6Y biRi6Gd5R1wl355ITF+cExw1gUEs2oQVmZSC8Dt+Ql4O8/LO3hkFnG31dQSo/Ge5 FYr6Azo2WtI3zbmG413DvU0/y+zu9dYCgIs0EtHH8qMkpiumGKFgS8WQs+58EAiK nkq8P0gCpuPtfbT5pw6+bB/+wJjMHuWgD6flBw6v67l1JyMZAzD6XF/LgrbYwVbe ycITV4+IQCweQERD4qpS3CB08QckkoTLNuM7so9T60JZhdDhNf/wh9kpdzCq7Df+ +6BzDdtDse+lgYZ8E9oADDE9HMORc0GSJf0= -----END CERTIFICATE-----Generated at Fri Nov 22 04:51:21 2024 by rpki-client on console-ams.rpki-client.org