$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1c0effc9-8c61-31b5-ae7d-cbe1ddc2e88e.roa File: 1c0effc9-8c61-31b5-ae7d-cbe1ddc2e88e.roa (raw, json) Hash identifier: qi5jr7JDY4An68A4SeQwiZtb+VGrumIhZbq+/yGoD3E= Subject key identifier: 51:FF:8A:D4:BC:89:1F:06:28:BC:46:C0:1B:BD:09:84:76:DF:2B:EE Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285847D1489DB616111985413AD800 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1c0effc9-8c61-31b5-ae7d-cbe1ddc2e88e.roa Signing time: Sat 09 Nov 2024 02:30:12 +0000 ROA not before: Sat 09 Nov 2024 02:30:12 +0000 ROA not after: Fri 07 Feb 2025 02:30:12 +0000 asID: 45735 IP address blocks: 2001:470:3c3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d1:48:9d:b6:16:11:19:85:41:3a:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Nov 9 02:30:12 2024 GMT Not After : Feb 7 02:30:12 2025 GMT Subject: CN=3acc0ef7-684e-4639-a498-b940f6083510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:15:39:43:72:8e:0c:fe:f4:f2:45:6b:cf:b1: 2d:9e:e4:4a:9e:64:3c:13:b5:77:c0:39:6d:e0:c0: 2a:c8:06:41:87:60:b5:b7:21:0c:94:2f:89:c5:b5: 85:da:a6:07:c2:2d:71:a1:06:e4:9f:68:8a:1d:df: bc:eb:c4:7c:d4:7c:89:43:45:18:46:2a:b6:cf:b7: 3c:a1:fb:b5:28:07:6e:96:29:ae:a0:5b:b3:1e:9e: bd:ee:a9:92:4e:3b:53:78:ca:a5:f9:fb:14:a3:99: ac:a1:a2:01:f5:57:20:8d:e6:ec:97:9b:b7:1f:7d: 06:e5:67:88:6a:b6:4a:9c:5f:e4:11:59:ef:f0:2a: a9:35:ea:26:1b:cc:21:c1:0d:2c:e6:fb:2a:a1:46: 25:f2:c2:38:05:46:f9:4d:9e:22:97:61:6d:61:53: 37:89:62:96:d3:41:87:08:dd:90:92:52:06:a8:d1: b0:9c:f8:00:24:38:8e:cd:1d:a4:10:de:61:43:2f: 6c:1c:ab:78:17:cf:8e:6d:02:d1:29:c5:27:5d:f6: 6a:a7:4f:3a:2e:4c:9e:81:93:9c:d9:a5:48:19:d7: d2:be:9c:b4:8c:31:6e:86:6e:d8:3b:c4:5e:77:67: 65:ed:b5:a5:a4:e2:ee:a8:d6:35:26:d1:33:77:6e: f7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:FF:8A:D4:BC:89:1F:06:28:BC:46:C0:1B:BD:09:84:76:DF:2B:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1c0effc9-8c61-31b5-ae7d-cbe1ddc2e88e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3c3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:ac:51:2d:fb:0f:62:79:e7:72:cc:f2:99:96:04:26:c0:3b: f4:bd:2e:7a:d3:7d:c6:e8:17:52:89:52:eb:d1:50:80:cc:f2: d5:04:9d:b6:43:9b:e6:bd:84:38:10:be:64:39:87:ab:23:86: e9:f6:0a:d0:33:4f:02:15:fd:59:8e:75:31:b1:d3:d1:e3:e2: d9:3b:b7:04:0e:2c:aa:0d:ba:30:d1:0f:d5:17:c1:04:b7:5b: 3c:31:ef:cf:19:6c:29:02:76:42:54:f1:33:cc:4b:9b:08:54: ab:ec:3b:be:6a:df:86:0f:af:bc:d4:ae:03:81:79:9c:4b:dc: c3:9b:31:19:73:ec:7e:48:3b:d7:bb:cf:ea:39:4f:11:7a:d5: a9:7b:60:6b:cc:02:c4:17:91:f8:60:83:6a:26:3c:0d:d3:80: 4f:46:b4:7a:0f:e7:5c:58:b2:48:c3:16:8c:af:96:8e:06:42: 1d:02:cb:f1:6a:60:51:3b:b7:47:dc:00:00:a3:04:ec:1b:8f: 07:33:d9:68:97:e3:3a:52:cd:73:77:f1:f9:0e:1c:7e:40:85: c7:e9:22:ba:d8:28:fd:c2:5e:c3:6c:97:70:29:e3:3d:3f:04: 15:e6:d4:f7:78:b7:84:e1:52:30:4a:02:df:54:0d:fc:8b:77: 70:52:89:49 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfRSJ22FhEZhUE62AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MTEwOTAyMzAxMloXDTI1MDIwNzAyMzAxMlowLzEtMCsGA1UEAxMk M2FjYzBlZjctNjg0ZS00NjM5LWE0OTgtYjk0MGY2MDgzNTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxU5Q3KODP708kVrz7EtnuRKnmQ8E7V3wDlt 4MAqyAZBh2C1tyEMlC+JxbWF2qYHwi1xoQbkn2iKHd+868R81HyJQ0UYRiq2z7c8 ofu1KAdulimuoFuzHp697qmSTjtTeMql+fsUo5msoaIB9Vcgjebsl5u3H30G5WeI arZKnF/kEVnv8CqpNeomG8whwQ0s5vsqoUYl8sI4BUb5TZ4il2FtYVM3iWKW00GH CN2QklIGqNGwnPgAJDiOzR2kEN5hQy9sHKt4F8+ObQLRKcUnXfZqp086LkyegZOc 2aVIGdfSvpy0jDFuhm7YO8Red2dl7bWlpOLuqNY1JtEzd273iwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFH/itS8iR8GKLxGwBu9CYR23yvuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMWMwZWZmYzktOGM2MS0z MWI1LWFlN2QtY2JlMWRkYzJlODhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADmsUS37D2J553LM8pmWBCbAO/S9LnrTfcboF1KJUuvRUIDM8tUE nbZDm+a9hDgQvmQ5h6sjhun2CtAzTwIV/VmOdTGx09Hj4tk7twQOLKoNujDRD9UX wQS3Wzwx788ZbCkCdkJU8TPMS5sIVKvsO75q34YPr7zUrgOBeZxL3MObMRlz7H5I O9e7z+o5TxF61al7YGvMAsQXkfhgg2omPA3TgE9GtHoP51xYskjDFoyvlo4GQh0C y/FqYFE7t0fcAACjBOwbjwcz2WiX4zpSzXN38fkOHH5AhcfpIrrYKP3CXsNsl3Ap 4z0/BBXm1Pd4t4ThUjBKAt9UDfyLd3BSiUk= -----END CERTIFICATE-----Generated at Fri Nov 22 04:51:21 2024 by rpki-client on console-ams.rpki-client.org