$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1f77b53a-4236-3f0b-a07b-0ab0bf5b57ee.roa File: 1f77b53a-4236-3f0b-a07b-0ab0bf5b57ee.roa (raw, json) Hash identifier: MAIbo2LZ9CfSqe+kPm2wF/cyZiTJrrtDbsihnDeIjpc= Subject key identifier: CE:49:47:E1:4A:F6:63:EB:D6:85:B8:C6:37:FC:E0:D9:1A:45:0B:63 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584819D01914314A64E23B8ED0A0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1f77b53a-4236-3f0b-a07b-0ab0bf5b57ee.roa Signing time: Thu 05 Dec 2024 02:00:39 +0000 ROA not before: Thu 05 Dec 2024 02:00:39 +0000 ROA not after: Wed 05 Mar 2025 02:00:39 +0000 asID: 21805 IP address blocks: 2001:470:20c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:19:d0:19:14:31:4a:64:e2:3b:8e:d0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Dec 5 02:00:39 2024 GMT Not After : Mar 5 02:00:39 2025 GMT Subject: CN=6cf61f94-ec20-4f9f-b26e-0cc2414cd563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4b:23:da:71:40:3f:a6:9a:41:cc:db:99:9c: 85:a4:c9:61:23:1e:fd:b0:9f:00:86:ca:2e:82:a9: f6:8c:42:fe:60:a2:c1:47:9f:c7:46:93:23:ba:38: 87:a3:16:3d:cd:10:37:7a:fa:71:c8:f8:e5:71:ec: f8:ce:7e:64:f9:e9:3b:2b:5d:a9:3e:d1:0c:05:83: 80:73:7f:f9:b3:bb:3d:1d:0a:d9:a9:ef:22:fb:8c: 07:8d:b6:f7:17:ee:44:59:be:11:8b:dc:99:95:cc: 9c:47:e2:fb:7d:8a:16:26:4f:71:a8:1c:a7:21:62: 97:af:8b:ee:37:c1:8c:73:a1:06:08:78:2a:f3:54: 24:fc:b1:26:f6:02:5a:32:02:93:5e:fb:0d:fb:54: 62:bd:7c:41:6f:82:bf:0f:f3:56:d9:ed:3b:62:15: e9:60:53:68:e2:16:14:72:cf:37:35:b0:66:c3:a1: ee:cc:79:2e:a8:fa:57:87:d5:ce:aa:3d:41:b8:3f: 3d:24:ec:02:f1:15:e4:d3:61:98:4a:d4:17:bb:9a: f8:3c:30:f2:87:f7:54:45:36:72:a6:b7:5a:95:8d: 0a:53:87:24:72:0f:cf:92:dc:b1:a7:22:df:92:04: 5f:09:50:6d:be:37:ba:10:db:c1:2f:cf:4d:3a:1c: b9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:49:47:E1:4A:F6:63:EB:D6:85:B8:C6:37:FC:E0:D9:1A:45:0B:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1f77b53a-4236-3f0b-a07b-0ab0bf5b57ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:20c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:1a:68:88:06:c1:fe:a8:da:77:11:e8:f1:7d:43:4b:81:22: a6:62:1f:02:69:96:ad:60:fa:18:f9:1c:9d:da:6a:70:3c:fa: 74:0d:58:48:03:1f:33:b9:bb:82:16:49:38:49:16:d9:d8:a9: 71:d4:ea:f8:65:fa:1d:69:6d:94:c5:30:49:1c:2d:57:e1:94: 90:86:08:d1:fe:29:d8:68:8f:d0:51:e1:6d:af:d1:61:34:42: 43:32:43:bb:10:ae:a5:44:d8:57:b2:94:61:82:3a:52:c9:4d: e9:4d:b0:90:35:60:f4:8f:63:c0:81:1c:84:50:d4:e2:ef:50: 38:da:55:cd:eb:11:a8:a6:db:c5:7f:37:6d:5a:51:e1:b9:d1: 29:b9:e2:a2:7f:c4:0e:cd:f6:f4:cb:f2:9b:cc:14:17:b1:5b: 93:86:b3:bb:8f:a0:85:0d:ad:99:e9:fa:2b:4f:87:fc:a9:e4: 5a:90:a7:30:a1:1e:55:57:b7:43:22:d7:95:23:b8:0d:e5:f6: 91:b3:a3:8a:46:9a:b8:b3:63:d4:ce:29:fc:7a:44:a6:f7:2f: c4:36:9c:cc:73:5d:85:e7:e0:2b:6e:3c:9f:1e:07:14:ad:79: 80:fb:62:ff:58:54:e5:d7:44:71:56:84:5e:ce:0d:08:7c:f7: 16:49:3d:5a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgZ0BkUMUpk4juO0KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk NmNmNjFmOTQtZWMyMC00ZjlmLWIyNmUtMGNjMjQxNGNkNTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyksj2nFAP6aaQczbmZyFpMlhIx79sJ8Ahsou gqn2jEL+YKLBR5/HRpMjujiHoxY9zRA3evpxyPjlcez4zn5k+ek7K12pPtEMBYOA c3/5s7s9HQrZqe8i+4wHjbb3F+5EWb4Ri9yZlcycR+L7fYoWJk9xqBynIWKXr4vu N8GMc6EGCHgq81Qk/LEm9gJaMgKTXvsN+1RivXxBb4K/D/NW2e07YhXpYFNo4hYU cs83NbBmw6HuzHkuqPpXh9XOqj1BuD89JOwC8RXk02GYStQXu5r4PDDyh/dURTZy prdalY0KU4ckcg/PktyxpyLfkgRfCVBtvje6ENvBL89NOhy5nQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM5JR+FK9mPr1oW4xjf84NkaRQtjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMWY3N2I1M2EtNDIzNi0z ZjBiLWEwN2ItMGFiMGJmNWI1N2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAIM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIYaaIgGwf6o2ncR6PF9Q0uBIqZiHwJplq1g+hj5HJ3aanA8+nQN WEgDHzO5u4IWSThJFtnYqXHU6vhl+h1pbZTFMEkcLVfhlJCGCNH+Kdhoj9BR4W2v 0WE0QkMyQ7sQrqVE2FeylGGCOlLJTelNsJA1YPSPY8CBHIRQ1OLvUDjaVc3rEaim 28V/N21aUeG50Sm54qJ/xA7N9vTL8pvMFBexW5OGs7uPoIUNrZnp+itPh/yp5FqQ pzChHlVXt0Mi15UjuA3l9pGzo4pGmrizY9TOKfx6RKb3L8Q2nMxzXYXn4CtuPJ8e BxSteYD7Yv9YVOXXRHFWhF7ODQh89xZJPVo= -----END CERTIFICATE-----Generated at Sun Feb 16 22:55:25 2025 by rpki-client