$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21971723-cce4-3c0f-ab9d-ef45e70b4464.roa File: 21971723-cce4-3c0f-ab9d-ef45e70b4464.roa (raw, json) Hash identifier: ZonNrdXT5VW2/4qd8Zw6GpZgluDNQybyBKvC+1fvyUk= Subject key identifier: 64:62:DF:B8:AE:C9:80:5A:1E:D5:0D:B8:36:D0:54:60:4A:CD:69:4A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285844F895756C2B65CCA7610BBC40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21971723-cce4-3c0f-ab9d-ef45e70b4464.roa Signing time: Thu 22 Feb 2024 02:00:27 +0000 ROA not before: Thu 22 Feb 2024 02:00:27 +0000 ROA not after: Wed 22 May 2024 01:00:27 +0000 asID: 393667 IP address blocks: 2001:470:af::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f8:95:75:6c:2b:65:cc:a7:61:0b:bc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 22 02:00:27 2024 GMT Not After : May 22 01:00:27 2024 GMT Subject: CN=817c9b5f-8189-4cb5-8579-b7ecee5b8bc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a9:8c:1d:9f:51:de:c1:87:01:c2:3a:d7:0e: db:07:61:7c:76:da:14:a4:1d:58:c3:b8:3c:54:e3: c6:08:98:c2:9c:58:d8:62:06:a8:1c:3a:4d:3b:28: b2:e7:10:bb:61:7f:11:45:38:e0:21:0c:7e:ce:85: 2d:62:26:48:08:5f:35:65:5c:c4:50:92:16:d2:64: d0:a6:a2:cd:9c:44:c7:79:e6:75:87:ee:7e:2a:34: 44:ea:55:eb:da:78:33:23:20:57:e1:9d:63:1b:40: 66:cf:bd:ff:5d:0f:b1:ff:ae:12:ea:ff:a4:4f:91: 23:d9:2e:52:16:20:fb:bb:c6:f5:10:e4:23:6a:79: c3:18:14:52:75:93:55:1a:ad:79:0e:36:c2:bc:05: 7b:43:7a:01:4f:f9:33:b1:a7:cc:b1:fa:97:8f:d1: 20:72:a6:70:f2:04:2f:b5:9f:59:03:d3:aa:6d:c5: 95:0e:e4:0f:fa:3e:9d:25:a4:99:84:f3:5c:50:ba: 3d:81:0e:39:2a:54:e0:db:54:44:e8:4d:04:ea:fa: a4:65:ba:1c:b8:11:0f:a7:ec:d2:d5:0b:7f:36:07: 93:09:32:13:62:5b:22:42:e9:88:75:57:da:f9:9d: 5b:5e:d4:ea:fa:2a:06:a2:c8:d5:12:ab:b3:8d:fe: e7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:62:DF:B8:AE:C9:80:5A:1E:D5:0D:B8:36:D0:54:60:4A:CD:69:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21971723-cce4-3c0f-ab9d-ef45e70b4464.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:af::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:3f:ff:49:6b:05:23:47:e1:5e:e2:95:7d:c6:9d:91:2d:22: 28:13:c0:f4:84:60:aa:57:7d:96:8b:75:be:fe:84:9d:7b:bf: ad:2f:7f:f4:84:a4:83:db:13:45:d7:cf:f4:b0:f5:67:88:a5: 72:5f:f0:22:06:6f:a6:22:0f:75:a7:13:48:5d:fa:68:6c:ab: 7c:4e:4c:2f:7a:6b:b7:d0:40:59:32:bb:7e:f8:c0:6c:c9:f4: c2:80:4d:72:9e:be:9e:c8:62:a5:c5:8d:43:5b:48:48:5d:a7: bd:39:2c:e6:99:2b:50:52:85:2f:af:b3:32:e9:49:da:df:36: c9:3a:ad:db:44:39:05:56:ce:57:7e:f3:67:67:c2:07:4e:4e: 53:0d:31:ef:bd:93:45:c7:83:39:c7:97:28:9b:49:a0:e0:bd: 2e:d3:99:16:e8:91:bf:9f:14:4b:88:68:0f:46:23:f6:b0:be: b8:84:7f:39:6c:bb:ac:38:40:e0:e7:ba:8a:2a:ee:42:47:da: f5:a5:56:03:3d:40:98:8f:fc:c9:94:33:37:90:88:80:84:f4: 0c:9a:2c:49:1d:4a:91:2c:bf:4f:b9:5b:b6:e9:05:bf:6f:e1: 67:ec:64:ed:06:de:9e:63:ea:5c:7b:7e:b3:9e:ee:dd:fb:2e: 87:25:93:15 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWET4lXVsK2XMp2ELvEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDIyMjAyMDAyN1oXDTI0MDUyMjAxMDAyN1owLzEtMCsGA1UEAxMk ODE3YzliNWYtODE4OS00Y2I1LTg1NzktYjdlY2VlNWI4YmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjamMHZ9R3sGHAcI61w7bB2F8dtoUpB1Yw7g8 VOPGCJjCnFjYYgaoHDpNOyiy5xC7YX8RRTjgIQx+zoUtYiZICF81ZVzEUJIW0mTQ pqLNnETHeeZ1h+5+KjRE6lXr2ngzIyBX4Z1jG0Bmz73/XQ+x/64S6v+kT5Ej2S5S FiD7u8b1EOQjannDGBRSdZNVGq15DjbCvAV7Q3oBT/kzsafMsfqXj9EgcqZw8gQv tZ9ZA9OqbcWVDuQP+j6dJaSZhPNcULo9gQ45KlTg21RE6E0E6vqkZbocuBEPp+zS 1Qt/NgeTCTITYlsiQumIdVfa+Z1bXtTq+ioGosjVEquzjf7nHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGRi37iuyYBaHtUNuDbQVGBKzWlKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjE5NzE3MjMtY2NlNC0z YzBmLWFiOWQtZWY0NWU3MGI0NDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACv MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKE//0lrBSNH4V7ilX3GnZEtIigTwPSEYKpXfZaLdb7+hJ17v60v f/SEpIPbE0XXz/Sw9WeIpXJf8CIGb6YiD3WnE0hd+mhsq3xOTC96a7fQQFkyu374 wGzJ9MKATXKevp7IYqXFjUNbSEhdp705LOaZK1BShS+vszLpSdrfNsk6rdtEOQVW zld+82dnwgdOTlMNMe+9k0XHgznHlyibSaDgvS7TmRbokb+fFEuIaA9GI/awvriE fzlsu6w4QODnuooq7kJH2vWlVgM9QJiP/MmUMzeQiICE9AyaLEkdSpEsv0+5W7bp Bb9v4WfsZO0G3p5j6lx7frOe7t37LoclkxU= -----END CERTIFICATE-----Generated at Tue May 7 02:15:51 2024 by rpki-client on console-ams.rpki-client.org