$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21b3acb0-357c-3d95-928b-9d0c6629e02b.roa File: 21b3acb0-357c-3d95-928b-9d0c6629e02b.roa (raw, json) Hash identifier: sRYUNBFMbOifIfi4UgEN/W+mlIlV6ncL/Xo9Ryd/vlo= Subject key identifier: 33:C2:A4:BA:B0:62:E4:C1:E8:A4:23:F9:B8:73:61:65:58:1F:82:9A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858473A5B75B819FC562832004C80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21b3acb0-357c-3d95-928b-9d0c6629e02b.roa Signing time: Mon 16 Sep 2024 01:00:29 +0000 ROA not before: Mon 16 Sep 2024 01:00:29 +0000 ROA not after: Sun 15 Dec 2024 02:00:29 +0000 asID: 23252 IP address blocks: 2001:470:2fd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3a:5b:75:b8:19:fc:56:28:32:00:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 16 01:00:29 2024 GMT Not After : Dec 15 02:00:29 2024 GMT Subject: CN=7648c8ef-00ac-4bd7-92f5-b0ed80e70e77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:88:e4:ec:bc:7a:f7:44:31:98:7c:ec:56:51: 07:26:f9:a7:4a:77:77:f4:81:4c:89:91:25:d7:5f: ea:4e:ae:d8:dc:18:90:6c:7b:97:87:4f:7b:ac:73: 06:ea:c1:78:53:c7:14:fc:15:dd:52:19:95:43:48: 29:01:fb:52:06:01:6a:37:48:ef:3d:ae:0f:cc:5b: dd:57:aa:8a:08:81:e2:cc:bf:b2:80:50:ad:26:f2: b1:9c:e5:78:6d:08:94:d4:10:3b:ea:5a:0a:12:cb: 58:c4:a0:0b:a6:95:74:2b:56:b9:67:d3:20:46:20: d8:5b:c0:27:d9:af:8e:4c:9d:b2:f7:06:29:2f:15: 3d:71:5b:e9:85:d8:21:ae:9c:74:01:56:41:25:f0: 71:6a:99:48:d8:c3:79:77:0e:30:d4:98:38:5f:d8: 4a:48:0e:05:97:a7:73:67:0c:80:75:bb:6a:36:32: d3:5b:c7:98:c7:4b:6b:ba:60:de:ed:44:79:d2:5d: 4a:bd:f6:fb:ba:da:dc:0b:52:bc:0e:a8:9f:cf:a6: bb:87:67:87:ff:62:52:6c:ef:ed:f9:eb:30:43:4e: e0:88:eb:31:69:cb:44:78:79:e4:7f:f7:7b:d8:ed: cc:cd:65:6f:a9:ea:60:c5:2c:f6:08:53:d4:4d:66: bc:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C2:A4:BA:B0:62:E4:C1:E8:A4:23:F9:B8:73:61:65:58:1F:82:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21b3acb0-357c-3d95-928b-9d0c6629e02b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2fd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:df:c6:4e:6e:cb:46:0f:c3:bc:4d:82:3e:cd:1c:2f:6a:a2: 00:0d:b5:da:38:06:36:95:3a:20:ff:07:13:fd:bc:c9:54:42: 5c:67:99:b5:b1:42:09:8a:cc:13:d6:72:82:9e:3d:35:42:bd: a9:75:94:6a:81:22:d6:9b:ca:63:be:a5:49:54:3b:60:f3:4c: 27:c1:fe:de:02:15:c5:9c:19:99:13:08:c2:40:e7:3d:33:5f: bf:9c:af:9f:98:03:08:74:f7:8d:ea:56:e8:fe:2b:0b:da:a0: 7a:fd:16:be:d7:7c:27:b5:a2:7e:ff:f9:35:f1:f9:3e:33:5f: 78:3d:47:75:87:73:c8:60:61:a9:86:cf:d4:70:df:0d:4d:c8: 6e:8f:b1:ec:8c:55:4d:04:58:61:d1:10:21:93:65:d0:25:6e: 6b:d8:31:0f:e0:1e:11:f9:45:3c:c7:12:6e:75:50:66:d9:7a: 1d:44:5e:8b:88:6b:b0:ca:1a:d7:9a:99:04:2e:b1:ec:6e:e0: c6:fe:d7:9c:7c:b4:88:92:94:e7:7c:e6:ce:e9:58:54:47:02: 8a:4f:48:eb:01:78:80:44:22:24:37:e7:51:5f:da:56:ad:2c: 74:be:50:25:77:63:c9:00:33:0d:6c:99:d9:af:2c:5a:a7:02: c2:ec:ea:f6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEc6W3W4GfxWKDIATIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk NzY0OGM4ZWYtMDBhYy00YmQ3LTkyZjUtYjBlZDgwZTcwZTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4jk7Lx690QxmHzsVlEHJvmnSnd39IFMiZEl 11/qTq7Y3BiQbHuXh097rHMG6sF4U8cU/BXdUhmVQ0gpAftSBgFqN0jvPa4PzFvd V6qKCIHizL+ygFCtJvKxnOV4bQiU1BA76loKEstYxKALppV0K1a5Z9MgRiDYW8An 2a+OTJ2y9wYpLxU9cVvphdghrpx0AVZBJfBxaplI2MN5dw4w1Jg4X9hKSA4Fl6dz ZwyAdbtqNjLTW8eYx0trumDe7UR50l1Kvfb7utrcC1K8Dqifz6a7h2eH/2JSbO/t +eswQ07giOsxactEeHnkf/d72O3MzWVvqepgxSz2CFPUTWa8xwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDPCpLqwYuTB6KQj+bhzYWVYH4KaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjFiM2FjYjAtMzU3Yy0z ZDk1LTkyOGItOWQwYzY2MjllMDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAL9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL3fxk5uy0YPw7xNgj7NHC9qogANtdo4BjaVOiD/BxP9vMlUQlxn mbWxQgmKzBPWcoKePTVCval1lGqBItabymO+pUlUO2DzTCfB/t4CFcWcGZkTCMJA 5z0zX7+cr5+YAwh0943qVuj+KwvaoHr9Fr7XfCe1on7/+TXx+T4zX3g9R3WHc8hg YamGz9Rw3w1NyG6PseyMVU0EWGHRECGTZdAlbmvYMQ/gHhH5RTzHEm51UGbZeh1E XouIa7DKGteamQQusexu4Mb+15x8tIiSlOd85s7pWFRHAopPSOsBeIBEIiQ351Ff 2latLHS+UCV3Y8kAMw1smdmvLFqnAsLs6vY= -----END CERTIFICATE-----Generated at Fri Nov 22 04:51:21 2024 by rpki-client on console-ams.rpki-client.org