$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21bfb449-764c-3d14-9c8b-d7f9c085a2b1.roa File: 21bfb449-764c-3d14-9c8b-d7f9c085a2b1.roa (raw, json) Hash identifier: GGtyu95lnE637lZEb2mLGJUbFlFHLAbXmOSVN8zoNlE= Subject key identifier: 16:A4:52:B5:9A:33:A5:F5:51:E8:81:E0:43:4F:24:B1:15:80:18:E7 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858452C1D4C2A4601312486491460 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21bfb449-764c-3d14-9c8b-d7f9c085a2b1.roa Signing time: Mon 11 Mar 2024 13:00:31 +0000 ROA not before: Mon 11 Mar 2024 13:00:31 +0000 ROA not after: Sun 09 Jun 2024 13:00:31 +0000 asID: 22639 IP address blocks: 2001:470:1c8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:2c:1d:4c:2a:46:01:31:24:86:49:14:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 11 13:00:31 2024 GMT Not After : Jun 9 13:00:31 2024 GMT Subject: CN=bdea19a4-5f95-4efc-b4cf-8b00d392cd22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:56:b5:9d:cf:1e:4f:51:f1:6a:66:06:5f:ae: 49:9d:46:88:ee:fc:68:76:64:b9:c6:cc:24:c4:6b: 3e:14:b7:b9:61:a4:16:48:aa:b9:ed:44:29:f7:64: 60:1f:28:dd:2f:09:7f:fa:a5:e1:0d:e3:04:1f:b4: d7:0b:d3:51:04:1f:b8:91:cd:25:65:e6:d9:e5:e5: f3:71:b0:1d:29:d9:9f:5b:b5:34:7b:4b:06:c2:bb: 8c:a8:5c:7d:2e:eb:5b:5a:1f:da:4c:b4:f1:cf:f4: ea:3f:f3:85:a9:3e:e8:aa:6e:69:da:a2:5a:c3:06: d7:32:01:8f:40:b5:7b:0f:ec:bb:5c:b8:80:e4:0e: 02:54:8c:6a:76:30:95:2f:5c:22:78:04:e7:3f:05: 42:a3:54:d2:e6:54:81:17:5e:e9:fb:77:f0:a6:48: 99:05:a0:6f:b5:32:8f:bd:e0:1c:1d:5d:3e:95:a8: c3:eb:53:f0:01:db:bc:0b:c3:95:54:e0:54:3b:28: 74:62:05:e1:6d:0d:41:1d:67:cc:bd:ba:35:46:ae: f7:87:e9:d7:56:97:f1:ad:b3:69:c6:51:d3:cd:38: 13:f2:7d:47:72:97:8b:7e:f3:01:cd:b1:56:31:12: ba:6a:4f:b4:8b:bc:e4:21:b0:e7:15:2c:5d:53:19: 63:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A4:52:B5:9A:33:A5:F5:51:E8:81:E0:43:4F:24:B1:15:80:18:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21bfb449-764c-3d14-9c8b-d7f9c085a2b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1c8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:76:29:97:f3:b3:6a:dc:04:4f:b8:cd:ea:81:ec:95:98:76: 21:0d:6a:c6:24:80:86:43:7d:15:aa:f6:66:61:bb:2c:a4:83: 56:6e:09:ba:97:db:55:3b:8d:8e:ac:fc:90:26:ed:d2:4d:32: ab:47:c3:af:14:c0:07:b6:30:e8:32:4b:1e:87:7a:00:a9:49: e4:f5:62:3f:f7:34:c0:2c:cb:2a:34:30:37:34:d9:e0:70:f1: 50:1c:a7:1e:34:19:05:c9:88:80:e5:5e:07:6d:cb:17:7d:9c: a8:1b:ba:c1:c3:be:b1:02:8f:2b:86:f3:26:cf:89:37:15:02: 35:5f:cc:ee:db:b2:30:7d:b6:dd:2a:8e:54:19:81:fe:dc:fe: 6c:61:46:02:98:fc:3f:bc:de:c0:dc:d2:fa:ca:4a:4e:20:e4: 85:de:c4:d6:4a:a9:ef:16:7b:45:33:e8:19:af:7b:86:7b:38: 9b:79:dc:b3:28:71:5c:bf:2c:18:86:2a:be:45:57:88:d4:41: fb:0f:db:0c:a3:e7:d5:7b:1c:6f:c1:69:01:07:74:42:ce:53: 1d:59:55:cc:d7:92:09:01:48:7c:43:25:20:55:71:1c:e3:77: e0:1e:38:4a:b0:7b:b8:be:2d:45:2b:43:e9:88:3c:43:6a:a4: fa:f7:28:e0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUsHUwqRgExJIZJFGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDMxMTEzMDAzMVoXDTI0MDYwOTEzMDAzMVowLzEtMCsGA1UEAxMk YmRlYTE5YTQtNWY5NS00ZWZjLWI0Y2YtOGIwMGQzOTJjZDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1a1nc8eT1HxamYGX65JnUaI7vxodmS5xswk xGs+FLe5YaQWSKq57UQp92RgHyjdLwl/+qXhDeMEH7TXC9NRBB+4kc0lZebZ5eXz cbAdKdmfW7U0e0sGwruMqFx9LutbWh/aTLTxz/TqP/OFqT7oqm5p2qJawwbXMgGP QLV7D+y7XLiA5A4CVIxqdjCVL1wieATnPwVCo1TS5lSBF17p+3fwpkiZBaBvtTKP veAcHV0+lajD61PwAdu8C8OVVOBUOyh0YgXhbQ1BHWfMvbo1Rq73h+nXVpfxrbNp xlHTzTgT8n1HcpeLfvMBzbFWMRK6ak+0i7zkIbDnFSxdUxljswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBakUrWaM6X1UeiB4ENPJLEVgBjnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjFiZmI0NDktNzY0Yy0z ZDE0LTljOGItZDdmOWMwODVhMmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGF2KZfzs2rcBE+4zeqB7JWYdiENasYkgIZDfRWq9mZhuyykg1Zu CbqX21U7jY6s/JAm7dJNMqtHw68UwAe2MOgySx6HegCpSeT1Yj/3NMAsyyo0MDc0 2eBw8VAcpx40GQXJiIDlXgdtyxd9nKgbusHDvrECjyuG8ybPiTcVAjVfzO7bsjB9 tt0qjlQZgf7c/mxhRgKY/D+83sDc0vrKSk4g5IXexNZKqe8We0Uz6Bmve4Z7OJt5 3LMocVy/LBiGKr5FV4jUQfsP2wyj59V7HG/BaQEHdELOUx1ZVczXkgkBSHxDJSBV cRzjd+AeOEqwe7i+LUUrQ+mIPENqpPr3KOA= -----END CERTIFICATE-----Generated at Mon May 6 20:30:30 2024 by rpki-client on console-ams.rpki-client.org