$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/23a78174-e8dd-3e98-8677-8ee79bd66ff7.roa File: 23a78174-e8dd-3e98-8677-8ee79bd66ff7.roa (raw, json) Hash identifier: nQmb9NaaJxJy/Sjtn1hiwVy0LnwCqI2qzI/LzSlOQBM= Subject key identifier: 6C:DD:41:E5:C7:42:72:E3:0C:75:88:66:E2:C0:C5:34:A4:74:80:30 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285847792BA30072C96243FDCF8C80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/23a78174-e8dd-3e98-8677-8ee79bd66ff7.roa Signing time: Tue 08 Oct 2024 13:00:40 +0000 ROA not before: Tue 08 Oct 2024 13:00:40 +0000 ROA not after: Mon 06 Jan 2025 14:00:40 +0000 asID: 397270 IP address blocks: 2001:470:33d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:79:2b:a3:00:72:c9:62:43:fd:cf:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 8 13:00:40 2024 GMT Not After : Jan 6 14:00:40 2025 GMT Subject: CN=171885a0-79ac-40bd-908e-ffaf4360aca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:45:a5:74:53:95:9a:e6:c6:f3:5d:33:44:ad: 84:c2:75:2b:e5:8d:8e:b5:54:91:5e:5a:57:66:9d: 94:a8:06:9a:e4:2c:58:91:e5:85:fa:fe:07:3a:13: 3f:36:13:41:fb:47:9e:bb:fa:3a:1e:0c:48:d7:1c: a6:08:07:73:ef:5b:bb:17:d4:0d:45:90:f8:01:40: 71:ed:ca:68:25:9c:78:f8:43:34:d2:49:50:c8:de: eb:bd:8c:fe:01:24:6a:00:bf:23:75:2b:19:ed:31: 73:f6:54:08:ce:65:0e:59:e5:16:2e:dc:ce:28:e3: b9:ee:1f:1c:c6:04:fa:2a:e5:5c:b0:d6:ab:5e:fc: 27:54:6d:83:f7:dc:e2:76:ff:88:3a:ff:42:ad:b6: 8a:bb:c4:64:5d:e6:ce:40:12:ab:a2:2b:fd:d0:1a: 43:d5:77:87:cc:18:58:20:ba:c2:e8:eb:7e:ed:69: 0e:ca:72:71:f4:63:d4:48:2f:8f:02:80:d0:f0:c7: 19:98:07:11:a5:84:db:05:3e:b6:db:ee:3f:57:f9: 12:18:15:49:0d:d5:34:df:9d:6f:b3:91:37:31:91: 0e:45:85:02:7d:7d:93:a8:98:cf:4d:37:bc:9a:ac: 61:b6:7d:22:c5:5c:39:a7:6f:43:4e:5b:b1:29:58: db:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:DD:41:E5:C7:42:72:E3:0C:75:88:66:E2:C0:C5:34:A4:74:80:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/23a78174-e8dd-3e98-8677-8ee79bd66ff7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:33d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:07:73:f8:0f:e7:d8:56:4f:75:50:37:26:98:7d:bf:f5:bd: d6:39:88:eb:82:ea:bb:85:2b:28:db:6e:32:01:a1:32:47:59: 53:45:6b:4c:f4:7f:4e:5e:19:7b:9a:a1:05:8d:d4:d7:98:71: a5:b5:a2:48:bf:e6:e9:67:d0:75:f2:bd:02:98:ce:1f:78:79: 53:df:5f:e6:f7:c5:29:2f:26:c4:cc:48:13:ee:fa:89:54:cd: 38:e9:8f:4b:14:aa:03:f7:60:1f:59:57:94:44:e7:a1:ad:30: 34:c9:6c:43:cf:e4:86:72:1f:94:30:50:ce:6d:7b:57:dd:e3: 32:d7:56:d6:eb:bd:cb:5e:87:e5:62:94:bb:9f:49:1f:2c:18: 0a:ec:fa:dc:28:5d:87:28:b4:1b:9e:19:2b:3c:ec:59:81:7b: fb:0c:57:13:4a:9a:6a:ef:f4:8e:23:c3:3a:bc:e9:67:ef:3a: 87:77:c1:23:99:ee:72:20:fe:4f:a2:01:5f:6f:3f:09:a3:e8: 3d:5c:35:f1:95:65:89:4a:93:ff:5a:6d:48:5b:37:80:81:3e: 85:67:c1:c4:ce:76:84:3a:25:de:e2:c4:da:b1:e2:aa:b3:39: b7:19:a5:cc:88:e5:17:86:a4:1c:38:01:7b:64:78:a4:f2:0c: d7:28:f4:5a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEd5K6MAcsliQ/3PjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MTAwODEzMDA0MFoXDTI1MDEwNjE0MDA0MFowLzEtMCsGA1UEAxMk MTcxODg1YTAtNzlhYy00MGJkLTkwOGUtZmZhZjQzNjBhY2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0WldFOVmubG810zRK2EwnUr5Y2OtVSRXlpX Zp2UqAaa5CxYkeWF+v4HOhM/NhNB+0eeu/o6HgxI1xymCAdz71u7F9QNRZD4AUBx 7cpoJZx4+EM00klQyN7rvYz+ASRqAL8jdSsZ7TFz9lQIzmUOWeUWLtzOKOO57h8c xgT6KuVcsNarXvwnVG2D99zidv+IOv9CrbaKu8RkXebOQBKroiv90BpD1XeHzBhY ILrC6Ot+7WkOynJx9GPUSC+PAoDQ8McZmAcRpYTbBT622+4/V/kSGBVJDdU0351v s5E3MZEORYUCfX2TqJjPTTe8mqxhtn0ixVw5p29DTluxKVjbRwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGzdQeXHQnLjDHWIZuLAxTSkdIAwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjNhNzgxNzQtZThkZC0z ZTk4LTg2NzctOGVlNzliZDY2ZmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAM9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHcHc/gP59hWT3VQNyaYfb/1vdY5iOuC6ruFKyjbbjIBoTJHWVNF a0z0f05eGXuaoQWN1NeYcaW1oki/5uln0HXyvQKYzh94eVPfX+b3xSkvJsTMSBPu +olUzTjpj0sUqgP3YB9ZV5RE56GtMDTJbEPP5IZyH5QwUM5te1fd4zLXVtbrvcte h+VilLufSR8sGArs+twoXYcotBueGSs87FmBe/sMVxNKmmrv9I4jwzq86WfvOod3 wSOZ7nIg/k+iAV9vPwmj6D1cNfGVZYlKk/9abUhbN4CBPoVnwcTOdoQ6Jd7ixNqx 4qqzObcZpcyI5ReGpBw4AXtkeKTyDNco9Fo= -----END CERTIFICATE-----Generated at Fri Nov 22 04:51:21 2024 by rpki-client on console-ams.rpki-client.org