$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/253020dc-dc03-36bf-aa08-93bf830a56b0.roa File: 253020dc-dc03-36bf-aa08-93bf830a56b0.roa (raw, json) Hash identifier: gQekZ0H7X+OGl4+tdbDQW5vbDNTMebCM5R9V/DbO1lE= Subject key identifier: 3A:6F:8C:C1:0B:5F:96:63:69:5B:91:7E:FA:FB:F7:3E:C9:0F:A1:8F Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584570830BCEAA4F87F46F9BD640 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/253020dc-dc03-36bf-aa08-93bf830a56b0.roa Signing time: Fri 05 Apr 2024 01:00:28 +0000 ROA not before: Fri 05 Apr 2024 01:00:28 +0000 ROA not after: Thu 04 Jul 2024 01:00:28 +0000 asID: 22682 IP address blocks: 2001:470:1ed::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:70:83:0b:ce:aa:4f:87:f4:6f:9b:d6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 5 01:00:28 2024 GMT Not After : Jul 4 01:00:28 2024 GMT Subject: CN=06a2e26c-b148-42fb-9fa3-6713ffe0decb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6c:7e:33:a9:24:83:b4:83:51:9d:1c:9a:ef: dd:c8:2c:95:c9:37:c5:93:fd:2a:bb:de:12:cb:33: 54:a6:a8:54:ee:0b:48:17:62:2b:24:6c:c1:e6:9b: ce:7c:27:3a:cc:8f:90:7c:f5:98:46:ca:5d:52:d8: 46:ab:87:6d:de:8d:3a:33:83:49:45:df:68:0f:08: f9:6c:cc:09:36:7c:5b:c7:46:21:4a:1c:13:ad:be: d3:a9:8c:22:eb:aa:44:67:12:63:99:7e:d9:12:e1: ed:86:3f:7b:7c:f3:69:d3:bc:dd:00:af:59:93:f4: 4e:8a:a9:b9:c6:0d:9a:4c:ed:56:24:bd:e6:62:28: 68:1e:cb:c0:a1:58:ac:f5:7b:bb:6c:87:e8:0e:76: 78:df:07:f0:6e:cf:99:df:02:2f:46:19:50:6a:d0: 2a:1d:20:62:b1:32:2b:a9:18:84:1a:0f:cd:1f:02: 6a:e4:24:55:84:18:a7:f9:5a:44:b0:51:87:fc:5f: 05:b2:69:54:ec:e9:e8:80:54:69:a7:01:fa:3c:a2: 4b:5a:5e:e2:c8:af:36:a2:5f:39:25:98:2e:2c:0e: ef:c1:8c:5e:5a:67:1c:60:10:eb:21:93:bf:b4:c7: e8:53:34:f3:90:76:b7:13:ba:3d:ef:1f:90:d5:08: 0f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:6F:8C:C1:0B:5F:96:63:69:5B:91:7E:FA:FB:F7:3E:C9:0F:A1:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/253020dc-dc03-36bf-aa08-93bf830a56b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1ed::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:d9:fa:44:83:55:87:4a:31:4e:81:12:49:a1:72:d6:5b:62: 3d:04:6a:a7:54:ba:c2:63:c5:c9:f9:59:4e:ba:76:07:3c:c1: c3:65:4a:f9:4c:3b:1f:ba:d8:f5:b1:00:5a:23:53:ed:e9:b6: fa:81:f3:bf:6c:65:07:5a:d2:f1:31:d4:21:32:4b:e2:62:b4: 6c:f9:ed:09:b5:37:42:1c:0c:d4:b1:62:6b:1a:4a:d0:68:23: af:86:0f:c5:9b:fd:d6:1a:0d:db:35:78:83:1b:bc:31:d6:bc: 4b:61:ae:d0:27:65:b3:a5:c4:75:39:90:17:0b:b6:0e:61:89: c3:43:5b:15:f1:c0:73:b7:a5:4b:80:9c:90:7b:e9:b6:7f:99: 84:ed:f7:1b:5f:14:95:9f:6d:31:4f:cb:6b:78:48:41:57:74: 8f:90:29:55:28:8d:51:cc:f2:97:99:c5:de:58:ee:5f:d0:69: 38:e9:37:17:b5:88:27:4d:55:b8:b3:5c:99:e4:ce:6c:06:ff: 4b:d0:c8:dd:ec:7d:fb:20:1b:8a:c9:24:4d:b3:c6:ff:80:51: ca:ef:c3:e7:a9:6d:cc:66:90:a4:8f:ad:6c:a5:a1:3f:ff:67: 9c:27:cd:14:e2:dc:c8:31:50:40:e0:bd:b6:cf:71:54:ec:97: 37:16:a6:72 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVwgwvOqk+H9G+b1kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDQwNTAxMDAyOFoXDTI0MDcwNDAxMDAyOFowLzEtMCsGA1UEAxMk MDZhMmUyNmMtYjE0OC00MmZiLTlmYTMtNjcxM2ZmZTBkZWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWx+M6kkg7SDUZ0cmu/dyCyVyTfFk/0qu94S yzNUpqhU7gtIF2IrJGzB5pvOfCc6zI+QfPWYRspdUthGq4dt3o06M4NJRd9oDwj5 bMwJNnxbx0YhShwTrb7TqYwi66pEZxJjmX7ZEuHthj97fPNp07zdAK9Zk/ROiqm5 xg2aTO1WJL3mYihoHsvAoVis9Xu7bIfoDnZ43wfwbs+Z3wIvRhlQatAqHSBisTIr qRiEGg/NHwJq5CRVhBin+VpEsFGH/F8FsmlU7OnogFRppwH6PKJLWl7iyK82ol85 JZguLA7vwYxeWmccYBDrIZO/tMfoUzTzkHa3E7o97x+Q1QgP/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDpvjMELX5ZjaVuRfvr79z7JD6GPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjUzMDIwZGMtZGMwMy0z NmJmLWFhMDgtOTNiZjgzMGE1NmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHt MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADnZ+kSDVYdKMU6BEkmhctZbYj0EaqdUusJjxcn5WU66dgc8wcNl SvlMOx+62PWxAFojU+3ptvqB879sZQda0vEx1CEyS+JitGz57Qm1N0IcDNSxYmsa StBoI6+GD8Wb/dYaDds1eIMbvDHWvEthrtAnZbOlxHU5kBcLtg5hicNDWxXxwHO3 pUuAnJB76bZ/mYTt9xtfFJWfbTFPy2t4SEFXdI+QKVUojVHM8peZxd5Y7l/QaTjp Nxe1iCdNVbizXJnkzmwG/0vQyN3sffsgG4rJJE2zxv+AUcrvw+epbcxmkKSPrWyl oT//Z5wnzRTi3MgxUEDgvbbPcVTslzcWpnI= -----END CERTIFICATE-----Generated at Mon May 6 03:09:13 2024 by rpki-client on console-ams.rpki-client.org