$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2723dd64-c955-3b40-9cb7-d4d582abd47b.roa File: 2723dd64-c955-3b40-9cb7-d4d582abd47b.roa (raw, json) Hash identifier: QT4FmuQCyeYqES/09ipA3mpSpYYKbOEewVt9q4AHJBI= Subject key identifier: BC:53:EA:73:E5:C0:89:F8:6C:EF:D4:7E:AF:89:33:93:55:DC:CA:67 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285844F465532C21C1E7545F745270 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2723dd64-c955-3b40-9cb7-d4d582abd47b.roa Signing time: Tue 20 Feb 2024 14:00:31 +0000 ROA not before: Tue 20 Feb 2024 14:00:31 +0000 ROA not after: Mon 20 May 2024 13:00:31 +0000 asID: 64289 IP address blocks: 2001:470:238::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f4:65:53:2c:21:c1:e7:54:5f:74:52:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 20 14:00:31 2024 GMT Not After : May 20 13:00:31 2024 GMT Subject: CN=bbafff4c-3861-4cd7-b50b-01333dfe1866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c5:a2:7c:4d:c0:18:0d:d9:3d:ee:44:dd:29: 18:9e:5b:81:00:d2:b1:8d:75:e6:4e:2b:c4:41:20: 17:5d:33:90:82:10:2b:48:4e:d9:99:a2:f8:e1:e3: 8e:02:76:95:6e:9e:99:ee:31:c5:ae:a2:5a:8f:74: 34:0c:7a:b1:9b:50:3b:04:ea:f3:1e:eb:d7:18:8e: f1:f3:e3:9e:5d:c0:c8:6a:ac:17:3e:5a:c0:86:4d: 22:70:52:ce:aa:4c:eb:70:f7:36:ca:7e:f1:83:81: 1b:36:71:9a:7e:09:2e:ea:a0:42:10:66:2d:c8:f4: ea:e0:ed:76:0f:b7:97:e3:8d:d9:f6:17:df:53:a9: 0a:1c:7f:46:36:74:0f:68:ec:e0:f8:82:4a:fa:f2: f8:4b:c5:73:0d:8b:33:2d:75:f7:9e:77:1d:04:14: dd:dd:e9:2c:46:91:d6:c9:a3:2c:ee:77:02:b9:4f: 99:df:f2:24:e1:2c:28:20:2b:14:c8:26:08:4c:e2: 2b:fb:06:53:6d:30:d7:9a:73:4e:5c:7c:9a:1b:40: 54:32:3e:35:b5:46:69:3e:4d:7f:5c:db:fe:92:e5: 89:a6:cf:3b:eb:2d:cd:12:e1:0e:76:de:bc:05:e9: b7:a2:39:6a:fa:45:85:47:55:61:d9:38:1c:34:78: 8c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:53:EA:73:E5:C0:89:F8:6C:EF:D4:7E:AF:89:33:93:55:DC:CA:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2723dd64-c955-3b40-9cb7-d4d582abd47b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:238::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:ed:4b:17:77:06:de:0b:f7:66:cf:b1:80:8d:dd:b0:36:56: 49:f6:68:8f:58:5e:ba:90:af:0d:f8:2e:11:dd:d2:79:6f:e6: 1b:eb:d6:6b:69:77:ae:b7:9f:38:f4:af:be:4b:be:12:eb:0a: 20:ed:95:44:27:f7:61:8a:f6:fa:34:ba:3b:c3:35:d2:f1:6e: 4c:95:f4:bb:75:0d:6b:b9:18:d0:40:a2:cc:ee:80:6e:f4:1c: 72:b3:c2:11:ba:cc:42:a2:8b:e3:5d:e3:bc:db:b1:f1:87:74: ea:78:ab:70:0f:21:59:a4:92:26:08:4b:56:6a:54:8b:03:da: 12:7a:0b:6d:c7:3e:89:52:c4:c8:2c:e0:bd:c9:78:40:c2:4e: 01:a1:82:5a:39:03:1b:6a:f6:35:95:6b:2d:40:ee:04:06:76: d1:93:c7:79:ae:c9:09:a1:74:77:d6:09:9a:d6:30:bd:3e:11: a0:a5:ee:81:50:09:12:54:fb:0d:36:f2:a4:f0:fc:f2:78:13: 48:74:1c:f6:95:1b:5b:1d:58:f2:25:45:71:af:d3:1b:b2:99: cb:ab:f4:f7:f4:66:af:a3:ec:c6:69:be:78:28:5b:1a:af:48: 67:a6:0e:23:bb:06:78:32:4a:10:89:76:af:1e:90:e9:9a:55: 98:dd:ef:65 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWET0ZVMsIcHnVF90UnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDIyMDE0MDAzMVoXDTI0MDUyMDEzMDAzMVowLzEtMCsGA1UEAxMk YmJhZmZmNGMtMzg2MS00Y2Q3LWI1MGItMDEzMzNkZmUxODY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8WifE3AGA3ZPe5E3SkYnluBANKxjXXmTivE QSAXXTOQghArSE7ZmaL44eOOAnaVbp6Z7jHFrqJaj3Q0DHqxm1A7BOrzHuvXGI7x 8+OeXcDIaqwXPlrAhk0icFLOqkzrcPc2yn7xg4EbNnGafgku6qBCEGYtyPTq4O12 D7eX443Z9hffU6kKHH9GNnQPaOzg+IJK+vL4S8VzDYszLXX3nncdBBTd3eksRpHW yaMs7ncCuU+Z3/Ik4SwoICsUyCYITOIr+wZTbTDXmnNOXHyaG0BUMj41tUZpPk1/ XNv+kuWJps876y3NEuEOdt68Bem3ojlq+kWFR1Vh2TgcNHiMtwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLxT6nPlwIn4bO/Ufq+JM5NV3MpnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjcyM2RkNjQtYzk1NS0z YjQwLTljYjctZDRkNTgyYWJkNDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG/tSxd3Bt4L92bPsYCN3bA2Vkn2aI9YXrqQrw34LhHd0nlv5hvr 1mtpd663nzj0r75LvhLrCiDtlUQn92GK9vo0ujvDNdLxbkyV9Lt1DWu5GNBAoszu gG70HHKzwhG6zEKii+Nd47zbsfGHdOp4q3APIVmkkiYIS1ZqVIsD2hJ6C23HPolS xMgs4L3JeEDCTgGhglo5Axtq9jWVay1A7gQGdtGTx3muyQmhdHfWCZrWML0+EaCl 7oFQCRJU+w028qTw/PJ4E0h0HPaVG1sdWPIlRXGv0xuymcur9Pf0Zq+j7MZpvngo WxqvSGemDiO7BngyShCJdq8ekOmaVZjd72U= -----END CERTIFICATE-----Generated at Tue May 7 02:13:31 2024 by rpki-client on console-fra.rpki-client.org