$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/29900e27-cebd-3cf2-9435-565d3b774e22.roa File: 29900e27-cebd-3cf2-9435-565d3b774e22.roa (raw, json) Hash identifier: 4q4h6vtNSYwHj+syXtOuYlTXmi/DKqcbU0WsGJs23MY= Subject key identifier: 67:6B:27:53:5E:8F:74:63:5F:69:E4:2D:2D:81:D1:9A:C1:DE:88:6C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858473A5B583CFE6358E20C805E80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/29900e27-cebd-3cf2-9435-565d3b774e22.roa Signing time: Mon 16 Sep 2024 01:00:29 +0000 ROA not before: Mon 16 Sep 2024 01:00:29 +0000 ROA not after: Sun 15 Dec 2024 02:00:29 +0000 asID: 36012 IP address blocks: 2001:470:1a8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3a:5b:58:3c:fe:63:58:e2:0c:80:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 16 01:00:29 2024 GMT Not After : Dec 15 02:00:29 2024 GMT Subject: CN=cc39f39b-c76a-4e53-aaac-ac99ca0b2aa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b6:37:ec:04:53:30:87:15:d4:75:02:fd:ac: a5:65:2f:d7:48:9c:64:82:a8:15:40:77:c7:4c:45: 25:e5:31:2e:c6:f3:b5:18:ee:03:a0:47:42:f2:45: 11:ed:28:64:32:43:40:a8:50:e3:ff:b6:83:b9:36: 55:c0:42:05:5e:b6:ca:04:96:c0:40:48:3b:c3:d6: 83:b8:2b:bd:7a:ba:17:2f:12:ad:12:28:b2:c1:fa: 2e:cd:15:44:da:14:c0:73:1c:d2:1a:bb:8d:66:c3: 17:e1:d2:a2:1c:ce:dc:67:30:69:75:fc:26:f6:e5: 86:ad:93:c1:29:76:51:af:38:2d:1e:78:43:af:fa: 5a:fc:18:eb:ff:06:fc:5a:08:1d:7c:6a:f8:17:e9: 23:24:8f:b8:bf:b5:2b:47:10:2a:b0:eb:c2:50:a3: 72:6f:04:fa:a0:38:01:f8:3c:0d:63:a1:4c:dc:55: 36:0e:91:ee:eb:12:3d:34:65:24:6d:9e:9a:fa:b1: 7b:c6:5c:85:82:2f:46:3d:bb:df:f0:b1:fe:55:b3: 8a:43:b3:95:30:8a:91:f1:b1:a2:e3:33:d5:5f:ad: b6:98:b0:91:2d:45:b9:24:29:13:c9:7e:05:fc:23: d8:0d:1f:c9:28:d5:5b:d5:0f:8e:c9:f3:4b:0d:0f: 33:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:6B:27:53:5E:8F:74:63:5F:69:E4:2D:2D:81:D1:9A:C1:DE:88:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/29900e27-cebd-3cf2-9435-565d3b774e22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1a8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:f3:67:a8:d8:1b:15:c3:9a:58:37:e2:c9:76:5b:76:52:78: 2f:31:65:7c:63:39:a3:dc:91:be:7f:f7:0e:ce:53:f7:98:40: 09:87:7f:0b:11:53:b3:9d:fb:42:a3:2f:89:58:97:de:22:ca: 23:da:7c:57:10:3a:9f:0b:f3:3b:ae:0c:52:4d:33:ea:fd:b2: e2:f1:fa:42:0d:5b:3a:dc:f2:a6:5a:42:7d:08:b3:ca:ef:9b: b8:4c:6c:7e:b0:fa:7e:37:f5:cf:92:72:d4:80:ec:ca:fa:6f: c9:e3:75:41:97:ce:6f:4f:6b:ff:8a:db:82:51:14:0d:b1:9f: 11:f7:13:49:ef:79:bc:0d:98:39:f3:d9:f5:26:22:64:42:47: 65:9e:95:52:c9:91:fe:af:f9:4a:64:97:cd:32:b7:db:2a:ca: ae:93:7e:f3:09:de:bc:ea:85:11:2d:37:43:0b:26:d8:73:43: 96:4f:57:95:9c:aa:fa:75:ba:fb:19:80:eb:e7:ba:12:67:f5: 38:0a:c5:be:ad:71:a8:3a:0c:f7:04:b7:b1:a3:4a:81:17:bb: c6:b6:a4:4c:80:8e:e5:a8:7c:dc:26:9e:e7:79:91:7b:8f:1e: bd:64:c2:0a:a9:3e:20:3e:2b:d4:3f:3c:94:ec:25:f6:ed:de: 11:cc:5b:59 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEc6W1g8/mNY4gyAXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk Y2MzOWYzOWItYzc2YS00ZTUzLWFhYWMtYWM5OWNhMGIyYWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorY37ARTMIcV1HUC/aylZS/XSJxkgqgVQHfH TEUl5TEuxvO1GO4DoEdC8kUR7ShkMkNAqFDj/7aDuTZVwEIFXrbKBJbAQEg7w9aD uCu9eroXLxKtEiiywfouzRVE2hTAcxzSGruNZsMX4dKiHM7cZzBpdfwm9uWGrZPB KXZRrzgtHnhDr/pa/Bjr/wb8WggdfGr4F+kjJI+4v7UrRxAqsOvCUKNybwT6oDgB +DwNY6FM3FU2DpHu6xI9NGUkbZ6a+rF7xlyFgi9GPbvf8LH+VbOKQ7OVMIqR8bGi 4zPVX622mLCRLUW5JCkTyX4F/CPYDR/JKNVb1Q+OyfNLDQ8zRQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGdrJ1Nej3RjX2nkLS2B0ZrB3ohsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjk5MDBlMjctY2ViZC0z Y2YyLTk0MzUtNTY1ZDNiNzc0ZTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAGo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC/zZ6jYGxXDmlg34sl2W3ZSeC8xZXxjOaPckb5/9w7OU/eYQAmH fwsRU7Od+0KjL4lYl94iyiPafFcQOp8L8zuuDFJNM+r9suLx+kINWzrc8qZaQn0I s8rvm7hMbH6w+n439c+SctSA7Mr6b8njdUGXzm9Pa/+K24JRFA2xnxH3E0nvebwN mDnz2fUmImRCR2WelVLJkf6v+Upkl80yt9sqyq6TfvMJ3rzqhREtN0MLJthzQ5ZP V5Wcqvp1uvsZgOvnuhJn9TgKxb6tcag6DPcEt7GjSoEXu8a2pEyAjuWofNwmnud5 kXuPHr1kwgqpPiA+K9Q/PJTsJfbt3hHMW1k= -----END CERTIFICATE-----Generated at Fri Nov 22 04:32:34 2024 by rpki-client on console-fra.rpki-client.org