$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2a4f9faa-9d48-3b1e-8462-d68e8db3b497.roa File: 2a4f9faa-9d48-3b1e-8462-d68e8db3b497.roa (raw, json) Hash identifier: 48lcpO92G37dkHXsyu8XB4ksDi3kruR0HAt45HSukFw= Subject key identifier: CA:3A:D3:21:8A:28:1E:4B:D6:AC:E1:F3:DD:3B:F0:71:B3:4E:F3:B1 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584543D801DDE58CE8B625492D80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2a4f9faa-9d48-3b1e-8462-d68e8db3b497.roa Signing time: Wed 20 Mar 2024 01:00:24 +0000 ROA not before: Wed 20 Mar 2024 01:00:24 +0000 ROA not after: Tue 18 Jun 2024 01:00:24 +0000 asID: 393397 IP address blocks: 2001:470:1bc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:43:d8:01:dd:e5:8c:e8:b6:25:49:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 20 01:00:24 2024 GMT Not After : Jun 18 01:00:24 2024 GMT Subject: CN=41e68f7e-9ba5-41a7-b8f6-df218bc4275a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:81:05:e0:c7:db:53:5d:ac:4b:2b:62:6f:49: c6:de:19:c9:21:f9:e9:29:a1:43:eb:d6:8d:4d:6c: ea:18:bb:78:3f:eb:ab:19:2f:38:53:1c:55:c8:c0: da:62:a6:a5:b4:50:91:6b:c3:70:0c:52:19:c4:c9: d8:be:29:d0:4b:c6:e0:cd:b8:bf:bc:da:c7:38:ae: 2a:f7:68:d1:c1:26:f5:30:37:ef:f7:01:d1:65:c1: 34:e5:1d:7b:b4:74:4e:ab:25:fa:6d:fe:d8:42:5b: 75:86:44:c8:37:36:ac:74:3c:cf:fa:42:a7:3a:65: f0:94:ba:2f:d9:71:ec:fa:11:f9:d8:f6:69:8b:62: c2:92:10:21:45:8f:2c:32:53:f9:5b:10:6b:f2:da: 34:3c:0c:d0:b6:d4:02:8d:f3:09:38:2a:4f:82:af: ee:c4:3d:57:35:11:03:51:4b:7b:2a:e2:1d:c2:bd: 1b:c9:25:c0:e0:d7:92:10:fa:5a:9a:58:46:18:d7: 0b:db:88:0c:47:16:24:98:62:8c:81:75:27:98:0a: 30:b9:ea:f4:c6:83:21:93:0c:62:14:8e:ab:b3:41: fa:42:41:8d:c0:d1:2f:f9:2c:a9:76:fa:db:db:95: d3:e7:44:fa:c0:1b:a4:5f:20:5f:22:e5:87:b3:33: f8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:3A:D3:21:8A:28:1E:4B:D6:AC:E1:F3:DD:3B:F0:71:B3:4E:F3:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2a4f9faa-9d48-3b1e-8462-d68e8db3b497.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1bc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:f9:4f:7a:19:44:d4:35:4b:70:77:db:ad:0a:4c:bd:7b:ad: 95:51:2b:f5:14:2c:33:b7:ba:6b:5d:14:8e:9d:c2:bf:09:8f: 9e:d1:93:51:73:0c:50:b3:e7:26:49:11:e5:36:c7:e4:a9:65: a4:3e:d3:18:70:00:28:80:2a:34:7b:bf:12:2d:fe:e0:67:2f: ca:0d:28:cd:a6:3d:8e:24:85:d9:98:8c:02:d2:69:46:7b:16: 63:83:6b:d1:41:e3:76:14:31:72:aa:a8:ed:31:5a:fd:15:ff: c4:fd:74:ed:cf:bb:40:9e:b9:06:34:e3:7f:20:aa:a5:06:f2: 5c:37:31:a6:04:7f:dc:c0:d4:fb:74:97:b8:a9:e1:45:62:62: 11:fe:fb:dc:73:6f:40:db:30:25:70:63:74:97:d2:82:1a:52: 98:37:d3:09:5c:51:6e:d3:26:e7:b6:88:c5:7d:af:7d:35:48: 1a:93:73:c6:34:68:9a:00:b5:d0:64:76:c3:3a:ab:ef:e2:9f: 29:f3:76:b5:53:ce:bb:5f:e4:c9:17:d4:ac:51:ec:47:b7:c6: f8:7a:01:06:01:b8:c2:af:b1:6b:2b:38:c9:f5:03:81:c8:91: df:01:76:17:8b:4a:a7:4c:ef:51:77:a5:14:9c:98:38:1c:45: 92:9e:29:f6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVD2AHd5YzotiVJLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDMyMDAxMDAyNFoXDTI0MDYxODAxMDAyNFowLzEtMCsGA1UEAxMk NDFlNjhmN2UtOWJhNS00MWE3LWI4ZjYtZGYyMThiYzQyNzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIEF4MfbU12sSytib0nG3hnJIfnpKaFD69aN TWzqGLt4P+urGS84UxxVyMDaYqaltFCRa8NwDFIZxMnYvinQS8bgzbi/vNrHOK4q 92jRwSb1MDfv9wHRZcE05R17tHROqyX6bf7YQlt1hkTINzasdDzP+kKnOmXwlLov 2XHs+hH52PZpi2LCkhAhRY8sMlP5WxBr8to0PAzQttQCjfMJOCpPgq/uxD1XNRED UUt7KuIdwr0bySXA4NeSEPpamlhGGNcL24gMRxYkmGKMgXUnmAowuer0xoMhkwxi FI6rs0H6QkGNwNEv+Sypdvrb25XT50T6wBukXyBfIuWHszP4RQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMo60yGKKB5L1qzh89078HGzTvOxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMmE0ZjlmYWEtOWQ0OC0z YjFlLTg0NjItZDY4ZThkYjNiNDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAG8 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMX5T3oZRNQ1S3B3260KTL17rZVRK/UULDO3umtdFI6dwr8Jj57R k1FzDFCz5yZJEeU2x+SpZaQ+0xhwACiAKjR7vxIt/uBnL8oNKM2mPY4khdmYjALS aUZ7FmODa9FB43YUMXKqqO0xWv0V/8T9dO3Pu0CeuQY0438gqqUG8lw3MaYEf9zA 1Pt0l7ip4UViYhH++9xzb0DbMCVwY3SX0oIaUpg30wlcUW7TJue2iMV9r301SBqT c8Y0aJoAtdBkdsM6q+/inynzdrVTzrtf5MkX1KxR7Ee3xvh6AQYBuMKvsWsrOMn1 A4HIkd8BdheLSqdM71F3pRScmDgcRZKeKfY= -----END CERTIFICATE-----Generated at Mon May 6 14:56:12 2024 by rpki-client on console-fra.rpki-client.org