$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/30e8b5f6-cab0-3792-a066-73cd0a40b5e7.roa File: 30e8b5f6-cab0-3792-a066-73cd0a40b5e7.roa (raw, json) Hash identifier: y2Tc1Bv2n+E+nLQxoPyRVwM3gKwsUTnBiCGqT2SC5WM= Subject key identifier: 54:8A:74:4E:27:F1:6A:B9:3D:41:62:8C:4C:A6:0F:95:EE:25:5F:F5 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858481B43B5D5D1C72B7F87FE7BC0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/30e8b5f6-cab0-3792-a066-73cd0a40b5e7.roa Signing time: Thu 05 Dec 2024 14:30:08 +0000 ROA not before: Thu 05 Dec 2024 14:30:08 +0000 ROA not after: Wed 05 Mar 2025 14:30:08 +0000 asID: 201470 IP address blocks: 2001:470:3db::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:1b:43:b5:d5:d1:c7:2b:7f:87:fe:7b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Dec 5 14:30:08 2024 GMT Not After : Mar 5 14:30:08 2025 GMT Subject: CN=1566b01f-c9e1-423b-9f19-822d3b0eaabc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4b:f1:7b:09:d8:55:d9:0f:94:b8:30:c2:ed: 6b:3c:bf:b4:bd:a2:db:ba:bc:c8:05:49:0a:a0:05: 9e:ad:99:06:cd:09:a7:4a:1b:b2:a9:b2:89:42:4f: 1d:bb:1b:90:bc:76:ff:6a:74:35:c0:eb:47:c4:43: 0d:3a:91:6b:08:7f:c0:54:1a:a9:23:60:17:a5:f0: c9:72:2b:58:cc:45:05:af:b1:78:6f:95:8f:3c:1b: 9b:1e:7e:95:c2:0d:74:55:08:f2:ff:fc:19:29:00: 36:90:0a:88:fc:f6:7b:3f:c3:4e:c1:a6:41:c2:3d: 70:63:a8:2c:29:59:d0:d0:99:85:c0:dc:b9:88:ff: 59:9f:80:75:cc:19:69:9e:f0:74:43:4d:37:fd:25: 8c:a1:37:d0:55:1b:1f:a4:52:e5:b9:62:9f:fd:aa: bb:4c:81:0f:ae:92:97:f2:95:57:a9:a2:0a:c8:0b: 54:c6:64:b5:7c:3e:b2:67:99:bf:ac:30:fc:a6:91: 4e:e7:b9:59:10:73:09:08:b5:ee:a8:c3:e1:d3:be: 26:f8:48:3b:11:93:ec:8c:61:82:33:f7:0c:ae:68: 09:47:5e:7f:8a:51:da:ac:52:cb:df:9d:89:81:7b: 69:fd:5f:4b:3f:70:64:2d:57:c9:ab:b3:6b:2f:98: 11:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:8A:74:4E:27:F1:6A:B9:3D:41:62:8C:4C:A6:0F:95:EE:25:5F:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/30e8b5f6-cab0-3792-a066-73cd0a40b5e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3db::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:d6:91:9e:3a:62:c7:be:b0:4a:a0:68:83:5e:46:a3:8d:03: 57:17:80:67:23:6f:01:bf:bc:01:67:f2:d1:f9:d3:ba:23:ec: 12:23:12:57:25:92:48:c9:5a:bd:22:0e:2e:6f:87:41:f2:c1: 36:58:24:eb:cb:4d:db:e9:44:c2:0a:57:68:41:6e:ff:89:3a: b6:d3:99:e5:e3:1c:63:65:df:f3:1d:17:bf:0f:3b:01:4d:0e: 91:7d:0e:e9:ed:f5:40:91:76:03:14:1e:65:b1:28:b3:35:1c: 9c:38:04:f5:0f:f3:00:04:82:45:04:e9:b1:ae:ed:b4:19:7e: 49:e8:88:70:d9:81:4f:19:82:74:22:d2:02:b4:20:f5:28:76: 62:8a:85:34:a7:c7:26:95:65:6e:7f:76:51:7a:ea:dc:46:f6: 0d:6d:0a:8e:1f:41:2c:e1:55:8f:1b:72:1d:20:17:bb:a1:47: 52:82:bf:1d:4e:a6:3c:cf:19:ed:ac:27:f6:49:6a:09:52:52: d7:7a:a0:fc:00:ec:49:30:2c:20:ff:31:20:6f:bb:dc:4d:ff: 63:96:08:29:fa:c9:e8:51:f5:3f:48:d1:44:3c:50:93:d1:7c: 3b:ef:a2:87:00:4c:8d:4f:b0:8d:05:4d:07:12:40:db:11:1a: 57:48:64:df -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgbQ7XV0ccrf4f+e8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MTIwNTE0MzAwOFoXDTI1MDMwNTE0MzAwOFowLzEtMCsGA1UEAxMk MTU2NmIwMWYtYzllMS00MjNiLTlmMTktODIyZDNiMGVhYWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEvxewnYVdkPlLgwwu1rPL+0vaLburzIBUkK oAWerZkGzQmnShuyqbKJQk8duxuQvHb/anQ1wOtHxEMNOpFrCH/AVBqpI2AXpfDJ citYzEUFr7F4b5WPPBubHn6Vwg10VQjy//wZKQA2kAqI/PZ7P8NOwaZBwj1wY6gs KVnQ0JmFwNy5iP9Zn4B1zBlpnvB0Q003/SWMoTfQVRsfpFLluWKf/aq7TIEPrpKX 8pVXqaIKyAtUxmS1fD6yZ5m/rDD8ppFO57lZEHMJCLXuqMPh074m+Eg7EZPsjGGC M/cMrmgJR15/ilHarFLL352JgXtp/V9LP3BkLVfJq7NrL5gR1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFSKdE4n8Wq5PUFijEymD5XuJV/1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzBlOGI1ZjYtY2FiMC0z NzkyLWEwNjYtNzNjZDBhNDBiNWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIfWkZ46Yse+sEqgaINeRqONA1cXgGcjbwG/vAFn8tH507oj7BIj ElclkkjJWr0iDi5vh0HywTZYJOvLTdvpRMIKV2hBbv+JOrbTmeXjHGNl3/MdF78P OwFNDpF9Dunt9UCRdgMUHmWxKLM1HJw4BPUP8wAEgkUE6bGu7bQZfknoiHDZgU8Z gnQi0gK0IPUodmKKhTSnxyaVZW5/dlF66txG9g1tCo4fQSzhVY8bch0gF7uhR1KC vx1OpjzPGe2sJ/ZJaglSUtd6oPwA7EkwLCD/MSBvu9xN/2OWCCn6yehR9T9I0UQ8 UJPRfDvvoocATI1PsI0FTQcSQNsRGldIZN8= -----END CERTIFICATE-----Generated at Wed Feb 5 04:47:58 2025 by rpki-client