$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33b725f1-5fb3-308f-8792-e7c898b5e67a.roa File: 33b725f1-5fb3-308f-8792-e7c898b5e67a.roa (raw, json) Hash identifier: WVjE49PXJkWnQ1YwqQJ+qb1hX3DgXRsoY60gvNHvxPE= Subject key identifier: A2:F9:74:B9:A6:F8:AF:BA:09:28:9E:6E:53:A3:56:F7:17:BC:4A:41 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285847538A11543D2D37FD40F71180 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33b725f1-5fb3-308f-8792-e7c898b5e67a.roa Signing time: Wed 25 Sep 2024 01:30:14 +0000 ROA not before: Wed 25 Sep 2024 01:30:14 +0000 ROA not after: Tue 24 Dec 2024 02:30:14 +0000 asID: 22709 IP address blocks: 2001:470:394::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:53:8a:11:54:3d:2d:37:fd:40:f7:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 25 01:30:14 2024 GMT Not After : Dec 24 02:30:14 2024 GMT Subject: CN=b81b76a2-a002-4fcb-92cf-63f16ff3bfca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:cb:6a:89:25:fe:09:7e:d6:35:3b:79:21:0c: d8:cb:a4:5f:ae:e1:94:80:34:42:15:81:28:5a:9c: 2c:de:62:c1:a4:eb:91:a5:b3:c9:c2:6a:36:84:26: c0:61:4e:0b:48:f4:84:b6:09:c4:77:ab:46:cb:df: 4f:c4:c2:98:da:6c:fe:91:c9:22:3e:e8:5a:d8:c0: 9d:91:42:bd:13:55:55:2a:bb:71:73:4b:12:d5:98: 35:7d:4d:f1:47:50:3a:9c:d3:eb:18:b9:67:aa:a0: 3c:0c:4d:41:cd:da:a7:6f:e0:73:1e:6c:5a:48:52: 8e:0e:18:ab:e9:17:ee:cd:3b:72:95:00:f1:9e:86: f4:0b:5f:70:a0:65:20:56:6e:78:2a:2d:b8:cc:b4: f6:51:66:69:72:52:59:be:e3:ef:42:5a:88:88:92: 0c:79:7c:ba:56:f8:e8:de:25:32:8d:c4:8b:b8:2f: ab:a1:fe:9b:37:e9:bd:35:0d:6f:01:ef:86:ba:47: 08:80:48:da:ee:9c:28:b4:36:41:96:e2:83:1e:09: 88:2c:45:8a:ac:ab:ae:be:4d:5d:54:1e:42:8d:7c: 97:39:63:30:f6:5f:6d:93:78:98:65:00:94:e8:61: 43:82:fc:13:a8:74:b7:81:8e:03:92:79:b1:7c:80: b7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:F9:74:B9:A6:F8:AF:BA:09:28:9E:6E:53:A3:56:F7:17:BC:4A:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33b725f1-5fb3-308f-8792-e7c898b5e67a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:394::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:a3:4c:c0:31:95:29:85:cb:d8:df:98:ea:9c:fd:ba:c9:38: 37:3e:a0:d7:e9:10:56:58:71:f6:ff:d6:f8:8d:f1:5e:47:ee: 00:af:d3:ae:9a:7f:0b:3a:c1:40:58:8f:57:f5:01:4a:ed:ab: ea:8b:45:cc:d8:3a:7d:bd:d0:f7:ac:8a:90:fb:26:73:c6:2e: 68:3f:b6:2c:a5:73:3d:db:39:a9:90:19:fe:f5:4e:e6:63:fa: e3:b0:53:66:a5:c4:89:2b:bb:63:74:71:71:93:4f:fb:47:8c: 25:22:3b:d1:82:67:f7:91:57:89:01:6e:34:a4:43:d9:97:6e: a1:0e:6a:69:62:0b:4b:be:94:64:74:6e:b0:99:69:7a:d2:62: 9d:8e:fb:c0:4b:ed:3e:2f:c9:cc:2e:aa:eb:f5:e2:b7:6f:3e: 83:e1:b8:fc:23:02:29:08:50:8b:f6:cc:42:c5:c6:15:34:c7: 66:72:fd:f1:af:a9:4b:44:5f:f3:fd:fd:1b:64:cb:72:2b:87: 07:48:57:51:34:44:19:91:4d:4b:10:ce:97:99:ce:dd:39:24: 2f:e1:e3:19:65:c6:8e:aa:67:4b:bf:d0:a1:ea:58:f8:07:0a: 8c:bb:cc:1c:1b:5e:fd:6c:0b:2a:62:33:bd:e9:9b:5a:c2:b1: db:dc:72:ec -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdTihFUPS03/UD3EYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDkyNTAxMzAxNFoXDTI0MTIyNDAyMzAxNFowLzEtMCsGA1UEAxMk YjgxYjc2YTItYTAwMi00ZmNiLTkyY2YtNjNmMTZmZjNiZmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkctqiSX+CX7WNTt5IQzYy6RfruGUgDRCFYEo Wpws3mLBpOuRpbPJwmo2hCbAYU4LSPSEtgnEd6tGy99PxMKY2mz+kckiPuha2MCd kUK9E1VVKrtxc0sS1Zg1fU3xR1A6nNPrGLlnqqA8DE1Bzdqnb+BzHmxaSFKODhir 6RfuzTtylQDxnob0C19woGUgVm54Ki24zLT2UWZpclJZvuPvQlqIiJIMeXy6Vvjo 3iUyjcSLuC+rof6bN+m9NQ1vAe+GukcIgEja7pwotDZBluKDHgmILEWKrKuuvk1d VB5CjXyXOWMw9l9tk3iYZQCU6GFDgvwTqHS3gY4DknmxfIC3QwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKL5dLmm+K+6CSieblOjVvcXvEpBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzNiNzI1ZjEtNWZiMy0z MDhmLTg3OTItZTdjODk4YjVlNjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALajTMAxlSmFy9jfmOqc/brJODc+oNfpEFZYcfb/1viN8V5H7gCv 066afws6wUBYj1f1AUrtq+qLRczYOn290PesipD7JnPGLmg/tiylcz3bOamQGf71 TuZj+uOwU2alxIkru2N0cXGTT/tHjCUiO9GCZ/eRV4kBbjSkQ9mXbqEOamliC0u+ lGR0brCZaXrSYp2O+8BL7T4vycwuquv14rdvPoPhuPwjAikIUIv2zELFxhU0x2Zy /fGvqUtEX/P9/Rtky3IrhwdIV1E0RBmRTUsQzpeZzt05JC/h4xllxo6qZ0u/0KHq WPgHCoy7zBwbXv1sCypiM73pm1rCsdvccuw= -----END CERTIFICATE-----Generated at Fri Nov 22 04:51:21 2024 by rpki-client on console-ams.rpki-client.org