$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3935d25b-1286-357c-b206-853f981f0539.roa File: 3935d25b-1286-357c-b206-853f981f0539.roa (raw, json) Hash identifier: ooeBtOL5c+Xh174hY25ARZXHgrRCLcYpzeMbUdhIXvM= Subject key identifier: 05:48:3E:B2:72:66:35:B0:45:C8:F2:BA:52:F7:9B:AD:38:35:0C:89 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584546A2AC847B817AAD095BC780 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3935d25b-1286-357c-b206-853f981f0539.roa Signing time: Thu 21 Mar 2024 01:00:25 +0000 ROA not before: Thu 21 Mar 2024 01:00:25 +0000 ROA not after: Wed 19 Jun 2024 01:00:25 +0000 asID: 32872 IP address blocks: 2001:470:a6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:46:a2:ac:84:7b:81:7a:ad:09:5b:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 21 01:00:25 2024 GMT Not After : Jun 19 01:00:25 2024 GMT Subject: CN=45c38f1e-bf61-49cf-a1cf-97cb1b67d428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:29:1b:31:4f:00:a2:ae:49:28:df:a6:73:b3: fd:c9:91:60:3c:2a:ad:ad:71:5e:4e:4b:d9:17:0a: 00:0a:c1:5d:27:37:61:13:ed:ab:d8:8c:d2:ba:ac: 76:6a:30:50:61:91:89:a9:44:23:55:73:66:0d:24: 10:13:64:16:ce:40:93:af:83:4d:e9:49:64:93:9e: 8f:4c:d3:21:09:b0:a9:46:66:03:34:1c:0b:cc:e3: 50:d0:02:62:d6:74:ca:43:f2:65:85:71:ae:b7:2d: b8:f3:42:32:01:73:5e:b1:be:1a:bd:2f:4e:46:04: 9b:83:8e:eb:cd:27:77:b0:c5:96:1b:09:f0:3e:59: 99:79:27:98:76:a1:c9:e0:e4:4c:4b:c4:08:57:d7: b1:de:e7:1b:58:51:2c:77:15:11:c2:02:f8:6e:5a: 7e:e0:75:95:3f:fb:9e:38:06:ec:a8:ee:61:3e:3e: 47:fe:cf:b9:32:55:c9:95:05:78:f7:1d:21:d4:be: c2:d9:d3:65:c6:5a:0d:28:9e:b2:61:a4:8f:96:56: 74:93:d4:4b:be:70:4a:0b:87:27:11:ec:88:cf:3f: 3a:4a:9a:82:6c:27:ed:ca:10:d6:a7:be:dd:a3:01: 63:a9:3e:d1:72:df:57:d4:30:3a:fa:af:17:9d:3e: 16:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:48:3E:B2:72:66:35:B0:45:C8:F2:BA:52:F7:9B:AD:38:35:0C:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3935d25b-1286-357c-b206-853f981f0539.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:a6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:61:8e:57:14:fe:01:d6:0a:93:9e:2f:21:c7:b2:95:c7:4a: b4:d7:be:56:bb:d5:2d:8f:e8:2b:d7:8f:21:25:4f:76:2e:e2: ef:7e:03:d0:78:27:06:0c:9c:e2:b7:f7:51:f8:3c:83:42:b4: 93:e3:ef:d2:e3:29:e7:05:8a:8c:ad:d0:e7:54:18:7a:45:71: 2d:16:0a:53:00:8c:4f:a7:66:de:d3:ab:a7:93:cf:0c:3c:04: 11:9c:9b:2f:b4:17:0e:3e:5b:ef:8f:87:72:be:37:14:0c:9c: a0:ed:27:05:7f:ab:c0:60:14:ea:ce:c3:99:8c:a4:6a:9c:a3: e3:f5:ce:ed:52:14:e9:b6:c0:e4:fa:ed:f9:df:65:de:be:71: e5:fe:e2:ee:79:48:8f:9a:58:fc:e4:fd:50:2c:f5:1b:f2:e9: f5:52:d4:b9:3f:d7:c2:52:ea:17:aa:70:a2:ae:1e:de:07:3e: f0:88:73:06:85:50:96:67:15:da:7c:77:de:24:eb:6e:37:6a: c6:cb:75:5f:f8:a9:d8:ca:85:bd:fc:00:ae:ae:07:33:70:06: 10:67:9b:9e:e6:8c:f3:a0:2d:f8:df:ba:b9:91:e7:70:5b:6e: f6:2a:04:1c:e7:5a:92:05:96:fc:ca:aa:ec:42:a8:1b:b4:3b: 0d:bb:a4:08 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVGoqyEe4F6rQlbx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDMyMTAxMDAyNVoXDTI0MDYxOTAxMDAyNVowLzEtMCsGA1UEAxMk NDVjMzhmMWUtYmY2MS00OWNmLWExY2YtOTdjYjFiNjdkNDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCkbMU8Aoq5JKN+mc7P9yZFgPCqtrXFeTkvZ FwoACsFdJzdhE+2r2IzSuqx2ajBQYZGJqUQjVXNmDSQQE2QWzkCTr4NN6Ulkk56P TNMhCbCpRmYDNBwLzONQ0AJi1nTKQ/JlhXGuty2480IyAXNesb4avS9ORgSbg47r zSd3sMWWGwnwPlmZeSeYdqHJ4ORMS8QIV9ex3ucbWFEsdxURwgL4blp+4HWVP/ue OAbsqO5hPj5H/s+5MlXJlQV49x0h1L7C2dNlxloNKJ6yYaSPllZ0k9RLvnBKC4cn EeyIzz86SpqCbCftyhDWp77dowFjqT7Rct9X1DA6+q8XnT4WiwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAVIPrJyZjWwRcjyulL3m604NQyJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzkzNWQyNWItMTI4Ni0z NTdjLWIyMDYtODUzZjk4MWYwNTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIdhjlcU/gHWCpOeLyHHspXHSrTXvla71S2P6CvXjyElT3Yu4u9+ A9B4JwYMnOK391H4PINCtJPj79LjKecFioyt0OdUGHpFcS0WClMAjE+nZt7Tq6eT zww8BBGcmy+0Fw4+W++Ph3K+NxQMnKDtJwV/q8BgFOrOw5mMpGqco+P1zu1SFOm2 wOT67fnfZd6+ceX+4u55SI+aWPzk/VAs9Rvy6fVS1Lk/18JS6heqcKKuHt4HPvCI cwaFUJZnFdp8d94k6243asbLdV/4qdjKhb38AK6uBzNwBhBnm57mjPOgLfjfurmR 53BbbvYqBBznWpIFlvzKquxCqBu0Ow27pAg= -----END CERTIFICATE-----Generated at Mon May 6 14:56:12 2024 by rpki-client on console-fra.rpki-client.org