$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3af93f7b-1705-35c8-a47c-50e11ddc8803.roa File: 3af93f7b-1705-35c8-a47c-50e11ddc8803.roa (raw, json) Hash identifier: XI6i6slI1ziWeIEhRhTsUU/+cZkzdVroHptlZpZDykc= Subject key identifier: 98:72:45:D0:4E:C8:5A:58:6F:AB:0B:BC:5A:24:EE:47:06:3A:2F:53 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584507F01D7F3DE3CC00B6E96F80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3af93f7b-1705-35c8-a47c-50e11ddc8803.roa Signing time: Tue 27 Feb 2024 14:00:31 +0000 ROA not before: Tue 27 Feb 2024 14:00:31 +0000 ROA not after: Mon 27 May 2024 13:00:31 +0000 asID: 216138 IP address blocks: 2001:470:87::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:07:f0:1d:7f:3d:e3:cc:00:b6:e9:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 27 14:00:31 2024 GMT Not After : May 27 13:00:31 2024 GMT Subject: CN=38d8eb2f-6ee1-4861-9224-f4fc25ba9703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bb:ed:fe:f8:b9:b4:8d:d5:98:a3:f0:2b:89: 30:fe:3d:a1:2e:28:c0:52:22:7b:7a:35:a3:54:b8: 11:97:aa:f9:66:7c:3c:67:f3:a1:d9:01:07:4a:b5: c2:d0:db:8e:df:68:79:5c:f3:fb:ad:be:1e:64:e4: 60:e9:1b:e7:ed:c6:e6:eb:aa:e5:1e:30:5d:da:a5: 25:ee:07:98:7a:7d:51:6d:02:cb:64:89:07:9e:16: 79:9d:88:0b:80:01:87:bd:b5:ef:c2:0f:a7:ea:7d: b7:0d:32:5f:f1:f4:2b:76:9b:ea:8c:db:88:59:f5: 3f:23:6a:78:37:47:9d:bb:ad:4a:e8:6f:10:87:f6: 7f:44:0c:95:fc:5e:f5:ea:fe:e0:41:ca:45:be:c7: 25:2b:af:df:14:ef:1b:1c:de:3b:59:37:63:ce:9e: ea:88:25:f8:ba:8c:37:2d:ee:f5:03:f3:25:5c:5c: d7:8e:86:7c:b0:66:80:f0:95:ec:d7:65:35:f2:1a: 62:09:60:6f:1e:2c:58:c5:f1:0d:e6:17:70:fc:a8: f7:36:68:4e:cc:59:c0:be:4e:77:81:36:56:4b:f2: 9f:10:de:67:08:6c:0e:40:ff:71:ad:6d:1a:c2:c2: de:bf:a5:72:12:50:8d:03:f1:eb:bd:65:f8:0e:c7: ac:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:72:45:D0:4E:C8:5A:58:6F:AB:0B:BC:5A:24:EE:47:06:3A:2F:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3af93f7b-1705-35c8-a47c-50e11ddc8803.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:87::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:40:92:7d:5c:03:60:95:13:e6:fc:bd:43:d8:7b:ac:e6:09: a5:89:98:18:35:de:57:4e:ad:b6:40:8c:b1:c6:0b:5e:f1:3a: 56:22:4c:3d:ca:72:8b:a0:71:67:2e:80:20:f7:7c:6d:43:3d: 53:59:d8:88:62:b5:5b:8d:43:74:e9:55:96:c3:49:30:af:75: 9b:5f:4f:0e:52:f8:63:0c:0e:63:53:96:f0:ec:80:02:8b:33: 13:00:86:ad:cc:6c:9a:79:b7:1b:96:ab:1c:36:ff:25:78:5f: 51:91:c1:98:45:74:7a:4b:e8:d3:3b:f4:8d:02:a8:76:bb:00: ee:0c:4c:87:83:5c:a4:8f:84:16:21:40:9a:5b:67:ea:65:a9: ec:0b:40:f4:a2:4d:8b:58:eb:b1:7f:8f:b7:a8:71:aa:46:14: 0a:21:b7:3c:f1:58:6f:04:55:c3:68:1f:8d:7f:f9:00:6d:80: e6:8e:e4:64:33:aa:97:28:aa:7f:6b:98:08:10:60:0b:15:11: fc:d7:29:b3:94:c4:93:f6:5e:ef:cc:c5:e7:b2:e2:af:43:07: c2:24:d5:f9:1b:5a:92:eb:cc:a7:93:66:3e:b5:d1:a9:ee:1a: f8:a7:4b:db:06:68:72:93:0c:2f:23:5c:af:a2:df:33:85:b2: 3d:59:0e:78 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUH8B1/PePMALbpb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDIyNzE0MDAzMVoXDTI0MDUyNzEzMDAzMVowLzEtMCsGA1UEAxMk MzhkOGViMmYtNmVlMS00ODYxLTkyMjQtZjRmYzI1YmE5NzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLvt/vi5tI3VmKPwK4kw/j2hLijAUiJ7ejWj VLgRl6r5Znw8Z/Oh2QEHSrXC0NuO32h5XPP7rb4eZORg6Rvn7cbm66rlHjBd2qUl 7geYen1RbQLLZIkHnhZ5nYgLgAGHvbXvwg+n6n23DTJf8fQrdpvqjNuIWfU/I2p4 N0edu61K6G8Qh/Z/RAyV/F716v7gQcpFvsclK6/fFO8bHN47WTdjzp7qiCX4uow3 Le71A/MlXFzXjoZ8sGaA8JXs12U18hpiCWBvHixYxfEN5hdw/Kj3NmhOzFnAvk53 gTZWS/KfEN5nCGwOQP9xrW0awsLev6VyElCNA/HrvWX4DsesEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJhyRdBOyFpYb6sLvFok7kcGOi9TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2FmOTNmN2ItMTcwNS0z NWM4LWE0N2MtNTBlMTFkZGM4ODAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAABAkn1cA2CVE+b8vUPYe6zmCaWJmBg13ldOrbZAjLHGC17xOlYi TD3KcougcWcugCD3fG1DPVNZ2IhitVuNQ3TpVZbDSTCvdZtfTw5S+GMMDmNTlvDs gAKLMxMAhq3MbJp5txuWqxw2/yV4X1GRwZhFdHpL6NM79I0CqHa7AO4MTIeDXKSP hBYhQJpbZ+plqewLQPSiTYtY67F/j7eocapGFAohtzzxWG8EVcNoH41/+QBtgOaO 5GQzqpcoqn9rmAgQYAsVEfzXKbOUxJP2Xu/Mxeey4q9DB8Ik1fkbWpLrzKeTZj61 0anuGvinS9sGaHKTDC8jXK+i3zOFsj1ZDng= -----END CERTIFICATE-----Generated at Mon May 6 12:47:26 2024 by rpki-client on console-ams.rpki-client.org