$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b5a7f0e-12ff-394e-8473-2202f753f109.roa File: 3b5a7f0e-12ff-394e-8473-2202f753f109.roa (raw, json) Hash identifier: 97kZBQGhKYVXIbNBoOQbXosiCwLOTn86IQpIbb949uw= Subject key identifier: 98:D6:AF:92:56:F4:21:F1:9D:F5:2A:14:32:31:29:98:61:A7:35:7A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285844F89565AAF271EB7C1198C000 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b5a7f0e-12ff-394e-8473-2202f753f109.roa Signing time: Thu 22 Feb 2024 02:00:27 +0000 ROA not before: Thu 22 Feb 2024 02:00:27 +0000 ROA not after: Wed 22 May 2024 01:00:27 +0000 asID: 17197 IP address blocks: 2001:470:9a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f8:95:65:aa:f2:71:eb:7c:11:98:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 22 02:00:27 2024 GMT Not After : May 22 01:00:27 2024 GMT Subject: CN=ed32414e-0f39-4b59-8740-0304e4e46725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:85:48:79:fb:82:f3:23:05:58:f7:f6:77:65: 4b:a0:79:c4:43:71:c9:29:6a:f4:1e:c0:a4:e3:fb: 5f:53:3c:a7:96:1a:bc:7c:70:89:e8:78:18:a5:ac: 81:78:48:e5:2f:27:17:6a:89:e5:34:55:8c:22:33: eb:ea:02:38:b7:2f:36:3f:b9:7c:fe:aa:8f:1e:0f: 09:65:75:55:c4:e1:79:34:85:e5:21:03:f9:fe:70: 42:a4:cd:46:7d:af:a1:94:c6:2c:6a:49:e3:1c:6a: 70:cb:bc:f6:77:36:d3:e4:93:6c:08:73:4c:13:34: 6c:8f:2c:7d:1b:05:69:40:45:f3:38:9c:99:a4:3b: c2:a5:8e:a2:ef:a7:f7:f3:14:21:f4:bc:e4:56:e3: 00:04:62:8a:ec:d6:80:ab:d1:c4:e0:d1:bc:70:4a: e8:70:85:f0:c6:4b:5f:23:8c:5c:e1:6b:bd:89:70: 34:da:86:d0:7d:96:4f:b8:e5:63:18:e7:a8:bf:90: 63:e1:a9:c2:de:49:00:9d:09:0f:b7:25:c7:8f:2b: c4:68:2a:7c:fe:31:a8:94:e2:de:bf:d3:22:fc:10: 4e:51:c2:6b:e1:57:0d:95:c3:82:f4:41:4e:ce:c0: d0:4b:b2:43:ec:79:87:b9:ea:33:f2:eb:21:1b:a0: 89:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D6:AF:92:56:F4:21:F1:9D:F5:2A:14:32:31:29:98:61:A7:35:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b5a7f0e-12ff-394e-8473-2202f753f109.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:9a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:35:85:15:b2:c4:d4:e6:aa:ee:5e:97:ce:c3:20:89:8e:d9: f1:42:0f:ca:c3:cd:d9:91:0d:32:1c:07:d4:b0:51:1c:33:b7: a4:0b:33:d6:78:64:ea:cb:ee:51:07:bf:ff:c5:eb:bf:10:c6: 6b:80:33:a0:a4:73:17:81:1d:02:92:04:77:06:b0:d9:9c:ef: fd:7b:c6:59:66:8a:47:b4:86:77:5b:d1:ff:13:30:be:2a:2b: bf:48:0e:2e:66:35:f4:82:78:21:2f:9e:ee:0a:5f:17:83:f9: b9:17:f6:e8:7f:2c:15:11:a8:9e:13:3d:60:8e:93:12:1a:6a: f7:5c:5b:c6:20:10:55:5f:0f:2a:de:58:ce:64:7f:32:9e:cc: 75:aa:ad:28:09:b0:84:06:6f:15:eb:2d:1e:ca:22:a8:3e:36: 61:e9:da:1c:68:11:20:95:5d:51:33:b6:24:69:3e:ee:b8:a7: f9:a9:5a:f6:5e:f7:6f:f4:f3:43:b8:7f:2c:ae:7d:91:d6:8e: 50:c6:54:f3:00:9f:fe:80:fa:04:c7:69:7f:a4:7b:9f:76:ca: ee:26:35:c8:95:2f:32:44:58:a9:46:ae:57:2e:98:68:8f:ee: 23:c8:a3:49:35:61:7f:08:5e:38:88:c7:9a:39:be:bd:c1:6f: cf:dc:d6:47 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWET4lWWq8nHrfBGYwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDIyMjAyMDAyN1oXDTI0MDUyMjAxMDAyN1owLzEtMCsGA1UEAxMk ZWQzMjQxNGUtMGYzOS00YjU5LTg3NDAtMDMwNGU0ZTQ2NzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYVIefuC8yMFWPf2d2VLoHnEQ3HJKWr0HsCk 4/tfUzynlhq8fHCJ6HgYpayBeEjlLycXaonlNFWMIjPr6gI4ty82P7l8/qqPHg8J ZXVVxOF5NIXlIQP5/nBCpM1Gfa+hlMYsaknjHGpwy7z2dzbT5JNsCHNMEzRsjyx9 GwVpQEXzOJyZpDvCpY6i76f38xQh9LzkVuMABGKK7NaAq9HE4NG8cErocIXwxktf I4xc4Wu9iXA02obQfZZPuOVjGOeov5Bj4anC3kkAnQkPtyXHjyvEaCp8/jGolOLe v9Mi/BBOUcJr4VcNlcOC9EFOzsDQS7JD7HmHueoz8ushG6CJ7QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJjWr5JW9CHxnfUqFDIxKZhhpzV6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2I1YTdmMGUtMTJmZi0z OTRlLTg0NzMtMjIwMmY3NTNmMTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACa MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALU1hRWyxNTmqu5el87DIImO2fFCD8rDzdmRDTIcB9SwURwzt6QL M9Z4ZOrL7lEHv//F678QxmuAM6CkcxeBHQKSBHcGsNmc7/17xllmike0hndb0f8T ML4qK79IDi5mNfSCeCEvnu4KXxeD+bkX9uh/LBURqJ4TPWCOkxIaavdcW8YgEFVf DyreWM5kfzKezHWqrSgJsIQGbxXrLR7KIqg+NmHp2hxoESCVXVEztiRpPu64p/mp WvZe92/080O4fyyufZHWjlDGVPMAn/6A+gTHaX+ke592yu4mNciVLzJEWKlGrlcu mGiP7iPIo0k1YX8IXjiIx5o5vr3Bb8/c1kc= -----END CERTIFICATE-----Generated at Mon May 6 22:50:42 2024 by rpki-client on console-ams.rpki-client.org