$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3dfe538b-2a74-38b8-830d-2a025a52bb36.roa File: 3dfe538b-2a74-38b8-830d-2a025a52bb36.roa (raw, json) Hash identifier: 4Nx3zM2fZY3/rk7bHq2E5NATYPgywlTlaUs1c1NvZjs= Subject key identifier: 4D:16:3A:49:EE:3C:41:6A:2A:FB:75:C4:D3:1D:32:57:F9:E9:A8:43 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285844F89566BB10D45599B88B00C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3dfe538b-2a74-38b8-830d-2a025a52bb36.roa Signing time: Thu 22 Feb 2024 02:00:27 +0000 ROA not before: Thu 22 Feb 2024 02:00:27 +0000 ROA not after: Wed 22 May 2024 01:00:27 +0000 asID: 33309 IP address blocks: 2001:470:60::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f8:95:66:bb:10:d4:55:99:b8:8b:00:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 22 02:00:27 2024 GMT Not After : May 22 01:00:27 2024 GMT Subject: CN=fd9a77cf-0666-4f51-af69-aed3c8f176ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:84:bd:02:d5:6e:c0:0a:ac:07:df:a3:fb:38: 7d:4f:35:dd:9c:a3:0c:a8:31:7a:01:5a:11:3c:6b: 96:d3:77:f6:7e:53:55:6d:aa:d6:db:06:10:62:6c: a4:16:33:fc:98:27:21:4a:5e:06:8d:dc:e1:a0:b0: c6:92:5b:e8:2a:78:3f:19:c1:81:36:64:41:a3:41: 04:31:b2:57:d4:30:75:35:97:db:18:54:76:fc:19: 84:b1:17:ad:fe:aa:14:8e:eb:87:02:8c:17:95:5b: c2:68:26:c9:c5:31:5e:62:3c:50:88:c4:52:bf:73: d1:8b:8d:da:a1:a2:82:8a:f0:4c:05:2b:a3:7d:05: 62:c7:06:6c:c3:75:3a:0d:7d:b0:97:00:eb:94:03: 98:7c:89:c5:72:ad:1c:39:ca:ee:fa:1c:f9:0c:e7: 02:51:4c:85:f8:d7:6a:61:43:53:1a:dc:69:a3:22: cc:60:26:e9:86:b9:05:47:b6:bf:df:bc:96:50:d6: f7:90:37:d5:32:77:6c:86:0f:98:3d:27:70:f8:8e: 21:58:01:c8:d8:c5:74:1d:61:c8:c6:17:7e:7b:ae: b1:e0:c3:9f:ff:cf:cd:e9:b8:14:6d:53:c4:d1:ce: 8a:88:b9:3b:bc:04:52:ad:d6:f8:e9:91:f8:7d:18: f7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:16:3A:49:EE:3C:41:6A:2A:FB:75:C4:D3:1D:32:57:F9:E9:A8:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3dfe538b-2a74-38b8-830d-2a025a52bb36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:60::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:7f:cb:cd:03:d3:17:80:9c:de:33:46:98:ed:0b:b7:65:17: 80:04:42:65:cf:75:dd:2f:2f:07:61:26:85:89:e0:f4:b1:07: 12:b5:76:d8:ad:1e:72:96:1c:6e:7f:69:fe:f6:f1:c1:bf:59: 4d:61:3b:3c:80:1d:3a:9a:2f:5b:f1:76:a3:55:08:14:54:bd: c4:0e:4e:63:f6:5b:03:a7:23:20:b5:49:7b:f1:3b:eb:59:da: df:21:01:61:3e:9d:dd:b0:e7:55:4f:51:b9:45:c9:07:20:ff: aa:96:40:5c:9b:75:60:24:84:99:32:2b:bd:7a:49:23:b4:72: d6:3f:e1:6f:fc:85:e1:c4:05:52:81:ca:ee:1b:dd:f5:86:60: b2:d1:4f:0a:48:80:53:f5:d5:fb:15:0b:77:c6:4e:5a:60:20: 35:f2:07:b1:78:3e:b0:98:c3:39:a3:72:7e:27:66:4b:c5:d4: 2b:89:92:49:9d:08:c1:e1:9a:15:25:22:4f:08:de:e3:69:91: 6c:79:05:1f:d5:bc:b8:98:c4:58:b5:fe:66:ea:9c:c3:df:bf: 96:55:ff:22:5e:26:07:a3:0b:8b:e9:94:32:33:8c:a4:d9:4d: 74:d6:9d:be:b8:36:c3:a3:ce:03:e0:00:00:32:65:50:30:3e: a6:98:28:54 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWET4lWa7ENRVmbiLAMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDIyMjAyMDAyN1oXDTI0MDUyMjAxMDAyN1owLzEtMCsGA1UEAxMk ZmQ5YTc3Y2YtMDY2Ni00ZjUxLWFmNjktYWVkM2M4ZjE3NmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4S9AtVuwAqsB9+j+zh9TzXdnKMMqDF6AVoR PGuW03f2flNVbarW2wYQYmykFjP8mCchSl4GjdzhoLDGklvoKng/GcGBNmRBo0EE MbJX1DB1NZfbGFR2/BmEsRet/qoUjuuHAowXlVvCaCbJxTFeYjxQiMRSv3PRi43a oaKCivBMBSujfQVixwZsw3U6DX2wlwDrlAOYfInFcq0cOcru+hz5DOcCUUyF+Ndq YUNTGtxpoyLMYCbphrkFR7a/37yWUNb3kDfVMndshg+YPSdw+I4hWAHI2MV0HWHI xhd+e66x4MOf/8/N6bgUbVPE0c6KiLk7vARSrdb46ZH4fRj3cwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE0WOknuPEFqKvt1xNMdMlf56ahDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2RmZTUzOGItMmE3NC0z OGI4LTgzMGQtMmEwMjVhNTJiYjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcABg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD5/y80D0xeAnN4zRpjtC7dlF4AEQmXPdd0vLwdhJoWJ4PSxBxK1 dtitHnKWHG5/af728cG/WU1hOzyAHTqaL1vxdqNVCBRUvcQOTmP2WwOnIyC1SXvx O+tZ2t8hAWE+nd2w51VPUblFyQcg/6qWQFybdWAkhJkyK716SSO0ctY/4W/8heHE BVKByu4b3fWGYLLRTwpIgFP11fsVC3fGTlpgIDXyB7F4PrCYwzmjcn4nZkvF1CuJ kkmdCMHhmhUlIk8I3uNpkWx5BR/VvLiYxFi1/mbqnMPfv5ZV/yJeJgejC4vplDIz jKTZTXTWnb64NsOjzgPgAAAyZVAwPqaYKFQ= -----END CERTIFICATE-----Generated at Mon May 6 22:50:42 2024 by rpki-client on console-ams.rpki-client.org