$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4082e2cb-eae7-3e66-9557-4e3a0669559c.roa File: 4082e2cb-eae7-3e66-9557-4e3a0669559c.roa (raw, json) Hash identifier: RRW9yxYmQoPFFwXDqujC4Gd64KgOiScgNN1CTLMImBA= Subject key identifier: 4A:CF:8C:58:2E:AF:6C:36:34:AF:BB:CE:72:1D:C5:5F:EA:41:E7:6C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858473A5B72F310DD35B23F20E880 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4082e2cb-eae7-3e66-9557-4e3a0669559c.roa Signing time: Mon 16 Sep 2024 01:00:29 +0000 ROA not before: Mon 16 Sep 2024 01:00:29 +0000 ROA not after: Sun 15 Dec 2024 02:00:29 +0000 asID: 10737 IP address blocks: 2001:470:2db::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3a:5b:72:f3:10:dd:35:b2:3f:20:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 16 01:00:29 2024 GMT Not After : Dec 15 02:00:29 2024 GMT Subject: CN=c95d7945-c746-4494-83a9-9233d8b19fdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c4:20:e6:87:42:77:86:64:d1:7d:99:e8:2f: 6e:84:2d:a7:d8:2b:9f:4d:fa:d6:b3:62:d6:7b:e7: 7d:99:58:e2:86:90:75:b7:4e:f3:73:75:4e:11:5f: d7:06:79:ad:c8:c8:df:da:46:a3:15:e3:d4:67:ac: 41:37:ab:4e:57:4e:46:b8:7a:db:0e:6a:c3:a3:9f: 3e:11:7c:03:6c:2b:ed:20:5b:95:a3:a9:f7:85:15: eb:38:dc:fa:35:6c:eb:34:fc:3f:e4:9f:c0:99:bb: 1b:eb:12:78:f8:79:19:18:90:de:aa:05:30:c4:f3: a9:03:7c:af:d4:b9:fe:c3:bd:95:d9:07:78:2e:75: eb:81:d6:d1:2c:a4:f9:09:93:fd:ac:05:58:11:c4: 60:9c:59:d9:f7:c3:8f:18:c4:bb:22:e9:d5:4e:54: 2b:a9:3f:91:c0:27:aa:98:c0:49:5b:dc:31:54:12: 69:b4:3e:d6:ba:42:48:35:dd:6a:71:16:80:79:bf: 04:b8:8f:22:56:8e:b6:6c:ee:f0:be:6b:1d:c2:00: f5:7b:b2:30:87:10:c7:3b:c2:75:71:ba:c6:a0:71: 9f:3d:42:08:d5:0d:8d:d6:33:94:a7:25:ba:66:d0: a1:b5:06:09:0b:b6:c3:16:34:96:ce:f4:87:05:01: 24:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:CF:8C:58:2E:AF:6C:36:34:AF:BB:CE:72:1D:C5:5F:EA:41:E7:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4082e2cb-eae7-3e66-9557-4e3a0669559c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2db::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:99:75:e7:79:37:d7:23:94:a1:2f:38:18:5b:1e:7c:b1:23: d4:fd:9c:ed:e1:a4:5d:15:d2:9d:4c:fb:79:c3:dc:f6:99:8b: 1c:81:40:74:5c:1b:1d:06:be:27:94:40:22:cd:87:8c:07:71: b5:f3:1e:42:00:5d:89:c9:eb:c8:a1:a9:92:bf:3f:2f:88:cd: f5:0e:3e:b7:39:80:cd:61:bf:dd:18:b2:17:76:12:8e:09:39: 2d:91:2a:4e:45:97:7e:65:93:f0:ef:92:62:3e:78:a0:31:49: 01:c2:15:39:f7:2a:a5:18:2b:5d:58:7d:22:be:00:4d:67:87: 28:41:bf:0b:32:cb:46:ec:64:09:91:00:f8:d4:97:bc:0c:e8: 63:f8:3e:e8:87:ba:63:7b:ef:0e:13:f9:57:91:49:55:4e:06: 03:66:b6:9a:b4:7d:dd:63:2d:ce:88:15:70:cf:5d:89:f2:54: dc:1a:ce:7d:0a:ec:fe:b3:a4:22:9a:c2:14:db:ac:d2:5f:9b: 31:ca:be:79:ea:0d:2f:ee:9f:88:b8:ea:1c:15:f6:ac:4a:f6: 82:bc:ee:a5:92:74:af:01:64:28:11:b7:6a:2c:19:9f:9c:a4: 06:17:73:31:ab:7f:a4:f4:f5:46:ae:c3:db:12:d7:ea:9b:a1: 9b:56:f5:ca -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEc6W3LzEN01sj8g6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk Yzk1ZDc5NDUtYzc0Ni00NDk0LTgzYTktOTIzM2Q4YjE5ZmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicQg5odCd4Zk0X2Z6C9uhC2n2CufTfrWs2LW e+d9mVjihpB1t07zc3VOEV/XBnmtyMjf2kajFePUZ6xBN6tOV05GuHrbDmrDo58+ EXwDbCvtIFuVo6n3hRXrONz6NWzrNPw/5J/Ambsb6xJ4+HkZGJDeqgUwxPOpA3yv 1Ln+w72V2Qd4LnXrgdbRLKT5CZP9rAVYEcRgnFnZ98OPGMS7IunVTlQrqT+RwCeq mMBJW9wxVBJptD7WukJINd1qcRaAeb8EuI8iVo62bO7wvmsdwgD1e7IwhxDHO8J1 cbrGoHGfPUII1Q2N1jOUpyW6ZtChtQYJC7bDFjSWzvSHBQEkYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFErPjFgur2w2NK+7znIdxV/qQedsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDA4MmUyY2ItZWFlNy0z ZTY2LTk1NTctNGUzYTA2Njk1NTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGiZded5N9cjlKEvOBhbHnyxI9T9nO3hpF0V0p1M+3nD3PaZixyB QHRcGx0GvieUQCLNh4wHcbXzHkIAXYnJ68ihqZK/Py+IzfUOPrc5gM1hv90Yshd2 Eo4JOS2RKk5Fl35lk/DvkmI+eKAxSQHCFTn3KqUYK11YfSK+AE1nhyhBvwsyy0bs ZAmRAPjUl7wM6GP4PuiHumN77w4T+VeRSVVOBgNmtpq0fd1jLc6IFXDPXYnyVNwa zn0K7P6zpCKawhTbrNJfmzHKvnnqDS/un4i46hwV9qxK9oK87qWSdK8BZCgRt2os GZ+cpAYXczGrf6T09Uauw9sS1+qboZtW9co= -----END CERTIFICATE-----Generated at Fri Nov 22 04:51:22 2024 by rpki-client on console-ams.rpki-client.org