$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/42d37a88-a840-3f71-9524-6d2d70e3b869.roa File: 42d37a88-a840-3f71-9524-6d2d70e3b869.roa (raw, json) Hash identifier: Hy8UlsL9fu+R4EdgWCQlFvbZ/HA9aQBOvvbaUjoILfk= Subject key identifier: AA:A1:34:16:D1:E2:2E:C5:CF:C4:29:6E:EE:16:C7:E3:D4:6B:DA:27 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858455CF82808A497619822E7E5C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/42d37a88-a840-3f71-9524-6d2d70e3b869.roa Signing time: Fri 29 Mar 2024 01:00:26 +0000 ROA not before: Fri 29 Mar 2024 01:00:26 +0000 ROA not after: Thu 27 Jun 2024 01:00:26 +0000 asID: 17456 IP address blocks: 2001:470:269::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:5c:f8:28:08:a4:97:61:98:22:e7:e5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 29 01:00:26 2024 GMT Not After : Jun 27 01:00:26 2024 GMT Subject: CN=64e62f20-df55-41ca-bc16-074e4287c04c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8c:0f:02:cd:d8:ac:4b:41:8e:c7:67:16:a3: f8:60:ee:b3:78:3d:44:92:6b:d8:df:30:53:5a:ec: 3c:5d:ae:c6:c1:81:7d:34:ab:f0:3f:09:40:7d:e1: 69:ef:95:e3:5a:5f:b0:3d:bc:a0:1b:06:19:09:4b: 93:9a:c9:f6:55:29:9c:19:9e:bb:76:de:5c:a7:51: 5f:08:ac:f1:e5:66:98:de:cb:25:47:ef:da:e9:9b: f6:0d:d7:d4:9d:14:52:27:b7:98:f6:db:ef:46:e0: 59:4b:eb:47:55:51:25:e6:cc:a5:89:17:33:1f:34: 64:58:5e:4d:26:b2:a8:f6:71:bd:84:5c:60:cf:37: 76:2f:b3:4b:f3:9a:dc:d4:6e:6f:d7:6d:ae:de:85: 97:f3:3a:38:20:32:8d:05:cb:1d:68:c3:f7:96:6a: 78:d5:d3:cd:5a:74:f6:1b:ba:38:ef:e1:35:75:74: 46:00:c0:25:27:92:86:53:ea:5c:21:fd:9d:6a:c9: 0e:9b:28:24:eb:98:4c:3f:b6:d0:03:50:7d:c7:b4: fe:26:5d:57:26:24:39:6f:60:a3:92:8c:3f:e6:82: 40:56:f5:1e:0c:04:82:33:c6:a9:80:42:cf:a2:f3: 15:be:6e:5e:58:89:08:f0:3e:f8:62:d3:9d:eb:d8: 88:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A1:34:16:D1:E2:2E:C5:CF:C4:29:6E:EE:16:C7:E3:D4:6B:DA:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/42d37a88-a840-3f71-9524-6d2d70e3b869.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:269::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:e7:4d:51:87:62:57:da:cc:31:a7:c3:a7:18:3d:e0:63:ec: 37:b2:95:80:88:8b:9b:15:71:14:65:d1:c4:c2:e5:06:d9:91: 47:c8:cf:63:f0:36:cd:1c:d9:e9:b4:05:17:4f:a7:b1:95:0c: ce:fe:8b:d9:81:db:af:ed:ac:f2:4a:e4:a0:f3:a2:56:28:09: e5:0b:18:c1:e2:37:18:a8:f3:89:b9:6c:5f:f4:a8:e1:bf:81: f6:9d:a7:e6:79:9e:f1:36:4a:97:dd:e8:67:5a:28:81:0a:2f: 67:bf:15:12:fd:63:18:68:a0:77:b4:2f:f2:9c:09:fc:bf:f8: 6d:59:f0:d4:db:ae:8d:ad:b5:bb:ce:5f:37:3b:09:cb:1e:1e: b0:61:04:3e:09:e9:fe:c3:9e:83:65:89:89:1a:60:8d:26:2b: a6:32:0f:bd:ea:48:8d:41:0e:8d:ae:16:86:18:43:b1:39:77: c4:10:d0:cb:ca:9c:73:04:49:69:c7:72:22:51:3c:d8:fa:51: 65:c4:41:1a:bd:22:ff:10:40:a2:19:17:45:4a:f2:86:16:9a: c9:0c:a0:37:ec:1f:17:4d:73:ae:28:f8:8f:8e:9a:af:c6:7d: e6:41:06:bc:51:ff:84:f8:e5:b6:3d:25:21:53:5e:98:17:f2: 2c:28:94:23 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVc+CgIpJdhmCLn5cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDMyOTAxMDAyNloXDTI0MDYyNzAxMDAyNlowLzEtMCsGA1UEAxMk NjRlNjJmMjAtZGY1NS00MWNhLWJjMTYtMDc0ZTQyODdjMDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIwPAs3YrEtBjsdnFqP4YO6zeD1EkmvY3zBT Wuw8Xa7GwYF9NKvwPwlAfeFp75XjWl+wPbygGwYZCUuTmsn2VSmcGZ67dt5cp1Ff CKzx5WaY3sslR+/a6Zv2DdfUnRRSJ7eY9tvvRuBZS+tHVVEl5syliRczHzRkWF5N JrKo9nG9hFxgzzd2L7NL85rc1G5v122u3oWX8zo4IDKNBcsdaMP3lmp41dPNWnT2 G7o47+E1dXRGAMAlJ5KGU+pcIf2daskOmygk65hMP7bQA1B9x7T+Jl1XJiQ5b2Cj kow/5oJAVvUeDASCM8apgELPovMVvm5eWIkI8D74YtOd69iIpwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKqhNBbR4i7Fz8Qpbu4Wx+PUa9onMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDJkMzdhODgtYTg0MC0z ZjcxLTk1MjQtNmQyZDcwZTNiODY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJp MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFHnTVGHYlfazDGnw6cYPeBj7DeylYCIi5sVcRRl0cTC5QbZkUfI z2PwNs0c2em0BRdPp7GVDM7+i9mB26/trPJK5KDzolYoCeULGMHiNxio84m5bF/0 qOG/gfadp+Z5nvE2Spfd6GdaKIEKL2e/FRL9YxhooHe0L/KcCfy/+G1Z8NTbro2t tbvOXzc7CcseHrBhBD4J6f7DnoNliYkaYI0mK6YyD73qSI1BDo2uFoYYQ7E5d8QQ 0MvKnHMESWnHciJRPNj6UWXEQRq9Iv8QQKIZF0VK8oYWmskMoDfsHxdNc64o+I+O mq/GfeZBBrxR/4T45bY9JSFTXpgX8iwolCM= -----END CERTIFICATE-----Generated at Tue May 7 03:13:54 2024 by rpki-client on console-fra.rpki-client.org