$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4af887e3-a00d-34f0-b7da-3fec20c6f989.roa File: 4af887e3-a00d-34f0-b7da-3fec20c6f989.roa (raw, json) Hash identifier: x5DLZ4lMo2xeFqoGGu4z4QJON1dHHx496viNHXTgkpE= Subject key identifier: DD:E1:F4:A2:DB:61:B0:0B:2D:34:F7:4F:7C:56:F3:96:61:17:66:9D Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285844EA9FF4DDED5999AFB3C7E350 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4af887e3-a00d-34f0-b7da-3fec20c6f989.roa Signing time: Sat 17 Feb 2024 02:00:27 +0000 ROA not before: Sat 17 Feb 2024 02:00:27 +0000 ROA not after: Fri 17 May 2024 01:00:27 +0000 asID: 395788 IP address blocks: 2001:470:126::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:ea:9f:f4:dd:ed:59:99:af:b3:c7:e3:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 17 02:00:27 2024 GMT Not After : May 17 01:00:27 2024 GMT Subject: CN=4d96f368-0ed0-43c5-907e-fb6f0459ce44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:da:23:c6:88:b3:ea:99:3e:6a:4b:1c:0c:ab: a5:db:d5:27:97:d4:c8:74:22:58:0f:e8:4c:3e:c4: c2:84:46:4a:1d:1f:83:62:16:84:8c:ef:78:b7:04: 51:d3:5a:52:b0:3f:8a:c0:27:37:71:91:89:94:5b: 7d:6f:17:60:81:9e:d6:d8:39:8a:8e:19:f5:64:af: 1d:1e:e0:09:87:2b:ee:56:cc:5c:63:de:dc:b1:3d: 57:b6:61:3d:36:87:e1:8c:94:02:70:e7:62:bb:c1: d3:d2:dc:30:bd:1b:d4:f6:61:50:d0:db:a3:aa:9d: 47:c1:f5:b0:1e:a8:66:85:33:84:98:32:3e:48:b7: 64:37:52:41:b4:2a:6d:c8:83:79:37:46:08:a0:8f: 34:a8:ab:9a:e2:6f:56:d7:a6:be:4e:42:d4:6e:48: 47:b6:d3:03:59:71:96:bc:72:3a:6f:4f:f9:e7:ba: 2c:70:56:be:16:5f:48:d6:41:1f:6f:87:00:3f:f0: e4:ca:9e:a5:57:5a:42:94:ff:cb:ff:1a:a8:4c:54: 60:f5:4c:da:68:89:80:87:b7:77:ea:70:be:37:d4: 8d:ea:48:c2:4f:c1:44:0b:77:76:cb:c4:35:56:4c: 2a:0a:7f:cf:11:5e:09:37:58:75:bd:39:65:11:e7: e8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E1:F4:A2:DB:61:B0:0B:2D:34:F7:4F:7C:56:F3:96:61:17:66:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4af887e3-a00d-34f0-b7da-3fec20c6f989.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:126::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:40:da:7a:36:e3:5e:a7:fc:37:f5:f1:3e:d3:b1:5f:62:57: cf:0a:6b:84:fb:6c:69:e2:55:4a:90:34:a9:6e:65:40:d7:a5: a8:71:8c:4a:53:77:b2:bb:8c:f5:65:bd:2a:de:10:bf:fe:2a: 1c:0a:b5:f1:f0:b4:20:0b:91:34:a1:df:21:2b:3a:05:4f:c3: 4c:be:31:ba:e6:34:a2:54:a4:40:48:83:87:73:93:a6:cc:bf: 80:d1:0c:07:a2:49:8b:98:40:99:50:56:ec:dd:11:c7:e2:52: f3:25:41:fe:81:5f:8e:37:2c:de:37:f7:a7:c4:03:36:84:b6: 8e:48:61:24:30:6e:44:41:75:a5:39:c2:0e:5f:11:da:56:9e: 83:59:a3:56:67:da:3a:30:7c:78:db:a8:66:09:b4:b9:a4:1d: 33:5e:88:78:24:ae:2c:05:00:64:11:a6:5f:7a:a0:62:ad:57: ae:c6:c6:f2:45:97:87:21:15:59:17:8a:be:18:34:bb:ae:01: 1a:64:62:87:39:3e:f0:a3:26:0f:5e:36:e6:e4:1d:f1:5f:b5: f1:ba:e1:b8:85:73:eb:f9:66:2b:da:b8:d1:17:cb:7e:84:aa: 00:64:97:10:ad:69:bc:e5:d6:01:a6:89:eb:6f:e7:7f:bf:0f: 06:39:3c:82 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWETqn/Td7VmZr7PH41AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDIxNzAyMDAyN1oXDTI0MDUxNzAxMDAyN1owLzEtMCsGA1UEAxMk NGQ5NmYzNjgtMGVkMC00M2M1LTkwN2UtZmI2ZjA0NTljZTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9ojxoiz6pk+akscDKul29Unl9TIdCJYD+hM PsTChEZKHR+DYhaEjO94twRR01pSsD+KwCc3cZGJlFt9bxdggZ7W2DmKjhn1ZK8d HuAJhyvuVsxcY97csT1XtmE9NofhjJQCcOdiu8HT0twwvRvU9mFQ0Nujqp1HwfWw HqhmhTOEmDI+SLdkN1JBtCptyIN5N0YIoI80qKua4m9W16a+TkLUbkhHttMDWXGW vHI6b0/557oscFa+Fl9I1kEfb4cAP/Dkyp6lV1pClP/L/xqoTFRg9UzaaImAh7d3 6nC+N9SN6kjCT8FEC3d2y8Q1VkwqCn/PEV4JN1h1vTllEefoYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN3h9KLbYbALLTT3T3xW85ZhF2adMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNGFmODg3ZTMtYTAwZC0z NGYwLWI3ZGEtM2ZlYzIwYzZmOTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAEm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKRA2no2416n/Df18T7TsV9iV88Ka4T7bGniVUqQNKluZUDXpahx jEpTd7K7jPVlvSreEL/+KhwKtfHwtCALkTSh3yErOgVPw0y+MbrmNKJUpEBIg4dz k6bMv4DRDAeiSYuYQJlQVuzdEcfiUvMlQf6BX443LN4396fEAzaEto5IYSQwbkRB daU5wg5fEdpWnoNZo1Zn2jowfHjbqGYJtLmkHTNeiHgkriwFAGQRpl96oGKtV67G xvJFl4chFVkXir4YNLuuARpkYoc5PvCjJg9eNubkHfFftfG64biFc+v5ZivauNEX y36EqgBklxCtabzl1gGmietv53+/DwY5PII= -----END CERTIFICATE-----Generated at Mon May 6 20:30:31 2024 by rpki-client on console-ams.rpki-client.org