$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b290a66-dfee-326b-be76-7a2b6d3ae94b.roa File: 4b290a66-dfee-326b-be76-7a2b6d3ae94b.roa (raw, json) Hash identifier: xD5y6JjA6ALjtNnHaafvp9LVkPjYXQLE51D6NIuiBww= Subject key identifier: FC:13:44:57:F5:30:C4:71:DE:71:B2:57:C1:53:88:A8:A3:1B:16:1A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858473A5B6B514BA137300AF47120 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b290a66-dfee-326b-be76-7a2b6d3ae94b.roa Signing time: Mon 16 Sep 2024 01:00:29 +0000 ROA not before: Mon 16 Sep 2024 01:00:29 +0000 ROA not after: Sun 15 Dec 2024 02:00:29 +0000 asID: 205019 IP address blocks: 2001:470:28e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3a:5b:6b:51:4b:a1:37:30:0a:f4:71:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 16 01:00:29 2024 GMT Not After : Dec 15 02:00:29 2024 GMT Subject: CN=07286989-78e9-472b-baf2-bcf1c800bd66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:56:32:66:7d:76:86:83:0f:26:53:51:85:79: 35:d7:cb:95:83:4d:32:f9:b3:ef:ff:9f:4a:3c:47: 3e:8e:b7:f0:f4:48:20:cb:f4:99:d3:c2:9d:7d:e6: 01:85:ed:55:dc:8a:6f:d4:03:3d:e1:64:2d:98:a8: 00:e3:86:e8:6f:5d:ae:71:2a:fd:b6:eb:af:10:54: d0:10:69:05:59:f9:f0:c1:c9:93:af:f9:62:55:f7: d9:97:3b:c3:67:7c:91:92:4a:b4:72:b9:1a:40:80: 4e:1f:74:fa:e4:86:79:fb:4f:48:91:1b:8e:af:65: eb:a1:1c:81:53:a2:c1:35:e4:d7:d1:a9:48:b9:ba: c3:13:3b:32:8a:3e:f7:27:0c:a6:f3:33:d6:29:d7: 69:ad:c9:03:9a:7b:ce:66:ef:88:9e:51:29:5b:35: 5c:bc:78:71:9b:1a:d1:61:98:b8:05:c3:7e:86:59: 49:71:35:1c:5a:84:a7:33:3b:83:db:3f:31:c0:58: f5:f5:18:21:92:d6:a4:30:50:59:0f:f6:38:d7:f9: 19:bb:1e:9d:10:5b:d5:2a:46:da:95:0a:b1:31:91: e3:26:c6:6c:12:7b:e3:e4:a6:c8:50:c0:2b:9e:4b: c0:e7:7e:91:42:81:59:5b:ba:0f:1f:78:ec:1a:cf: 49:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:13:44:57:F5:30:C4:71:DE:71:B2:57:C1:53:88:A8:A3:1B:16:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b290a66-dfee-326b-be76-7a2b6d3ae94b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:28e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:86:68:f6:1d:45:a0:40:74:30:3d:90:d6:d5:8e:7e:4d:e3: da:de:e3:a0:bb:5d:86:6c:b8:a6:29:4e:ce:2c:7e:f8:4c:11: 52:c3:df:97:f7:91:d5:01:3c:44:63:61:89:94:d7:e3:04:ca: e0:a2:06:14:43:a8:c9:2d:ba:86:de:77:25:5f:28:79:b5:c8: 80:36:90:2c:ab:d1:34:d3:1a:10:a5:94:3d:c6:2f:4f:12:8c: 2d:6c:bf:05:87:e6:eb:32:7f:b1:f2:a0:44:92:f7:80:de:81: 56:8e:30:63:ff:21:de:38:a0:70:de:09:d9:c4:6d:3e:5d:03: 2e:94:4b:7f:39:10:d8:64:74:26:82:5b:5d:6f:ae:eb:b2:4c: 52:3d:8e:ed:1f:14:11:c9:16:9c:ad:30:62:0b:c6:4b:1f:b0: 1c:bf:82:73:ad:26:d7:98:c7:e8:71:ff:2f:3e:08:0b:b6:fe: 3e:61:7d:3c:27:16:a0:3d:a1:82:39:95:22:d9:cb:89:8f:c0: bb:10:25:2c:cc:53:ad:16:39:c2:e5:ed:b8:8d:7b:80:64:76: 40:b7:cb:1a:8e:66:b2:f5:2d:b0:78:b8:09:d9:6c:04:89:3a: 63:da:62:b4:cd:be:2a:cb:28:ab:84:14:ef:63:16:b2:4d:5e: f4:4f:8a:50 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEc6W2tRS6E3MAr0cSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk MDcyODY5ODktNzhlOS00NzJiLWJhZjItYmNmMWM4MDBiZDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1YyZn12hoMPJlNRhXk118uVg00y+bPv/59K PEc+jrfw9Eggy/SZ08KdfeYBhe1V3Ipv1AM94WQtmKgA44bob12ucSr9tuuvEFTQ EGkFWfnwwcmTr/liVffZlzvDZ3yRkkq0crkaQIBOH3T65IZ5+09IkRuOr2XroRyB U6LBNeTX0alIubrDEzsyij73Jwym8zPWKddprckDmnvOZu+InlEpWzVcvHhxmxrR YZi4BcN+hllJcTUcWoSnMzuD2z8xwFj19RghktakMFBZD/Y41/kZux6dEFvVKkba lQqxMZHjJsZsEnvj5KbIUMArnkvA536RQoFZW7oPH3jsGs9JpwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPwTRFf1MMRx3nGyV8FTiKijGxYaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNGIyOTBhNjYtZGZlZS0z MjZiLWJlNzYtN2EyYjZkM2FlOTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFKGaPYdRaBAdDA9kNbVjn5N49re46C7XYZsuKYpTs4sfvhMEVLD 35f3kdUBPERjYYmU1+MEyuCiBhRDqMktuobedyVfKHm1yIA2kCyr0TTTGhCllD3G L08SjC1svwWH5usyf7HyoESS94DegVaOMGP/Id44oHDeCdnEbT5dAy6US385ENhk dCaCW11vruuyTFI9ju0fFBHJFpytMGILxksfsBy/gnOtJteYx+hx/y8+CAu2/j5h fTwnFqA9oYI5lSLZy4mPwLsQJSzMU60WOcLl7biNe4BkdkC3yxqOZrL1LbB4uAnZ bASJOmPaYrTNvirLKKuEFO9jFrJNXvRPilA= -----END CERTIFICATE-----Generated at Fri Nov 22 04:51:22 2024 by rpki-client on console-ams.rpki-client.org