$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e8cb6f9-f19e-3005-b9b9-e5b6280f5590.roa File: 4e8cb6f9-f19e-3005-b9b9-e5b6280f5590.roa (raw, json) Hash identifier: ib/ePINl822VlRHlfy95zxxFMOYjfsPx6UGQcH4m/BY= Subject key identifier: 12:99:6B:AC:FE:13:89:69:AB:FF:5B:D3:AE:19:8D:6F:6B:D9:07:42 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584819D019C9D756B1228C8ECA00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e8cb6f9-f19e-3005-b9b9-e5b6280f5590.roa Signing time: Thu 05 Dec 2024 02:00:39 +0000 ROA not before: Thu 05 Dec 2024 02:00:39 +0000 ROA not after: Wed 05 Mar 2025 02:00:39 +0000 asID: 41872 IP address blocks: 2001:470:227::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Feb 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:19:d0:19:c9:d7:56:b1:22:8c:8e:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Dec 5 02:00:39 2024 GMT Not After : Mar 5 02:00:39 2025 GMT Subject: CN=0263bcde-68a6-40bf-b2b3-f08c5b2874e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b2:8a:54:c6:c9:2f:1e:d7:72:8e:da:f6:93: 6b:fb:8e:88:7b:3c:e0:86:78:75:4b:b2:f5:b3:77: e4:80:03:33:a5:b5:6a:3e:e4:ce:a1:e4:f8:b5:0a: 6d:67:db:b2:12:a0:f1:50:38:d2:d5:c9:22:26:ad: f6:50:ff:0f:8d:c2:83:70:a5:0d:01:36:71:8f:f4: f0:4c:61:5c:a4:ab:42:06:95:b7:b6:5e:11:ff:82: f8:3f:64:43:88:b5:54:3d:66:84:65:63:bd:33:96: e5:a4:60:9c:67:2e:33:aa:94:63:1e:16:b6:c4:1b: 09:90:98:1e:48:21:60:82:af:af:68:d2:f4:f5:a5: 70:5e:3f:75:b9:fd:47:ee:1a:9b:ce:e6:6a:6c:fb: 30:f4:80:10:e7:e4:60:4a:da:94:fd:d3:9f:8f:58: 5e:4e:0b:f8:89:1e:db:00:8d:d5:77:d5:9a:4e:40: 83:c7:68:82:67:46:04:a3:dc:d8:4a:e0:e4:d8:b0: a7:17:d0:ca:6f:e4:e5:b9:e9:22:01:a1:b4:e1:76: 49:79:1d:a9:d6:7c:c5:1e:4a:30:37:c8:93:08:29: 63:da:39:83:f9:7d:5d:d1:0d:bd:b2:5a:9f:91:7b: c6:42:02:98:8e:4f:ec:1d:ea:b3:00:d9:46:49:d6: e3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:99:6B:AC:FE:13:89:69:AB:FF:5B:D3:AE:19:8D:6F:6B:D9:07:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e8cb6f9-f19e-3005-b9b9-e5b6280f5590.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:227::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:3b:22:ed:4b:31:b2:a3:c4:f0:aa:ce:70:53:fa:af:47:58: e4:f2:32:71:ad:0d:e0:4e:34:14:85:43:6f:14:cc:dc:aa:2b: 37:3c:18:5d:6e:bf:95:03:bc:43:76:e1:4b:e7:c1:5b:1c:4b: 98:31:01:dd:5b:bc:17:9e:e8:b4:fe:a9:ab:c4:44:7b:94:b8: 01:44:36:20:c2:13:12:b5:10:e5:2d:7e:1e:b9:2e:86:ba:54: 70:5f:4d:84:a3:73:c9:4f:60:07:b0:94:6d:77:fe:f4:a3:b2: d3:8f:f1:89:8e:70:6d:1c:f1:eb:a4:21:9c:76:38:6a:fb:38: 69:76:a4:6a:f5:d5:e1:af:4d:3b:b1:ac:29:d4:29:2a:93:e8: 9d:b2:8f:50:50:5f:49:d3:33:fd:62:e8:8b:5f:ea:b2:39:d7: d2:26:81:48:83:4f:24:c9:00:eb:b0:ec:ac:f8:9a:23:9f:31: 5f:64:5a:44:b6:d9:15:cd:6b:dc:7c:b3:db:f5:5b:21:90:ec: b0:85:8a:ff:2e:32:50:1d:1b:0d:77:7e:66:f7:b0:4d:f2:f2: 53:dc:86:fc:ce:06:5a:c2:06:48:b2:5f:25:a4:f9:f1:c2:11: 18:7b:9c:22:97:c9:56:08:9f:87:8f:ac:13:77:20:3f:1a:71: 54:68:17:67 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgZ0BnJ11axIoyOygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk MDI2M2JjZGUtNjhhNi00MGJmLWIyYjMtZjA4YzViMjg3NGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirKKVMbJLx7Xco7a9pNr+46Iezzghnh1S7L1 s3fkgAMzpbVqPuTOoeT4tQptZ9uyEqDxUDjS1ckiJq32UP8PjcKDcKUNATZxj/Tw TGFcpKtCBpW3tl4R/4L4P2RDiLVUPWaEZWO9M5blpGCcZy4zqpRjHha2xBsJkJge SCFggq+vaNL09aVwXj91uf1H7hqbzuZqbPsw9IAQ5+RgStqU/dOfj1heTgv4iR7b AI3Vd9WaTkCDx2iCZ0YEo9zYSuDk2LCnF9DKb+TluekiAaG04XZJeR2p1nzFHkow N8iTCClj2jmD+X1d0Q29slqfkXvGQgKYjk/sHeqzANlGSdbjUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBKZa6z+E4lpq/9b064ZjW9r2QdCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNGU4Y2I2ZjktZjE5ZS0z MDA1LWI5YjktZTViNjI4MGY1NTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAIn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADc7Iu1LMbKjxPCqznBT+q9HWOTyMnGtDeBONBSFQ28UzNyqKzc8 GF1uv5UDvEN24UvnwVscS5gxAd1bvBee6LT+qavERHuUuAFENiDCExK1EOUtfh65 Loa6VHBfTYSjc8lPYAewlG13/vSjstOP8YmOcG0c8eukIZx2OGr7OGl2pGr11eGv TTuxrCnUKSqT6J2yj1BQX0nTM/1i6Itf6rI519ImgUiDTyTJAOuw7Kz4miOfMV9k WkS22RXNa9x8s9v1WyGQ7LCFiv8uMlAdGw13fmb3sE3y8lPchvzOBlrCBkiyXyWk +fHCERh7nCKXyVYIn4ePrBN3ID8acVRoF2c= -----END CERTIFICATE-----Generated at Fri Feb 7 18:08:33 2025 by rpki-client