$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/536e84b7-06c6-37c1-a0d3-81ca5330404a.roa File: 536e84b7-06c6-37c1-a0d3-81ca5330404a.roa (raw, json) Hash identifier: Khvk6MqV2/vi3aEEPIoLMDPPDydYX8D1ZdgSHuk3Zio= Subject key identifier: 5B:91:31:6B:7F:F4:6B:30:A1:8A:A5:A6:22:B9:F2:75:74:B6:B1:A1 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584566BDBEAB4CFDBFF87F0EAD00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/536e84b7-06c6-37c1-a0d3-81ca5330404a.roa Signing time: Mon 01 Apr 2024 13:00:36 +0000 ROA not before: Mon 01 Apr 2024 13:00:36 +0000 ROA not after: Sun 30 Jun 2024 13:00:36 +0000 asID: 10352 IP address blocks: 2001:470:1e5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:66:bd:be:ab:4c:fd:bf:f8:7f:0e:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 1 13:00:36 2024 GMT Not After : Jun 30 13:00:36 2024 GMT Subject: CN=af6a8290-0a94-4abe-a6f4-8770e98a4981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7b:8a:a9:6b:fb:ec:0d:2e:4f:4c:1c:ce:68: 45:b7:c2:ed:fc:0f:d8:0f:e6:da:d4:76:38:f4:57: d1:92:78:e9:97:13:77:bc:c4:29:9d:0a:53:97:23: 32:6c:ee:68:fd:72:ae:aa:d8:0f:f3:63:8c:e8:49: 1d:ac:3f:aa:d2:1f:8f:4e:12:89:97:cd:08:31:63: 93:44:44:0b:38:b7:03:3b:0c:13:33:b5:5c:c1:18: a4:f7:b7:44:b5:d2:9f:50:4e:d5:b1:21:a5:9e:5a: c3:94:03:12:87:bc:a9:d8:c3:00:b4:0d:8d:6d:85: d4:d5:2c:73:32:ca:f0:7e:aa:cb:66:f5:ef:e6:d9: 20:09:56:21:06:fa:52:63:ca:9d:93:e5:a4:c3:b5: 74:48:22:b6:bc:86:1f:a9:aa:98:a0:b7:c3:35:a5: 4f:e9:2b:4b:d9:d1:09:5f:21:1d:19:b7:1c:d6:15: 14:c7:ad:81:85:68:1c:d9:37:0f:8f:bb:c7:94:fe: e5:a5:c0:0f:15:ca:90:d9:5c:0a:9d:8b:7c:65:b4: 7c:e1:4e:6d:c0:95:d4:2a:ad:40:62:11:34:94:6c: e2:5f:29:6d:10:4b:9c:75:c5:6c:b5:97:55:57:ba: c3:12:6b:9c:6f:f9:1f:36:d1:9d:da:25:72:b4:44: fe:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:91:31:6B:7F:F4:6B:30:A1:8A:A5:A6:22:B9:F2:75:74:B6:B1:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/536e84b7-06c6-37c1-a0d3-81ca5330404a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1e5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:95:b4:10:6b:5c:1e:67:6b:a1:bd:aa:53:a8:a6:62:53:11: b3:06:92:00:63:5b:00:61:26:96:87:f2:5c:78:38:57:d3:ae: a8:f3:e9:a6:ff:1f:bc:99:0d:20:d2:67:1c:44:4b:75:25:90: c1:4c:29:14:58:e7:b4:bc:7c:11:02:5c:33:96:32:5b:6a:a3: 4d:03:9b:0e:96:e4:e3:27:73:26:21:b3:33:ad:8d:77:bd:1f: c1:db:68:76:82:47:f6:93:f9:68:22:91:14:45:93:26:5d:00: 04:28:c6:e1:be:cc:18:79:09:96:f8:d7:73:a2:80:c5:af:6a: d8:98:25:49:9b:bd:57:b8:03:74:80:38:17:9d:59:ff:6f:eb: 66:e9:ee:aa:d7:76:6f:eb:39:1b:8d:91:c8:3c:3a:c8:d2:6b: d0:d6:c8:16:1f:92:1b:aa:8c:2e:2b:53:ef:96:64:b7:32:7e: 63:1d:cd:3b:87:68:73:78:20:ac:3d:76:e3:e6:fe:dc:8f:6e: 81:f5:72:19:40:a9:bd:0f:eb:41:2e:87:1f:bd:97:16:49:10: ee:ad:3a:19:f8:ca:de:b6:e2:45:d6:13:1e:9e:69:7f:7d:46: 1c:91:fb:75:a6:7a:54:66:c8:be:d0:90:2e:bb:65:34:88:47: a4:1e:27:72 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVmvb6rTP2/+H8OrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDQwMTEzMDAzNloXDTI0MDYzMDEzMDAzNlowLzEtMCsGA1UEAxMk YWY2YTgyOTAtMGE5NC00YWJlLWE2ZjQtODc3MGU5OGE0OTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunuKqWv77A0uT0wczmhFt8Lt/A/YD+ba1HY4 9FfRknjplxN3vMQpnQpTlyMybO5o/XKuqtgP82OM6EkdrD+q0h+PThKJl80IMWOT REQLOLcDOwwTM7VcwRik97dEtdKfUE7VsSGlnlrDlAMSh7yp2MMAtA2NbYXU1Sxz MsrwfqrLZvXv5tkgCVYhBvpSY8qdk+Wkw7V0SCK2vIYfqaqYoLfDNaVP6StL2dEJ XyEdGbcc1hUUx62BhWgc2TcPj7vHlP7lpcAPFcqQ2VwKnYt8ZbR84U5twJXUKq1A YhE0lGziXyltEEucdcVstZdVV7rDEmucb/kfNtGd2iVytET+kQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFuRMWt/9GswoYqlpiK58nV0trGhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTM2ZTg0YjctMDZjNi0z N2MxLWEwZDMtODFjYTUzMzA0MDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADCVtBBrXB5na6G9qlOopmJTEbMGkgBjWwBhJpaH8lx4OFfTrqjz 6ab/H7yZDSDSZxxES3UlkMFMKRRY57S8fBECXDOWMltqo00Dmw6W5OMncyYhszOt jXe9H8HbaHaCR/aT+WgikRRFkyZdAAQoxuG+zBh5CZb413OigMWvatiYJUmbvVe4 A3SAOBedWf9v62bp7qrXdm/rORuNkcg8OsjSa9DWyBYfkhuqjC4rU++WZLcyfmMd zTuHaHN4IKw9duPm/tyPboH1chlAqb0P60Euhx+9lxZJEO6tOhn4yt624kXWEx6e aX99RhyR+3WmelRmyL7QkC67ZTSIR6QeJ3I= -----END CERTIFICATE-----Generated at Mon May 6 22:50:42 2024 by rpki-client on console-ams.rpki-client.org