$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/699ce2b4-98be-33e7-8110-8051c968024b.roa File: 699ce2b4-98be-33e7-8110-8051c968024b.roa (raw, json) Hash identifier: wcfOLMMSqsPuTc986Xt/TKh3jdNwFxDj1icagz3z35g= Subject key identifier: 29:43:C6:32:0D:B3:31:70:7F:22:4F:DA:B4:E5:46:0B:A9:74:3E:7D Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285844FCD48C179048D1AF9EF13C40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/699ce2b4-98be-33e7-8110-8051c968024b.roa Signing time: Fri 23 Feb 2024 14:31:06 +0000 ROA not before: Fri 23 Feb 2024 14:31:06 +0000 ROA not after: Thu 23 May 2024 13:31:06 +0000 asID: 57332 IP address blocks: 2001:470:2a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:fc:d4:8c:17:90:48:d1:af:9e:f1:3c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 14:31:06 2024 GMT Not After : May 23 13:31:06 2024 GMT Subject: CN=a5268a1c-9324-40a0-a7e7-2cf71396a03b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2f:4c:cc:c3:71:fd:16:1f:d9:10:c5:85:9c: 69:58:ce:f6:ee:b7:c5:16:0a:01:cd:19:e5:bb:93: 20:25:0a:7b:d0:31:fe:5f:6a:56:0a:75:b9:55:f7: 90:9e:bb:59:9f:44:2d:7c:f1:99:91:8a:df:06:74: 55:1e:09:9c:bb:04:8d:7a:ac:58:c6:8f:42:b1:4b: 69:2f:e9:a9:44:e6:82:4a:ad:06:c3:d4:92:38:14: 6a:d1:73:98:98:fa:97:2f:ee:a2:66:a5:1a:07:aa: 2e:37:cc:c8:ea:d6:20:69:8c:37:56:84:9a:9f:b0: d6:66:31:7f:44:a5:90:1c:2f:fb:61:44:ba:fa:58: df:3b:77:fb:52:ce:a8:dd:f4:88:d0:65:74:7c:a4: a2:d3:6a:39:10:c5:7f:12:7d:88:91:a2:88:95:5a: 1e:1d:5c:3f:15:22:97:4d:36:96:7e:6f:78:a5:05: 55:37:56:8c:14:d6:09:e8:a5:2e:90:8a:00:ad:e6: 38:d2:61:34:a5:ba:1c:54:1a:df:63:9f:90:a0:e5: 3a:da:4e:36:30:b4:1f:ba:49:60:3f:e5:1d:28:13: cb:2b:df:08:72:fa:be:a7:bf:75:23:d4:0b:c2:3d: e0:19:3a:fa:79:05:32:5a:69:9c:3b:86:10:f0:29: 06:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:43:C6:32:0D:B3:31:70:7F:22:4F:DA:B4:E5:46:0B:A9:74:3E:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/699ce2b4-98be-33e7-8110-8051c968024b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:03:e3:c6:84:5f:2e:07:5d:62:c7:ae:87:66:71:5a:98:d0: 1b:cc:e7:1b:6c:90:6b:99:fe:f2:da:b5:51:32:22:98:eb:40: a0:bd:cc:5a:c1:3c:89:0c:c1:11:3d:b5:22:25:c6:98:cf:a1: f2:62:2a:74:c7:75:68:54:56:5f:d0:b8:59:4e:a5:ff:7f:cf: 83:4d:55:03:44:14:cc:06:5c:3f:30:44:c0:f4:03:a8:f4:58: 3d:24:f1:3f:f4:2d:79:81:bc:4b:5d:45:18:c5:1f:9a:16:74: f0:34:d9:3a:f6:09:8d:53:1f:bc:15:b0:d1:12:1b:a7:fa:6d: 41:14:ef:0f:ac:37:c1:1b:e7:71:5d:07:26:93:46:49:87:5c: e3:85:d6:21:d0:fe:d8:4d:df:a5:eb:cf:56:a8:9a:ed:3c:8a: f8:0a:0c:5b:45:60:61:5f:4c:d4:ea:52:b7:e5:7a:d0:12:65: 6c:7e:4e:85:42:e1:f1:5a:4e:de:09:9b:dc:a1:bf:04:8c:02: 60:57:02:b8:a3:b9:b1:7a:76:91:b3:6f:be:1b:1e:9d:bf:4e: dc:ae:c6:45:67:e6:9b:83:a8:1d:4e:77:2a:bf:4b:40:ae:45: e6:0e:69:dc:fe:75:ce:51:cd:9f:ba:7a:a9:2c:ae:21:03:9a: 65:c5:eb:48 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWET81IwXkEjRr57xPEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDIyMzE0MzEwNloXDTI0MDUyMzEzMzEwNlowLzEtMCsGA1UEAxMk YTUyNjhhMWMtOTMyNC00MGEwLWE3ZTctMmNmNzEzOTZhMDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvy9MzMNx/RYf2RDFhZxpWM727rfFFgoBzRnl u5MgJQp70DH+X2pWCnW5VfeQnrtZn0QtfPGZkYrfBnRVHgmcuwSNeqxYxo9CsUtp L+mpROaCSq0Gw9SSOBRq0XOYmPqXL+6iZqUaB6ouN8zI6tYgaYw3VoSan7DWZjF/ RKWQHC/7YUS6+ljfO3f7Us6o3fSI0GV0fKSi02o5EMV/En2IkaKIlVoeHVw/FSKX TTaWfm94pQVVN1aMFNYJ6KUukIoAreY40mE0pbocVBrfY5+QoOU62k42MLQfuklg P+UdKBPLK98Icvq+p791I9QLwj3gGTr6eQUyWmmcO4YQ8CkGYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFClDxjINszFwfyJP2rTlRgupdD59MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNjk5Y2UyYjQtOThiZS0z M2U3LTgxMTAtODA1MWM5NjgwMjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGcD48aEXy4HXWLHrodmcVqY0BvM5xtskGuZ/vLatVEyIpjrQKC9 zFrBPIkMwRE9tSIlxpjPofJiKnTHdWhUVl/QuFlOpf9/z4NNVQNEFMwGXD8wRMD0 A6j0WD0k8T/0LXmBvEtdRRjFH5oWdPA02Tr2CY1TH7wVsNESG6f6bUEU7w+sN8Eb 53FdByaTRkmHXOOF1iHQ/thN36Xrz1aomu08ivgKDFtFYGFfTNTqUrfletASZWx+ ToVC4fFaTt4Jm9yhvwSMAmBXArijubF6dpGzb74bHp2/TtyuxkVn5puDqB1Odyq/ S0CuReYOadz+dc5RzZ+6eqksriEDmmXF60g= -----END CERTIFICATE-----Generated at Tue May 7 02:15:55 2024 by rpki-client on console-ams.rpki-client.org