$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/74f65fdf-041e-3074-b213-4f517aa312e4.roa File: 74f65fdf-041e-3074-b213-4f517aa312e4.roa (raw, json) Hash identifier: qcXzf/P/7dsiQZVGhjIHeceXo3IVI4ddOo6YLoPNT6Y= Subject key identifier: CC:84:5C:C3:25:6F:6A:47:3E:E9:0F:23:86:80:56:4D:68:68:4E:7A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285845025AC751AFFED5D333EFD680 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/74f65fdf-041e-3074-b213-4f517aa312e4.roa Signing time: Sun 25 Feb 2024 14:00:34 +0000 ROA not before: Sun 25 Feb 2024 14:00:34 +0000 ROA not after: Sat 25 May 2024 13:00:34 +0000 asID: 35688 IP address blocks: 2001:470:23d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:02:5a:c7:51:af:fe:d5:d3:33:ef:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 25 14:00:34 2024 GMT Not After : May 25 13:00:34 2024 GMT Subject: CN=b87d9700-49ff-4c03-b347-89d06f01c92d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:97:c6:fa:d5:1a:49:95:97:8a:08:19:e1:dd: 48:b1:a7:ac:3f:ff:42:23:15:69:f5:3c:53:3e:95: 53:36:93:c6:5c:79:61:28:34:ad:35:da:d3:7c:f5: b7:51:fe:d8:cc:4a:e0:7d:7d:d8:da:e0:2d:6f:c6: 07:24:b6:6d:22:d4:03:77:c3:4b:0c:b3:24:db:e9: 09:0b:92:58:62:4e:f3:c9:67:d4:a0:9d:70:6d:09: 29:33:9b:4c:a5:63:ce:b6:40:6a:08:1c:16:8c:9d: 04:d4:6d:5a:16:b6:99:de:45:54:95:32:98:6d:c1: a4:14:c8:ac:77:ef:ad:57:db:c7:73:01:80:5d:ef: de:6e:a5:16:41:17:64:96:5e:81:87:5a:92:f2:e3: 06:ef:0b:95:12:cd:d3:f1:d6:5f:e9:6d:c3:c2:00: 93:3b:a6:6e:82:6a:ea:fa:54:35:11:6e:36:f4:11: 49:e6:32:37:7c:ef:24:09:85:c7:31:62:f3:d3:cb: fe:ef:04:d4:81:cd:52:ed:2a:f3:9a:8d:27:f6:44: 4d:57:14:4a:5f:a0:25:bf:dd:d8:98:0c:4c:68:71: 0f:07:4d:fa:c9:6d:1b:df:60:9b:01:38:44:a4:16: 81:f6:aa:23:55:c3:fd:6b:07:97:6d:b3:90:f0:b2: 8e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:84:5C:C3:25:6F:6A:47:3E:E9:0F:23:86:80:56:4D:68:68:4E:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/74f65fdf-041e-3074-b213-4f517aa312e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:23d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:6d:c2:82:92:33:1c:fc:cf:f4:2d:55:c3:47:46:1e:ca:ce: 88:26:dd:1a:bf:ef:1d:f0:e4:d1:f4:75:a1:fd:46:39:f7:09: 41:3d:25:f2:55:2b:33:2c:b4:8a:b3:90:0f:b4:df:e4:f9:f3: 96:68:d5:74:41:8b:bd:cb:cf:d2:04:5f:71:f5:85:99:6e:03: 3a:a9:d8:12:b6:64:07:51:6d:c9:52:a2:28:55:cf:93:0e:ea: ca:cd:2d:e9:2f:b6:5b:3a:db:91:68:ed:0b:34:aa:d9:fa:00: b9:0f:1d:0d:c7:04:99:3c:1c:8d:04:2c:a0:2d:6c:9c:88:8d: 76:c5:5d:e4:db:75:d4:c7:2a:4a:40:d0:84:a2:a5:14:39:2e: f9:86:bf:76:b6:2b:66:0f:23:9f:30:0b:51:77:c5:26:13:c6: ae:ba:ab:07:2b:d7:ab:65:9c:e1:0a:81:a3:7d:e2:67:81:df: f4:37:d6:67:83:5c:7c:88:0b:27:8c:3b:f7:f6:c8:ae:0a:eb: 77:b1:46:e3:f7:7e:ab:ba:1b:4b:58:93:43:93:87:bd:2d:32: 45:a8:5b:5b:f6:a2:ba:79:49:9a:0e:41:c2:01:08:94:8a:ca: 6f:6c:88:f4:64:e5:23:ac:a0:e4:e5:58:07:16:56:4f:a6:dd: c5:02:47:34 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUCWsdRr/7V0zPv1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDIyNTE0MDAzNFoXDTI0MDUyNTEzMDAzNFowLzEtMCsGA1UEAxMk Yjg3ZDk3MDAtNDlmZi00YzAzLWIzNDctODlkMDZmMDFjOTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZfG+tUaSZWXiggZ4d1IsaesP/9CIxVp9TxT PpVTNpPGXHlhKDStNdrTfPW3Uf7YzErgfX3Y2uAtb8YHJLZtItQDd8NLDLMk2+kJ C5JYYk7zyWfUoJ1wbQkpM5tMpWPOtkBqCBwWjJ0E1G1aFraZ3kVUlTKYbcGkFMis d++tV9vHcwGAXe/ebqUWQRdkll6Bh1qS8uMG7wuVEs3T8dZf6W3DwgCTO6Zugmrq +lQ1EW429BFJ5jI3fO8kCYXHMWLz08v+7wTUgc1S7Srzmo0n9kRNVxRKX6Alv93Y mAxMaHEPB036yW0b32CbAThEpBaB9qojVcP9aweXbbOQ8LKO8QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMyEXMMlb2pHPukPI4aAVk1oaE56MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNzRmNjVmZGYtMDQxZS0z MDc0LWIyMTMtNGY1MTdhYTMxMmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHVtwoKSMxz8z/QtVcNHRh7Kzogm3Rq/7x3w5NH0daH9Rjn3CUE9 JfJVKzMstIqzkA+03+T585Zo1XRBi73Lz9IEX3H1hZluAzqp2BK2ZAdRbclSoihV z5MO6srNLekvtls625Fo7Qs0qtn6ALkPHQ3HBJk8HI0ELKAtbJyIjXbFXeTbddTH KkpA0ISipRQ5LvmGv3a2K2YPI58wC1F3xSYTxq66qwcr16tlnOEKgaN94meB3/Q3 1meDXHyICyeMO/f2yK4K63exRuP3fqu6G0tYk0OTh70tMkWoW1v2orp5SZoOQcIB CJSKym9siPRk5SOsoOTlWAcWVk+m3cUCRzQ= -----END CERTIFICATE-----Generated at Mon May 6 20:30:31 2024 by rpki-client on console-ams.rpki-client.org