$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85f9682d-7d53-3d36-93a1-3376b5c05034.roa File: 85f9682d-7d53-3d36-93a1-3376b5c05034.roa (raw, json) Hash identifier: PWdJGkb3aZyKXqzG9MUFFS146XvIno6AK0wDwCx938o= Subject key identifier: 8A:1C:F4:AC:58:D5:CD:31:7F:32:CF:5F:5D:BC:7B:C5:E2:3D:4B:B9 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285847872111D5463E2A0ED1251640 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85f9682d-7d53-3d36-93a1-3376b5c05034.roa Signing time: Sun 13 Oct 2024 13:00:42 +0000 ROA not before: Sun 13 Oct 2024 13:00:42 +0000 ROA not after: Sat 11 Jan 2025 14:00:42 +0000 asID: 15267 IP address blocks: 2001:470:345::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:87:21:11:d5:46:3e:2a:0e:d1:25:16:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 13 13:00:42 2024 GMT Not After : Jan 11 14:00:42 2025 GMT Subject: CN=7a117674-06ed-4dee-bc65-b1a8a9be2de1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f9:5f:bb:44:5b:0e:4b:02:5d:b6:c3:07:4a: c4:d2:4b:ba:83:39:36:16:2e:12:c5:f7:d0:11:16: 87:c5:00:70:07:a0:e4:54:07:e8:4d:d8:a9:f9:b2: af:d9:19:3c:01:0e:73:41:9f:89:35:8b:34:3f:b3: a0:b5:c2:c6:42:f9:ee:07:dd:56:59:56:95:46:4e: 4c:49:c4:0f:b9:e2:77:1d:e6:c9:d7:87:a6:13:b5: ac:c9:6f:9c:ee:4c:b8:cb:d3:c2:04:84:4d:57:95: a5:48:31:12:cf:d6:33:2b:91:a8:df:9a:a1:d5:a6: b1:c7:c0:b3:2e:43:d7:c8:07:39:b0:fe:86:8e:51: cc:49:2b:0c:ec:a0:7a:08:d9:0b:97:e5:c7:62:4b: 68:a8:1b:97:43:8f:1c:21:ad:54:2d:b2:be:76:27: 32:99:65:e2:b1:0d:3b:2a:3c:e6:4e:a9:e4:1e:58: 1e:83:96:53:4a:54:a4:f8:82:10:45:61:75:64:19: b9:7e:21:84:c9:26:29:e1:d5:9d:e9:b4:77:39:84: 82:79:3c:68:30:04:99:a2:dd:ea:56:6d:29:d0:a8: 24:2e:45:4a:59:31:ad:1a:b2:df:48:38:e3:cc:7d: 1b:5f:29:51:50:96:9a:05:4e:fb:2e:bb:5a:d2:55: e8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:1C:F4:AC:58:D5:CD:31:7F:32:CF:5F:5D:BC:7B:C5:E2:3D:4B:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85f9682d-7d53-3d36-93a1-3376b5c05034.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:345::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:30:aa:f6:ee:42:07:0b:65:bf:24:c4:a3:9e:ed:1d:1f:a3: 6f:d5:4e:99:f2:33:2e:f8:5f:4b:d5:da:b9:83:de:4b:e2:12: f7:6d:7b:d8:5f:c9:44:62:34:5f:6d:7c:d6:4e:ca:42:2f:4d: 3b:ee:f7:fa:f4:9f:04:4b:72:41:92:a8:04:5a:ac:c7:18:4d: 10:05:64:22:02:88:9f:99:81:17:98:6a:2c:69:17:97:9b:7d: 97:77:52:7f:ad:c4:a0:7a:6f:81:01:b3:fd:ba:05:9e:bb:ad: 7a:cd:40:29:d2:4c:d1:ab:d1:ab:9e:db:d3:17:e3:f9:a9:c6: ff:9b:f0:63:c9:7c:3c:4f:7f:dc:58:53:ab:5c:a5:59:fa:6f: 1b:80:d9:a4:40:c3:d9:53:1f:37:4a:14:37:93:05:d0:52:77: 64:b0:e2:42:5b:3b:d8:a0:7d:c4:67:71:a0:26:b5:ef:26:f5: 6c:29:2d:9c:f3:3a:95:f8:84:2a:9a:57:da:fc:b1:1f:b7:f2: 6b:d4:30:49:99:34:c6:2b:1c:4a:84:38:da:0e:98:c9:1e:1b: 0d:cc:29:79:15:f8:63:ed:a3:f7:a8:79:19:a4:2f:cb:9d:fc: 7f:0f:a8:44:de:7d:db:22:c6:98:a3:54:c7:a5:3e:97:4a:2b: 52:e3:38:86 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeHIRHVRj4qDtElFkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MTAxMzEzMDA0MloXDTI1MDExMTE0MDA0MlowLzEtMCsGA1UEAxMk N2ExMTc2NzQtMDZlZC00ZGVlLWJjNjUtYjFhOGE5YmUyZGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvlfu0RbDksCXbbDB0rE0ku6gzk2Fi4SxffQ ERaHxQBwB6DkVAfoTdip+bKv2Rk8AQ5zQZ+JNYs0P7OgtcLGQvnuB91WWVaVRk5M ScQPueJ3HebJ14emE7WsyW+c7ky4y9PCBIRNV5WlSDESz9YzK5Go35qh1aaxx8Cz LkPXyAc5sP6GjlHMSSsM7KB6CNkLl+XHYktoqBuXQ48cIa1ULbK+dicymWXisQ07 KjzmTqnkHlgeg5ZTSlSk+IIQRWF1ZBm5fiGEySYp4dWd6bR3OYSCeTxoMASZot3q Vm0p0KgkLkVKWTGtGrLfSDjjzH0bXylRUJaaBU77Lrta0lXonwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIoc9KxY1c0xfzLPX128e8XiPUu5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODVmOTY4MmQtN2Q1My0z ZDM2LTkzYTEtMzM3NmI1YzA1MDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcANF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEkwqvbuQgcLZb8kxKOe7R0fo2/VTpnyMy74X0vV2rmD3kviEvdt e9hfyURiNF9tfNZOykIvTTvu9/r0nwRLckGSqARarMcYTRAFZCICiJ+ZgReYaixp F5ebfZd3Un+txKB6b4EBs/26BZ67rXrNQCnSTNGr0aue29MX4/mpxv+b8GPJfDxP f9xYU6tcpVn6bxuA2aRAw9lTHzdKFDeTBdBSd2Sw4kJbO9igfcRncaAmte8m9Wwp LZzzOpX4hCqaV9r8sR+38mvUMEmZNMYrHEqEONoOmMkeGw3MKXkV+GPto/eoeRmk L8ud/H8PqETefdsixpijVMelPpdKK1LjOIY= -----END CERTIFICATE-----Generated at Fri Nov 22 04:51:28 2024 by rpki-client on console-ams.rpki-client.org