$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/88e2eef6-b4b0-3067-83c5-567346cf4c23.roa File: 88e2eef6-b4b0-3067-83c5-567346cf4c23.roa (raw, json) Hash identifier: S59yznEj97NsUs/6h7wQPYlp+J1HUa4NyeTMyL+A9gs= Subject key identifier: 81:F5:8D:28:A5:52:D0:82:CB:31:6D:5B:CA:47:12:8B:6D:78:38:84 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584819D021FDE51BC9F599AB8FB8 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/88e2eef6-b4b0-3067-83c5-567346cf4c23.roa Signing time: Thu 05 Dec 2024 02:00:39 +0000 ROA not before: Thu 05 Dec 2024 02:00:39 +0000 ROA not after: Wed 05 Mar 2025 02:00:39 +0000 asID: 399486 IP address blocks: 2001:470:311::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:19:d0:21:fd:e5:1b:c9:f5:99:ab:8f:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Dec 5 02:00:39 2024 GMT Not After : Mar 5 02:00:39 2025 GMT Subject: CN=9282a99b-7f74-4aff-ba69-7118c07f58a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f2:4b:12:e0:d7:d2:81:6b:8d:84:da:d2:f1: 9b:2a:3d:6c:06:69:c3:a7:98:f3:01:e8:9a:9e:f2: 0e:14:64:23:2d:e7:2d:e0:50:72:2c:18:73:20:dc: 14:fe:c8:80:56:82:e1:64:30:40:0f:a3:94:99:30: 61:05:d9:ec:fb:f2:3e:e3:d2:7d:2f:15:99:73:81: a6:d0:c2:e2:98:f6:3d:ee:18:44:75:36:80:3e:75: 3f:85:7c:fd:36:54:ea:96:c0:94:8a:1f:0f:72:1f: 4e:9c:bf:d0:4f:11:ae:a4:bd:51:27:37:d8:fe:41: 39:21:c3:17:40:0e:de:ae:19:c8:b7:ed:5c:4a:02: 59:bd:96:16:51:8b:37:32:b0:f6:ac:d4:b1:8b:86: 35:2c:e5:94:09:86:8a:a9:38:92:82:15:a2:df:ef: ba:42:fe:88:af:82:96:b9:51:2f:56:e6:db:33:66: e9:f1:33:1f:4e:c6:6e:f9:af:66:43:a2:28:db:52: b7:47:1a:d0:90:3e:de:c6:a6:a3:8e:bc:d0:40:71: 21:65:45:6b:2e:87:d3:5a:4d:3a:6e:bf:09:9a:cb: 54:6b:58:9d:3a:31:cf:28:98:c1:29:44:2f:e0:d1: b1:e0:e0:72:37:da:c7:ab:38:d9:2d:da:e9:b8:40: 0a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:F5:8D:28:A5:52:D0:82:CB:31:6D:5B:CA:47:12:8B:6D:78:38:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/88e2eef6-b4b0-3067-83c5-567346cf4c23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:311::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:c8:ff:f1:ed:49:29:3f:40:06:f8:ac:02:a6:5e:ee:f7:28: 8c:35:4f:4c:2c:ac:50:eb:62:e6:c7:43:6b:db:41:1c:f9:19: 99:1c:9a:e6:cb:42:38:02:49:b7:44:a6:af:77:67:58:66:14: 71:25:38:08:6a:46:03:c1:c3:5e:4f:3b:35:b4:7d:57:16:11: 9a:95:8a:19:3d:d0:a8:f9:19:bd:52:37:3f:9f:db:0e:bf:20: e5:d9:04:85:1f:cb:90:e4:e3:58:b5:35:38:d2:d6:a0:d2:55: 4a:7d:96:ce:ef:9e:6a:2d:4d:1f:9f:fb:e6:3a:de:d4:9b:ef: e5:35:fb:d2:84:24:47:ed:b8:d8:ef:64:6b:77:dc:76:ea:d7: 96:c6:d3:66:d1:80:23:f4:7b:e8:26:df:a1:46:ff:16:17:e9: f8:dc:21:30:ff:5f:cf:d0:99:ff:85:24:8d:9c:a3:12:b5:30: f2:59:d8:e0:6c:28:8f:7f:e0:f1:89:c5:0d:01:11:8e:ea:eb: 51:15:9a:73:af:b3:19:8a:e2:ae:9b:67:86:b8:a4:91:cf:ef: 0f:2e:59:87:74:a8:6c:58:e1:dd:5e:61:f2:da:08:b5:07:a5: 9b:dd:6e:90:31:6b:44:fc:27:9c:28:b3:a0:39:43:87:09:06: 14:54:2c:8a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgZ0CH95RvJ9Zmrj7gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk OTI4MmE5OWItN2Y3NC00YWZmLWJhNjktNzExOGMwN2Y1OGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fJLEuDX0oFrjYTa0vGbKj1sBmnDp5jzAeia nvIOFGQjLect4FByLBhzINwU/siAVoLhZDBAD6OUmTBhBdns+/I+49J9LxWZc4Gm 0MLimPY97hhEdTaAPnU/hXz9NlTqlsCUih8Pch9OnL/QTxGupL1RJzfY/kE5IcMX QA7erhnIt+1cSgJZvZYWUYs3MrD2rNSxi4Y1LOWUCYaKqTiSghWi3++6Qv6Ir4KW uVEvVubbM2bp8TMfTsZu+a9mQ6Io21K3RxrQkD7exqajjrzQQHEhZUVrLofTWk06 br8JmstUa1idOjHPKJjBKUQv4NGx4OByN9rHqzjZLdrpuEAKHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIH1jSilUtCCyzFtW8pHEotteDiEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODhlMmVlZjYtYjRiMC0z MDY3LTgzYzUtNTY3MzQ2Y2Y0YzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAMR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADTI//HtSSk/QAb4rAKmXu73KIw1T0wsrFDrYubHQ2vbQRz5GZkc mubLQjgCSbdEpq93Z1hmFHElOAhqRgPBw15POzW0fVcWEZqVihk90Kj5Gb1SNz+f 2w6/IOXZBIUfy5Dk41i1NTjS1qDSVUp9ls7vnmotTR+f++Y63tSb7+U1+9KEJEft uNjvZGt33Hbq15bG02bRgCP0e+gm36FG/xYX6fjcITD/X8/Qmf+FJI2coxK1MPJZ 2OBsKI9/4PGJxQ0BEY7q61EVmnOvsxmK4q6bZ4a4pJHP7w8uWYd0qGxY4d1eYfLa CLUHpZvdbpAxa0T8J5wos6A5Q4cJBhRULIo= -----END CERTIFICATE-----Generated at Mon Feb 17 04:42:04 2025 by rpki-client