$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/88e9050b-f8e0-301d-a1f6-ba5e2ab02ea1.roa File: 88e9050b-f8e0-301d-a1f6-ba5e2ab02ea1.roa (raw, json) Hash identifier: LS32y0IDg6PPi7jEwRLxFF/3EBZyGWpoDGA5/A+8fmI= Subject key identifier: 51:31:C1:C9:AF:E3:76:3B:C2:9B:13:10:C7:83:19:55:9C:5E:CC:FC Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858455D0734320DC7751D48860070 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/88e9050b-f8e0-301d-a1f6-ba5e2ab02ea1.roa Signing time: Fri 29 Mar 2024 01:30:46 +0000 ROA not before: Fri 29 Mar 2024 01:30:46 +0000 ROA not after: Thu 27 Jun 2024 01:30:46 +0000 asID: 27425 IP address blocks: 2001:470:2d0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:5d:07:34:32:0d:c7:75:1d:48:86:00:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 29 01:30:46 2024 GMT Not After : Jun 27 01:30:46 2024 GMT Subject: CN=3b6b3a0a-8e52-4ae1-a3d4-f2f455a0a4d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:32:ae:a6:2d:7e:70:c1:2c:24:ab:26:b7:bc: b6:e5:05:a7:5d:92:3d:ee:83:76:bc:d1:13:3c:30: cd:f6:04:dd:f7:cb:e5:1b:f5:9e:3f:2d:d9:a3:5e: 42:ff:11:9b:40:39:9e:e2:4f:a1:4f:5f:33:3c:78: bb:50:0f:5b:d9:20:e9:63:04:33:41:02:3d:fd:36: 5e:e0:80:07:a2:50:40:58:7f:9a:16:c6:61:44:f7: 42:80:ce:8d:41:14:a5:96:9e:d8:eb:55:32:43:00: c0:83:04:ca:c8:42:85:6d:b7:b4:5e:7b:0a:ac:52: 7e:9f:01:67:7f:94:43:ba:3f:b5:98:f6:da:fa:b0: 95:1a:0b:15:06:96:cd:c6:2e:68:af:9c:5d:26:52: b7:f6:25:70:2a:ab:ca:25:41:ad:51:83:a9:04:45: 46:f8:c2:c6:a9:ca:71:38:b9:cd:a0:2d:7c:b7:2e: fd:51:1a:23:58:50:4f:0e:0b:a0:94:a4:8d:0c:5f: 71:40:70:97:7b:c7:b2:b2:fb:6e:9f:80:3e:98:ed: 4c:d3:78:49:09:99:dc:01:23:bc:14:45:cb:a3:7a: 70:cf:a2:f3:af:1f:90:2d:88:34:46:96:94:42:a9: 2b:50:49:29:55:49:a4:d5:c1:d7:14:3a:16:4d:f8: d5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:31:C1:C9:AF:E3:76:3B:C2:9B:13:10:C7:83:19:55:9C:5E:CC:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/88e9050b-f8e0-301d-a1f6-ba5e2ab02ea1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2d0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:19:fe:76:49:8b:f5:86:b7:eb:e8:ea:ad:7d:6f:1c:ef:e1: 1a:22:6b:65:8b:ec:40:be:8f:f3:8a:7e:88:af:85:9c:58:31: a7:4c:16:83:76:7c:d6:08:5d:b6:75:78:94:e8:02:b3:84:7b: 4e:5a:9b:87:98:c2:1e:77:04:2c:92:86:21:0f:2b:ff:77:e2: 0b:27:65:bc:fa:cd:41:24:76:89:9b:50:11:d5:e6:a0:a9:70: 31:a6:bc:d5:9e:54:18:c2:11:a1:7c:54:e0:8d:66:41:1f:02: 8c:9d:6e:6f:56:c3:33:d5:9a:0a:6f:38:21:5d:14:9a:fc:34: b4:e9:25:38:9e:da:2d:74:76:a7:3f:c1:0b:dc:5c:64:cf:b4: 7e:0a:ec:f5:06:6a:ae:3c:5e:55:7b:03:80:04:97:33:39:e4: 8b:55:1a:a7:55:68:29:c3:d7:55:59:85:7b:eb:4b:bf:25:25: 94:74:99:f2:0d:a2:2c:2f:89:cb:7f:d3:9c:33:2f:c6:cf:3c: ae:b9:5d:ca:55:10:a6:4b:e3:bf:65:71:22:e9:39:c6:43:84: ea:ec:8a:ab:c7:1a:46:a2:dd:0c:14:07:c9:29:e8:fe:a3:2b: 3b:76:59:b8:d7:82:31:14:d2:00:be:4d:34:d1:9a:66:d3:d0: 93:44:af:52 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVdBzQyDcd1HUiGAHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDMyOTAxMzA0NloXDTI0MDYyNzAxMzA0NlowLzEtMCsGA1UEAxMk M2I2YjNhMGEtOGU1Mi00YWUxLWEzZDQtZjJmNDU1YTBhNGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDKupi1+cMEsJKsmt7y25QWnXZI97oN2vNET PDDN9gTd98vlG/WePy3Zo15C/xGbQDme4k+hT18zPHi7UA9b2SDpYwQzQQI9/TZe 4IAHolBAWH+aFsZhRPdCgM6NQRSllp7Y61UyQwDAgwTKyEKFbbe0XnsKrFJ+nwFn f5RDuj+1mPba+rCVGgsVBpbNxi5or5xdJlK39iVwKqvKJUGtUYOpBEVG+MLGqcpx OLnNoC18ty79URojWFBPDguglKSNDF9xQHCXe8eysvtun4A+mO1M03hJCZncASO8 FEXLo3pwz6Lzrx+QLYg0RpaUQqkrUEkpVUmk1cHXFDoWTfjVlwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFExwcmv43Y7wpsTEMeDGVWcXsz8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODhlOTA1MGItZjhlMC0z MDFkLWExZjYtYmE1ZTJhYjAyZWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKsZ/nZJi/WGt+vo6q19bxzv4Roia2WL7EC+j/OKfoivhZxYMadM FoN2fNYIXbZ1eJToArOEe05am4eYwh53BCyShiEPK/934gsnZbz6zUEkdombUBHV 5qCpcDGmvNWeVBjCEaF8VOCNZkEfAoydbm9WwzPVmgpvOCFdFJr8NLTpJTie2i10 dqc/wQvcXGTPtH4K7PUGaq48XlV7A4AElzM55ItVGqdVaCnD11VZhXvrS78lJZR0 mfINoiwvict/05wzL8bPPK65XcpVEKZL479lcSLpOcZDhOrsiqvHGkai3QwUB8kp 6P6jKzt2WbjXgjEU0gC+TTTRmmbT0JNEr1I= -----END CERTIFICATE-----Generated at Mon May 6 03:09:28 2024 by rpki-client on console-fra.rpki-client.org