$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8e6b500b-d1d9-33eb-9afe-32f2bf6a2ee7.roa File: 8e6b500b-d1d9-33eb-9afe-32f2bf6a2ee7.roa (raw, json) Hash identifier: FR6gJaf8vOthn1Zgo5UyRe4DsyGWPdDG4JLWx5aA4lM= Subject key identifier: A9:09:32:BD:1E:0F:16:7E:31:C1:2C:FD:57:C0:85:35:59:E1:DD:80 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858478721113A41132108A2314280 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8e6b500b-d1d9-33eb-9afe-32f2bf6a2ee7.roa Signing time: Sun 13 Oct 2024 13:00:42 +0000 ROA not before: Sun 13 Oct 2024 13:00:42 +0000 ROA not after: Sat 11 Jan 2025 14:00:42 +0000 asID: 14371 IP address blocks: 2001:470:345::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:87:21:11:3a:41:13:21:08:a2:31:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 13 13:00:42 2024 GMT Not After : Jan 11 14:00:42 2025 GMT Subject: CN=be5afa7b-c822-454f-9e33-967a32e96380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3b:61:31:30:ad:5c:8b:76:d1:3a:d0:df:d5: 71:dd:11:db:2c:36:fd:a5:20:0b:a7:32:3b:64:84: 20:77:f8:73:6e:2e:da:b4:86:32:33:cf:07:a5:cf: 30:df:5e:7b:d2:39:d2:34:79:2b:55:c1:75:22:b6: 5f:75:6f:f5:1c:e3:da:67:f8:e8:53:f4:d6:6e:3f: 51:59:81:05:47:d0:ba:eb:23:1f:8b:fd:dd:77:8b: dd:d5:7d:ba:05:23:04:b9:f1:bd:c0:82:ab:ff:95: 30:ba:cf:f5:68:fd:cd:df:6b:50:9f:9d:37:19:e9: d1:2f:94:d3:1b:3c:04:9e:10:de:39:67:2a:d9:df: eb:1f:4b:e5:0e:76:8a:f8:c8:0e:bd:12:a1:66:b7: 46:0d:32:4d:74:a1:c3:6b:ab:92:bf:4b:aa:26:26: e6:e8:d1:85:f7:1d:ba:6a:f5:2b:7d:de:83:2e:bd: c9:18:12:99:f7:8f:3d:67:5e:5a:1d:b8:15:da:c3: f1:7b:69:8d:3b:bd:bc:8b:4b:0b:b6:5f:84:44:cc: b6:0e:e3:2b:a3:5e:7a:35:c4:9a:17:2d:d9:37:7a: b0:bb:bd:28:a9:37:8a:04:e8:d4:54:08:02:ab:09: 67:2f:4e:83:37:01:e7:91:37:d3:54:24:d6:22:3d: ef:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:09:32:BD:1E:0F:16:7E:31:C1:2C:FD:57:C0:85:35:59:E1:DD:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8e6b500b-d1d9-33eb-9afe-32f2bf6a2ee7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:345::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:2e:df:a8:15:c1:d8:17:d6:45:4a:71:b9:c5:25:ca:23:66: 12:33:b4:32:73:a9:6d:45:43:6c:83:ff:bf:84:c6:a9:c1:e4: 3f:c4:a8:99:21:06:36:b0:34:a4:2f:28:55:1c:2b:fe:f1:5b: 14:d3:39:5d:07:36:ab:05:b0:00:ac:5d:22:d4:cb:46:d9:df: de:19:4e:3f:f0:31:6a:d8:c8:9f:18:48:3d:5d:70:d4:02:f5: 77:99:98:d8:eb:9e:3c:7b:6f:e6:44:5e:c7:ec:a0:f2:7c:60: 1f:78:c4:11:4d:2b:24:5b:55:20:96:0c:9a:4a:9b:eb:1e:82: 3d:24:ef:d9:17:5e:82:50:4d:c7:94:4f:bc:8a:50:48:98:ab: b5:91:9c:f1:a3:57:fe:6a:1b:66:ed:c1:78:b4:1b:b2:93:72: a4:c9:e0:76:5b:bc:37:16:27:36:b1:37:bf:3b:44:61:7f:5f: b8:b5:b9:94:14:d1:1e:52:32:0b:31:d0:3d:60:bd:20:0e:d4: d6:f9:11:72:fb:66:39:6b:68:55:dc:5d:4b:71:e6:84:2e:29: be:32:2c:06:1c:4e:e5:9f:c3:dd:bb:26:18:9a:44:64:b4:99: ba:bf:9c:bb:ca:e0:8a:01:ed:02:f6:02:5d:5e:31:55:f0:82: f8:f9:56:5a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeHIRE6QRMhCKIxQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MTAxMzEzMDA0MloXDTI1MDExMTE0MDA0MlowLzEtMCsGA1UEAxMk YmU1YWZhN2ItYzgyMi00NTRmLTllMzMtOTY3YTMyZTk2MzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDthMTCtXIt20TrQ39Vx3RHbLDb9pSALpzI7 ZIQgd/hzbi7atIYyM88Hpc8w31570jnSNHkrVcF1IrZfdW/1HOPaZ/joU/TWbj9R WYEFR9C66yMfi/3dd4vd1X26BSMEufG9wIKr/5Uwus/1aP3N32tQn503GenRL5TT GzwEnhDeOWcq2d/rH0vlDnaK+MgOvRKhZrdGDTJNdKHDa6uSv0uqJibm6NGF9x26 avUrfd6DLr3JGBKZ9489Z15aHbgV2sPxe2mNO728i0sLtl+ERMy2DuMro156NcSa Fy3ZN3qwu70oqTeKBOjUVAgCqwlnL06DNwHnkTfTVCTWIj3vXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKkJMr0eDxZ+McEs/VfAhTVZ4d2AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOGU2YjUwMGItZDFkOS0z M2ViLTlhZmUtMzJmMmJmNmEyZWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcANF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMAu36gVwdgX1kVKcbnFJcojZhIztDJzqW1FQ2yD/7+ExqnB5D/E qJkhBjawNKQvKFUcK/7xWxTTOV0HNqsFsACsXSLUy0bZ394ZTj/wMWrYyJ8YSD1d cNQC9XeZmNjrnjx7b+ZEXsfsoPJ8YB94xBFNKyRbVSCWDJpKm+segj0k79kXXoJQ TceUT7yKUEiYq7WRnPGjV/5qG2btwXi0G7KTcqTJ4HZbvDcWJzaxN787RGF/X7i1 uZQU0R5SMgsx0D1gvSAO1Nb5EXL7ZjlraFXcXUtx5oQuKb4yLAYcTuWfw927Jhia RGS0mbq/nLvK4IoB7QL2Al1eMVXwgvj5Vlo= -----END CERTIFICATE-----Generated at Fri Nov 22 04:32:37 2024 by rpki-client on console-fra.rpki-client.org