$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/91106a25-869d-30ce-8510-ef3ce1779d09.roa File: 91106a25-869d-30ce-8510-ef3ce1779d09.roa (raw, json) Hash identifier: awUKTJRrfRR5aAssVv5p8htVkBjzc6BFIK6bfLxgUZg= Subject key identifier: 47:A0:25:D8:27:8A:B4:1D:31:E4:12:D0:B6:C9:AC:22:EE:93:6C:E0 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584770CB99B130A842DFA8C3B960 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/91106a25-869d-30ce-8510-ef3ce1779d09.roa Signing time: Sat 05 Oct 2024 13:00:42 +0000 ROA not before: Sat 05 Oct 2024 13:00:42 +0000 ROA not after: Fri 03 Jan 2025 14:00:42 +0000 asID: 22332 IP address blocks: 2001:470:33a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:70:cb:99:b1:30:a8:42:df:a8:c3:b9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 5 13:00:42 2024 GMT Not After : Jan 3 14:00:42 2025 GMT Subject: CN=2ed8e4f6-fd9f-4cae-ba11-cbe854ca1ce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:36:02:3b:fc:a7:c6:cd:80:0a:37:e7:d0:d1: c5:59:bf:d2:7a:e6:b5:92:3c:84:7e:54:1b:50:c6: da:bd:ba:06:86:c1:57:88:f9:ae:93:a2:f3:c2:4f: 64:75:3d:b8:4f:8d:bd:a3:88:1d:be:37:fc:cd:f9: 24:38:e9:60:b9:49:ec:40:75:dc:05:10:ad:83:63: fa:24:e4:dc:9a:b2:66:d3:59:57:2c:64:d1:a0:c2: 13:d7:4f:60:99:30:e2:21:ca:6c:5e:e0:a0:01:64: c9:f6:4e:4e:2d:fb:20:7e:5a:7e:8a:4b:15:c6:f9: fd:b9:c8:e3:e5:cb:f8:42:f2:61:c2:a7:d2:23:49: 70:b0:25:01:93:74:08:e4:9c:da:65:01:9e:88:d7: 80:20:71:06:c3:c7:cc:ce:9d:35:4b:26:56:7d:69: 32:d7:08:32:3f:5c:b4:b5:4f:b0:4a:8e:55:b1:c1: 82:d7:75:9a:b7:0b:e1:bd:37:08:20:1f:93:81:b9: 39:8f:4b:95:36:f9:e1:2c:f4:dd:d0:cc:ef:2d:22: 14:94:85:87:55:0d:8c:a7:49:f7:39:f5:62:e9:d4: ae:cd:30:fc:83:74:53:b3:c3:a8:57:7e:5a:60:45: c3:8f:8a:4c:e9:4f:bf:b9:88:88:e6:df:49:5c:43: 03:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A0:25:D8:27:8A:B4:1D:31:E4:12:D0:B6:C9:AC:22:EE:93:6C:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/91106a25-869d-30ce-8510-ef3ce1779d09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:33a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:bb:ef:47:f1:c7:ce:c0:57:ad:26:bd:69:a3:e0:36:9e:7a: e5:96:d6:32:19:fd:73:d4:84:c4:5d:85:32:bd:11:8e:99:44: b6:b4:67:d8:c3:c2:f6:f6:20:5f:03:0d:2a:5d:20:ed:a8:b4: f8:a0:a6:4f:8a:de:35:15:08:41:dc:7a:c7:b5:1d:0c:52:49: b8:17:7c:b9:f4:a5:58:3c:16:70:9b:27:e3:56:b0:47:79:74: aa:de:87:34:8e:29:17:be:0b:83:e2:02:4c:5e:04:37:43:f6: 43:c2:cb:de:c3:3e:a7:2e:86:cf:81:09:85:13:8a:b0:4b:94: 53:20:94:3b:51:c7:e0:fa:c6:75:44:1f:0d:10:98:58:93:80: bc:df:12:88:5c:7b:3a:33:43:d9:26:ed:79:e5:18:3d:58:4d: 4f:89:d1:09:bc:16:5b:ee:f9:e6:76:f2:12:fd:ab:22:c0:72: 75:b6:2f:eb:d0:66:7c:be:06:80:b3:91:56:82:51:d9:8a:11: 9d:24:01:de:93:f6:6f:f8:79:5f:08:2f:23:2d:28:b1:c8:64: 76:40:b5:61:f4:d9:cf:ee:33:cb:59:82:79:4f:08:65:7f:58: c4:59:4f:d4:fe:da:bb:26:35:4f:69:26:01:0f:56:51:82:bb: 93:8a:9e:9a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdwy5mxMKhC36jDuWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MTAwNTEzMDA0MloXDTI1MDEwMzE0MDA0MlowLzEtMCsGA1UEAxMk MmVkOGU0ZjYtZmQ5Zi00Y2FlLWJhMTEtY2JlODU0Y2ExY2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTYCO/ynxs2ACjfn0NHFWb/Seua1kjyEflQb UMbavboGhsFXiPmuk6Lzwk9kdT24T429o4gdvjf8zfkkOOlguUnsQHXcBRCtg2P6 JOTcmrJm01lXLGTRoMIT109gmTDiIcpsXuCgAWTJ9k5OLfsgflp+iksVxvn9ucjj 5cv4QvJhwqfSI0lwsCUBk3QI5JzaZQGeiNeAIHEGw8fMzp01SyZWfWky1wgyP1y0 tU+wSo5VscGC13WatwvhvTcIIB+Tgbk5j0uVNvnhLPTd0MzvLSIUlIWHVQ2Mp0n3 OfVi6dSuzTD8g3RTs8OoV35aYEXDj4pM6U+/uYiI5t9JXEMDDQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEegJdgnirQdMeQS0LbJrCLuk2zgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTExMDZhMjUtODY5ZC0z MGNlLTg1MTAtZWYzY2UxNzc5ZDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAM6 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFm770fxx87AV60mvWmj4DaeeuWW1jIZ/XPUhMRdhTK9EY6ZRLa0 Z9jDwvb2IF8DDSpdIO2otPigpk+K3jUVCEHcese1HQxSSbgXfLn0pVg8FnCbJ+NW sEd5dKrehzSOKRe+C4PiAkxeBDdD9kPCy97DPqcuhs+BCYUTirBLlFMglDtRx+D6 xnVEHw0QmFiTgLzfEohcezozQ9km7XnlGD1YTU+J0Qm8Flvu+eZ28hL9qyLAcnW2 L+vQZny+BoCzkVaCUdmKEZ0kAd6T9m/4eV8ILyMtKLHIZHZAtWH02c/uM8tZgnlP CGV/WMRZT9T+2rsmNU9pJgEPVlGCu5OKnpo= -----END CERTIFICATE-----Generated at Fri Nov 22 04:51:29 2024 by rpki-client on console-ams.rpki-client.org