$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9fa0844b-48b6-30fd-9f08-038d6f766260.roa File: 9fa0844b-48b6-30fd-9f08-038d6f766260.roa (raw, json) Hash identifier: zyIvHL0CJbrlA2xcVcGnymNDM0q3s9f5iPtGjXDPMMM= Subject key identifier: 99:B9:C8:81:96:EC:D8:85:48:85:2E:D4:A6:38:3A:D9:5F:1E:A5:8F Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858459E9369C62104B9F204D43880 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9fa0844b-48b6-30fd-9f08-038d6f766260.roa Signing time: Sun 21 Apr 2024 13:00:35 +0000 ROA not before: Sun 21 Apr 2024 13:00:35 +0000 ROA not after: Sat 20 Jul 2024 13:00:35 +0000 asID: 53721 IP address blocks: 2001:470:198::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:9e:93:69:c6:21:04:b9:f2:04:d4:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 21 13:00:35 2024 GMT Not After : Jul 20 13:00:35 2024 GMT Subject: CN=96d8b4fd-3512-402d-9a2d-49dcffd4d9f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2e:db:5a:71:e5:06:ec:24:53:d8:f8:84:67: 7a:5a:b4:dc:b0:74:f4:a5:dc:92:72:45:5c:1b:fb: dc:d8:b0:1a:91:73:05:2b:82:26:ad:85:02:12:82: 73:7d:3e:e2:c1:8e:1c:c4:cf:14:22:b9:b4:74:64: a0:da:fd:2e:a4:67:6a:48:82:00:7c:b4:31:d3:e3: d0:4f:63:51:99:54:6b:b6:38:ca:c3:4c:04:ec:d8: 77:f8:fa:76:22:ba:95:e9:ad:c6:1b:a6:68:9d:2e: a9:cc:d9:f6:fb:4d:2d:d6:08:af:d5:7a:cf:bf:ef: eb:68:52:c1:7b:d3:ed:3e:5d:88:3c:bc:58:f6:83: 07:ce:26:b0:8e:b1:b9:6f:96:fa:50:74:46:56:da: 93:cd:7f:46:ba:89:d5:bd:14:04:ff:f1:c5:63:a3: 0f:cb:39:97:2c:15:35:0f:af:83:d1:43:d1:9e:52: a6:e8:39:c1:87:f6:17:12:3c:6f:ac:18:36:f1:bf: b5:86:39:e2:22:20:5d:5c:40:35:b1:90:2b:6b:78: 6c:86:15:09:e5:7b:70:77:3c:62:44:d6:5d:7f:13: bc:36:4f:4e:98:83:5e:70:96:c5:30:8e:cf:40:ad: 19:6c:8d:e9:af:11:13:d4:0b:85:76:ed:c6:c7:ed: fa:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B9:C8:81:96:EC:D8:85:48:85:2E:D4:A6:38:3A:D9:5F:1E:A5:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9fa0844b-48b6-30fd-9f08-038d6f766260.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:198::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:56:db:38:9e:de:8c:c8:e4:ca:46:2f:cc:85:d3:19:9e:e5: 76:1d:e5:57:e9:64:92:32:d3:07:ba:25:75:64:d8:94:af:86: 55:18:37:83:ae:dc:39:88:c7:9b:f5:82:e1:bb:ce:88:71:79: e7:d3:a9:ba:f4:c7:0a:f4:d1:f5:fb:a3:d7:85:60:3e:a8:67: 2e:76:e4:56:a9:7b:1a:a6:15:d4:b4:73:01:93:74:e6:10:1d: 25:b9:8a:f3:9e:cb:ee:61:c3:e0:c1:73:a5:30:a6:cc:ef:00: 7f:bc:f4:ed:c3:b0:55:80:87:4f:b6:51:99:8d:4b:20:f8:a4: 22:41:9f:31:e1:e8:1b:00:2e:99:c2:f6:9d:d1:f3:e3:2d:da: 89:46:90:15:f9:7b:9e:4f:e5:71:ef:c1:93:03:37:23:c0:cd: d2:14:fe:ba:7c:82:87:99:a3:09:71:e6:67:ad:11:0a:b6:6a: f4:25:00:77:0b:fd:1b:88:55:84:e3:02:8a:37:4d:9a:8e:26: 0c:73:48:b9:c5:9e:bb:a1:2a:51:cc:f6:fc:ab:ae:04:95:ca: 00:d9:3a:17:05:c0:15:d7:ac:4e:4a:58:b3:04:19:bf:1c:a6: c5:dd:d9:99:51:2f:ba:16:65:6c:21:51:7b:2e:cd:bf:ad:16: 80:a3:e7:14 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEWek2nGIQS58gTUOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDQyMTEzMDAzNVoXDTI0MDcyMDEzMDAzNVowLzEtMCsGA1UEAxMk OTZkOGI0ZmQtMzUxMi00MDJkLTlhMmQtNDlkY2ZmZDRkOWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkC7bWnHlBuwkU9j4hGd6WrTcsHT0pdySckVc G/vc2LAakXMFK4ImrYUCEoJzfT7iwY4cxM8UIrm0dGSg2v0upGdqSIIAfLQx0+PQ T2NRmVRrtjjKw0wE7Nh3+Pp2IrqV6a3GG6ZonS6pzNn2+00t1giv1XrPv+/raFLB e9PtPl2IPLxY9oMHziawjrG5b5b6UHRGVtqTzX9GuonVvRQE//HFY6MPyzmXLBU1 D6+D0UPRnlKm6DnBh/YXEjxvrBg28b+1hjniIiBdXEA1sZAra3hshhUJ5Xtwdzxi RNZdfxO8Nk9OmINecJbFMI7PQK0ZbI3prxET1AuFdu3Gx+36KwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJm5yIGW7NiFSIUu1KY4OtlfHqWPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOWZhMDg0NGItNDhiNi0z MGZkLTlmMDgtMDM4ZDZmNzY2MjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAGY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ9W2zie3ozI5MpGL8yF0xme5XYd5VfpZJIy0we6JXVk2JSvhlUY N4Ou3DmIx5v1guG7zohxeefTqbr0xwr00fX7o9eFYD6oZy525FapexqmFdS0cwGT dOYQHSW5ivOey+5hw+DBc6UwpszvAH+89O3DsFWAh0+2UZmNSyD4pCJBnzHh6BsA LpnC9p3R8+Mt2olGkBX5e55P5XHvwZMDNyPAzdIU/rp8goeZowlx5metEQq2avQl AHcL/RuIVYTjAoo3TZqOJgxzSLnFnruhKlHM9vyrrgSVygDZOhcFwBXXrE5KWLME Gb8cpsXd2ZlRL7oWZWwhUXsuzb+tFoCj5xQ= -----END CERTIFICATE-----Generated at Mon May 6 15:20:37 2024 by rpki-client on console-ams.rpki-client.org