$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a2fa7185-3748-3bef-ac3f-c86bd7b5e9aa.roa File: a2fa7185-3748-3bef-ac3f-c86bd7b5e9aa.roa (raw, json) Hash identifier: UIRa/d4KIDk39ug/HHddyhCXGFBdhQnBXQ27vpqJSKg= Subject key identifier: 87:86:DF:50:D2:06:82:DF:E6:5F:71:8D:4C:95:73:73:2A:7A:02:EE Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858473A5B64C74EF2C28588672700 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a2fa7185-3748-3bef-ac3f-c86bd7b5e9aa.roa Signing time: Mon 16 Sep 2024 01:00:29 +0000 ROA not before: Mon 16 Sep 2024 01:00:29 +0000 ROA not after: Sun 15 Dec 2024 02:00:29 +0000 asID: 43633 IP address blocks: 2001:470:23d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3a:5b:64:c7:4e:f2:c2:85:88:67:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 16 01:00:29 2024 GMT Not After : Dec 15 02:00:29 2024 GMT Subject: CN=1d7ead40-8c3a-4887-af58-e1786ce95fd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:42:3c:18:41:34:ce:90:89:fa:1a:0b:c5:c8: 39:45:bc:f7:27:17:d3:2a:d1:21:c0:f3:87:29:65: dd:72:29:c5:63:80:c7:55:93:bb:08:8f:ee:8e:c6: b9:85:dc:82:70:8e:2d:85:cf:a2:5d:fd:a7:d5:c0: af:16:95:7e:52:b6:61:e5:14:35:8b:07:68:7b:93: 4c:75:c1:3d:1a:78:d6:d1:8f:a5:b4:76:0f:81:67: 3c:13:70:ce:06:50:57:6e:23:c3:d9:06:a4:1d:7b: e8:fa:c3:30:74:3f:08:20:d7:a5:9f:f8:14:49:68: 75:bb:9d:d8:2b:3f:5e:8b:11:79:08:aa:a5:f8:f3: ec:40:21:4e:d0:61:f8:1b:59:af:ad:f4:ad:48:60: 6e:31:2e:57:26:2f:da:83:1f:42:b3:d5:af:a2:aa: 6f:cb:7f:6e:c6:9f:9f:d4:c1:3a:eb:0d:f5:aa:d9: f6:1b:e3:1c:df:e1:72:dc:65:b4:91:09:18:4d:93: db:15:54:e6:75:b3:65:f7:a0:37:2a:52:cb:72:8f: e2:2b:27:e6:dd:f6:9c:5a:66:95:d7:59:83:f3:91: 0d:ed:73:9b:33:db:6b:eb:f5:22:0e:16:93:ef:66: 1a:af:dd:29:60:34:a8:33:1e:2f:29:b8:da:7e:3b: 64:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:86:DF:50:D2:06:82:DF:E6:5F:71:8D:4C:95:73:73:2A:7A:02:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a2fa7185-3748-3bef-ac3f-c86bd7b5e9aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:23d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:cb:82:99:e3:26:34:c1:8c:57:9a:e3:a0:22:14:d6:fe:6e: 3a:f8:57:85:a4:21:02:fb:93:df:d4:f7:f0:39:66:3e:7a:16: 07:02:c0:8c:46:ed:d0:2e:19:3a:0c:b5:74:52:a9:c2:5a:46: 07:d1:e1:fb:b8:fe:97:50:a0:57:76:95:6f:0a:d2:7f:fe:f6: 84:b2:7d:d2:dc:42:32:0c:44:d6:92:f8:a7:ad:56:da:9d:11: e2:e1:84:89:a6:b1:70:ee:8e:e5:05:61:a6:d4:81:b8:bb:a3: 3a:77:a4:5a:04:43:7c:d8:a8:9d:f0:e4:35:2a:f5:3f:e7:a7: 29:26:8c:f0:56:05:35:ff:9c:9a:14:1e:46:1c:bd:1f:84:68: 28:c9:47:17:71:3a:fd:6d:98:7e:4b:9c:84:24:be:7d:de:8b: 9e:11:ea:98:7b:bd:23:67:05:f0:d7:7f:74:97:ba:19:55:5a: c3:55:1d:c2:40:b1:b8:89:2e:8f:39:d8:74:b7:66:40:d2:ef: f3:a5:79:40:39:6d:0c:be:39:d4:29:a3:9f:4b:7b:57:5a:63: 30:64:a9:52:f7:43:a2:83:f1:65:4e:72:9d:99:2c:d2:87:66: 4f:a0:7b:32:aa:33:d3:9a:58:cb:31:8c:f8:21:d6:28:c2:82: c4:8a:1f:79 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEc6W2THTvLChYhnJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk MWQ3ZWFkNDAtOGMzYS00ODg3LWFmNTgtZTE3ODZjZTk1ZmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUI8GEE0zpCJ+hoLxcg5Rbz3JxfTKtEhwPOH KWXdcinFY4DHVZO7CI/ujsa5hdyCcI4thc+iXf2n1cCvFpV+UrZh5RQ1iwdoe5NM dcE9GnjW0Y+ltHYPgWc8E3DOBlBXbiPD2QakHXvo+sMwdD8IINeln/gUSWh1u53Y Kz9eixF5CKql+PPsQCFO0GH4G1mvrfStSGBuMS5XJi/agx9Cs9Wvoqpvy39uxp+f 1ME66w31qtn2G+Mc3+Fy3GW0kQkYTZPbFVTmdbNl96A3KlLLco/iKyfm3facWmaV 11mD85EN7XObM9tr6/UiDhaT72Yar90pYDSoMx4vKbjafjtkZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIeG31DSBoLf5l9xjUyVc3MqegLuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTJmYTcxODUtMzc0OC0z YmVmLWFjM2YtYzg2YmQ3YjVlOWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABLLgpnjJjTBjFea46AiFNb+bjr4V4WkIQL7k9/U9/A5Zj56FgcC wIxG7dAuGToMtXRSqcJaRgfR4fu4/pdQoFd2lW8K0n/+9oSyfdLcQjIMRNaS+Ket VtqdEeLhhImmsXDujuUFYabUgbi7ozp3pFoEQ3zYqJ3w5DUq9T/npykmjPBWBTX/ nJoUHkYcvR+EaCjJRxdxOv1tmH5LnIQkvn3ei54R6ph7vSNnBfDXf3SXuhlVWsNV HcJAsbiJLo852HS3ZkDS7/OleUA5bQy+OdQpo59Le1daYzBkqVL3Q6KD8WVOcp2Z LNKHZk+gezKqM9OaWMsxjPgh1ijCgsSKH3k= -----END CERTIFICATE-----Generated at Fri Nov 22 04:32:38 2024 by rpki-client on console-fra.rpki-client.org