$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a4625a79-a318-3fe2-8612-a6f7b327d51c.roa File: a4625a79-a318-3fe2-8612-a6f7b327d51c.roa (raw, json) Hash identifier: GdQik0GMUpBqr/UYMMGZZPrXrpofD2prMajc/S3SbLg= Subject key identifier: 79:B9:5F:97:CD:1C:AD:AB:0C:F0:23:38:C2:1A:59:67:02:57:E1:D7 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285847B80AA67BD06E577D4DA23B80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a4625a79-a318-3fe2-8612-a6f7b327d51c.roa Signing time: Thu 31 Oct 2024 01:30:09 +0000 ROA not before: Thu 31 Oct 2024 01:30:09 +0000 ROA not after: Wed 29 Jan 2025 02:30:09 +0000 asID: 51259 IP address blocks: 2001:470:398::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b8:0a:a6:7b:d0:6e:57:7d:4d:a2:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 31 01:30:09 2024 GMT Not After : Jan 29 02:30:09 2025 GMT Subject: CN=1daf8cb9-81a9-45e5-8253-09e337d56a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e4:fb:dd:1c:53:b8:d3:94:cc:00:0f:75:ec: ad:39:a6:b4:ed:62:ae:58:f8:77:33:65:cf:9a:a8: 45:e3:0e:e0:e9:93:76:84:aa:b3:72:24:d2:f5:c3: d4:e4:a7:69:70:d7:17:05:88:0a:04:98:ef:ac:c7: 25:ff:84:14:e0:02:a2:cb:e4:77:39:b7:42:40:4e: 08:82:0e:a5:ec:11:8b:be:65:c1:a1:bf:55:43:03: 75:78:31:71:15:d6:28:73:f6:46:ed:62:0d:01:d8: 08:52:a3:ee:33:63:8d:60:da:be:c8:26:81:0e:9f: 42:6e:b4:cf:39:85:e9:3b:5b:8d:76:ba:d0:a1:4c: 73:dc:c6:2b:7e:e9:91:cd:18:90:42:2b:66:c1:05: 7b:93:2e:cc:89:d3:30:06:ac:a5:77:bc:7a:dc:4d: d5:32:77:2e:50:49:2e:8e:ac:e5:3e:50:34:33:d2: ab:50:15:33:b5:a6:ae:79:2d:69:3a:5a:f7:61:28: b7:da:c1:3f:e2:01:95:a2:11:dc:f6:9b:33:4f:4e: d9:0c:93:e3:5c:ca:c8:02:4f:4f:69:24:a5:c0:af: e5:c3:38:e1:d8:7a:de:d1:03:1c:c9:8f:4b:14:b6: 5d:bf:94:99:ab:0b:68:38:dd:db:92:45:79:40:d9: e8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:B9:5F:97:CD:1C:AD:AB:0C:F0:23:38:C2:1A:59:67:02:57:E1:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a4625a79-a318-3fe2-8612-a6f7b327d51c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:398::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:a0:72:75:47:02:d3:c0:ea:45:8f:60:30:e1:97:ba:9f:10: 67:85:c5:1d:26:d6:9c:5f:8f:65:4a:b9:21:e1:5d:67:1f:e9: 22:c9:1b:f8:38:30:3a:1a:73:69:aa:0e:ff:3c:a1:5b:14:fb: 8c:6a:e5:6d:a5:ef:66:26:6b:9c:e7:23:04:31:e9:ba:c9:3a: 6d:78:a5:37:d2:0b:22:f3:6f:b4:16:95:7a:0d:5f:b3:34:9e: a2:bc:89:58:3f:16:f0:e8:52:a6:5d:c2:1b:1b:a1:b8:b0:a8: 62:82:57:c0:0b:8f:5b:b1:dd:ca:19:e7:5e:26:1f:56:f8:ba: 54:6e:fc:ff:08:f5:19:af:21:b2:94:26:8c:b5:f9:63:f6:fc: 92:c5:39:6c:c4:a0:a1:d8:9e:d0:ac:0e:9a:ba:7a:f9:25:1e: da:bf:8b:5a:ff:e6:53:85:23:a4:3f:f2:9b:e7:01:51:38:17: 30:d0:04:4f:19:7d:77:71:b8:ff:9a:9f:e1:96:de:b6:ab:0b: 88:4b:e5:22:c5:6c:85:b3:b3:c5:b0:3b:f9:5b:f6:be:af:78: a9:e4:5b:51:81:b3:38:c8:af:17:e0:2a:f1:22:e4:4f:e9:a7: f9:3d:a5:08:8c:55:b5:5c:a5:42:54:f7:20:b3:08:87:ef:29: 9e:93:4e:fc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe4CqZ70G5XfU2iO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MTAzMTAxMzAwOVoXDTI1MDEyOTAyMzAwOVowLzEtMCsGA1UEAxMk MWRhZjhjYjktODFhOS00NWU1LTgyNTMtMDllMzM3ZDU2YTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluT73RxTuNOUzAAPdeytOaa07WKuWPh3M2XP mqhF4w7g6ZN2hKqzciTS9cPU5KdpcNcXBYgKBJjvrMcl/4QU4AKiy+R3ObdCQE4I gg6l7BGLvmXBob9VQwN1eDFxFdYoc/ZG7WINAdgIUqPuM2ONYNq+yCaBDp9CbrTP OYXpO1uNdrrQoUxz3MYrfumRzRiQQitmwQV7ky7MidMwBqyld7x63E3VMncuUEku jqzlPlA0M9KrUBUztaaueS1pOlr3YSi32sE/4gGVohHc9pszT07ZDJPjXMrIAk9P aSSlwK/lwzjh2Hre0QMcyY9LFLZdv5SZqwtoON3bkkV5QNno/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHm5X5fNHK2rDPAjOMIaWWcCV+HXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTQ2MjVhNzktYTMxOC0z ZmUyLTg2MTItYTZmN2IzMjdkNTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABGgcnVHAtPA6kWPYDDhl7qfEGeFxR0m1pxfj2VKuSHhXWcf6SLJ G/g4MDoac2mqDv88oVsU+4xq5W2l72Yma5znIwQx6brJOm14pTfSCyLzb7QWlXoN X7M0nqK8iVg/FvDoUqZdwhsbobiwqGKCV8ALj1ux3coZ514mH1b4ulRu/P8I9Rmv IbKUJoy1+WP2/JLFOWzEoKHYntCsDpq6evklHtq/i1r/5lOFI6Q/8pvnAVE4FzDQ BE8ZfXdxuP+an+GW3rarC4hL5SLFbIWzs8WwO/lb9r6veKnkW1GBszjIrxfgKvEi 5E/pp/k9pQiMVbVcpUJU9yCzCIfvKZ6TTvw= -----END CERTIFICATE-----Generated at Fri Nov 22 04:51:29 2024 by rpki-client on console-ams.rpki-client.org