$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b1af1f14-cda2-32df-aa7f-cedd600d4217.roa File: b1af1f14-cda2-32df-aa7f-cedd600d4217.roa (raw, json) Hash identifier: bvc1Gy40fCv/UjzNbixh/VJen+RffICThUcoAqjoxVo= Subject key identifier: 25:C4:AE:D6:FF:BA:8B:2E:1C:D4:32:3D:4F:61:F9:CD:8E:B6:D6:42 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858451A2491121252557BA39D7F00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b1af1f14-cda2-32df-aa7f-cedd600d4217.roa Signing time: Tue 05 Mar 2024 02:30:46 +0000 ROA not before: Tue 05 Mar 2024 02:30:46 +0000 ROA not after: Mon 03 Jun 2024 01:30:46 +0000 asID: 41695 IP address blocks: 2001:470:2a5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1a:24:91:12:12:52:55:7b:a3:9d:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 5 02:30:46 2024 GMT Not After : Jun 3 01:30:46 2024 GMT Subject: CN=03ea61b8-f63a-4f26-9cc5-e93aa5242147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:6a:7c:aa:ae:f8:a2:8b:e0:c7:2c:64:f4:e7: 8a:45:88:82:61:89:9e:d3:79:fb:ca:26:28:70:95: d8:90:59:66:4e:09:39:52:f2:72:e2:44:af:88:72: af:96:53:42:4a:5b:3c:73:98:99:94:72:20:63:d6: d5:f2:fe:49:ae:84:b0:10:92:4c:e0:39:a4:d7:80: 17:ac:64:6b:cc:75:76:4b:cf:7d:85:68:98:bf:48: 74:e4:4f:46:d5:ac:e3:e6:26:e9:12:8b:6e:fe:41: 45:78:86:49:c2:27:2e:88:a8:90:b2:7a:09:1d:e3: 6b:c2:e2:c8:aa:b2:0a:e2:1c:43:38:d7:f0:a4:ed: 39:ee:ee:2e:98:b4:10:0a:98:2a:87:82:41:a5:8e: de:2e:dc:d7:0b:77:66:f7:d7:90:4f:8c:c1:ec:87: 91:fe:af:59:02:6a:e4:e7:99:bf:e8:9d:76:7c:cf: 43:f9:b3:1c:59:f5:47:ff:10:bf:06:c8:19:51:08: 21:5b:a0:10:19:37:8e:2a:fc:f8:20:0b:32:e6:82: 20:92:1d:8d:59:bf:70:96:09:cf:a5:13:ec:98:f3: 73:76:8b:76:0b:e5:d2:a2:1b:ef:44:17:71:06:4d: be:6e:d9:c4:5b:b1:22:fb:56:7f:71:8a:59:04:ec: b4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C4:AE:D6:FF:BA:8B:2E:1C:D4:32:3D:4F:61:F9:CD:8E:B6:D6:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b1af1f14-cda2-32df-aa7f-cedd600d4217.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:a7:bf:1b:04:eb:bd:88:6a:ee:f1:d6:df:44:f0:44:d4:eb: 39:bb:0c:7c:0e:ae:7f:02:49:f5:1e:e0:4f:3b:fb:2a:9d:51: 8a:53:2f:3e:c1:67:47:a3:63:e3:15:86:4e:3d:ee:62:38:8e: 3b:24:cd:7d:c3:66:d0:e3:62:5d:a7:2d:29:7e:58:85:82:46: 33:83:af:38:a1:19:4c:5b:99:d5:66:83:48:1d:1d:9d:69:b2: 13:c6:ee:82:4a:19:95:93:05:ad:f5:5d:81:8e:58:98:89:c6: 5a:8b:70:f1:8a:91:ef:cc:a2:0e:38:bc:2e:ae:b9:11:a8:47: 96:ee:12:8d:2d:8b:dd:f3:d8:0a:a9:be:9c:9b:03:df:2f:4c: ab:73:09:84:f8:c5:36:67:14:9e:90:d4:3d:93:82:d4:8b:88: 52:fc:be:b1:2b:3e:ed:e3:e0:3d:d3:9a:e3:0a:8f:d0:7e:92: 73:ac:bf:9c:9c:bd:45:9d:8b:f0:82:70:56:d0:70:de:ac:9a: 4e:aa:df:78:57:82:74:43:d6:9e:94:72:01:99:13:5c:12:ff: 0c:e0:7b:4f:fd:99:c8:22:d0:0e:c2:17:5a:a7:55:bc:59:dd: b8:d8:a8:0f:74:21:43:e5:3f:5d:eb:43:44:e7:70:80:cb:be: 23:45:be:b4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUaJJESElJVe6OdfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDMwNTAyMzA0NloXDTI0MDYwMzAxMzA0NlowLzEtMCsGA1UEAxMk MDNlYTYxYjgtZjYzYS00ZjI2LTljYzUtZTkzYWE1MjQyMTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mp8qq74oovgxyxk9OeKRYiCYYme03n7yiYo cJXYkFlmTgk5UvJy4kSviHKvllNCSls8c5iZlHIgY9bV8v5JroSwEJJM4Dmk14AX rGRrzHV2S899hWiYv0h05E9G1azj5ibpEotu/kFFeIZJwicuiKiQsnoJHeNrwuLI qrIK4hxDONfwpO057u4umLQQCpgqh4JBpY7eLtzXC3dm99eQT4zB7IeR/q9ZAmrk 55m/6J12fM9D+bMcWfVH/xC/BsgZUQghW6AQGTeOKvz4IAsy5oIgkh2NWb9wlgnP pRPsmPNzdot2C+XSohvvRBdxBk2+btnEW7Ei+1Z/cYpZBOy0TwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCXErtb/uosuHNQyPU9h+c2OttZCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjFhZjFmMTQtY2RhMi0z MmRmLWFhN2YtY2VkZDYwMGQ0MjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALKnvxsE672Iau7x1t9E8ETU6zm7DHwOrn8CSfUe4E87+yqdUYpT Lz7BZ0ejY+MVhk497mI4jjskzX3DZtDjYl2nLSl+WIWCRjODrzihGUxbmdVmg0gd HZ1pshPG7oJKGZWTBa31XYGOWJiJxlqLcPGKke/Mog44vC6uuRGoR5buEo0ti93z 2AqpvpybA98vTKtzCYT4xTZnFJ6Q1D2TgtSLiFL8vrErPu3j4D3TmuMKj9B+knOs v5ycvUWdi/CCcFbQcN6smk6q33hXgnRD1p6UcgGZE1wS/wzge0/9mcgi0A7CF1qn VbxZ3bjYqA90IUPlP13rQ0TncIDLviNFvrQ= -----END CERTIFICATE-----Generated at Mon May 6 15:20:38 2024 by rpki-client on console-ams.rpki-client.org