$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b5ef32ef-6469-3e41-83a8-75d15375be1b.roa File: b5ef32ef-6469-3e41-83a8-75d15375be1b.roa (raw, json) Hash identifier: cPEflXVWcF1a4850JhtfHH3yHSoYLUx+HXk8pTzw9ms= Subject key identifier: 3A:50:74:E1:C0:F2:E5:A3:1B:9D:84:ED:15:C9:50:DE:C3:21:69:F7 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858473A5B676A31FA8BE1574AD410 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b5ef32ef-6469-3e41-83a8-75d15375be1b.roa Signing time: Mon 16 Sep 2024 01:00:29 +0000 ROA not before: Mon 16 Sep 2024 01:00:29 +0000 ROA not after: Sun 15 Dec 2024 02:00:29 +0000 asID: 11255 IP address blocks: 2001:470:2f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3a:5b:67:6a:31:fa:8b:e1:57:4a:d4:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 16 01:00:29 2024 GMT Not After : Dec 15 02:00:29 2024 GMT Subject: CN=ffbef7aa-a63d-4afe-83da-fc5a26831414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:82:87:08:b5:c0:7a:47:ee:6e:0d:c5:fa:9d: ce:ec:68:a8:01:ac:b5:a5:a1:4a:b2:3d:f4:74:11: 9d:41:a6:aa:09:0c:10:c3:26:99:41:be:d4:16:cc: b5:8a:aa:21:6c:e1:71:2d:58:65:8a:65:70:f4:64: 51:13:00:06:5f:87:2f:e5:97:3b:ac:2e:a9:e0:3f: 65:8b:3f:80:aa:2d:d8:0b:28:b3:f5:dd:31:60:9a: 9f:6c:0b:80:3c:54:a8:05:f9:07:d8:ef:63:6a:e8: e9:ff:45:79:2e:fe:b9:54:09:bc:de:7c:68:9a:d4: 19:19:ef:0a:23:a3:72:54:35:5c:5c:32:d8:36:c5: 1a:4c:78:6f:51:12:ef:f1:3f:17:d0:2d:fd:c1:19: ab:3d:23:1c:d2:f9:72:ab:21:96:06:09:07:26:9e: 52:25:9d:33:b4:58:4d:32:3b:76:21:8e:7b:5b:19: 19:4b:76:4a:2f:4d:b5:3c:be:d1:68:7f:14:55:ce: dc:58:5c:e8:96:47:74:92:82:e7:2a:d6:f0:f2:67: b1:d1:89:e1:eb:e8:9d:76:09:c5:65:ff:9e:46:2d: b7:bf:34:b6:71:40:f1:21:62:e9:4d:7d:b1:b5:8f: e0:d8:d3:f9:a2:36:0f:48:e7:cb:ca:11:ce:ef:ca: 3e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:50:74:E1:C0:F2:E5:A3:1B:9D:84:ED:15:C9:50:DE:C3:21:69:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b5ef32ef-6469-3e41-83a8-75d15375be1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:7f:cc:ba:42:ef:a7:8a:5b:85:07:ad:06:88:f5:76:4d:59: c6:40:11:35:b2:c8:4f:a4:af:66:05:84:ee:8c:c9:f5:e9:a2: 60:e5:7c:78:53:ba:49:d4:46:47:46:c0:77:75:71:e7:59:76: 2b:28:41:a1:c4:5b:a4:cb:31:ee:5e:99:21:70:f8:a9:b6:76: d8:5b:f1:a2:19:58:53:ad:d8:95:39:29:de:be:3d:c0:76:02: f1:85:ab:12:a8:23:0e:03:88:88:5a:ed:72:ea:51:5b:17:7f: be:1c:a2:c0:5f:93:79:95:90:41:0b:79:8c:42:d5:3b:5a:d7: 3f:86:4a:7b:69:fb:68:e3:03:e8:e9:86:b3:72:b0:1d:3f:fc: fc:2b:e0:b4:fc:28:0b:7c:81:dd:60:f8:69:4f:0a:e5:6c:78: d1:c0:05:28:b0:4a:31:e2:09:18:96:f7:d1:b2:0f:03:02:15: 93:ec:12:e7:d1:1b:56:68:3c:fc:de:44:a6:f9:4a:dd:a9:b8: db:1c:af:c2:2f:44:a2:a6:86:f8:d2:d9:76:97:74:14:06:a3: 46:2a:38:41:c4:f8:9c:d5:53:85:68:37:2d:11:93:38:91:4c: 22:ea:8e:c3:9e:90:a9:01:6c:e1:f2:50:7c:17:93:fe:d1:c3: 98:26:69:46 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEc6W2dqMfqL4VdK1BAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk ZmZiZWY3YWEtYTYzZC00YWZlLTgzZGEtZmM1YTI2ODMxNDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4KHCLXAekfubg3F+p3O7GioAay1paFKsj30 dBGdQaaqCQwQwyaZQb7UFsy1iqohbOFxLVhlimVw9GRREwAGX4cv5Zc7rC6p4D9l iz+Aqi3YCyiz9d0xYJqfbAuAPFSoBfkH2O9jaujp/0V5Lv65VAm83nxomtQZGe8K I6NyVDVcXDLYNsUaTHhvURLv8T8X0C39wRmrPSMc0vlyqyGWBgkHJp5SJZ0ztFhN Mjt2IY57WxkZS3ZKL021PL7RaH8UVc7cWFzolkd0koLnKtbw8mex0Ynh6+iddgnF Zf+eRi23vzS2cUDxIWLpTX2xtY/g2NP5ojYPSOfLyhHO78o+YwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDpQdOHA8uWjG52E7RXJUN7DIWn3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjVlZjMyZWYtNjQ2OS0z ZTQxLTgzYTgtNzVkMTUzNzViZTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAAv MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACR/zLpC76eKW4UHrQaI9XZNWcZAETWyyE+kr2YFhO6MyfXpomDl fHhTuknURkdGwHd1cedZdisoQaHEW6TLMe5emSFw+Km2dthb8aIZWFOt2JU5Kd6+ PcB2AvGFqxKoIw4DiIha7XLqUVsXf74cosBfk3mVkEELeYxC1Tta1z+GSntp+2jj A+jphrNysB0//Pwr4LT8KAt8gd1g+GlPCuVseNHABSiwSjHiCRiW99GyDwMCFZPs EufRG1ZoPPzeRKb5St2puNscr8IvRKKmhvjS2XaXdBQGo0YqOEHE+JzVU4VoNy0R kziRTCLqjsOekKkBbOHyUHwXk/7Rw5gmaUY= -----END CERTIFICATE-----Generated at Fri Nov 22 04:51:29 2024 by rpki-client on console-ams.rpki-client.org