$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ba067d66-8e17-347a-996a-718b44d1bf2e.roa File: ba067d66-8e17-347a-996a-718b44d1bf2e.roa (raw, json) Hash identifier: 8P4dIsURXnYH7X+QfyP+fH6Q4CkblTYlGM4adsAmCs8= Subject key identifier: B6:84:A7:EC:0D:B7:34:1D:C2:46:2F:33:55:56:10:9C:8B:18:68:63 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584518B03B386E9627B438735680 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ba067d66-8e17-347a-996a-718b44d1bf2e.roa Signing time: Mon 04 Mar 2024 14:00:33 +0000 ROA not before: Mon 04 Mar 2024 14:00:33 +0000 ROA not after: Sun 02 Jun 2024 13:00:33 +0000 asID: 397005 IP address blocks: 2001:470:24d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:18:b0:3b:38:6e:96:27:b4:38:73:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 4 14:00:33 2024 GMT Not After : Jun 2 13:00:33 2024 GMT Subject: CN=50e40a91-ff27-4e2c-9083-036720754d8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:64:52:a3:26:01:13:1c:f4:71:65:70:78:47: cc:b5:4c:28:66:18:7e:98:7f:b7:a1:d0:e9:10:ac: 79:20:4e:a0:34:16:94:5b:b7:d4:4d:57:71:a9:13: a4:4b:ce:94:42:5d:ad:03:29:a1:a4:4e:a1:5f:d1: 2c:91:9a:04:c6:44:ea:56:9b:55:10:a7:ac:0f:41: b2:54:22:a5:8f:61:d8:cd:02:38:66:83:cf:fa:0a: c8:5c:83:0c:22:13:57:a5:69:1d:c1:f8:a1:79:da: 08:54:48:8b:43:27:4e:15:b7:68:64:c5:ee:dc:a9: 52:44:e5:af:5b:d9:3e:96:e3:36:2c:02:82:df:34: 92:54:8f:3e:bf:cc:3d:18:98:74:b1:ae:0f:d2:f4: 3b:d7:38:da:97:bc:f0:71:63:f3:ab:a0:f9:ab:0d: 75:c1:8e:26:cc:45:84:2f:2d:7d:9f:12:72:bd:40: 63:6b:ac:89:10:46:8c:18:e5:33:c1:54:35:de:73: d7:21:6f:04:3a:fd:dd:b7:c2:6a:c9:a0:6d:84:13: 87:4c:09:64:6e:b8:78:2a:8d:1f:5f:0a:19:50:e0: 51:29:d3:53:e2:a7:2a:7c:d1:ad:ac:b7:a1:8d:69: 82:85:bc:a5:c0:10:4e:3d:42:38:9c:be:12:6a:f0: 2a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:84:A7:EC:0D:B7:34:1D:C2:46:2F:33:55:56:10:9C:8B:18:68:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ba067d66-8e17-347a-996a-718b44d1bf2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:24d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:5a:5d:a6:a7:aa:ad:25:1e:02:34:9a:f0:88:06:a2:91:c2: de:79:3d:7f:1e:e6:41:79:93:91:9f:f1:71:76:84:74:d8:0f: 1a:df:5e:0b:92:6a:a6:79:f2:02:ae:59:1c:50:c0:0f:b2:b2: 50:f2:5f:ae:6e:ed:12:39:6a:1f:ae:e0:6a:c6:43:ec:4e:77: ed:74:3f:d3:39:8b:a9:ea:f3:cf:e1:05:99:d7:98:94:44:fe: 2f:80:40:d5:92:6e:12:ab:ba:d3:9d:01:2c:19:6d:9b:6d:72: 0a:d7:88:c6:cc:a7:2e:18:a3:40:63:01:d0:65:62:4b:5c:3e: d3:3b:45:98:8b:31:34:b0:d6:71:27:19:e9:e0:0a:15:9b:6f: 19:d2:be:63:75:68:54:0c:e7:4a:98:a5:18:7b:47:a5:15:bd: eb:3c:1b:18:30:18:9f:10:e1:64:ea:11:f7:4a:b2:2c:b9:f9: 25:20:e2:12:2f:05:c6:b8:55:ed:b8:b0:e2:bd:46:a3:76:74: 35:25:23:d3:00:83:cc:df:fb:04:69:32:42:98:be:57:20:3b: 33:00:04:36:30:cc:d7:63:09:14:73:01:e7:a4:aa:a0:2d:ee: b0:a7:85:ee:36:a9:eb:14:19:f5:54:f3:ee:25:b2:0e:28:cc: aa:a7:1a:9f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUYsDs4bpYntDhzVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDMwNDE0MDAzM1oXDTI0MDYwMjEzMDAzM1owLzEtMCsGA1UEAxMk NTBlNDBhOTEtZmYyNy00ZTJjLTkwODMtMDM2NzIwNzU0ZDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2RSoyYBExz0cWVweEfMtUwoZhh+mH+3odDp EKx5IE6gNBaUW7fUTVdxqROkS86UQl2tAymhpE6hX9EskZoExkTqVptVEKesD0Gy VCKlj2HYzQI4ZoPP+grIXIMMIhNXpWkdwfihedoIVEiLQydOFbdoZMXu3KlSROWv W9k+luM2LAKC3zSSVI8+v8w9GJh0sa4P0vQ71zjal7zwcWPzq6D5qw11wY4mzEWE Ly19nxJyvUBja6yJEEaMGOUzwVQ13nPXIW8EOv3dt8JqyaBthBOHTAlkbrh4Ko0f XwoZUOBRKdNT4qcqfNGtrLehjWmChbylwBBOPUI4nL4SavAqNwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLaEp+wNtzQdwkYvM1VWEJyLGGhjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmEwNjdkNjYtOGUxNy0z NDdhLTk5NmEtNzE4YjQ0ZDFiZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB5aXaanqq0lHgI0mvCIBqKRwt55PX8e5kF5k5Gf8XF2hHTYDxrf XguSaqZ58gKuWRxQwA+yslDyX65u7RI5ah+u4GrGQ+xOd+10P9M5i6nq88/hBZnX mJRE/i+AQNWSbhKrutOdASwZbZttcgrXiMbMpy4Yo0BjAdBlYktcPtM7RZiLMTSw 1nEnGengChWbbxnSvmN1aFQM50qYpRh7R6UVves8GxgwGJ8Q4WTqEfdKsiy5+SUg 4hIvBca4Ve24sOK9RqN2dDUlI9MAg8zf+wRpMkKYvlcgOzMABDYwzNdjCRRzAeek qqAt7rCnhe42qesUGfVU8+4lsg4ozKqnGp8= -----END CERTIFICATE-----Generated at Mon May 6 23:17:11 2024 by rpki-client on console-fra.rpki-client.org