$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bd0b562d-963b-3005-9a83-1a14e6529986.roa File: bd0b562d-963b-3005-9a83-1a14e6529986.roa (raw, json) Hash identifier: OWWEx9D/8ba9yxluMRZZ1CRBLxZxLCetm+BI5/9XpZs= Subject key identifier: D8:2E:D2:0F:7B:30:9E:18:5C:65:D4:D2:22:44:58:ED:4E:75:FF:16 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285847A74A8EB2A913025035092500 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bd0b562d-963b-3005-9a83-1a14e6529986.roa Signing time: Fri 25 Oct 2024 01:30:10 +0000 ROA not before: Fri 25 Oct 2024 01:30:10 +0000 ROA not after: Thu 23 Jan 2025 02:30:10 +0000 asID: 54798 IP address blocks: 2001:470:3b2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a7:4a:8e:b2:a9:13:02:50:35:09:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 25 01:30:10 2024 GMT Not After : Jan 23 02:30:10 2025 GMT Subject: CN=33204dcd-0d96-4393-8a03-83b889072f7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:20:91:5b:00:b7:14:c6:65:f1:fc:a4:f3:ac: 68:5c:ba:58:46:49:71:37:1d:6d:99:e3:df:84:4a: 4f:a9:ef:88:d3:e9:a9:4f:b1:03:3b:69:42:cd:8b: 77:fc:9b:85:64:28:ef:bb:e5:ab:5e:7f:7c:c8:b0: af:e1:0d:89:6a:b4:e2:6e:7b:5f:d3:85:d5:0b:67: 8e:db:3a:00:3f:60:fd:b4:d5:f3:e6:fa:3d:41:7a: 78:e8:66:20:72:1a:c9:cc:be:42:4d:67:ea:6b:3a: 0b:f3:48:d7:6f:50:9d:c4:9d:5b:14:f2:1e:8f:54: 6c:56:6c:cc:12:a5:30:2c:00:65:5f:64:54:29:03: 3e:75:16:84:d2:57:d1:aa:89:05:8d:e6:65:c2:b2: 75:37:b9:fe:b1:bc:04:bb:1b:e7:87:a2:ea:5e:c3: fd:96:cc:11:eb:5f:d3:1c:cc:a9:b8:f9:cf:91:46: cd:ca:9d:1c:36:8a:40:ec:4f:0c:d4:41:af:53:2f: b5:22:30:1c:27:2a:71:ae:fe:fb:72:6b:e4:b4:ad: a6:67:a7:30:0e:14:c1:6d:be:29:c9:59:30:8e:69: ad:da:14:f7:f4:dc:b2:d1:73:78:a3:57:6c:9e:40: d8:e7:ad:40:13:47:e9:53:d6:a1:ac:b4:c7:b8:3b: fc:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:2E:D2:0F:7B:30:9E:18:5C:65:D4:D2:22:44:58:ED:4E:75:FF:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bd0b562d-963b-3005-9a83-1a14e6529986.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3b2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:df:bc:c3:97:5c:b4:97:f9:ba:a2:36:46:b1:8d:fe:b5:e1: 8f:81:ea:f0:a5:42:35:4a:17:21:46:57:a5:62:14:ac:d0:42: b1:12:cd:71:4b:78:2d:c6:08:b9:c0:a5:ba:8c:95:3f:16:23: 43:45:33:8e:05:c9:bc:af:f5:3f:78:79:d5:a3:78:b3:ba:65: 83:84:4d:0d:75:db:3a:b2:66:56:35:1e:c3:d1:98:58:09:eb: 23:6f:dc:3a:5b:3c:bd:d1:d9:21:72:2b:f8:51:e6:57:3f:1a: 8a:be:ed:7c:43:91:32:e8:ba:ad:57:44:3b:9b:4c:38:a5:f0: c7:af:03:75:1f:f7:0e:28:a3:ae:26:17:38:da:32:5d:28:f3: a8:83:85:a2:11:db:47:3e:03:41:5d:c5:65:fa:81:71:b2:87: 15:29:36:a2:8f:50:2b:ef:10:f1:4e:88:51:17:cb:5a:d7:2c: 33:e0:ca:68:b7:09:d0:33:2e:ea:96:b8:0c:65:3d:31:fa:53: 7c:f0:50:92:35:b2:1c:09:d9:83:e8:97:66:fd:86:ea:30:05: fc:75:9b:7a:b1:4d:51:ce:69:44:ad:13:89:5f:da:1c:dc:f1: cd:0d:77:8a:6c:ab:4a:2d:05:e1:13:ec:f3:88:5f:41:49:99: da:14:20:0b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEenSo6yqRMCUDUJJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MTAyNTAxMzAxMFoXDTI1MDEyMzAyMzAxMFowLzEtMCsGA1UEAxMk MzMyMDRkY2QtMGQ5Ni00MzkzLThhMDMtODNiODg5MDcyZjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiCRWwC3FMZl8fyk86xoXLpYRklxNx1tmePf hEpPqe+I0+mpT7EDO2lCzYt3/JuFZCjvu+WrXn98yLCv4Q2JarTibntf04XVC2eO 2zoAP2D9tNXz5vo9QXp46GYgchrJzL5CTWfqazoL80jXb1CdxJ1bFPIej1RsVmzM EqUwLABlX2RUKQM+dRaE0lfRqokFjeZlwrJ1N7n+sbwEuxvnh6LqXsP9lswR61/T HMypuPnPkUbNyp0cNopA7E8M1EGvUy+1IjAcJypxrv77cmvktK2mZ6cwDhTBbb4p yVkwjmmt2hT39Nyy0XN4o1dsnkDY561AE0fpU9ahrLTHuDv8VQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNgu0g97MJ4YXGXU0iJEWO1Odf8WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmQwYjU2MmQtOTYzYi0z MDA1LTlhODMtMWExNGU2NTI5OTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOy MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACvfvMOXXLSX+bqiNkaxjf614Y+B6vClQjVKFyFGV6ViFKzQQrES zXFLeC3GCLnApbqMlT8WI0NFM44Fybyv9T94edWjeLO6ZYOETQ112zqyZlY1HsPR mFgJ6yNv3DpbPL3R2SFyK/hR5lc/Goq+7XxDkTLouq1XRDubTDil8MevA3Uf9w4o o64mFzjaMl0o86iDhaIR20c+A0FdxWX6gXGyhxUpNqKPUCvvEPFOiFEXy1rXLDPg ymi3CdAzLuqWuAxlPTH6U3zwUJI1shwJ2YPol2b9huowBfx1m3qxTVHOaUStE4lf 2hzc8c0Nd4psq0otBeET7POIX0FJmdoUIAs= -----END CERTIFICATE-----Generated at Fri Nov 22 04:32:39 2024 by rpki-client on console-fra.rpki-client.org