$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bfc54541-6ade-39de-a777-44bcabdce14a.roa File: bfc54541-6ade-39de-a777-44bcabdce14a.roa (raw, json) Hash identifier: 5dyQURU6B0e90k/d7F9VFtcvRrV6ebl/Z/KcJTVqheE= Subject key identifier: 64:9D:00:2D:7B:D8:39:6F:5F:1C:6B:B6:1D:8A:C1:02:C1:79:29:69 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285844F2FFFDC631DFE8FA16BAD400 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bfc54541-6ade-39de-a777-44bcabdce14a.roa Signing time: Tue 20 Feb 2024 02:00:26 +0000 ROA not before: Tue 20 Feb 2024 02:00:26 +0000 ROA not after: Mon 20 May 2024 01:00:26 +0000 asID: 7810 IP address blocks: 2001:470:1a7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f2:ff:fd:c6:31:df:e8:fa:16:ba:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 20 02:00:26 2024 GMT Not After : May 20 01:00:26 2024 GMT Subject: CN=9dae29c3-25af-4308-b66e-39a14bd3f1c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:25:05:1e:5e:31:15:84:76:0b:47:c8:50:01: 46:17:a2:5b:2a:70:3a:c5:89:04:df:39:8b:32:ea: 98:0d:23:0d:4b:65:f4:c2:80:49:7d:30:55:16:45: e1:25:a3:2a:fa:68:e5:73:92:a0:b8:17:ac:de:62: b0:59:4a:b7:16:c5:32:a3:74:f1:4c:7a:b1:e0:f3: e4:e1:80:e2:c3:fd:e9:e5:b1:42:a6:c6:04:21:b6: 43:5e:45:7e:52:d5:99:23:6f:9a:7c:da:e6:61:5b: 43:b0:61:e6:e9:ff:b3:74:31:b9:fc:80:86:f2:23: 2b:c5:2c:f0:9e:0a:01:8a:93:89:8f:f8:cf:b3:ee: 2b:a3:fe:54:32:c0:cc:9c:57:4b:96:0d:9c:f9:a7: 2b:fe:b8:58:bd:ce:ea:bd:15:b7:7c:2e:b8:24:38: f3:51:5a:4d:07:91:f6:90:73:6a:7f:60:32:97:ad: da:8c:ea:32:2f:65:31:48:fd:12:03:9a:55:d7:53: b7:df:2f:77:9c:96:c4:48:40:b0:79:32:b9:52:61: 05:69:10:fb:ae:02:16:4d:2f:48:af:58:75:50:0d: d1:78:e7:eb:90:2f:d1:af:f2:ee:ae:13:62:74:f7: 28:f2:ae:ad:80:ed:9f:88:19:12:ac:d2:cf:4b:f6: 23:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:9D:00:2D:7B:D8:39:6F:5F:1C:6B:B6:1D:8A:C1:02:C1:79:29:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bfc54541-6ade-39de-a777-44bcabdce14a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1a7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:4a:5a:ab:d2:ed:12:84:da:67:e4:28:d2:0e:00:af:98:f9: 56:cc:61:1b:ad:a7:ed:22:3e:fc:f3:2a:7e:b3:31:43:54:8e: ca:c1:80:5d:9e:3f:a2:d6:00:c3:19:46:ba:c4:8d:7c:22:3c: 46:49:db:0d:a8:c4:07:63:6c:08:69:58:89:84:51:d3:a1:4b: 93:79:78:54:46:0f:52:3e:33:dc:ed:24:69:73:bb:8f:b0:f6: af:68:e9:a2:8a:06:0b:03:bc:61:03:3a:c7:85:bf:71:f1:f5: f0:58:ce:48:5a:2d:ab:b6:4d:a5:71:fb:f2:09:04:e1:0f:31: ab:b1:75:7a:ab:c5:e1:e2:ad:10:87:5c:5f:c4:8c:1d:6d:8b: 72:46:cb:8e:6d:e1:45:5b:61:83:e3:91:ec:b8:82:99:0c:d0: c0:f8:98:93:4c:3b:7f:13:89:55:b9:8f:c6:fe:f6:12:82:0b: 31:d6:b2:33:5b:55:bf:3b:b7:42:9a:66:16:7b:ed:39:e3:56: b6:76:13:1e:21:61:f3:c7:54:aa:e6:71:08:69:0d:0f:40:77: e0:31:45:e2:df:34:07:29:7c:06:40:3f:a9:ac:5c:05:7c:63: 49:d2:66:f3:3e:c3:c8:a2:44:24:36:67:13:0b:4b:cf:0a:cc: 79:a3:55:12 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWETy//3GMd/o+ha61AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDIyMDAyMDAyNloXDTI0MDUyMDAxMDAyNlowLzEtMCsGA1UEAxMk OWRhZTI5YzMtMjVhZi00MzA4LWI2NmUtMzlhMTRiZDNmMWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCUFHl4xFYR2C0fIUAFGF6JbKnA6xYkE3zmL MuqYDSMNS2X0woBJfTBVFkXhJaMq+mjlc5KguBes3mKwWUq3FsUyo3TxTHqx4PPk 4YDiw/3p5bFCpsYEIbZDXkV+UtWZI2+afNrmYVtDsGHm6f+zdDG5/ICG8iMrxSzw ngoBipOJj/jPs+4ro/5UMsDMnFdLlg2c+acr/rhYvc7qvRW3fC64JDjzUVpNB5H2 kHNqf2Ayl63ajOoyL2UxSP0SA5pV11O33y93nJbESECweTK5UmEFaRD7rgIWTS9I r1h1UA3ReOfrkC/Rr/LurhNidPco8q6tgO2fiBkSrNLPS/Yj3wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGSdAC172DlvXxxrth2KwQLBeSlpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmZjNTQ1NDEtNmFkZS0z OWRlLWE3NzctNDRiY2FiZGNlMTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAGn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGxKWqvS7RKE2mfkKNIOAK+Y+VbMYRutp+0iPvzzKn6zMUNUjsrB gF2eP6LWAMMZRrrEjXwiPEZJ2w2oxAdjbAhpWImEUdOhS5N5eFRGD1I+M9ztJGlz u4+w9q9o6aKKBgsDvGEDOseFv3Hx9fBYzkhaLau2TaVx+/IJBOEPMauxdXqrxeHi rRCHXF/EjB1ti3JGy45t4UVbYYPjkey4gpkM0MD4mJNMO38TiVW5j8b+9hKCCzHW sjNbVb87t0KaZhZ77TnjVrZ2Ex4hYfPHVKrmcQhpDQ9Ad+AxReLfNAcpfAZAP6ms XAV8Y0nSZvM+w8iiRCQ2ZxMLS88KzHmjVRI= -----END CERTIFICATE-----Generated at Mon May 6 14:56:15 2024 by rpki-client on console-fra.rpki-client.org