$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c1e2326b-8407-31d7-b779-94e72784f8e8.roa File: c1e2326b-8407-31d7-b779-94e72784f8e8.roa (raw, json) Hash identifier: dsiTUcXcCd1j4QwSbQKh/p06RSds0WYaXYNurLa1FgY= Subject key identifier: 36:40:9F:4C:B3:53:F8:45:FB:16:3B:0F:C1:56:9B:3B:76:C4:83:89 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285844F8957208C931B1FE21943D38 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c1e2326b-8407-31d7-b779-94e72784f8e8.roa Signing time: Thu 22 Feb 2024 02:00:27 +0000 ROA not before: Thu 22 Feb 2024 02:00:27 +0000 ROA not after: Wed 22 May 2024 01:00:27 +0000 asID: 50763 IP address blocks: 2001:470:5f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f8:95:72:08:c9:31:b1:fe:21:94:3d:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 22 02:00:27 2024 GMT Not After : May 22 01:00:27 2024 GMT Subject: CN=b0d186c3-d1b5-4de5-b429-73147d90b255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:16:aa:59:82:66:94:df:52:a5:09:e0:51:c8: bc:32:ad:9f:11:1a:4e:4f:15:8f:24:61:cc:b4:b0: 3d:d6:58:a7:2d:15:a3:48:f3:2e:a3:d7:75:70:05: 6c:75:df:d9:71:42:b5:6c:92:61:91:08:30:52:bf: 4f:93:55:14:9f:1a:59:ea:bb:26:57:6f:ae:09:6c: 6b:85:90:e7:66:19:d6:63:e9:63:d9:4f:fa:5b:f6: 8f:14:16:31:ed:0d:e6:8a:7c:de:9b:f9:9e:28:58: a3:52:46:73:0a:92:ce:14:44:bd:4d:ad:1e:d9:15: 4e:65:0c:fb:51:03:ae:2e:3e:08:82:e2:38:35:f7: 09:77:c1:9b:93:a7:9a:5d:40:12:5e:0b:c8:45:d0: 44:77:e2:e3:31:4d:30:ad:4d:ef:46:12:e0:73:0f: ec:86:db:14:52:12:a7:d0:8d:7e:c9:63:89:f8:90: bd:ee:d8:7e:78:30:d6:5d:5d:52:02:03:b0:27:da: d8:89:fe:e2:01:66:de:fe:1c:41:c0:1d:7b:4e:0f: c4:61:3c:fe:f2:8e:8a:4f:72:a0:cb:2a:97:bf:ff: 2c:8f:64:26:00:4d:9f:a5:9b:47:51:8d:a4:d6:5f: 65:20:7d:85:d5:21:78:31:2e:4c:e9:50:cc:d1:09: 16:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:40:9F:4C:B3:53:F8:45:FB:16:3B:0F:C1:56:9B:3B:76:C4:83:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c1e2326b-8407-31d7-b779-94e72784f8e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:5f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:0a:3f:f2:d2:e6:d7:dd:d9:ef:79:86:b0:00:7e:3b:89:1c: 4e:b8:2b:54:37:2e:ea:15:a4:fd:f7:6e:8f:6a:b4:45:ce:f6: c9:ce:85:06:57:e9:98:09:03:af:20:47:53:92:44:f6:fb:1b: 53:e9:c6:8a:11:70:fe:3c:e3:f8:d2:f4:75:1f:6f:fd:a6:1a: 20:b8:78:66:81:44:e9:b4:8b:d3:e2:b6:33:2d:3b:11:14:0e: d0:7a:33:11:33:41:02:7f:e7:f9:6f:98:0c:a0:68:19:c5:9d: 57:76:01:a0:ba:ea:52:5b:f1:15:6d:66:56:78:7b:9b:81:03: 23:c3:a1:7f:6a:c0:1d:6f:a7:6a:1b:39:9d:0b:98:a5:f4:a7: c5:1b:53:ec:0c:a0:9a:66:80:2e:89:06:07:7f:05:dc:88:8c: 9f:2d:24:ed:5a:3b:cc:51:f2:08:ee:56:2a:aa:8a:33:46:12: b0:63:86:dc:04:d7:01:4a:7c:c9:1b:ed:10:51:04:59:2f:f6: 6d:23:0c:4b:dd:cc:20:8e:00:92:99:f6:d6:93:c8:29:7d:39: 24:35:ea:74:6c:75:d4:f6:84:43:19:e9:5c:e8:36:07:22:18: 58:99:f1:c3:f5:29:05:14:f6:2a:68:c8:55:f6:d6:08:fc:1d: 0e:11:9b:4c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWET4lXIIyTGx/iGUPTgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDIyMjAyMDAyN1oXDTI0MDUyMjAxMDAyN1owLzEtMCsGA1UEAxMk YjBkMTg2YzMtZDFiNS00ZGU1LWI0MjktNzMxNDdkOTBiMjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRaqWYJmlN9SpQngUci8Mq2fERpOTxWPJGHM tLA91linLRWjSPMuo9d1cAVsdd/ZcUK1bJJhkQgwUr9Pk1UUnxpZ6rsmV2+uCWxr hZDnZhnWY+lj2U/6W/aPFBYx7Q3minzem/meKFijUkZzCpLOFES9Ta0e2RVOZQz7 UQOuLj4IguI4NfcJd8Gbk6eaXUASXgvIRdBEd+LjMU0wrU3vRhLgcw/shtsUUhKn 0I1+yWOJ+JC97th+eDDWXV1SAgOwJ9rYif7iAWbe/hxBwB17Tg/EYTz+8o6KT3Kg yyqXv/8sj2QmAE2fpZtHUY2k1l9lIH2F1SF4MS5M6VDM0QkWUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDZAn0yzU/hF+xY7D8FWmzt2xIOJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzFlMjMyNmItODQwNy0z MWQ3LWI3NzktOTRlNzI3ODRmOGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcABf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHkKP/LS5tfd2e95hrAAfjuJHE64K1Q3LuoVpP33bo9qtEXO9snO hQZX6ZgJA68gR1OSRPb7G1PpxooRcP484/jS9HUfb/2mGiC4eGaBROm0i9PitjMt OxEUDtB6MxEzQQJ/5/lvmAygaBnFnVd2AaC66lJb8RVtZlZ4e5uBAyPDoX9qwB1v p2obOZ0LmKX0p8UbU+wMoJpmgC6JBgd/BdyIjJ8tJO1aO8xR8gjuViqqijNGErBj htwE1wFKfMkb7RBRBFkv9m0jDEvdzCCOAJKZ9taTyCl9OSQ16nRsddT2hEMZ6Vzo NgciGFiZ8cP1KQUU9ipoyFX21gj8HQ4Rm0w= -----END CERTIFICATE-----Generated at Mon May 6 23:17:11 2024 by rpki-client on console-fra.rpki-client.org