$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c441fbad-df0a-3969-8f7e-38c3c6ff27d6.roa File: c441fbad-df0a-3969-8f7e-38c3c6ff27d6.roa (raw, json) Hash identifier: wDPMcCY6exyhNGUsxrTDTfwJvENaQjPm/ACAbV5eHqk= Subject key identifier: 1E:E5:9A:BC:7B:48:C0:21:BD:44:EA:59:91:C5:1D:28:5A:BE:FB:54 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584806539A5A997392A8401F56B0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c441fbad-df0a-3969-8f7e-38c3c6ff27d6.roa Signing time: Thu 28 Nov 2024 02:30:11 +0000 ROA not before: Thu 28 Nov 2024 02:30:11 +0000 ROA not after: Wed 26 Feb 2025 02:30:11 +0000 asID: 32267 IP address blocks: 2001:470:3d8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:06:53:9a:5a:99:73:92:a8:40:1f:56:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Nov 28 02:30:11 2024 GMT Not After : Feb 26 02:30:11 2025 GMT Subject: CN=22c0d817-a06a-4faf-ba29-71b9207c8602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7c:01:bf:04:64:a4:51:dc:e1:9d:d2:55:36: ce:3a:1e:c1:d5:6d:00:b9:52:3b:00:9a:a2:e9:99: dc:85:23:b6:99:3f:29:6d:30:a6:88:cd:15:d2:cf: f6:e1:61:0b:26:6d:24:e0:f1:b2:f6:49:32:eb:0d: 05:7c:80:ba:34:fc:01:40:f4:b9:b9:e8:99:ad:b0: 0a:1e:89:af:fa:23:76:3a:f4:3b:0c:36:9a:a0:77: 61:05:6e:d5:42:46:ba:e6:5a:43:dc:f1:1f:10:b5: 1b:48:f9:46:4e:12:b4:d2:ef:30:b6:82:4e:54:00: 4d:16:1d:b5:97:1b:96:6d:3f:32:5d:69:2d:04:8c: 1e:d5:aa:97:7f:e7:da:c3:e5:33:5d:55:af:99:d3: 39:22:13:c8:64:2f:e2:be:e1:c5:3b:ba:31:53:35: 31:5f:a3:04:8b:94:25:2c:ff:2c:17:f8:05:23:67: 04:ff:53:b1:4f:7e:28:5a:0f:2d:fb:ae:df:cf:2c: 89:7d:cd:63:69:b0:7f:d6:b0:e3:04:d8:9c:39:66: 40:3e:b7:2f:0b:37:37:f9:5d:13:9e:87:20:01:7e: 1a:37:b6:d9:f7:62:8c:be:ec:70:d4:92:a8:09:1f: 77:9c:f7:22:75:3e:7d:bd:6b:df:ae:30:bb:c0:78: 96:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:E5:9A:BC:7B:48:C0:21:BD:44:EA:59:91:C5:1D:28:5A:BE:FB:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c441fbad-df0a-3969-8f7e-38c3c6ff27d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3d8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:52:3d:3a:cc:16:2c:47:ca:d3:02:9c:9e:68:35:f7:21:aa: a6:90:4a:f3:75:e1:7e:14:cb:8f:df:34:0a:25:07:71:7a:02: 72:7d:15:79:41:07:58:ee:fc:8e:5e:fa:9a:f1:00:2d:c7:19: 83:5e:45:c7:9d:0d:fe:29:d6:97:94:fa:52:dc:c3:50:04:3c: 89:a2:21:d6:3b:3f:22:4b:9e:4e:60:7a:e6:b2:d2:15:bc:a4: 3e:1f:b6:92:ae:7a:39:a4:e5:91:dc:b3:fc:f6:e5:32:98:ff: 44:e4:27:0d:de:80:20:3b:79:21:c5:a1:b5:b8:59:83:14:c0: f5:c8:99:88:b7:5b:df:7e:f5:0c:51:0f:c9:7c:b7:3a:98:0f: a1:c4:f9:65:53:f4:4d:6d:f8:81:ea:7e:bf:06:11:3e:57:d9: 81:79:da:44:d5:fa:6b:ce:17:a9:63:e7:d5:90:fa:3b:9d:5d: 9d:42:7b:7d:df:60:f2:e8:de:fc:5f:41:2b:ea:75:6f:01:ab: 7c:32:bf:78:53:9c:e8:64:bb:76:2d:31:ff:10:e2:74:47:b7: 06:c2:da:57:52:cc:4c:73:9c:05:ac:fe:4f:39:a8:0e:09:eb: df:db:50:aa:38:9f:cf:12:de:20:0f:18:7b:19:c2:6e:a5:85: a8:f2:b7:06 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgGU5pamXOSqEAfVrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MTEyODAyMzAxMVoXDTI1MDIyNjAyMzAxMVowLzEtMCsGA1UEAxMk MjJjMGQ4MTctYTA2YS00ZmFmLWJhMjktNzFiOTIwN2M4NjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXwBvwRkpFHc4Z3SVTbOOh7B1W0AuVI7AJqi 6ZnchSO2mT8pbTCmiM0V0s/24WELJm0k4PGy9kky6w0FfIC6NPwBQPS5ueiZrbAK Homv+iN2OvQ7DDaaoHdhBW7VQka65lpD3PEfELUbSPlGThK00u8wtoJOVABNFh21 lxuWbT8yXWktBIwe1aqXf+faw+UzXVWvmdM5IhPIZC/ivuHFO7oxUzUxX6MEi5Ql LP8sF/gFI2cE/1OxT34oWg8t+67fzyyJfc1jabB/1rDjBNicOWZAPrcvCzc3+V0T nocgAX4aN7bZ92KMvuxw1JKoCR93nPcidT59vWvfrjC7wHiW2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB7lmrx7SMAhvUTqWZHFHShavvtUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzQ0MWZiYWQtZGYwYS0z OTY5LThmN2UtMzhjM2M2ZmYyN2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADlSPTrMFixHytMCnJ5oNfchqqaQSvN14X4Uy4/fNAolB3F6AnJ9 FXlBB1ju/I5e+prxAC3HGYNeRcedDf4p1peU+lLcw1AEPImiIdY7PyJLnk5geuay 0hW8pD4ftpKuejmk5ZHcs/z25TKY/0TkJw3egCA7eSHFobW4WYMUwPXImYi3W99+ 9QxRD8l8tzqYD6HE+WVT9E1t+IHqfr8GET5X2YF52kTV+mvOF6lj59WQ+judXZ1C e33fYPLo3vxfQSvqdW8Bq3wyv3hTnOhku3YtMf8Q4nRHtwbC2ldSzExznAWs/k85 qA4J69/bUKo4n88S3iAPGHsZwm6lhajytwY= -----END CERTIFICATE-----Generated at Wed Feb 5 04:43:01 2025 by rpki-client