$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c5d9fb6c-1fbd-3287-830f-7a1d4b0126d6.roa File: c5d9fb6c-1fbd-3287-830f-7a1d4b0126d6.roa (raw, json) Hash identifier: Y5piEyo4UpyjDI2DBad/g/efckLog2/dMnkB/tt4Xtg= Subject key identifier: 89:40:23:37:BF:17:D8:DE:6E:57:9D:A1:8E:66:FA:D1:05:B2:CC:5C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285847F85E2A55A327035E028DB5C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c5d9fb6c-1fbd-3287-830f-7a1d4b0126d6.roa Signing time: Sat 23 Nov 2024 02:30:09 +0000 ROA not before: Sat 23 Nov 2024 02:30:09 +0000 ROA not after: Fri 21 Feb 2025 02:30:09 +0000 asID: 30013 IP address blocks: 2001:470:3d1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f8:5e:2a:55:a3:27:03:5e:02:8d:b5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Nov 23 02:30:09 2024 GMT Not After : Feb 21 02:30:09 2025 GMT Subject: CN=7c1377aa-4c88-40f6-a0b6-faf0b606dcd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1b:1a:bb:d2:30:99:44:c6:fb:ce:f3:7c:09: d8:e8:49:b3:ed:78:b6:e0:84:c2:60:3f:c3:b1:b3: 56:ab:ce:2c:47:c4:b8:05:09:40:35:71:40:80:a9: 86:c8:a9:20:7d:a5:7b:7c:07:ac:13:c9:f5:1b:3b: f9:92:2b:a4:6b:49:9a:70:f2:97:db:c8:8c:89:2c: 70:0c:63:a7:44:45:dd:30:39:69:1b:58:d6:e6:19: ec:eb:18:1f:1c:1e:3e:ba:fd:b3:0b:b3:8c:1e:17: d4:1e:d2:27:7b:33:49:e6:e8:01:6c:1b:f2:5c:66: 65:50:a4:f9:c0:5d:85:cd:e5:d3:c2:94:b7:08:ef: 39:04:75:72:55:ad:01:64:59:9b:83:4d:7d:67:0f: b9:b8:ec:02:1a:19:ab:e5:d5:88:61:bb:f5:eb:8d: a8:e1:b0:55:c1:1f:01:42:d4:66:82:42:60:db:6f: 41:9d:9e:d6:7d:66:5e:eb:52:d0:fe:ee:fd:f6:7f: bb:5b:6f:5b:f3:21:af:5b:c2:0d:40:8a:ec:17:33: 49:8c:c4:9a:70:06:cb:f5:a2:93:4b:33:5c:5d:2f: e4:47:f3:04:df:1f:fc:dc:b1:37:80:eb:fc:c2:97: f8:4b:17:3f:54:61:50:c3:31:ce:10:4e:26:54:84: 63:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:40:23:37:BF:17:D8:DE:6E:57:9D:A1:8E:66:FA:D1:05:B2:CC:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c5d9fb6c-1fbd-3287-830f-7a1d4b0126d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3d1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:97:6e:91:9d:b8:e4:1b:58:4a:68:ef:b0:20:7f:94:4e:9c: 55:24:5c:e3:2c:72:41:3b:39:ca:20:ec:b9:e1:b2:02:be:33: 5d:70:01:71:68:68:01:73:0b:ae:55:9b:eb:39:b4:e8:d8:5f: ca:8e:a4:11:85:f6:6a:9a:f1:5f:8a:07:cd:2f:b1:6a:61:02: fd:94:de:60:af:f3:04:f1:e9:98:31:26:f8:72:86:bc:6b:1c: 4e:78:b8:5a:24:3d:a2:ed:2d:21:d9:f4:62:bb:e2:8c:8a:38: 66:44:64:a6:a9:09:2d:79:b2:b0:54:33:de:7a:7e:ac:68:7d: 80:b1:2a:46:8f:71:c4:c9:6e:c9:85:fc:e5:b6:97:e9:9b:d4: b7:46:10:78:68:35:22:ed:cf:60:8f:05:4f:c1:b2:cd:e3:6c: 6b:c2:64:25:db:4d:40:aa:6e:24:26:59:32:7f:b8:6c:c8:e1: 08:90:e9:8e:cc:09:c2:1c:2a:1d:5c:9b:3c:e1:3a:4f:ed:d0: 4c:72:14:42:ad:1d:32:f4:f7:99:1c:0c:f2:9e:b7:d9:d1:4f: 31:88:eb:54:7e:74:00:83:df:f7:2b:85:55:dd:1a:f7:48:65: 9c:e0:8a:3a:9e:69:c5:e9:0c:8b:42:65:bd:70:49:a9:a3:4d: 5f:64:2b:93 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEf4XipVoycDXgKNtcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MTEyMzAyMzAwOVoXDTI1MDIyMTAyMzAwOVowLzEtMCsGA1UEAxMk N2MxMzc3YWEtNGM4OC00MGY2LWEwYjYtZmFmMGI2MDZkY2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRsau9IwmUTG+87zfAnY6Emz7Xi24ITCYD/D sbNWq84sR8S4BQlANXFAgKmGyKkgfaV7fAesE8n1Gzv5kiuka0macPKX28iMiSxw DGOnREXdMDlpG1jW5hns6xgfHB4+uv2zC7OMHhfUHtInezNJ5ugBbBvyXGZlUKT5 wF2FzeXTwpS3CO85BHVyVa0BZFmbg019Zw+5uOwCGhmr5dWIYbv1642o4bBVwR8B QtRmgkJg229BnZ7WfWZe61LQ/u799n+7W29b8yGvW8INQIrsFzNJjMSacAbL9aKT SzNcXS/kR/ME3x/83LE3gOv8wpf4Sxc/VGFQwzHOEE4mVIRjlQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIlAIze/F9jebledoY5m+tEFssxcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzVkOWZiNmMtMWZiZC0z Mjg3LTgzMGYtN2ExZDRiMDEyNmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALOXbpGduOQbWEpo77Agf5ROnFUkXOMsckE7Ocog7LnhsgK+M11w AXFoaAFzC65Vm+s5tOjYX8qOpBGF9mqa8V+KB80vsWphAv2U3mCv8wTx6ZgxJvhy hrxrHE54uFokPaLtLSHZ9GK74oyKOGZEZKapCS15srBUM956fqxofYCxKkaPccTJ bsmF/OW2l+mb1LdGEHhoNSLtz2CPBU/Bss3jbGvCZCXbTUCqbiQmWTJ/uGzI4QiQ 6Y7MCcIcKh1cmzzhOk/t0ExyFEKtHTL095kcDPKet9nRTzGI61R+dACD3/crhVXd GvdIZZzgijqeacXpDItCZb1wSamjTV9kK5M= -----END CERTIFICATE-----Generated at Wed Feb 5 04:55:42 2025 by rpki-client