$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c7aa874f-1879-3ecc-8f5b-8680416567df.roa File: c7aa874f-1879-3ecc-8f5b-8680416567df.roa (raw, json) Hash identifier: +lwkPScPrHMTBWl8P+apHSd6xs9X/D23R77NGHYC0uE= Subject key identifier: A7:EA:A4:09:99:79:0C:27:0D:F1:1F:6C:5E:61:7F:6B:3D:E1:6C:D1 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858473A5B4313BE0D711233173A60 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c7aa874f-1879-3ecc-8f5b-8680416567df.roa Signing time: Mon 16 Sep 2024 01:00:29 +0000 ROA not before: Mon 16 Sep 2024 01:00:29 +0000 ROA not after: Sun 15 Dec 2024 02:00:29 +0000 asID: 40862 IP address blocks: 2001:470:9d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3a:5b:43:13:be:0d:71:12:33:17:3a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 16 01:00:29 2024 GMT Not After : Dec 15 02:00:29 2024 GMT Subject: CN=1d268dcb-e4c5-4905-98e9-483a8b174481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:24:de:8b:79:c2:c9:ae:4a:f6:bb:54:4d:ff: d9:c7:27:52:5e:0e:e0:db:a0:6e:ef:8a:3a:ed:84: 08:59:ef:b1:73:00:ba:58:1c:32:3d:2b:c8:1d:28: d6:1f:40:ae:80:75:b0:61:81:a8:20:fa:b2:3b:b9: 19:0e:1f:bf:ec:e5:cc:11:bf:f5:f0:ba:ba:47:ac: 85:7d:37:f1:ed:80:27:f5:64:7d:2c:2d:72:4d:07: ac:95:d3:d8:ed:21:2d:37:18:a1:e3:a8:2e:e3:50: eb:cd:a4:dd:d4:99:37:af:f9:88:e5:92:13:5a:ad: 21:99:28:34:e9:fb:42:45:ee:12:ac:17:30:34:48: 0a:dc:e5:2e:9e:cb:6a:de:8a:09:57:32:12:6f:93: 94:72:8d:3f:c6:1b:8c:83:ed:b4:05:a9:26:9a:31: b3:ac:31:37:bb:ce:ae:3f:dc:69:68:63:b6:63:a3: e7:bd:af:32:95:1b:17:98:1f:f5:18:da:c9:54:45: 5c:42:fd:f6:a1:54:0e:b6:6e:4c:f0:40:72:db:a7: a2:b9:59:6a:8d:a1:fd:0c:4b:0e:54:0b:e9:de:0d: 2f:26:4c:43:9d:e7:56:07:33:7b:4d:05:98:f9:1d: d3:37:d6:24:b5:ac:3b:3d:66:d5:31:f8:7e:e8:c8: 71:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:EA:A4:09:99:79:0C:27:0D:F1:1F:6C:5E:61:7F:6B:3D:E1:6C:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c7aa874f-1879-3ecc-8f5b-8680416567df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:9d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:0f:55:34:80:3d:19:48:a5:fe:65:ad:18:c5:54:17:b1:03: a0:98:cc:a5:79:28:d6:0a:45:20:d3:55:50:bb:79:33:17:b6: 23:cc:0f:29:c4:8e:aa:59:c5:7e:e3:f1:fc:ba:e6:e0:c4:59: 44:0a:22:89:3d:ea:d5:3d:41:cb:9d:9b:12:ef:6d:f8:2b:a3: 68:b2:ff:06:57:6d:09:a2:fc:94:a5:fd:97:5c:2b:df:16:42: fc:27:ba:2e:14:2d:f2:fc:13:2a:c1:82:1c:6b:52:68:f1:60: aa:c0:13:fd:78:cc:19:82:0a:79:c0:9d:69:d8:54:42:e4:06: 67:66:ff:db:aa:39:71:36:dc:54:97:05:b8:25:7a:07:47:6a: 24:03:28:14:f8:bd:b9:37:0f:94:db:d5:c3:5c:ea:df:81:e1: 17:0d:b4:50:ff:64:b0:fa:e0:7a:97:bd:40:76:18:8e:6d:bd: 92:39:bf:0f:30:e4:44:fa:9c:e8:b0:ba:cd:fc:d5:6c:95:4d: ea:7c:ff:c3:33:03:7e:c2:06:42:7c:bf:d9:8f:23:ce:93:33: 73:87:d0:66:77:39:39:66:5f:80:37:37:72:e9:d1:94:d9:a8: a3:5c:38:b6:c7:6e:5a:99:57:e6:5d:ab:e7:3c:7c:28:f2:c7: 20:52:ef:8b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEc6W0MTvg1xEjMXOmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk MWQyNjhkY2ItZTRjNS00OTA1LTk4ZTktNDgzYThiMTc0NDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCTei3nCya5K9rtUTf/ZxydSXg7g26Bu74o6 7YQIWe+xcwC6WBwyPSvIHSjWH0CugHWwYYGoIPqyO7kZDh+/7OXMEb/18Lq6R6yF fTfx7YAn9WR9LC1yTQesldPY7SEtNxih46gu41DrzaTd1Jk3r/mI5ZITWq0hmSg0 6ftCRe4SrBcwNEgK3OUunstq3ooJVzISb5OUco0/xhuMg+20BakmmjGzrDE3u86u P9xpaGO2Y6Pnva8ylRsXmB/1GNrJVEVcQv32oVQOtm5M8EBy26eiuVlqjaH9DEsO VAvp3g0vJkxDnedWBzN7TQWY+R3TN9Yktaw7PWbVMfh+6MhxrwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKfqpAmZeQwnDfEfbF5hf2s94WzRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzdhYTg3NGYtMTg3OS0z ZWNjLThmNWItODY4MDQxNjU2N2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFIPVTSAPRlIpf5lrRjFVBexA6CYzKV5KNYKRSDTVVC7eTMXtiPM DynEjqpZxX7j8fy65uDEWUQKIok96tU9QcudmxLvbfgro2iy/wZXbQmi/JSl/Zdc K98WQvwnui4ULfL8EyrBghxrUmjxYKrAE/14zBmCCnnAnWnYVELkBmdm/9uqOXE2 3FSXBbglegdHaiQDKBT4vbk3D5Tb1cNc6t+B4RcNtFD/ZLD64HqXvUB2GI5tvZI5 vw8w5ET6nOiwus381WyVTep8/8MzA37CBkJ8v9mPI86TM3OH0GZ3OTlmX4A3N3Lp 0ZTZqKNcOLbHblqZV+Zdq+c8fCjyxyBS74s= -----END CERTIFICATE-----Generated at Fri Nov 22 04:32:39 2024 by rpki-client on console-fra.rpki-client.org