$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c868022a-c81f-37f1-9880-bdac50bec316.roa File: c868022a-c81f-37f1-9880-bdac50bec316.roa (raw, json) Hash identifier: J5vxdH+wdAvyqzv7pGoIm1i7g1TjvjSCvjLpL6e8r0g= Subject key identifier: 57:58:D4:7B:4E:BB:99:21:29:00:03:8A:E3:59:29:FB:48:5D:4E:D8 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858472149B09EA5564019D46ECC40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c868022a-c81f-37f1-9880-bdac50bec316.roa Signing time: Sat 07 Sep 2024 01:30:06 +0000 ROA not before: Sat 07 Sep 2024 01:30:06 +0000 ROA not after: Fri 06 Dec 2024 02:30:06 +0000 asID: 393238 IP address blocks: 2001:470:381::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:21:49:b0:9e:a5:56:40:19:d4:6e:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 7 01:30:06 2024 GMT Not After : Dec 6 02:30:06 2024 GMT Subject: CN=c6129e3e-4e0d-45f8-b3ea-141f64df1281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:35:3d:cf:68:53:a6:43:57:a3:b7:c7:02:ba: a2:cd:fe:ed:d3:06:c5:50:bc:28:a5:7f:66:94:75: 27:db:17:e2:c4:d6:6f:47:b8:d5:e4:d4:1a:7b:27: 86:89:d2:c3:34:59:a4:8c:cf:f7:c9:97:10:bd:cb: 40:b0:05:41:e9:df:9c:ec:fe:4a:e9:fe:9f:71:68: ea:39:e8:fc:04:73:48:d6:16:f1:d1:10:ba:b3:57: f2:7c:12:f6:8f:57:e9:35:75:9b:92:b0:80:5f:7f: ef:9f:b3:8b:c2:bd:ff:7d:54:c8:95:76:ba:81:cf: cc:33:ca:df:4c:e9:8a:b2:93:22:97:27:73:d8:3c: 80:63:8e:cc:ad:b7:56:8f:c5:54:64:b2:6e:42:95: 90:51:8b:eb:27:5f:dc:0a:87:11:68:db:a6:45:c8: 22:a4:96:6f:28:6d:c1:11:7d:f8:51:ef:0b:27:42: 36:51:46:34:37:68:ff:39:96:34:3b:88:84:15:02: f7:bb:fb:e8:f0:cf:a9:ac:77:3a:5a:1d:f2:ee:74: 0d:ba:ca:4a:87:ef:b9:40:d2:b3:ec:78:c2:df:f2: 85:63:f6:6a:00:81:19:05:3b:a1:95:16:98:c1:86: fa:1a:98:88:da:8f:25:53:1e:75:97:24:79:bd:5c: d0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:58:D4:7B:4E:BB:99:21:29:00:03:8A:E3:59:29:FB:48:5D:4E:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c868022a-c81f-37f1-9880-bdac50bec316.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:381::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:47:09:82:c9:42:f6:4c:52:45:58:25:ca:ae:92:8e:75:89: 4d:d0:27:e4:2f:45:95:99:04:16:0f:f7:0b:85:2d:31:9d:31: 4d:72:e7:c3:04:33:c0:f4:bb:7a:80:16:66:79:3b:7b:8b:51: ae:e8:15:63:14:60:98:90:c5:aa:9a:04:51:8a:32:f5:a4:db: 8a:3d:49:9f:de:c7:62:6f:75:ab:57:70:ff:3e:83:0f:25:a0: cb:64:f1:40:77:5f:10:90:83:76:ef:9e:e4:a4:24:4c:36:94: ba:70:bd:45:9c:3c:47:ef:6f:e4:4b:6e:fa:02:d4:6a:b8:e3: 21:6a:3f:f4:16:37:41:9d:37:9b:41:e4:c3:d6:9d:4b:af:10: 85:59:f4:06:34:3a:69:f0:65:1f:14:ed:b0:16:95:61:9f:c9: 99:ec:08:1a:36:dc:6e:33:fc:a5:f7:6d:27:cc:af:b2:7f:40: eb:c1:5c:29:81:86:62:1e:7e:7e:34:5b:69:fa:56:f8:c5:57: ac:e3:e6:39:e9:5f:9f:9c:2d:55:79:5a:a8:74:79:37:a7:ff: 32:19:0d:ad:c8:76:b0:e0:9f:69:51:0f:90:68:de:a8:be:3c: c1:34:95:74:c0:34:37:1b:bd:f2:df:74:0b:2c:50:32:5a:02: a4:bc:d8:77 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEchSbCepVZAGdRuzEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDkwNzAxMzAwNloXDTI0MTIwNjAyMzAwNlowLzEtMCsGA1UEAxMk YzYxMjllM2UtNGUwZC00NWY4LWIzZWEtMTQxZjY0ZGYxMjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTU9z2hTpkNXo7fHArqizf7t0wbFULwopX9m lHUn2xfixNZvR7jV5NQaeyeGidLDNFmkjM/3yZcQvctAsAVB6d+c7P5K6f6fcWjq Oej8BHNI1hbx0RC6s1fyfBL2j1fpNXWbkrCAX3/vn7OLwr3/fVTIlXa6gc/MM8rf TOmKspMilydz2DyAY47MrbdWj8VUZLJuQpWQUYvrJ1/cCocRaNumRcgipJZvKG3B EX34Ue8LJ0I2UUY0N2j/OZY0O4iEFQL3u/vo8M+prHc6Wh3y7nQNuspKh++5QNKz 7HjC3/KFY/ZqAIEZBTuhlRaYwYb6GpiI2o8lUx51lyR5vVzQsQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFdY1HtOu5khKQADiuNZKftIXU7YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzg2ODAyMmEtYzgxZi0z N2YxLTk4ODAtYmRhYzUwYmVjMzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADdHCYLJQvZMUkVYJcquko51iU3QJ+QvRZWZBBYP9wuFLTGdMU1y 58MEM8D0u3qAFmZ5O3uLUa7oFWMUYJiQxaqaBFGKMvWk24o9SZ/ex2JvdatXcP8+ gw8loMtk8UB3XxCQg3bvnuSkJEw2lLpwvUWcPEfvb+RLbvoC1Gq44yFqP/QWN0Gd N5tB5MPWnUuvEIVZ9AY0OmnwZR8U7bAWlWGfyZnsCBo23G4z/KX3bSfMr7J/QOvB XCmBhmIefn40W2n6VvjFV6zj5jnpX5+cLVV5Wqh0eTen/zIZDa3IdrDgn2lRD5Bo 3qi+PME0lXTANDcbvfLfdAssUDJaAqS82Hc= -----END CERTIFICATE-----Generated at Fri Nov 22 04:51:30 2024 by rpki-client on console-ams.rpki-client.org