$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ca42df39-17ea-3589-a094-f5a3476d7085.roa File: ca42df39-17ea-3589-a094-f5a3476d7085.roa (raw, json) Hash identifier: z5ytVWH9cNNrf1OK9YgnHWa9hfdHOyJm51NVzUK9wKw= Subject key identifier: 96:EA:E6:D2:40:4A:54:AB:54:FA:37:17:05:35:77:4B:27:DA:D4:74 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584523DAFE628A94BBF42844F480 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ca42df39-17ea-3589-a094-f5a3476d7085.roa Signing time: Fri 08 Mar 2024 14:00:30 +0000 ROA not before: Fri 08 Mar 2024 14:00:30 +0000 ROA not after: Thu 06 Jun 2024 13:00:30 +0000 asID: 40571 IP address blocks: 2001:470:1c3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:23:da:fe:62:8a:94:bb:f4:28:44:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 8 14:00:30 2024 GMT Not After : Jun 6 13:00:30 2024 GMT Subject: CN=bb57695d-4dd0-4245-8cf8-48f65ad16169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0d:aa:84:33:79:ba:2c:c0:5e:59:87:13:ba: e1:bb:69:a9:c5:a5:52:ad:61:30:6a:2c:9e:bc:87: a0:0a:06:31:94:8c:f3:eb:b5:8c:08:c2:ce:75:c4: 17:d4:87:e9:65:47:fc:7f:80:88:0d:53:59:f1:5d: c6:eb:5a:94:2c:0b:1f:6f:9f:c0:84:a0:d2:f2:66: 65:c8:b4:11:be:e1:ce:9f:36:2e:04:a0:9f:fc:3e: 7b:fe:cf:77:c1:a7:ef:08:40:8a:55:86:5f:ff:59: e3:a2:46:4d:39:1b:1a:e7:6d:6b:2b:97:d6:46:b8: 17:61:9c:bc:8e:ec:1f:a7:c9:d6:f8:74:b4:59:0f: 70:ad:39:6c:a8:a6:94:8d:21:3c:52:cc:20:ef:c5: 6d:45:44:67:1d:4d:73:6d:b4:f0:b3:65:bd:8d:13: ce:d0:bc:8f:af:7b:75:66:b9:72:99:b9:92:4e:ac: 06:6f:f1:34:c8:94:c9:54:8b:24:0c:fb:1c:0d:3a: 0c:62:44:b0:f5:2e:33:f8:37:d6:de:da:9c:90:22: 93:36:95:38:10:03:30:d5:a1:9e:5d:34:e3:06:e2: 31:d9:86:7a:8c:88:00:77:eb:e3:1c:4a:f3:b6:21: 0f:3d:c1:ca:2d:39:ac:73:12:b4:65:e3:b2:d9:70: e5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:EA:E6:D2:40:4A:54:AB:54:FA:37:17:05:35:77:4B:27:DA:D4:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ca42df39-17ea-3589-a094-f5a3476d7085.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1c3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:44:d7:02:ff:e8:e1:ff:29:5d:6b:2e:d2:98:7e:5c:36:c9: 35:dd:b5:f2:b8:5e:55:6e:33:72:49:d3:0b:13:bd:95:ee:cf: de:30:c1:22:d6:17:22:31:51:41:32:90:46:c7:ce:1b:88:b7: a9:2c:33:74:e9:ab:29:ca:35:2d:66:bf:ff:91:16:9a:fd:35: 14:63:48:a0:08:bc:6e:e2:10:74:fe:b2:d6:6f:f3:b2:ed:6f: 7b:8e:f7:dd:f9:57:a1:04:16:5b:ba:5f:af:ec:51:d2:d2:ee: 78:5b:53:ab:d1:31:cb:d3:ff:df:41:13:6a:aa:12:6e:f7:7f: 64:b9:8b:a5:a0:66:ea:7c:85:1a:d7:a8:20:fc:33:6e:aa:a7: f9:6d:0a:d3:75:dd:05:bf:24:4e:ba:83:3e:84:ce:f5:10:72: e1:03:2e:60:19:96:de:80:2c:b3:33:46:06:d6:78:f8:23:b1: 9f:b6:ff:10:95:9a:af:27:2e:85:9d:01:2c:9f:2c:74:62:ee: 6b:f4:80:d1:c4:f1:45:a9:14:6a:a4:6a:85:9d:92:a8:92:6f: ef:c5:ff:08:b6:ac:39:51:40:59:21:30:e7:19:ba:95:6b:32: 46:49:2f:ab:cf:37:37:c1:5d:e0:61:8f:3f:ba:66:98:bc:dc: 86:0b:f6:21 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUj2v5iipS79ChE9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDMwODE0MDAzMFoXDTI0MDYwNjEzMDAzMFowLzEtMCsGA1UEAxMk YmI1NzY5NWQtNGRkMC00MjQ1LThjZjgtNDhmNjVhZDE2MTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsw2qhDN5uizAXlmHE7rhu2mpxaVSrWEwaiye vIegCgYxlIzz67WMCMLOdcQX1IfpZUf8f4CIDVNZ8V3G61qULAsfb5/AhKDS8mZl yLQRvuHOnzYuBKCf/D57/s93wafvCECKVYZf/1njokZNORsa521rK5fWRrgXYZy8 juwfp8nW+HS0WQ9wrTlsqKaUjSE8Uswg78VtRURnHU1zbbTws2W9jRPO0LyPr3t1 ZrlymbmSTqwGb/E0yJTJVIskDPscDToMYkSw9S4z+DfW3tqckCKTNpU4EAMw1aGe XTTjBuIx2YZ6jIgAd+vjHErztiEPPcHKLTmscxK0ZeOy2XDlgwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJbq5tJASlSrVPo3FwU1d0sn2tR0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvY2E0MmRmMzktMTdlYS0z NTg5LWEwOTQtZjVhMzQ3NmQ3MDg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIVE1wL/6OH/KV1rLtKYflw2yTXdtfK4XlVuM3JJ0wsTvZXuz94w wSLWFyIxUUEykEbHzhuIt6ksM3TpqynKNS1mv/+RFpr9NRRjSKAIvG7iEHT+stZv 87Ltb3uO9935V6EEFlu6X6/sUdLS7nhbU6vRMcvT/99BE2qqEm73f2S5i6WgZup8 hRrXqCD8M26qp/ltCtN13QW/JE66gz6EzvUQcuEDLmAZlt6ALLMzRgbWePgjsZ+2 /xCVmq8nLoWdASyfLHRi7mv0gNHE8UWpFGqkaoWdkqiSb+/F/wi2rDlRQFkhMOcZ upVrMkZJL6vPNzfBXeBhjz+6Zpi83IYL9iE= -----END CERTIFICATE-----Generated at Mon May 6 20:30:37 2024 by rpki-client on console-ams.rpki-client.org