$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ccae8c85-f8f3-36b0-948e-821fa014b3d9.roa File: ccae8c85-f8f3-36b0-948e-821fa014b3d9.roa (raw, json) Hash identifier: DersZAbDrRO5iNw6V1QT3Kc2TvejDkmq5gwak2bTh3c= Subject key identifier: 9E:F0:79:5F:4B:89:48:6E:F5:35:ED:C6:B3:79:4A:F7:E8:94:44:E0 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584843BEAF10422E949C29B09720 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ccae8c85-f8f3-36b0-948e-821fa014b3d9.roa Signing time: Fri 20 Dec 2024 02:30:15 +0000 ROA not before: Fri 20 Dec 2024 02:30:15 +0000 ROA not after: Thu 20 Mar 2025 01:30:15 +0000 asID: 36902 IP address blocks: 2001:470:21f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:43:be:af:10:42:2e:94:9c:29:b0:97:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Dec 20 02:30:15 2024 GMT Not After : Mar 20 01:30:15 2025 GMT Subject: CN=648899ca-8192-4a96-aa49-c6dea8031f08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a4:68:43:ee:79:71:00:ee:64:5b:00:aa:06: c0:82:71:c0:bf:40:06:02:30:b3:88:1b:3e:0f:2c: 57:0f:e4:3f:c2:28:15:83:23:b2:1e:86:f9:eb:23: 9e:05:d5:75:00:ba:c3:6a:83:4b:4d:1a:34:f6:82: fc:91:13:bc:2f:68:ce:0f:63:f6:9e:7e:0b:6e:b3: 49:56:9e:4e:c6:7b:d9:b7:6b:37:a9:00:f7:27:4b: 1b:c7:60:48:1a:b2:bb:a7:54:71:53:e5:71:e6:99: 11:04:0e:8e:bd:e5:02:c8:4e:2d:2b:85:14:ea:af: 4e:fb:f5:43:15:19:e6:65:34:c0:56:49:b0:a3:35: de:16:9f:c6:71:52:f7:c1:92:7c:07:3d:17:19:1b: 49:9a:ae:73:76:c7:93:70:e3:80:20:8c:32:fe:9f: ed:2b:66:28:cb:69:ff:32:39:d1:82:d3:08:8b:20: 4f:9c:96:bb:04:2f:34:a7:50:38:8f:5d:e8:c6:24: 1d:e2:bb:17:c1:39:77:9c:b1:21:7a:46:96:49:9e: ac:e6:c1:a2:63:30:b4:af:4f:84:4e:b5:6b:d2:53: 4b:6e:03:bf:b2:85:d3:cf:af:6b:11:e3:8a:fa:55: 1f:fe:4e:02:98:d6:f2:14:41:41:8a:2b:ab:13:99: 59:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:F0:79:5F:4B:89:48:6E:F5:35:ED:C6:B3:79:4A:F7:E8:94:44:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ccae8c85-f8f3-36b0-948e-821fa014b3d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:21f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:7a:24:89:44:37:08:0a:d3:35:2e:3c:a6:fe:a6:69:20:d0: 81:4b:da:86:ff:bd:e8:d7:83:8a:e1:79:43:f5:2a:18:19:6d: da:b9:c8:d5:97:6e:bb:1a:7d:bb:31:d5:28:e8:c2:c7:02:ff: 0c:d4:f7:66:7f:20:21:ee:e4:01:4b:ac:2d:8b:ab:cf:6c:7b: 7c:e8:cc:b3:a5:71:ba:a1:ba:17:2b:27:99:3e:ef:e3:8a:b0: d9:b0:11:41:aa:43:8a:39:d3:b7:cf:2c:f7:f6:e6:87:b3:e6: 92:86:72:47:b8:00:56:c3:97:3d:1b:39:55:6d:5b:7b:5f:30: 34:89:b5:ca:49:60:db:4a:28:28:b8:de:f9:06:b3:f3:b5:6b: 42:1f:7e:a6:96:e1:40:07:41:2d:fb:1f:ce:80:fe:ef:29:f4: ee:fe:67:0e:87:1b:24:48:d4:cf:dc:b4:1b:9f:cb:96:95:72: a3:9a:66:d0:d6:9d:2f:a5:05:9c:cd:7e:ec:22:e1:cb:e3:13: 94:f0:bb:c4:e2:4e:eb:7e:46:92:1b:7d:3c:46:67:fb:c0:58: 44:06:7d:fe:49:3d:d9:12:f6:ab:34:76:ea:84:af:03:f8:78: 28:57:5c:d2:08:29:c4:6a:16:0b:ce:06:90:9a:07:3d:59:0c: 56:d4:73:b8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhDvq8QQi6UnCmwlyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MTIyMDAyMzAxNVoXDTI1MDMyMDAxMzAxNVowLzEtMCsGA1UEAxMk NjQ4ODk5Y2EtODE5Mi00YTk2LWFhNDktYzZkZWE4MDMxZjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKRoQ+55cQDuZFsAqgbAgnHAv0AGAjCziBs+ DyxXD+Q/wigVgyOyHob56yOeBdV1ALrDaoNLTRo09oL8kRO8L2jOD2P2nn4LbrNJ Vp5OxnvZt2s3qQD3J0sbx2BIGrK7p1RxU+Vx5pkRBA6OveUCyE4tK4UU6q9O+/VD FRnmZTTAVkmwozXeFp/GcVL3wZJ8Bz0XGRtJmq5zdseTcOOAIIwy/p/tK2Yoy2n/ MjnRgtMIiyBPnJa7BC80p1A4j13oxiQd4rsXwTl3nLEhekaWSZ6s5sGiYzC0r0+E TrVr0lNLbgO/soXTz69rEeOK+lUf/k4CmNbyFEFBiiurE5lZWQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ7weV9LiUhu9TXtxrN5SvfolETgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvY2NhZThjODUtZjhmMy0z NmIwLTk0OGUtODIxZmEwMTRiM2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAIf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJh6JIlENwgK0zUuPKb+pmkg0IFL2ob/vejXg4rheUP1KhgZbdq5 yNWXbrsafbsx1SjowscC/wzU92Z/ICHu5AFLrC2Lq89se3zozLOlcbqhuhcrJ5k+ 7+OKsNmwEUGqQ4o507fPLPf25oez5pKGcke4AFbDlz0bOVVtW3tfMDSJtcpJYNtK KCi43vkGs/O1a0IffqaW4UAHQS37H86A/u8p9O7+Zw6HGyRI1M/ctBufy5aVcqOa ZtDWnS+lBZzNfuwi4cvjE5Twu8TiTut+RpIbfTxGZ/vAWEQGff5JPdkS9qs0duqE rwP4eChXXNIIKcRqFgvOBpCaBz1ZDFbUc7g= -----END CERTIFICATE-----Generated at Wed Feb 5 04:38:08 2025 by rpki-client