$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d4f65c00-6562-3e82-baa3-25f576740985.roa File: d4f65c00-6562-3e82-baa3-25f576740985.roa (raw, json) Hash identifier: Jj5KUaHPosU91ixO5Un6qoO4pUCE/BDMBF3jIMSKlGQ= Subject key identifier: 3B:32:76:08:7A:08:4F:64:A9:43:AC:D0:E3:3C:99:C3:DA:92:06:2E Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584769DF83A018920D7AB3B30AC0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d4f65c00-6562-3e82-baa3-25f576740985.roa Signing time: Thu 03 Oct 2024 01:30:11 +0000 ROA not before: Thu 03 Oct 2024 01:30:11 +0000 ROA not after: Wed 01 Jan 2025 02:30:11 +0000 asID: 204536 IP address blocks: 2001:470:39b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:69:df:83:a0:18:92:0d:7a:b3:b3:0a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 3 01:30:11 2024 GMT Not After : Jan 1 02:30:11 2025 GMT Subject: CN=a0621443-7a54-4806-9134-e1bd7de43530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c0:f5:3c:e0:96:ed:3f:35:9f:62:21:a5:d2: c5:a6:14:61:c6:a7:52:22:5e:c1:db:a0:13:44:2f: a0:eb:3d:db:a3:94:6f:ea:09:9a:d0:c1:1a:9e:99: be:73:e0:eb:ae:62:0a:ef:16:ed:de:bd:85:ad:4b: 3d:a0:e9:d8:ca:85:13:22:3d:a0:81:f1:23:ff:86: b5:6c:7a:ec:d5:47:75:87:84:5d:19:c0:b1:ac:6e: ed:9c:e7:00:34:69:80:9c:3e:d8:82:28:65:8d:c6: c8:2e:b6:8c:b5:e2:ec:96:3c:69:82:7b:bc:91:6f: 55:f3:17:90:93:4a:03:f3:9d:ff:55:31:55:e8:57: 58:ef:62:b8:a3:ac:72:d0:d1:4b:28:5a:f2:a3:79: 18:ba:65:42:19:f5:5b:21:44:6f:29:8a:9d:58:cf: 16:b1:7e:41:7c:38:5e:83:5d:d9:02:56:a6:4b:db: 2a:27:5b:7c:51:d6:d2:21:e6:2d:4a:8b:9a:46:94: 0b:a7:9a:49:49:93:5e:f7:09:54:a7:08:42:0a:40: 2c:e6:73:44:a5:81:4d:9d:c5:63:ad:7c:b3:9a:f3: d0:ab:de:7c:10:07:d7:6d:f7:0a:10:b3:31:37:d5: 32:10:3c:ca:9c:f8:22:b3:ab:a4:77:e3:41:8e:bb: 31:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:32:76:08:7A:08:4F:64:A9:43:AC:D0:E3:3C:99:C3:DA:92:06:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d4f65c00-6562-3e82-baa3-25f576740985.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:39b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:77:b9:d0:cf:a7:24:e5:62:ea:7f:0f:10:55:0f:d5:01:9d: 8a:ae:d9:c7:c9:b2:23:a6:f1:b5:09:e5:35:31:83:85:8c:a3: 03:58:c6:5f:88:db:0d:0c:c1:cd:db:92:58:d0:f4:7a:c6:11: 8e:7c:33:48:6f:b4:72:3a:4e:90:b4:69:47:16:e9:36:28:b9: 49:b7:41:33:68:1f:77:cd:c4:0f:9c:83:07:87:bc:ec:ab:b8: 20:88:a6:62:b4:c1:30:10:62:77:8c:7c:98:8a:cd:70:1f:d5: a3:b0:9f:75:4e:de:5f:da:2a:5b:22:9e:d8:ef:c3:ec:70:10: 1c:54:8a:60:c9:cf:06:87:f3:db:fc:f1:24:05:af:ef:a1:73: ce:92:80:70:1f:27:d2:5f:99:ca:c6:fb:05:bf:96:53:36:0e: f7:c3:a2:49:d5:94:6a:b1:4c:4e:6f:dc:44:9a:63:75:39:9e: 9e:6f:37:c5:fd:03:ab:08:f1:fc:82:fd:8d:65:d1:00:bb:44: 9f:85:15:20:af:16:7a:63:da:ab:a0:79:66:eb:7b:cb:d0:dd: 7e:5e:8d:54:20:3c:8c:4f:a9:5e:72:e6:32:b9:96:0f:df:d2: ce:98:c1:11:2b:cf:b9:69:46:f1:2a:5e:9a:57:53:b3:fc:16: fe:b6:23:e9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdp34OgGJINerOzCsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MTAwMzAxMzAxMVoXDTI1MDEwMTAyMzAxMVowLzEtMCsGA1UEAxMk YTA2MjE0NDMtN2E1NC00ODA2LTkxMzQtZTFiZDdkZTQzNTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8D1POCW7T81n2IhpdLFphRhxqdSIl7B26AT RC+g6z3bo5Rv6gma0MEanpm+c+DrrmIK7xbt3r2FrUs9oOnYyoUTIj2ggfEj/4a1 bHrs1Ud1h4RdGcCxrG7tnOcANGmAnD7YgihljcbILraMteLsljxpgnu8kW9V8xeQ k0oD853/VTFV6FdY72K4o6xy0NFLKFryo3kYumVCGfVbIURvKYqdWM8WsX5BfDhe g13ZAlamS9sqJ1t8UdbSIeYtSouaRpQLp5pJSZNe9wlUpwhCCkAs5nNEpYFNncVj rXyzmvPQq958EAfXbfcKELMxN9UyEDzKnPgis6ukd+NBjrsxGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDsydgh6CE9kqUOs0OM8mcPakgYuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDRmNjVjMDAtNjU2Mi0z ZTgyLWJhYTMtMjVmNTc2NzQwOTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADB3udDPpyTlYup/DxBVD9UBnYqu2cfJsiOm8bUJ5TUxg4WMowNY xl+I2w0Mwc3bkljQ9HrGEY58M0hvtHI6TpC0aUcW6TYouUm3QTNoH3fNxA+cgweH vOyruCCIpmK0wTAQYneMfJiKzXAf1aOwn3VO3l/aKlsintjvw+xwEBxUimDJzwaH 89v88SQFr++hc86SgHAfJ9JfmcrG+wW/llM2DvfDoknVlGqxTE5v3ESaY3U5np5v N8X9A6sI8fyC/Y1l0QC7RJ+FFSCvFnpj2qugeWbre8vQ3X5ejVQgPIxPqV5y5jK5 lg/f0s6YwRErz7lpRvEqXppXU7P8Fv62I+k= -----END CERTIFICATE-----Generated at Fri Nov 22 04:51:30 2024 by rpki-client on console-ams.rpki-client.org