$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d6e84e55-5538-3a5e-bd0e-f8a48806ea70.roa File: d6e84e55-5538-3a5e-bd0e-f8a48806ea70.roa (raw, json) Hash identifier: yqSSmmLzBydono8w0tahoRTHDPzK97qf6zbNQgqoV/U= Subject key identifier: 56:93:48:84:E0:63:38:D5:01:F9:30:E9:C9:88:62:2F:5E:26:1B:24 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858459203239C79098FA0063A2AC0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d6e84e55-5538-3a5e-bd0e-f8a48806ea70.roa Signing time: Wed 17 Apr 2024 01:00:24 +0000 ROA not before: Wed 17 Apr 2024 01:00:24 +0000 ROA not after: Tue 16 Jul 2024 01:00:24 +0000 asID: 399668 IP address blocks: 2001:470:176::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:92:03:23:9c:79:09:8f:a0:06:3a:2a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 17 01:00:24 2024 GMT Not After : Jul 16 01:00:24 2024 GMT Subject: CN=0b48fcdb-1244-4760-aa5c-44a1b9e4fb28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9a:91:c5:ac:03:74:e0:aa:30:39:ca:55:64: e7:6b:1d:b3:7c:49:a4:96:33:0f:9d:6a:b4:66:76: c2:58:96:a7:d6:99:44:8d:1b:39:33:59:5c:b3:63: 90:6f:a8:06:64:05:3b:92:b4:d2:8f:7c:82:e9:51: 7e:0d:9a:49:70:e1:8d:53:d2:89:d3:94:4f:f0:45: 23:9c:67:2d:37:6d:ec:6b:ea:79:91:02:85:95:91: c2:24:0e:b1:19:57:8a:7f:40:6b:ad:75:92:b0:10: 07:eb:a6:24:ff:cd:b3:46:42:f8:4c:52:f8:0e:e9: 08:8d:7a:36:d6:9b:c1:a3:ff:f9:14:23:ec:d3:b0: 12:18:d4:69:c0:53:e9:0a:a7:d4:ae:73:62:59:97: 7f:cb:14:0f:20:76:d9:af:be:8d:88:17:8f:b8:e2: ca:0f:e4:ec:67:3f:14:da:e8:31:6c:70:53:d2:a9: bb:92:b1:7a:a2:e2:50:39:b2:54:b3:a7:c3:6c:67: ef:60:51:c3:3e:bc:d4:d2:15:2c:6f:e9:e1:47:36: 99:f0:15:3c:b8:92:3f:62:2d:8b:92:6a:3e:ef:c5: 50:41:11:d6:c5:b1:c3:b5:bd:29:94:00:cf:75:9a: eb:38:91:9d:47:1e:f7:cc:a6:8e:02:46:06:a0:e7: bd:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:93:48:84:E0:63:38:D5:01:F9:30:E9:C9:88:62:2F:5E:26:1B:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d6e84e55-5538-3a5e-bd0e-f8a48806ea70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:176::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:d9:8a:35:13:8a:6c:7c:99:34:62:f5:5f:c1:f6:a7:76:17: ba:aa:d5:a8:4c:45:df:28:10:69:34:26:08:16:50:e1:b4:e0: 41:7e:a9:fc:e9:8e:86:5a:40:fe:97:b7:10:59:23:6a:7e:d1: aa:e1:ef:28:19:d3:ba:04:8a:02:86:3a:d3:83:0f:5c:96:f8: 0a:45:6e:70:35:0d:04:8c:96:62:25:46:11:ce:19:d6:37:29: 8e:22:d0:e1:5a:d4:90:0a:84:f6:a2:7b:3a:d0:ee:1b:6a:06: cd:0d:8c:89:e1:18:61:fa:7c:31:93:71:6d:9a:8e:d3:99:df: a8:42:31:66:5f:77:79:2e:33:03:f6:bb:cc:a9:6d:c8:8e:30: fc:66:41:75:21:52:cd:b4:e8:ae:29:ea:89:43:0c:65:aa:d6: 83:e8:01:19:32:74:7f:69:db:88:21:4f:5c:57:5d:32:6a:91: e7:10:0e:29:dc:2a:1b:f2:bf:f8:89:15:09:5d:8c:ae:85:82: 2c:92:82:90:e7:3f:3f:15:de:b5:17:17:b1:30:05:9e:c9:6b: f1:b5:7d:85:56:79:81:b0:46:e4:4a:04:f5:8f:c9:bd:92:cb: 54:59:2b:cd:e3:ee:85:02:27:d1:6d:83:8c:9b:a6:3c:ec:d1: cf:b9:eb:8f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEWSAyOceQmPoAY6KsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDQxNzAxMDAyNFoXDTI0MDcxNjAxMDAyNFowLzEtMCsGA1UEAxMk MGI0OGZjZGItMTI0NC00NzYwLWFhNWMtNDRhMWI5ZTRmYjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05qRxawDdOCqMDnKVWTnax2zfEmkljMPnWq0 ZnbCWJan1plEjRs5M1lcs2OQb6gGZAU7krTSj3yC6VF+DZpJcOGNU9KJ05RP8EUj nGctN23sa+p5kQKFlZHCJA6xGVeKf0BrrXWSsBAH66Yk/82zRkL4TFL4DukIjXo2 1pvBo//5FCPs07ASGNRpwFPpCqfUrnNiWZd/yxQPIHbZr76NiBePuOLKD+TsZz8U 2ugxbHBT0qm7krF6ouJQObJUs6fDbGfvYFHDPrzU0hUsb+nhRzaZ8BU8uJI/Yi2L kmo+78VQQRHWxbHDtb0plADPdZrrOJGdRx73zKaOAkYGoOe9xQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFaTSITgYzjVAfkw6cmIYi9eJhskMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDZlODRlNTUtNTUzOC0z YTVlLWJkMGUtZjhhNDg4MDZlYTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAF2 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALfZijUTimx8mTRi9V/B9qd2F7qq1ahMRd8oEGk0JggWUOG04EF+ qfzpjoZaQP6XtxBZI2p+0arh7ygZ07oEigKGOtODD1yW+ApFbnA1DQSMlmIlRhHO GdY3KY4i0OFa1JAKhPaiezrQ7htqBs0NjInhGGH6fDGTcW2ajtOZ36hCMWZfd3ku MwP2u8ypbciOMPxmQXUhUs206K4p6olDDGWq1oPoARkydH9p24ghT1xXXTJqkecQ DincKhvyv/iJFQldjK6FgiySgpDnPz8V3rUXF7EwBZ7Ja/G1fYVWeYGwRuRKBPWP yb2Sy1RZK83j7oUCJ9Ftg4ybpjzs0c+5648= -----END CERTIFICATE-----Generated at Mon May 6 22:50:44 2024 by rpki-client on console-ams.rpki-client.org