$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d843af4f-a669-351d-bd42-0f6576c63cef.roa File: d843af4f-a669-351d-bd42-0f6576c63cef.roa (raw, json) Hash identifier: tXVvabcexV7WqsOYLml8U4iTf5Z+DQUwFLcRNxMkDt4= Subject key identifier: 4A:2A:E2:6F:B6:E4:A2:1B:4B:EC:32:B3:AD:46:5E:BD:F9:38:A1:EB Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285844F730103B3A227C9C2379FB00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d843af4f-a669-351d-bd42-0f6576c63cef.roa Signing time: Wed 21 Feb 2024 14:00:32 +0000 ROA not before: Wed 21 Feb 2024 14:00:32 +0000 ROA not after: Tue 21 May 2024 13:00:32 +0000 asID: 26042 IP address blocks: 2001:470:1ac::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f7:30:10:3b:3a:22:7c:9c:23:79:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 21 14:00:32 2024 GMT Not After : May 21 13:00:32 2024 GMT Subject: CN=f8997e74-b03a-464b-b088-76f5fe154249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:f5:92:d2:08:df:0e:09:17:a3:7b:1c:5b:42: 30:63:78:41:96:ee:6f:71:2d:dc:24:46:bd:90:22: c4:d0:13:e0:4e:9c:d0:bd:9c:b4:28:74:0b:68:53: f2:3c:43:42:89:db:30:eb:74:44:bb:af:48:da:15: 9c:b5:b0:f6:53:af:39:a9:33:18:f5:dc:c9:bb:05: 96:b9:09:48:b2:36:ff:03:56:e2:54:ee:66:e2:be: 30:75:46:23:03:64:fe:70:c2:26:1b:a3:64:bb:a2: fe:c3:8e:4d:e1:4b:0d:2a:17:08:87:d2:01:61:26: c3:40:8a:72:f0:e3:78:bf:f1:02:4b:5b:b3:c9:46: 0c:aa:8a:72:a7:af:99:17:44:a0:97:36:89:23:15: 04:8b:86:9d:47:9e:b1:d6:20:0b:f1:dc:12:a5:44: 01:2f:5a:37:c3:e5:9e:ac:ce:ff:ba:2a:07:69:00: 0a:74:01:35:a3:68:66:46:87:91:eb:b2:66:71:00: 79:00:a7:40:7f:ee:c6:e5:ef:a1:f0:a1:52:83:91: 37:65:75:81:f7:0f:0f:e8:87:92:dd:18:9d:b3:49: 3c:92:e1:7b:4b:43:ee:60:85:18:c9:00:94:05:f5: 07:68:87:bc:34:4a:06:0a:35:8c:d9:9a:db:ba:17: 6e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:2A:E2:6F:B6:E4:A2:1B:4B:EC:32:B3:AD:46:5E:BD:F9:38:A1:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d843af4f-a669-351d-bd42-0f6576c63cef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1ac::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:81:ec:6d:46:e7:53:36:ba:3b:85:fc:1b:ec:ff:24:20:b5: 84:e4:18:f7:5b:4a:72:db:a6:d5:5f:ec:f5:fb:6f:8b:35:dc: 1f:87:ce:9f:65:1a:65:ca:9d:90:e4:94:5e:7e:27:7d:a4:bd: 2e:4a:79:7b:03:5b:e4:c9:b7:6c:54:39:38:7a:ce:49:0b:07: 04:cb:33:a7:e4:10:27:2c:66:d0:2b:49:db:fd:95:47:2c:da: 48:f5:d5:91:f7:9a:d8:b3:07:74:84:1a:09:11:28:c2:fa:7c: b9:10:4b:f3:60:b1:f5:59:bc:4f:c7:29:5d:04:8f:1c:5d:ff: 1f:15:2f:4a:7b:c0:6d:54:7c:a2:8c:62:3d:a5:45:08:3f:f6: 77:37:d1:42:2f:14:7c:88:cd:c5:41:2a:17:e7:40:d0:41:8e: b9:cd:5e:61:be:02:fb:6b:d7:da:14:dc:9b:12:9c:b0:8d:ff: 23:3d:6c:ac:b8:9b:17:28:8c:98:80:b2:71:cc:2e:13:09:d9: 2c:1a:e9:58:21:8c:cc:5c:72:ec:d0:7b:9f:2a:fc:e3:d6:ab: a6:86:a0:01:dc:a8:7c:3b:96:90:7a:43:35:4f:15:6f:6e:80: 47:b9:22:95:28:01:11:6e:55:8d:49:bb:83:8d:16:92:75:da: e3:c7:b2:70 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWET3MBA7OiJ8nCN5+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDIyMTE0MDAzMloXDTI0MDUyMTEzMDAzMlowLzEtMCsGA1UEAxMk Zjg5OTdlNzQtYjAzYS00NjRiLWIwODgtNzZmNWZlMTU0MjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/PWS0gjfDgkXo3scW0IwY3hBlu5vcS3cJEa9 kCLE0BPgTpzQvZy0KHQLaFPyPENCidsw63REu69I2hWctbD2U685qTMY9dzJuwWW uQlIsjb/A1biVO5m4r4wdUYjA2T+cMImG6Nku6L+w45N4UsNKhcIh9IBYSbDQIpy 8ON4v/ECS1uzyUYMqopyp6+ZF0SglzaJIxUEi4adR56x1iAL8dwSpUQBL1o3w+We rM7/uioHaQAKdAE1o2hmRoeR67JmcQB5AKdAf+7G5e+h8KFSg5E3ZXWB9w8P6IeS 3Rids0k8kuF7S0PuYIUYyQCUBfUHaIe8NEoGCjWM2ZrbuhdumwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEoq4m+25KIbS+wys61GXr35OKHrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDg0M2FmNGYtYTY2OS0z NTFkLWJkNDItMGY2NTc2YzYzY2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAGs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKuB7G1G51M2ujuF/Bvs/yQgtYTkGPdbSnLbptVf7PX7b4s13B+H zp9lGmXKnZDklF5+J32kvS5KeXsDW+TJt2xUOTh6zkkLBwTLM6fkECcsZtArSdv9 lUcs2kj11ZH3mtizB3SEGgkRKML6fLkQS/NgsfVZvE/HKV0Ejxxd/x8VL0p7wG1U fKKMYj2lRQg/9nc30UIvFHyIzcVBKhfnQNBBjrnNXmG+Avtr19oU3JsSnLCN/yM9 bKy4mxcojJiAsnHMLhMJ2Swa6VghjMxccuzQe58q/OPWq6aGoAHcqHw7lpB6QzVP FW9ugEe5IpUoARFuVY1Ju4ONFpJ12uPHsnA= -----END CERTIFICATE-----Generated at Mon May 6 15:20:38 2024 by rpki-client on console-ams.rpki-client.org