$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/df4f7c16-6ad6-390f-9888-d5033f96f79f.roa File: df4f7c16-6ad6-390f-9888-d5033f96f79f.roa (raw, json) Hash identifier: ffJPtRHeIHF8ni7sVu0RpCoJaWsSI23AiEfabaESIwo= Subject key identifier: 3F:AB:E3:2A:3F:D7:09:18:80:40:65:2F:AD:08:40:73:A4:0B:CE:22 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858473A5B6BC29D6A12D9B288F700 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/df4f7c16-6ad6-390f-9888-d5033f96f79f.roa Signing time: Mon 16 Sep 2024 01:00:29 +0000 ROA not before: Mon 16 Sep 2024 01:00:29 +0000 ROA not after: Sun 15 Dec 2024 02:00:29 +0000 asID: 210000 IP address blocks: 2001:470:299::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3a:5b:6b:c2:9d:6a:12:d9:b2:88:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 16 01:00:29 2024 GMT Not After : Dec 15 02:00:29 2024 GMT Subject: CN=90aeb6f7-ab3d-4761-a94b-1b0dfe2f96b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:73:54:f3:85:ee:8a:a0:ce:dd:f9:96:3b:27: 51:ec:2a:9c:f2:74:68:1d:69:c7:b7:b9:10:89:07: a8:18:6a:f1:b1:30:12:4b:3d:5d:ed:03:78:a8:5e: d4:3a:df:b2:d8:9f:72:58:b9:a6:ff:a6:14:0d:10: 7a:06:03:9f:a1:27:b0:e6:c0:6f:14:e7:4c:a0:59: 2f:36:75:b6:a6:68:70:81:e5:10:f5:83:8d:42:c4: 30:12:79:76:a3:59:6f:d6:00:38:84:33:a0:33:9e: 0d:f0:58:29:f3:f5:ff:fc:e2:c5:b4:29:65:b8:3b: 0d:2c:b2:c0:d1:e0:3c:ca:d9:1a:82:63:7f:7f:2e: 42:80:d9:8d:3e:10:e4:fd:c6:01:fe:8d:06:c6:d2: eb:5e:4e:a2:ca:31:b2:14:e5:48:9e:44:65:18:85: c8:26:10:1c:d1:39:be:9d:e2:15:e1:af:5c:02:14: 49:64:e8:78:ef:dd:92:a3:b9:d4:ed:03:a1:19:37: a6:a5:ac:cd:24:fd:a7:6b:3d:f3:8b:f0:2f:00:03: 9b:62:fc:4c:52:5e:4d:c3:63:2f:83:9a:1e:99:28: 03:3f:03:d4:59:1d:69:91:54:f3:f9:1c:df:24:5f: fa:be:fc:30:0e:1f:59:3a:79:83:08:10:30:d9:0e: 72:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:AB:E3:2A:3F:D7:09:18:80:40:65:2F:AD:08:40:73:A4:0B:CE:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/df4f7c16-6ad6-390f-9888-d5033f96f79f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:299::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:6b:5e:18:98:f2:b8:d4:ee:25:57:e7:ad:67:f6:c5:d1:71: 67:b9:d0:fd:06:f6:d8:1d:c5:b7:7c:40:b2:e9:e6:a9:46:fb: 3c:f7:b0:11:13:16:51:ea:92:c6:13:bd:f7:51:d2:8e:cd:5b: e6:a5:70:21:90:1f:97:d8:5d:9c:49:ac:f1:a5:e2:9b:f6:c2: f2:91:0c:17:c0:cd:36:a4:a9:22:c8:f8:03:e7:f6:1a:12:10: 4c:04:0c:15:e5:37:7f:fa:06:e4:ff:ab:03:5e:be:38:ba:db: 69:8a:55:c8:f5:00:bb:5a:2f:15:a4:e0:7c:35:2b:e7:87:74: 84:f9:ba:f5:27:90:6c:6e:c5:e1:d8:10:a2:5c:40:c4:02:e2: 5d:31:a0:da:47:55:a5:1b:bd:86:6c:f8:10:f1:88:80:07:3d: 5b:9b:11:0e:37:88:a0:a6:38:67:bd:2d:3a:5b:c2:92:a4:38: 08:5c:61:b3:8e:06:81:37:3d:92:29:89:22:e2:6d:0d:73:86: 48:d5:02:e5:ed:54:62:a6:81:83:5d:88:d8:32:ac:14:6f:ec: 13:67:55:2c:f1:37:e6:32:cf:90:25:e8:e1:b7:ba:9e:49:4b: 42:a4:ba:bc:dc:fe:7a:10:c8:de:c5:86:1b:9f:6d:6f:a6:13: ad:6f:b0:ca -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEc6W2vCnWoS2bKI9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk OTBhZWI2ZjctYWIzZC00NzYxLWE5NGItMWIwZGZlMmY5NmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3NU84XuiqDO3fmWOydR7Cqc8nRoHWnHt7kQ iQeoGGrxsTASSz1d7QN4qF7UOt+y2J9yWLmm/6YUDRB6BgOfoSew5sBvFOdMoFkv NnW2pmhwgeUQ9YONQsQwEnl2o1lv1gA4hDOgM54N8Fgp8/X//OLFtClluDsNLLLA 0eA8ytkagmN/fy5CgNmNPhDk/cYB/o0GxtLrXk6iyjGyFOVInkRlGIXIJhAc0Tm+ neIV4a9cAhRJZOh4792So7nU7QOhGTempazNJP2naz3zi/AvAAObYvxMUl5Nw2Mv g5oemSgDPwPUWR1pkVTz+RzfJF/6vvwwDh9ZOnmDCBAw2Q5y9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD+r4yo/1wkYgEBlL60IQHOkC84iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZGY0ZjdjMTYtNmFkNi0z OTBmLTk4ODgtZDUwMzNmOTZmNzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKZ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADZrXhiY8rjU7iVX561n9sXRcWe50P0G9tgdxbd8QLLp5qlG+zz3 sBETFlHqksYTvfdR0o7NW+alcCGQH5fYXZxJrPGl4pv2wvKRDBfAzTakqSLI+APn 9hoSEEwEDBXlN3/6BuT/qwNevji622mKVcj1ALtaLxWk4Hw1K+eHdIT5uvUnkGxu xeHYEKJcQMQC4l0xoNpHVaUbvYZs+BDxiIAHPVubEQ43iKCmOGe9LTpbwpKkOAhc YbOOBoE3PZIpiSLibQ1zhkjVAuXtVGKmgYNdiNgyrBRv7BNnVSzxN+Yyz5Al6OG3 up5JS0Kkurzc/noQyN7FhhufbW+mE61vsMo= -----END CERTIFICATE-----Generated at Fri Nov 22 04:32:39 2024 by rpki-client on console-fra.rpki-client.org