$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e030487a-b7d1-308b-b35a-7be68066058e.roa File: e030487a-b7d1-308b-b35a-7be68066058e.roa (raw, json) Hash identifier: mFmfff/urEE1jk5q3wgdQZ0pclTHCsrN5qYHLNSUWLc= Subject key identifier: 04:A6:C3:10:B6:1A:AD:A7:A7:D3:A8:57:53:02:1B:C0:20:CC:6B:51 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285847D1489CD973D60FE18F8C7C80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e030487a-b7d1-308b-b35a-7be68066058e.roa Signing time: Sat 09 Nov 2024 02:30:12 +0000 ROA not before: Sat 09 Nov 2024 02:30:12 +0000 ROA not after: Fri 07 Feb 2025 02:30:12 +0000 asID: 147039 IP address blocks: 2001:470:3c3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d1:48:9c:d9:73:d6:0f:e1:8f:8c:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Nov 9 02:30:12 2024 GMT Not After : Feb 7 02:30:12 2025 GMT Subject: CN=bfc8371c-964d-4304-b3a2-2f629e0f5187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cb:7f:a9:2b:7f:19:c1:e0:f7:e6:20:76:f3: 91:45:be:68:ae:55:a9:cf:0d:8f:47:03:9a:bb:c0: a9:2a:55:dc:2c:00:28:1d:ab:64:ef:63:53:15:5c: dc:da:e7:55:7e:cf:75:28:28:23:e4:6d:38:f2:6f: d6:db:a6:8f:01:8d:0f:51:18:92:b4:97:dd:2b:1a: 8b:e0:47:eb:77:fc:3f:7f:de:a7:dd:ce:de:7a:d7: 4b:bf:97:c4:00:dd:91:17:51:b6:94:41:17:a7:9a: 3b:bb:ef:d7:a1:f8:c0:e3:6a:4a:8c:37:3d:f6:1f: 8a:13:4f:bb:2e:c3:f9:04:44:e9:f4:45:b9:79:1f: 78:d0:27:32:9c:35:11:14:4f:12:5f:9a:9c:b6:0b: 96:43:19:4c:40:45:e2:78:7a:52:16:a3:0e:9c:ec: 3b:0a:5b:15:e1:8e:06:86:b8:16:7a:88:43:7f:86: 3f:ba:c6:90:eb:d6:b3:84:10:53:b3:b1:05:f7:5d: a5:ef:63:0e:fa:6e:44:b0:72:6f:4a:02:af:42:d1: a8:cd:8b:cb:90:96:b8:23:4a:f6:3e:01:85:e4:d7: 79:02:ca:5b:2d:78:92:0a:70:b2:ac:5e:b6:6f:97: 2c:e4:49:31:cb:28:69:34:37:89:43:c9:cc:95:07: ba:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A6:C3:10:B6:1A:AD:A7:A7:D3:A8:57:53:02:1B:C0:20:CC:6B:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e030487a-b7d1-308b-b35a-7be68066058e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3c3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:09:ef:87:0e:ad:2d:68:99:5e:46:b5:e3:89:06:58:e2:39: 01:cc:d8:ad:fb:d4:73:87:2c:11:c2:ca:42:bd:aa:0d:8f:35: ce:a2:b3:62:67:5f:ed:51:3a:e8:2a:41:a8:0b:52:8c:09:26: 0a:42:b2:9e:14:85:68:9d:0b:ab:b6:1f:ca:1b:2a:c4:d9:fb: 5f:36:20:c2:78:9a:6e:a1:a6:95:41:a5:8f:e0:ab:62:a3:34: c9:8b:67:61:14:e5:a6:7d:34:f7:ab:e9:af:76:5f:c4:e1:30: d9:4d:f9:00:91:65:a8:3b:fc:2f:92:27:fe:e1:26:f1:1b:86: 76:6d:1d:82:54:f6:c1:c0:1b:7f:27:a7:ca:ed:45:88:58:a8: e0:d9:6c:1d:32:dc:39:e8:ba:48:41:22:04:38:00:55:42:04: 62:ce:01:a3:47:68:bd:34:41:e6:84:c4:90:a9:1a:5c:c3:23: ce:81:9d:5f:0b:5d:7f:14:f5:06:36:8e:92:05:33:90:41:fb: f8:68:29:06:df:e0:c1:4b:8e:56:76:3c:68:3a:4b:74:ad:98: 84:1f:f3:20:81:44:65:89:50:e6:9a:01:d4:da:e7:54:38:67: 33:c3:2b:00:72:a1:3c:2e:d8:2f:6b:b5:c3:d9:28:c2:15:f1: 8f:1a:c8:f2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfRSJzZc9YP4Y+MfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MTEwOTAyMzAxMloXDTI1MDIwNzAyMzAxMlowLzEtMCsGA1UEAxMk YmZjODM3MWMtOTY0ZC00MzA0LWIzYTItMmY2MjllMGY1MTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8t/qSt/GcHg9+YgdvORRb5orlWpzw2PRwOa u8CpKlXcLAAoHatk72NTFVzc2udVfs91KCgj5G048m/W26aPAY0PURiStJfdKxqL 4Efrd/w/f96n3c7eetdLv5fEAN2RF1G2lEEXp5o7u+/XofjA42pKjDc99h+KE0+7 LsP5BETp9EW5eR940CcynDURFE8SX5qctguWQxlMQEXieHpSFqMOnOw7ClsV4Y4G hrgWeohDf4Y/usaQ69azhBBTs7EF912l72MO+m5EsHJvSgKvQtGozYvLkJa4I0r2 PgGF5Nd5AspbLXiSCnCyrF62b5cs5EkxyyhpNDeJQ8nMlQe6DwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFASmwxC2Gq2np9OoV1MCG8AgzGtRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZTAzMDQ4N2EtYjdkMS0z MDhiLWIzNWEtN2JlNjgwNjYwNThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGYJ74cOrS1omV5GteOJBljiOQHM2K371HOHLBHCykK9qg2PNc6i s2JnX+1ROugqQagLUowJJgpCsp4UhWidC6u2H8obKsTZ+182IMJ4mm6hppVBpY/g q2KjNMmLZ2EU5aZ9NPer6a92X8ThMNlN+QCRZag7/C+SJ/7hJvEbhnZtHYJU9sHA G38np8rtRYhYqODZbB0y3DnoukhBIgQ4AFVCBGLOAaNHaL00QeaExJCpGlzDI86B nV8LXX8U9QY2jpIFM5BB+/hoKQbf4MFLjlZ2PGg6S3StmIQf8yCBRGWJUOaaAdTa 51Q4ZzPDKwByoTwu2C9rtcPZKMIV8Y8ayPI= -----END CERTIFICATE-----Generated at Fri Nov 22 04:32:39 2024 by rpki-client on console-fra.rpki-client.org