$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f093272d-f1c8-38e6-a5b1-433feac31ebb.roa File: f093272d-f1c8-38e6-a5b1-433feac31ebb.roa (raw, json) Hash identifier: KFZltOVi3KJnHlJmVDZXflLqCfRRwfegBar4eheBsAo= Subject key identifier: 58:33:43:15:4D:EE:C0:5D:45:35:A4:E1:8D:79:A5:6F:31:3F:AE:8E Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858455A2D7AED3F1BE01D7131ED80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f093272d-f1c8-38e6-a5b1-433feac31ebb.roa Signing time: Thu 28 Mar 2024 01:00:27 +0000 ROA not before: Thu 28 Mar 2024 01:00:27 +0000 ROA not after: Wed 26 Jun 2024 01:00:27 +0000 asID: 22709 IP address blocks: 2001:470:98::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:5a:2d:7a:ed:3f:1b:e0:1d:71:31:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 28 01:00:27 2024 GMT Not After : Jun 26 01:00:27 2024 GMT Subject: CN=5461be7c-52d1-46bd-b287-e1b86ecb0370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:43:44:a8:0f:ab:37:1e:c2:87:c7:d5:fa:73: d6:2d:c7:07:0b:14:89:a0:64:cc:7b:a2:bd:8c:5d: 22:03:f1:ef:f7:8d:a2:7e:bf:30:2b:b6:38:41:1a: 5c:76:db:22:7b:3c:ea:4b:a0:d7:0b:17:4c:5c:1f: 29:b5:6a:57:3b:48:89:9f:d3:e8:7c:79:dd:83:39: 2c:e2:78:da:e7:cb:0c:f3:92:6d:44:85:d4:dd:fb: 30:c5:3b:83:91:2b:43:6d:ac:a1:f2:7f:5a:4c:b9: 76:e2:d0:47:7b:17:b2:a9:e8:c4:cc:6a:c8:d6:dd: b0:a7:88:96:f6:a6:d2:5c:65:75:e8:9d:75:b3:a3: 34:c7:25:22:fe:84:3d:e7:9c:0e:ef:d3:78:72:b4: 98:91:5c:e3:d6:f9:b0:0e:aa:85:b3:75:fb:46:41: 5e:fb:4f:58:f6:7d:f1:16:e2:58:03:3b:a3:1c:72: 03:5f:c9:a9:58:c9:70:a5:3a:ce:a2:73:ee:c2:2c: e9:6a:71:aa:23:ac:16:db:ef:2a:44:2b:4e:bc:61: e4:32:db:87:76:4e:50:d4:0f:be:8d:22:3c:4f:b6: bb:59:21:f9:08:87:ba:b9:60:8a:98:c0:90:b8:9f: 34:90:f3:92:58:04:ec:ff:12:36:aa:86:d1:bb:0f: 94:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:33:43:15:4D:EE:C0:5D:45:35:A4:E1:8D:79:A5:6F:31:3F:AE:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f093272d-f1c8-38e6-a5b1-433feac31ebb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:98::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:78:e9:68:81:f8:57:d6:20:f4:b6:b0:d5:2d:fc:90:7e:58: 9d:30:f5:c9:ee:0d:80:ca:b0:ab:b4:f5:3f:03:f9:5d:f6:7c: b0:91:43:32:87:b5:70:36:79:29:df:ee:99:66:1a:f5:ab:b4: 58:ac:92:4c:4a:e3:08:65:bc:3c:14:50:23:46:6d:78:db:45: c6:df:f2:3a:57:f8:6f:c9:ca:00:a9:0c:a4:29:d8:2e:24:d4: db:e7:87:ba:ae:78:d9:49:aa:64:1c:c3:34:af:b0:7d:f1:62: ad:de:97:22:76:9a:95:03:37:5f:21:91:bb:cd:3b:0a:8e:7c: bd:0f:7d:7b:e1:52:5b:45:7c:97:34:46:89:9f:6a:22:3b:19: d5:e3:a6:06:d4:89:79:50:56:aa:a6:c9:7f:c4:9a:9f:c7:b0: 20:54:06:3d:dc:8f:14:80:3f:7f:f8:06:69:44:32:d9:df:d4: f7:8b:de:f4:8a:bc:dc:a6:75:de:7c:78:02:16:56:90:82:64: f5:cf:f5:a0:40:8c:83:92:d0:93:4a:56:e3:f7:58:95:a3:54: ce:ef:d2:d4:c3:79:f7:68:e8:98:65:2b:9a:23:00:ca:14:18: f2:ba:1a:cf:47:6f:9c:dc:54:48:c8:4a:94:f7:79:59:a4:85: fa:ee:e7:fe -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVaLXrtPxvgHXEx7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDMyODAxMDAyN1oXDTI0MDYyNjAxMDAyN1owLzEtMCsGA1UEAxMk NTQ2MWJlN2MtNTJkMS00NmJkLWIyODctZTFiODZlY2IwMzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikNEqA+rNx7Ch8fV+nPWLccHCxSJoGTMe6K9 jF0iA/Hv942ifr8wK7Y4QRpcdtsiezzqS6DXCxdMXB8ptWpXO0iJn9PofHndgzks 4nja58sM85JtRIXU3fswxTuDkStDbayh8n9aTLl24tBHexeyqejEzGrI1t2wp4iW 9qbSXGV16J11s6M0xyUi/oQ955wO79N4crSYkVzj1vmwDqqFs3X7RkFe+09Y9n3x FuJYAzujHHIDX8mpWMlwpTrOonPuwizpanGqI6wW2+8qRCtOvGHkMtuHdk5Q1A++ jSI8T7a7WSH5CIe6uWCKmMCQuJ80kPOSWATs/xI2qobRuw+UEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFgzQxVN7sBdRTWk4Y15pW8xP66OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjA5MzI3MmQtZjFjOC0z OGU2LWE1YjEtNDMzZmVhYzMxZWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB946WiB+FfWIPS2sNUt/JB+WJ0w9cnuDYDKsKu09T8D+V32fLCR QzKHtXA2eSnf7plmGvWrtFiskkxK4whlvDwUUCNGbXjbRcbf8jpX+G/JygCpDKQp 2C4k1Nvnh7queNlJqmQcwzSvsH3xYq3elyJ2mpUDN18hkbvNOwqOfL0PfXvhUltF fJc0RomfaiI7GdXjpgbUiXlQVqqmyX/Emp/HsCBUBj3cjxSAP3/4BmlEMtnf1PeL 3vSKvNymdd58eAIWVpCCZPXP9aBAjIOS0JNKVuP3WJWjVM7v0tTDefdo6JhlK5oj AMoUGPK6Gs9Hb5zcVEjISpT3eVmkhfru5/4= -----END CERTIFICATE-----Generated at Mon May 6 03:09:30 2024 by rpki-client on console-fra.rpki-client.org