$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/015aacab-b734-38ec-ac38-108c123cdc49.roa File: 015aacab-b734-38ec-ac38-108c123cdc49.roa (raw, json) Hash identifier: rTzaWnljqffs9fk28vXCNvjg2tCeBpsxEaQBaqz3mMY= Subject key identifier: B2:31:64:2C:72:AA:B4:E4:E0:B2:19:AC:B5:98:3D:85:3D:51:79:1B Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849446943A86B463E165AFC2F00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/015aacab-b734-38ec-ac38-108c123cdc49.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 59953 IP address blocks: 2001:470:31a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:43:a8:6b:46:3e:16:5a:fc:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=cb6d176c-d269-44f1-9fb9-f4a7d0c0dc48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f2:a8:ba:c8:94:72:7a:eb:cb:e9:7c:c5:37: a5:2f:37:d6:f3:bd:23:d9:40:27:40:2b:34:3b:26: cd:fa:ae:bb:b8:70:b0:21:08:44:8e:36:53:8a:f6: 91:06:28:7c:43:2e:5a:c1:1a:ce:a0:46:dd:7d:95: dc:4c:36:9c:16:36:bb:16:c7:d8:ad:97:8d:45:70: 1d:bf:7e:f7:a0:b7:1d:15:98:4d:14:c0:65:d5:60: a4:7c:e3:04:52:fa:cb:a4:2c:45:67:02:ed:2d:a1: d0:ae:cf:9b:b9:81:77:84:22:58:30:1e:48:79:47: 84:fc:d4:cb:8b:47:27:f2:83:d1:34:95:58:a0:ad: 1d:3a:00:3a:e5:ad:07:96:62:6d:60:36:52:dc:39: 8d:09:e5:68:a4:ef:ad:b2:d0:b6:3f:2a:0d:06:83: 44:4c:01:c3:a2:3d:08:43:5a:74:13:92:77:28:75: 61:d2:b1:8d:60:eb:29:7f:3c:44:03:92:a8:77:89: cc:a8:7b:e4:e3:f5:b7:73:e8:cc:14:50:e8:b3:1d: 1d:a0:ec:4c:99:ec:0b:d5:62:63:db:82:3e:c8:fc: 0f:1c:5b:04:71:2f:a4:04:cd:b5:28:a6:c8:0a:c8: 26:c3:ac:56:6b:9c:c8:b1:02:50:4f:34:c5:32:d0: f1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:31:64:2C:72:AA:B4:E4:E0:B2:19:AC:B5:98:3D:85:3D:51:79:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/015aacab-b734-38ec-ac38-108c123cdc49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:31a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:38:64:70:4d:56:af:a4:7e:2d:b9:0e:d8:b3:f8:29:80:e0: dc:86:be:a4:e2:81:24:4d:3e:6e:0a:0f:85:6e:ab:7f:2e:63: 14:fa:3d:d4:82:c2:db:34:60:53:b6:9c:5b:0d:6a:3d:74:58: 70:34:9b:a1:96:37:e1:24:d3:19:9c:04:5c:46:88:5d:a9:aa: ca:56:18:21:20:48:5b:04:30:4c:ed:76:e1:51:01:27:7c:4b: 6c:97:c8:e4:62:3b:43:d6:cb:10:61:da:45:48:03:52:27:99: d9:89:8e:ac:6a:48:24:27:d0:51:de:2b:34:5c:02:7a:61:43: 89:b9:92:3c:39:ac:9f:dd:9a:31:fc:93:a7:36:18:2e:fa:e1: 16:54:eb:f9:78:e2:41:ab:26:49:15:5e:3f:3a:db:00:57:b5: cf:0c:40:bb:8a:b5:05:d3:0a:b9:79:ba:b8:7e:ca:df:04:f3: 1e:05:24:ee:1b:1a:46:65:65:59:eb:f9:0c:3b:60:7d:77:b8: 5a:16:2f:5a:9a:2b:a0:d8:fe:f6:90:88:4d:c2:80:93:b7:84: 2f:65:56:b7:44:b6:30:06:f8:f0:b8:cb:a5:3b:6c:40:de:53: 94:3e:82:d1:ae:f5:0c:30:62:4e:b2:b2:88:59:29:88:63:d6: f5:d5:da:f0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElEaUOoa0Y+Flr8LwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk Y2I2ZDE3NmMtZDI2OS00NGYxLTlmYjktZjRhN2QwYzBkYzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/KousiUcnrry+l8xTelLzfW870j2UAnQCs0 OybN+q67uHCwIQhEjjZTivaRBih8Qy5awRrOoEbdfZXcTDacFja7FsfYrZeNRXAd v373oLcdFZhNFMBl1WCkfOMEUvrLpCxFZwLtLaHQrs+buYF3hCJYMB5IeUeE/NTL i0cn8oPRNJVYoK0dOgA65a0HlmJtYDZS3DmNCeVopO+tstC2PyoNBoNETAHDoj0I Q1p0E5J3KHVh0rGNYOspfzxEA5Kod4nMqHvk4/W3c+jMFFDosx0doOxMmewL1WJj 24I+yPwPHFsEcS+kBM21KKbICsgmw6xWa5zIsQJQTzTFMtDxIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLIxZCxyqrTk4LIZrLWYPYU9UXkbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDE1YWFjYWItYjczNC0z OGVjLWFjMzgtMTA4YzEyM2NkYzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAMa MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADY4ZHBNVq+kfi25Dtiz+CmA4NyGvqTigSRNPm4KD4Vuq38uYxT6 PdSCwts0YFO2nFsNaj10WHA0m6GWN+Ek0xmcBFxGiF2pqspWGCEgSFsEMEztduFR ASd8S2yXyORiO0PWyxBh2kVIA1InmdmJjqxqSCQn0FHeKzRcAnphQ4m5kjw5rJ/d mjH8k6c2GC764RZU6/l44kGrJkkVXj862wBXtc8MQLuKtQXTCrl5urh+yt8E8x4F JO4bGkZlZVnr+Qw7YH13uFoWL1qaK6DY/vaQiE3CgJO3hC9lVrdEtjAG+PC4y6U7 bEDeU5Q+gtGu9QwwYk6ysohZKYhj1vXV2vA= -----END CERTIFICATE-----Generated at Fri Apr 4 17:56:46 2025 by rpki-client