$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0868ac9d-cf60-3004-a29f-14d8f9e2e2a3.roa File: 0868ac9d-cf60-3004-a29f-14d8f9e2e2a3.roa (raw, json) Hash identifier: 7u4hEu0pQdVj2J2AXWKtoDeSpnV5m9kYtQvhWjn0Qe4= Subject key identifier: 6F:98:8D:F9:F6:4A:98:03:38:91:91:C2:17:2C:48:FB:BF:E2:53:32 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926D031CFBDF97832FA2420 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0868ac9d-cf60-3004-a29f-14d8f9e2e2a3.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 31151 IP address blocks: 2001:470:2df::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:d0:31:cf:bd:f9:78:32:fa:24:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=f881652a-0a6f-45a4-90da-3c2a3365b170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f8:67:d5:29:92:82:96:64:4d:46:80:18:ce: b9:00:66:aa:27:37:da:1b:af:4e:43:71:89:b4:9c: 86:2d:2f:0c:45:77:33:bf:8e:15:7e:b7:f6:69:97: db:52:3a:3e:1f:90:03:68:50:81:b7:c6:f2:f6:c4: 69:de:38:a2:5a:d8:fa:f9:85:30:e6:37:8d:fc:70: e9:c1:aa:83:cc:6f:0b:c7:4a:64:86:36:92:5b:15: 7c:3d:4c:06:f2:e1:84:6f:40:ba:a9:24:5d:9a:26: 76:a7:3c:0a:57:b3:e8:41:d0:21:a7:4e:2c:8b:2e: 22:21:e7:15:a4:3e:77:a4:f3:ba:fb:0e:05:12:3c: ba:4f:8c:7a:15:d7:09:e3:f5:94:8a:53:2f:e3:ef: 3f:5e:7b:26:61:e2:a6:05:de:cd:69:38:e8:e3:2a: 80:29:ce:0e:43:38:df:94:6a:48:da:6b:11:90:ac: 03:68:c0:4d:4c:e6:26:34:91:f7:93:25:54:3c:9a: 8a:e3:1e:e1:2e:14:17:ca:40:5c:0a:62:76:cf:90: 84:c1:bf:f7:6e:40:dc:ef:b9:7f:eb:eb:e6:12:53: a9:75:13:5c:2c:e3:75:ca:7d:0e:5d:6e:aa:28:37: 03:7f:45:7a:dc:60:22:cf:44:28:ab:04:ba:37:7c: d4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:98:8D:F9:F6:4A:98:03:38:91:91:C2:17:2C:48:FB:BF:E2:53:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0868ac9d-cf60-3004-a29f-14d8f9e2e2a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2df::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:68:af:aa:f0:40:7a:38:5f:51:20:d5:8c:23:d1:2c:6b:c4: 89:80:97:4b:3d:43:27:18:1b:ca:d2:f0:bd:21:8f:33:86:65: b1:d8:87:53:68:df:ed:81:89:ac:c8:57:9b:ea:eb:c6:dc:f3: f8:2f:5f:5d:a6:6b:28:42:d8:ec:bb:ec:0f:72:48:04:82:6d: d5:ef:17:02:66:59:23:cc:71:89:03:cf:08:a9:6b:a3:48:49: f8:34:70:02:92:1e:6d:2d:7f:0e:a9:6f:67:f8:5a:79:f9:94: 04:e4:cb:54:40:3c:7c:8c:61:c9:4e:ae:d0:ba:da:de:a0:89: 9c:a4:9d:32:0b:ee:0d:c8:82:fa:ea:96:f3:ee:70:59:ec:78: b7:0d:00:89:c6:bf:1c:fd:f4:28:f8:2d:2a:5d:12:d8:92:4d: 45:7a:bc:3b:fc:9e:4b:af:b7:b3:e3:80:eb:64:2d:ca:4c:7f: da:ed:e7:c7:06:b0:08:d7:db:9c:63:ac:c3:d6:77:f3:46:14: 7a:a5:d4:d0:1c:fb:d8:e1:cd:db:e7:1b:b5:17:34:5a:a5:4b: 3a:e3:80:04:3d:c6:81:5e:15:a4:10:8f:1c:bd:be:76:fe:c5: cf:18:aa:7b:61:17:d8:d6:f4:fa:49:8d:e2:97:46:8b:18:36: 4c:15:77:b5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JtAxz735eDL6JCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk Zjg4MTY1MmEtMGE2Zi00NWE0LTkwZGEtM2MyYTMzNjViMTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvhn1SmSgpZkTUaAGM65AGaqJzfaG69OQ3GJ tJyGLS8MRXczv44Vfrf2aZfbUjo+H5ADaFCBt8by9sRp3jiiWtj6+YUw5jeN/HDp waqDzG8Lx0pkhjaSWxV8PUwG8uGEb0C6qSRdmiZ2pzwKV7PoQdAhp04siy4iIecV pD53pPO6+w4FEjy6T4x6FdcJ4/WUilMv4+8/XnsmYeKmBd7NaTjo4yqAKc4OQzjf lGpI2msRkKwDaMBNTOYmNJH3kyVUPJqK4x7hLhQXykBcCmJ2z5CEwb/3bkDc77l/ 6+vmElOpdRNcLON1yn0OXW6qKDcDf0V63GAiz0QoqwS6N3zUwQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG+Yjfn2SpgDOJGRwhcsSPu/4lMyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDg2OGFjOWQtY2Y2MC0z MDA0LWEyOWYtMTRkOGY5ZTJlMmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEdor6rwQHo4X1Eg1Ywj0SxrxImAl0s9QycYG8rS8L0hjzOGZbHY h1No3+2BiazIV5vq68bc8/gvX12mayhC2Oy77A9ySASCbdXvFwJmWSPMcYkDzwip a6NISfg0cAKSHm0tfw6pb2f4Wnn5lATky1RAPHyMYclOrtC62t6giZyknTIL7g3I gvrqlvPucFnseLcNAInGvxz99Cj4LSpdEtiSTUV6vDv8nkuvt7PjgOtkLcpMf9rt 58cGsAjX25xjrMPWd/NGFHql1NAc+9jhzdvnG7UXNFqlSzrjgAQ9xoFeFaQQjxy9 vnb+xc8YqnthF9jW9PpJjeKXRosYNkwVd7U= -----END CERTIFICATE-----Generated at Fri Apr 4 17:46:59 2025 by rpki-client