$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/09dda9a6-e41c-32e4-b194-7c3666a087a3.roa File: 09dda9a6-e41c-32e4-b194-7c3666a087a3.roa (raw, json) Hash identifier: bMZxrZpdI7oI0h6gI6IpJkznfyvXNqAJABfxIcLYIO8= Subject key identifier: 16:A9:33:42:EF:B2:B1:96:C0:84:38:30:F6:7B:44:37:68:20:FF:CA Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926DCA3C085876F5EF5D940 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/09dda9a6-e41c-32e4-b194-7c3666a087a3.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 54118 IP address blocks: 2001:470:79::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:dc:a3:c0:85:87:6f:5e:f5:d9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=7e7835b8-5e1d-41dd-af63-c9356dcf4504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:96:3a:57:7d:77:d2:0d:e4:af:82:06:c3:72: 04:77:06:22:79:b2:69:d6:87:03:5e:fe:75:6c:2a: 9e:bc:52:34:a1:ae:73:6b:50:0b:b0:ae:c9:1c:3b: 7a:8c:95:5c:f3:d8:93:08:a1:87:a2:0b:d0:4d:29: c9:73:78:cb:bb:20:ec:fc:30:ce:78:bc:52:91:ac: 69:e6:1a:92:cc:4e:ad:78:12:c0:72:2c:eb:eb:f9: 1a:67:5d:6c:9b:6d:95:d4:d1:a1:fd:79:c9:84:64: f0:d1:35:15:fe:bb:11:71:3b:66:1f:3e:a8:ed:36: fb:b6:83:fe:d5:0c:2a:89:92:cb:8d:86:45:16:5b: f3:6b:6d:6f:e7:84:24:d9:8e:dc:85:36:9d:87:19: e7:a9:40:85:f3:b0:dc:7a:ff:51:f6:45:d8:e4:e0: e7:3a:d6:d7:44:d5:a2:24:70:12:ec:92:dd:69:d6: 0b:8c:e0:76:6b:b6:0b:13:c8:22:ed:c2:52:6b:c9: 70:45:d5:80:0d:70:43:34:74:e5:7b:52:64:41:f7: ef:18:2e:5d:10:c9:2c:41:96:b3:e4:46:27:1f:86: e3:0b:44:31:b6:b9:49:98:81:9e:7a:31:5e:70:36: 99:36:9b:c5:e6:4d:1c:aa:b0:6c:5d:21:73:28:1d: d8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A9:33:42:EF:B2:B1:96:C0:84:38:30:F6:7B:44:37:68:20:FF:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/09dda9a6-e41c-32e4-b194-7c3666a087a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:79::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:6a:1b:ad:83:f6:30:ac:5a:02:6f:2c:c3:34:60:5b:e6:ad: 14:c5:36:43:4a:70:3e:80:e0:6a:18:1a:78:a4:0f:30:98:e6: 0f:1d:33:da:12:14:8c:94:66:3f:f1:3b:30:62:6a:70:a0:29: be:16:17:05:bf:02:7f:e5:04:3f:6f:58:9f:69:26:7b:80:7b: 8c:05:64:ec:10:a2:69:6f:f7:f5:8a:88:4d:ca:20:18:00:03: 6c:77:ad:57:66:89:44:6a:42:7b:db:57:00:2c:16:47:fe:bd: af:9e:bf:da:ef:7a:f1:24:96:f9:81:1f:4f:31:64:0f:e6:71: 40:e1:5c:68:dc:3c:8c:f9:c1:e8:3b:71:84:6d:75:e7:2a:bd: c3:fa:ce:99:e5:05:a3:08:94:61:ec:a0:46:e7:72:97:79:b6: 89:05:35:7f:dd:58:41:61:06:32:03:93:74:a7:51:c4:9d:6a: 6d:70:63:7b:7c:5f:de:67:ca:9d:35:ab:4b:7e:a6:81:eb:d2: de:75:cc:3a:14:83:72:8d:84:48:af:a5:04:f5:1d:69:04:34: 9f:59:80:ee:b3:b8:e9:4f:4c:d0:10:a4:d2:b3:5e:a1:e9:7b: 3a:79:2c:42:5d:9f:1b:30:fc:35:a4:22:99:57:e3:7b:04:4b: a4:fb:c6:d2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JtyjwIWHb1712UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk N2U3ODM1YjgtNWUxZC00MWRkLWFmNjMtYzkzNTZkY2Y0NTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZY6V3130g3kr4IGw3IEdwYiebJp1ocDXv51 bCqevFI0oa5za1ALsK7JHDt6jJVc89iTCKGHogvQTSnJc3jLuyDs/DDOeLxSkaxp 5hqSzE6teBLAcizr6/kaZ11sm22V1NGh/XnJhGTw0TUV/rsRcTtmHz6o7Tb7toP+ 1QwqiZLLjYZFFlvza21v54Qk2Y7chTadhxnnqUCF87Dcev9R9kXY5ODnOtbXRNWi JHAS7JLdadYLjOB2a7YLE8gi7cJSa8lwRdWADXBDNHTle1JkQffvGC5dEMksQZaz 5EYnH4bjC0QxtrlJmIGeejFecDaZNpvF5k0cqrBsXSFzKB3YLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBapM0LvsrGWwIQ4MPZ7RDdoIP/KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDlkZGE5YTYtZTQxYy0z MmU0LWIxOTQtN2MzNjY2YTA4N2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAB5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJZqG62D9jCsWgJvLMM0YFvmrRTFNkNKcD6A4GoYGnikDzCY5g8d M9oSFIyUZj/xOzBianCgKb4WFwW/An/lBD9vWJ9pJnuAe4wFZOwQomlv9/WKiE3K IBgAA2x3rVdmiURqQnvbVwAsFkf+va+ev9rvevEklvmBH08xZA/mcUDhXGjcPIz5 weg7cYRtdecqvcP6zpnlBaMIlGHsoEbncpd5tokFNX/dWEFhBjIDk3SnUcSdam1w Y3t8X95nyp01q0t+poHr0t51zDoUg3KNhEivpQT1HWkENJ9ZgO6zuOlPTNAQpNKz XqHpezp5LEJdnxsw/DWkIplX43sES6T7xtI= -----END CERTIFICATE-----Generated at Fri Apr 4 17:44:10 2025 by rpki-client