$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/09f7d68c-1d48-3f10-92b1-b0a17ecc8991.roa File: 09f7d68c-1d48-3f10-92b1-b0a17ecc8991.roa (raw, json) Hash identifier: SP6TuW6zH1oAaj6WsjdLAPFXiGDeKCPV+0z9vpc8mfE= Subject key identifier: EC:73:10:97:DD:87:55:F8:26:98:B8:BF:ED:F3:60:47:7A:FF:3D:E3 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926C1D3AEA0144AFC81A500 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/09f7d68c-1d48-3f10-92b1-b0a17ecc8991.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 17117 IP address blocks: 2001:470:152::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:c1:d3:ae:a0:14:4a:fc:81:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=2d53f150-fa5c-4326-884e-cc9a3c7a45ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:af:d9:88:0b:7d:00:1e:d0:d3:00:b8:94:59: c6:0c:79:03:26:61:71:a4:7e:e4:e0:c7:81:6d:4d: b9:19:b4:fa:ba:be:c6:26:21:2c:a1:3e:77:54:ed: ee:54:1e:83:fb:79:a7:62:53:67:3e:56:3a:80:13: 58:d1:7e:f7:26:04:66:b0:ec:d6:3e:b0:30:b9:f7: 50:67:43:ba:a1:0b:c3:47:c2:cd:8c:97:24:a2:67: 56:33:a1:31:70:d4:15:8c:84:29:c2:84:22:da:d6: b2:eb:fa:68:32:c3:65:74:0b:67:bd:5d:22:39:ab: 76:07:c0:a4:29:d1:ac:54:5a:fa:9c:a7:54:68:01: 8e:57:d5:84:86:ff:73:08:0d:9a:50:f3:30:ef:90: e8:8a:54:e2:7f:d3:53:0b:30:27:44:92:46:76:a3: 2a:67:ac:78:08:0d:e6:cf:c7:8d:15:f6:73:e8:75: cf:df:9e:e0:d3:d9:02:91:e4:d4:92:63:d0:6e:f8: aa:50:68:f5:1e:c8:6b:f8:0a:18:97:e6:f1:13:ff: cc:b5:1b:58:df:dd:c0:c0:6f:0e:22:37:bf:d8:e3: 6b:f0:9c:4f:84:15:06:1f:bb:c5:72:57:bf:e1:15: 56:71:ea:8a:00:77:9c:74:8d:0a:9d:d4:57:5d:e6: 9d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:73:10:97:DD:87:55:F8:26:98:B8:BF:ED:F3:60:47:7A:FF:3D:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/09f7d68c-1d48-3f10-92b1-b0a17ecc8991.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:152::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:b4:7c:85:66:fe:32:aa:73:ee:69:5a:e9:88:e6:b6:c0:0c: 7a:2f:52:72:d4:b1:c5:b6:44:2d:c4:5a:c0:a6:0d:4b:9e:6e: 89:d0:71:e7:96:77:30:a3:d4:73:5c:7e:21:61:f9:16:3b:0d: 48:ab:9a:db:fa:19:df:53:cb:58:f6:e2:16:b2:e7:79:37:fe: 2b:e9:e3:c9:b3:47:4d:83:cb:5a:a1:17:c4:da:a0:3c:e5:3a: 39:13:29:44:91:98:92:c5:9f:e2:fb:9a:a2:76:3b:2c:4b:89: 6e:22:85:49:35:ae:b9:ce:f5:ad:ed:1d:53:c4:18:04:73:ed: 8c:35:bc:93:7d:82:18:ba:b6:d5:c0:a7:f4:0a:cf:4e:13:b3: bb:dd:b6:ed:2e:6e:84:74:fa:21:00:d3:49:66:bb:ee:e5:d9: 3c:d7:a9:df:13:da:ba:5e:f5:ea:94:e4:7c:6c:9c:14:da:d1: ba:19:60:f9:92:be:a9:24:18:07:77:05:40:4e:fa:f9:8b:5f: 70:ed:4a:2f:2c:ff:c8:38:93:c0:d8:26:36:59:c8:b3:4f:2f: 6a:9e:17:23:57:39:ea:03:66:16:d5:a9:3a:48:a9:65:8f:e5: 8d:b6:64:53:49:5a:d5:64:65:f7:da:ad:ea:84:02:bc:b4:6d: d6:ba:4e:84 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JsHTrqAUSvyBpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk MmQ1M2YxNTAtZmE1Yy00MzI2LTg4NGUtY2M5YTNjN2E0NWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0a/ZiAt9AB7Q0wC4lFnGDHkDJmFxpH7k4MeB bU25GbT6ur7GJiEsoT53VO3uVB6D+3mnYlNnPlY6gBNY0X73JgRmsOzWPrAwufdQ Z0O6oQvDR8LNjJckomdWM6ExcNQVjIQpwoQi2tay6/poMsNldAtnvV0iOat2B8Ck KdGsVFr6nKdUaAGOV9WEhv9zCA2aUPMw75DoilTif9NTCzAnRJJGdqMqZ6x4CA3m z8eNFfZz6HXP357g09kCkeTUkmPQbviqUGj1Hshr+AoYl+bxE//MtRtY393AwG8O Ije/2ONr8JxPhBUGH7vFcle/4RVWceqKAHecdI0KndRXXeadzwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOxzEJfdh1X4Jpi4v+3zYEd6/z3jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDlmN2Q2OGMtMWQ0OC0z ZjEwLTkyYjEtYjBhMTdlY2M4OTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAFS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGa0fIVm/jKqc+5pWumI5rbADHovUnLUscW2RC3EWsCmDUuebonQ ceeWdzCj1HNcfiFh+RY7DUirmtv6Gd9Ty1j24hay53k3/ivp48mzR02Dy1qhF8Ta oDzlOjkTKUSRmJLFn+L7mqJ2OyxLiW4ihUk1rrnO9a3tHVPEGARz7Yw1vJN9ghi6 ttXAp/QKz04Ts7vdtu0uboR0+iEA00lmu+7l2TzXqd8T2rpe9eqU5HxsnBTa0boZ YPmSvqkkGAd3BUBO+vmLX3DtSi8s/8g4k8DYJjZZyLNPL2qeFyNXOeoDZhbVqTpI qWWP5Y22ZFNJWtVkZffareqEAry0bda6ToQ= -----END CERTIFICATE-----Generated at Fri Apr 4 17:43:15 2025 by rpki-client