$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0a6c4072-90c2-35f2-98c2-4f7388584724.roa File: 0a6c4072-90c2-35f2-98c2-4f7388584724.roa (raw, json) Hash identifier: Zb9yck5lpoHORvUzu9TyiZ410Ddy0bOtR424TJDLI80= Subject key identifier: 70:85:57:79:77:D6:A1:B5:FF:E4:71:36:C7:79:17:22:41:76:D2:44 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926C8465BEB7BF9995EBE20 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0a6c4072-90c2-35f2-98c2-4f7388584724.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 19364 IP address blocks: 2001:470:33::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:c8:46:5b:eb:7b:f9:99:5e:be:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=cfeda38f-5855-4985-9671-4dd0bdd5d6fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e1:3f:bc:89:7b:4c:1c:8b:86:d2:9e:50:00: 0a:a4:c3:6d:44:bd:b4:83:88:1d:69:17:59:5f:cb: 95:ad:6c:e7:d3:bc:42:ee:eb:4a:c0:ff:8f:40:bb: 8e:69:d8:34:46:07:c5:db:2e:44:99:06:b1:79:68: 87:3b:6f:ee:42:5f:6c:cb:88:e8:5f:7f:ab:9b:a4: 5f:b6:d1:2b:f9:40:18:14:ad:db:20:07:44:3b:cf: 24:70:3f:8d:cd:6a:3e:4b:d2:b1:a2:43:61:71:c7: 42:13:a3:a8:62:88:c5:f4:29:26:f7:88:a0:21:b0: e6:23:83:c2:7d:97:69:98:e5:c4:3a:5e:3e:5b:aa: 4c:ea:9b:8e:44:86:18:2a:75:af:c1:53:16:a1:b0: 6c:b9:59:90:76:31:05:3e:13:0b:49:30:e7:d5:23: c5:c2:2f:03:12:ae:9b:b4:c9:7d:5f:20:7c:0a:54: 1d:73:0d:13:92:77:3d:23:26:88:56:04:a9:60:0f: 5b:42:04:d3:04:8b:7c:2b:27:6d:ef:6a:59:a6:28: 6a:af:ab:97:a9:25:aa:7d:4a:63:ba:18:78:b2:12: 19:e1:41:81:9c:b2:e8:e3:05:9d:89:67:f9:96:34: 49:7f:23:73:df:f5:71:9a:fa:e8:45:d1:84:91:b5: db:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:85:57:79:77:D6:A1:B5:FF:E4:71:36:C7:79:17:22:41:76:D2:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0a6c4072-90c2-35f2-98c2-4f7388584724.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:33::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:47:6c:69:f8:6f:a7:52:63:c4:92:55:e6:41:88:28:9d:49: 2f:2a:3d:31:c3:79:67:08:47:50:93:7d:a6:b7:88:91:f6:38: d2:f0:1f:e8:6a:5f:63:ed:f2:e0:37:a9:6d:3f:0b:40:e2:01: 69:30:f6:b9:43:07:0e:5d:b7:ff:f3:0a:22:f7:1c:e3:6d:bf: 0f:5d:e6:ac:44:06:94:80:d3:d0:88:b4:3e:5c:77:b3:d2:61: df:3c:b8:4f:a9:17:8d:a5:8a:42:70:bb:d5:d4:3e:55:fe:e5: 49:34:e2:25:a1:0a:4e:41:e2:82:47:2e:bf:88:4d:74:fb:2f: 6f:31:69:79:a2:64:f3:e1:22:12:1c:5c:b0:61:a9:d9:84:8e: 8b:d2:cf:9d:86:19:7f:d7:01:85:bc:7c:25:1d:28:86:b2:cd: 56:5b:97:fb:b2:a6:03:a7:38:1e:bd:70:18:d2:9a:fd:0e:a6: 5b:bd:d7:f7:66:72:3b:8b:76:76:9d:e0:57:d0:38:b5:de:e3: bf:bf:e7:48:0e:3a:a3:12:7e:83:1a:10:2c:45:ea:26:dc:d1: 34:45:94:0e:13:b2:53:fc:e7:b9:43:73:3c:82:95:3a:38:8b: 0a:47:44:89:38:c6:0d:f7:0d:90:cc:92:d5:5e:4c:e4:ec:8f: e9:9a:20:42 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JshGW+t7+ZleviAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk Y2ZlZGEzOGYtNTg1NS00OTg1LTk2NzEtNGRkMGJkZDVkNmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuE/vIl7TByLhtKeUAAKpMNtRL20g4gdaRdZ X8uVrWzn07xC7utKwP+PQLuOadg0RgfF2y5EmQaxeWiHO2/uQl9sy4joX3+rm6Rf ttEr+UAYFK3bIAdEO88kcD+NzWo+S9KxokNhccdCE6OoYojF9Ckm94igIbDmI4PC fZdpmOXEOl4+W6pM6puORIYYKnWvwVMWobBsuVmQdjEFPhMLSTDn1SPFwi8DEq6b tMl9XyB8ClQdcw0Tknc9IyaIVgSpYA9bQgTTBIt8Kydt72pZpihqr6uXqSWqfUpj uhh4shIZ4UGBnLLo4wWdiWf5ljRJfyNz3/VxmvroRdGEkbXbjQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHCFV3l31qG1/+RxNsd5FyJBdtJEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMGE2YzQwNzItOTBjMi0z NWYyLTk4YzItNGY3Mzg4NTg0NzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAAz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMRHbGn4b6dSY8SSVeZBiCidSS8qPTHDeWcIR1CTfaa3iJH2ONLw H+hqX2Pt8uA3qW0/C0DiAWkw9rlDBw5dt//zCiL3HONtvw9d5qxEBpSA09CItD5c d7PSYd88uE+pF42likJwu9XUPlX+5Uk04iWhCk5B4oJHLr+ITXT7L28xaXmiZPPh IhIcXLBhqdmEjovSz52GGX/XAYW8fCUdKIayzVZbl/uypgOnOB69cBjSmv0Oplu9 1/dmcjuLdnad4FfQOLXe47+/50gOOqMSfoMaECxF6ibc0TRFlA4TslP857lDczyC lTo4iwpHRIk4xg33DZDMktVeTOTsj+maIEI= -----END CERTIFICATE-----Generated at Fri Apr 4 17:54:56 2025 by rpki-client