$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e0a8f9c-e230-3345-a2a5-47223a5018ea.roa File: 0e0a8f9c-e230-3345-a2a5-47223a5018ea.roa (raw, json) Hash identifier: mLrRH09goC3BOobQfdAIFSKvDOaUu7ta5HIpYL4zsNs= Subject key identifier: 17:FB:F1:59:A4:37:BD:90:0D:51:10:D4:FD:5F:F6:C8:5B:B9:6C:23 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848960B4A48F67417DB2F138080 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e0a8f9c-e230-3345-a2a5-47223a5018ea.roa Signing time: Sat 18 Jan 2025 14:00:52 +0000 ROA not before: Sat 18 Jan 2025 14:00:52 +0000 ROA not after: Fri 18 Apr 2025 13:00:52 +0000 asID: 32806 IP address blocks: 2001:470:3b9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:96:0b:4a:48:f6:74:17:db:2f:13:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jan 18 14:00:52 2025 GMT Not After : Apr 18 13:00:52 2025 GMT Subject: CN=05f71cc7-9d55-4159-97a7-f8caee3b5b0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:a5:ac:e6:e1:cf:b5:f0:e9:79:1a:b6:ca:57: f3:18:08:73:4d:53:f1:d8:51:c6:95:73:9b:e8:d3: 94:ef:e5:4f:15:81:01:71:58:bd:f5:c5:33:83:ef: 69:f8:03:3d:44:d6:36:da:bd:7c:7e:eb:ec:d0:87: f5:59:da:89:3e:c8:f9:91:7d:89:f4:2c:2b:aa:a1: 38:a0:06:5d:f8:e7:88:50:e9:b4:14:fc:b6:01:b2: dc:5e:f6:42:5a:aa:44:05:ca:08:00:75:12:dd:9b: 3b:f2:73:d9:24:d7:6d:f8:d4:76:e4:4c:65:cc:e6: 34:29:b2:9f:cd:0d:06:35:3b:25:53:16:0d:9c:da: a7:f6:16:f2:24:58:10:41:d7:45:15:77:78:85:8c: 50:ef:b5:7b:70:4a:65:7c:ee:8c:64:c4:d1:b1:48: 6a:9f:bb:ff:34:06:81:6a:67:1b:ff:fd:5a:d9:b5: 27:84:50:10:a4:de:fc:3d:50:8f:93:ad:36:04:fa: 1b:71:36:99:22:36:5d:2c:dc:b0:9c:ea:3e:7c:be: dc:e5:c5:e9:59:f7:2d:05:a9:18:84:df:da:e4:b4: b7:88:42:0e:0b:71:54:10:7b:54:01:f4:2b:e6:13: a9:59:e5:7b:d4:84:97:65:d4:3d:df:53:10:01:2b: 28:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:FB:F1:59:A4:37:BD:90:0D:51:10:D4:FD:5F:F6:C8:5B:B9:6C:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e0a8f9c-e230-3345-a2a5-47223a5018ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3b9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:7a:a5:e1:7e:93:a2:77:ec:d8:c7:fc:b9:80:e7:ea:7c:0c: e2:bc:91:40:9a:0b:25:08:4b:58:9c:16:89:dc:bf:69:58:b5: 84:c8:cd:4d:e3:af:a5:16:62:4f:b4:bd:22:47:57:d0:11:9b: 51:13:00:ca:5f:34:e0:61:c3:91:8b:f9:ef:62:0a:0b:fe:29: 68:7b:8e:97:33:72:d4:69:ed:cb:8b:87:8d:c5:8d:11:c2:0b: b5:89:d4:9c:c2:72:b4:c4:ca:39:34:4b:72:49:4c:34:b1:53: cf:a8:5f:3d:47:b0:3a:a6:d6:ef:98:70:48:ff:b4:9a:55:77: 4d:d0:db:3b:a1:dc:d4:0d:db:f0:9b:5b:0a:09:96:4e:31:7c: 17:0c:98:2c:5c:27:48:5d:7d:c8:95:c6:5d:53:be:e4:f4:49: 1c:a8:24:4f:55:ee:f5:ab:cb:15:bc:23:7f:37:64:c8:1c:69: 53:ee:d9:16:7f:f6:81:9b:17:d6:e7:a8:ec:e3:21:31:fc:04: 6c:f6:13:d0:86:00:46:74:45:9f:ac:02:a0:b3:ee:42:17:c3: 97:e3:1a:83:f1:c5:87:6c:f7:73:80:55:a2:1d:94:13:69:4d: d8:64:31:3f:10:5c:4a:bc:31:cf:b9:51:a2:1d:b0:bf:c4:4e: a8:a6:a2:71 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiWC0pI9nQX2y8TgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDExODE0MDA1MloXDTI1MDQxODEzMDA1MlowLzEtMCsGA1UEAxMk MDVmNzFjYzctOWQ1NS00MTU5LTk3YTctZjhjYWVlM2I1YjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8KWs5uHPtfDpeRq2ylfzGAhzTVPx2FHGlXOb 6NOU7+VPFYEBcVi99cUzg+9p+AM9RNY22r18fuvs0If1WdqJPsj5kX2J9CwrqqE4 oAZd+OeIUOm0FPy2AbLcXvZCWqpEBcoIAHUS3Zs78nPZJNdt+NR25ExlzOY0KbKf zQ0GNTslUxYNnNqn9hbyJFgQQddFFXd4hYxQ77V7cEplfO6MZMTRsUhqn7v/NAaB amcb//1a2bUnhFAQpN78PVCPk602BPobcTaZIjZdLNywnOo+fL7c5cXpWfctBakY hN/a5LS3iEIOC3FUEHtUAfQr5hOpWeV71ISXZdQ931MQASsojQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBf78VmkN72QDVEQ1P1f9shbuWwjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMGUwYThmOWMtZTIzMC0z MzQ1LWEyYTUtNDcyMjNhNTAxOGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAO5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ16peF+k6J37NjH/LmA5+p8DOK8kUCaCyUIS1icFoncv2lYtYTI zU3jr6UWYk+0vSJHV9ARm1ETAMpfNOBhw5GL+e9iCgv+KWh7jpczctRp7cuLh43F jRHCC7WJ1JzCcrTEyjk0S3JJTDSxU8+oXz1HsDqm1u+YcEj/tJpVd03Q2zuh3NQN 2/CbWwoJlk4xfBcMmCxcJ0hdfciVxl1TvuT0SRyoJE9V7vWryxW8I383ZMgcaVPu 2RZ/9oGbF9bnqOzjITH8BGz2E9CGAEZ0RZ+sAqCz7kIXw5fjGoPxxYds93OAVaId lBNpTdhkMT8QXEq8Mc+5UaIdsL/ETqimonE= -----END CERTIFICATE-----Generated at Fri Apr 4 17:48:45 2025 by rpki-client