$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0faafe61-87fc-3eee-b788-7d9b253f0a33.roa File: 0faafe61-87fc-3eee-b788-7d9b253f0a33.roa (raw, json) Hash identifier: ged3MmvV7jDV6kjhlYHpIyiy9aAdHuScvM/Lw5sD3HU= Subject key identifier: 0D:F4:60:34:93:9A:04:4B:2B:EE:47:28:C0:B6:56:63:EC:4E:29:D5 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926C57812E536AD2929DBA0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0faafe61-87fc-3eee-b788-7d9b253f0a33.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 133929 IP address blocks: 2001:470:1a2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:c5:78:12:e5:36:ad:29:29:db:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=f5c35ef7-2ac6-43af-bec2-07a7edbdefbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:da:7a:b1:b1:8c:11:d8:c1:31:3a:4a:74:ae: 15:7d:77:d8:e9:0f:93:9b:ec:34:b4:b9:e6:46:54: ed:20:8a:18:36:ae:57:4e:d9:7d:e6:16:e5:46:86: 05:63:a3:04:bf:3d:c3:35:c2:f1:92:88:a3:f3:e7: 2d:43:9d:d8:4a:fc:0b:8a:2b:17:84:c0:11:2a:9e: 7c:2d:c0:db:30:5a:1f:cd:84:56:ee:1b:a3:9d:ba: 31:f3:37:c1:1a:05:f6:89:26:85:17:c3:fa:e5:36: 8f:89:76:f7:d5:b4:e3:88:ef:d5:03:1b:c4:77:9c: 80:a7:d3:4c:e7:92:2a:4b:1e:60:b9:7f:c9:e4:70: fe:03:86:31:17:02:a4:50:99:37:cd:1e:0b:34:03: e9:ec:6d:ae:d7:de:78:62:ff:b3:23:da:89:18:11: 02:8b:72:c8:2d:ce:cf:6a:7a:33:5c:ca:c1:e1:d1: be:e1:c1:d0:da:cb:ce:44:a5:62:b9:14:84:7d:a3: 97:c5:f7:68:5e:81:24:1f:22:0b:de:e3:14:9f:fe: ac:95:d4:b9:33:42:74:ac:71:1f:da:26:84:5f:e5: a9:85:40:f4:1a:1e:8a:27:8a:f5:f9:2d:3c:a2:c9: f4:3c:34:86:1e:80:78:31:46:09:85:95:0f:c1:f7: 02:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F4:60:34:93:9A:04:4B:2B:EE:47:28:C0:B6:56:63:EC:4E:29:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0faafe61-87fc-3eee-b788-7d9b253f0a33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1a2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:1c:b8:bd:15:26:39:58:a5:b0:91:ab:28:85:08:3f:0c:c1: d4:c1:d7:40:45:66:da:79:f7:81:15:b7:3d:ee:18:13:a8:8e: 2c:26:de:b0:7f:06:75:2a:02:f8:b5:31:a9:7b:db:30:01:ff: 76:a2:2f:3a:ff:99:a0:e7:25:53:04:06:4d:f2:d3:ee:f1:7a: 34:da:46:6c:32:6f:ea:6c:cb:fa:d5:16:c6:e8:62:85:2c:fb: be:14:ee:ae:f1:72:ef:05:8e:6e:0e:6f:ea:24:b5:b3:00:ff: fd:8f:b2:4f:07:60:7a:d8:d7:6b:f0:a5:c2:ad:c1:fd:80:fe: 28:aa:94:c1:a7:54:43:33:21:cf:e1:69:5f:a0:40:43:d0:fc: 2c:d8:95:c0:db:70:74:38:92:eb:5f:1e:5b:09:6c:38:ec:7a: 92:57:e5:84:2e:03:17:26:65:f1:63:f5:91:e3:4d:1b:fb:7c: 7f:ea:d3:e7:2f:06:f9:b0:fc:9e:d9:ba:28:05:c3:99:a5:c7: 69:e0:c3:a5:68:74:fa:d5:8d:c7:33:2c:2e:84:59:a7:13:c1: 50:84:f8:b0:8b:78:ac:0d:23:37:95:0c:85:49:9d:8d:78:6c: 63:a8:5c:9a:0c:90:65:43:2e:82:01:e9:d4:38:e8:b8:12:89: 59:98:c8:69 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JsV4EuU2rSkp26AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk ZjVjMzVlZjctMmFjNi00M2FmLWJlYzItMDdhN2VkYmRlZmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9dp6sbGMEdjBMTpKdK4VfXfY6Q+Tm+w0tLnm RlTtIIoYNq5XTtl95hblRoYFY6MEvz3DNcLxkoij8+ctQ53YSvwLiisXhMARKp58 LcDbMFofzYRW7hujnbox8zfBGgX2iSaFF8P65TaPiXb31bTjiO/VAxvEd5yAp9NM 55IqSx5guX/J5HD+A4YxFwKkUJk3zR4LNAPp7G2u1954Yv+zI9qJGBECi3LILc7P anozXMrB4dG+4cHQ2svORKViuRSEfaOXxfdoXoEkHyIL3uMUn/6sldS5M0J0rHEf 2iaEX+WphUD0Gh6KJ4r1+S08osn0PDSGHoB4MUYJhZUPwfcC4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA30YDSTmgRLK+5HKMC2VmPsTinVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMGZhYWZlNjEtODdmYy0z ZWVlLWI3ODgtN2Q5YjI1M2YwYTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAGi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACocuL0VJjlYpbCRqyiFCD8MwdTB10BFZtp594EVtz3uGBOojiwm 3rB/BnUqAvi1Mal72zAB/3aiLzr/maDnJVMEBk3y0+7xejTaRmwyb+psy/rVFsbo YoUs+74U7q7xcu8Fjm4Ob+oktbMA//2Psk8HYHrY12vwpcKtwf2A/iiqlMGnVEMz Ic/haV+gQEPQ/CzYlcDbcHQ4kutfHlsJbDjsepJX5YQuAxcmZfFj9ZHjTRv7fH/q 0+cvBvmw/J7ZuigFw5mlx2ngw6VodPrVjcczLC6EWacTwVCE+LCLeKwNIzeVDIVJ nY14bGOoXJoMkGVDLoIB6dQ46LgSiVmYyGk= -----END CERTIFICATE-----Generated at Fri Apr 4 17:52:19 2025 by rpki-client