$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1415974a-b36b-3aa7-b524-34d84f5e2f50.roa File: 1415974a-b36b-3aa7-b524-34d84f5e2f50.roa (raw, json) Hash identifier: cjWyIrTyyhbML6ws3jqoRHzIitRMOAr8nhoARNrRYEQ= Subject key identifier: C5:15:0F:95:A0:5E:E3:A0:08:95:FA:94:13:BE:5A:79:27:BA:FB:E4 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926D4DD26527B779F5ED860 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1415974a-b36b-3aa7-b524-34d84f5e2f50.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 14160 IP address blocks: 2001:470:95::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:d4:dd:26:52:7b:77:9f:5e:d8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=fb0af78a-403a-439d-91ad-6eb63c23e474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:06:94:3b:aa:c1:fd:43:5e:f6:a7:14:29:f2: 31:c6:1a:4d:bf:48:35:92:ad:ca:91:66:40:98:ee: bd:e9:16:45:74:1f:02:4a:ab:9d:df:ce:68:6b:d6: 47:06:d9:94:9d:42:25:c4:5a:c4:f1:d7:9d:5b:7e: 63:2f:27:a6:70:d4:51:5c:08:87:52:e2:d3:62:63: 80:56:24:96:57:04:aa:3e:f6:3e:92:e4:18:7d:e6: 2e:87:b9:b1:0d:05:e2:ad:12:50:76:1e:31:2c:5f: 5b:7e:89:a1:81:2b:e6:7d:d7:c3:2f:a5:c1:b9:17: 88:1d:ad:c6:b1:37:b8:e6:bd:5f:79:c2:ca:85:5d: 6a:a1:5a:e5:94:a6:b7:e5:ba:ce:53:7e:4a:b3:92: 78:6a:b4:4f:94:93:84:04:f9:2f:f0:79:96:0e:89: 77:36:3e:8c:02:58:ee:cd:92:4c:86:1e:99:5a:8d: 0f:51:98:78:db:6f:ff:98:5a:5a:38:ad:71:0a:cc: 86:48:cd:c1:c4:c6:98:39:29:a9:92:5b:2c:3c:e3: e4:df:2a:f5:ec:c5:24:d6:61:5d:e0:38:d6:72:83: 1e:f9:da:e8:01:e4:23:cc:fe:be:3d:80:91:08:18: 07:14:b6:48:43:95:bc:61:6d:7d:8b:6b:7a:9e:e4: 86:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:15:0F:95:A0:5E:E3:A0:08:95:FA:94:13:BE:5A:79:27:BA:FB:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1415974a-b36b-3aa7-b524-34d84f5e2f50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:95::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:ac:f2:d5:eb:07:0b:c8:ef:90:ff:7e:6b:ac:1a:a7:a3:6d: 6b:2a:38:2c:e1:25:b9:3b:4e:54:71:a0:90:d0:93:42:26:24: a8:9c:ef:e9:d8:47:31:60:63:40:42:55:60:fc:1e:18:c3:d5: 3b:b4:30:7c:60:ef:35:42:4a:5c:87:f6:25:35:14:91:8b:3e: 58:6b:06:11:7d:47:42:ce:ac:a1:2e:a8:76:e4:99:93:1f:eb: 0a:90:92:87:85:54:22:c5:68:da:cf:67:fd:8b:82:e1:6d:50: 40:6c:9e:60:87:d9:d7:f4:d2:7b:db:fe:96:55:3b:9e:6d:35: 26:dc:0d:db:99:b9:15:db:8a:b7:9c:85:89:2a:65:eb:04:07: c9:dd:b2:32:02:62:c8:0d:46:33:0b:62:dd:ec:de:11:6a:8f: 26:5b:d5:7a:93:bf:ce:51:68:f1:03:ee:2f:1a:13:b7:0b:8d: 1c:22:92:1d:4c:27:44:b8:9d:11:de:9f:c5:c9:b4:2f:13:63: 61:5f:1d:8c:c2:d9:97:1a:48:70:ce:60:7e:60:7e:29:14:71: 1c:16:f1:a3:69:fa:bf:bd:b7:29:ad:c0:9d:89:19:2c:e8:37: e3:36:dc:22:a5:41:87:75:4f:c6:2c:a4:aa:28:ac:64:ee:ef: d5:24:54:5d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JtTdJlJ7d59e2GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk ZmIwYWY3OGEtNDAzYS00MzlkLTkxYWQtNmViNjNjMjNlNDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQaUO6rB/UNe9qcUKfIxxhpNv0g1kq3KkWZA mO696RZFdB8CSqud385oa9ZHBtmUnUIlxFrE8dedW35jLyemcNRRXAiHUuLTYmOA ViSWVwSqPvY+kuQYfeYuh7mxDQXirRJQdh4xLF9bfomhgSvmfdfDL6XBuReIHa3G sTe45r1fecLKhV1qoVrllKa35brOU35Ks5J4arRPlJOEBPkv8HmWDol3Nj6MAlju zZJMhh6ZWo0PUZh422//mFpaOK1xCsyGSM3BxMaYOSmpklssPOPk3yr17MUk1mFd 4DjWcoMe+droAeQjzP6+PYCRCBgHFLZIQ5W8YW19i2t6nuSGgwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMUVD5WgXuOgCJX6lBO+WnknuvvkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMTQxNTk3NGEtYjM2Yi0z YWE3LWI1MjQtMzRkODRmNWUyZjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC6s8tXrBwvI75D/fmusGqejbWsqOCzhJbk7TlRxoJDQk0ImJKic 7+nYRzFgY0BCVWD8HhjD1Tu0MHxg7zVCSlyH9iU1FJGLPlhrBhF9R0LOrKEuqHbk mZMf6wqQkoeFVCLFaNrPZ/2LguFtUEBsnmCH2df00nvb/pZVO55tNSbcDduZuRXb irechYkqZesEB8ndsjICYsgNRjMLYt3s3hFqjyZb1XqTv85RaPED7i8aE7cLjRwi kh1MJ0S4nRHen8XJtC8TY2FfHYzC2ZcaSHDOYH5gfikUcRwW8aNp+r+9tymtwJ2J GSzoN+M23CKlQYd1T8YspKoorGTu79UkVF0= -----END CERTIFICATE-----Generated at Fri Apr 4 17:51:20 2025 by rpki-client