$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/15e3a99d-0bb5-3cf4-90a4-64eccb8c306d.roa File: 15e3a99d-0bb5-3cf4-90a4-64eccb8c306d.roa (raw, json) Hash identifier: iaupWUX6muluNXolNVaCw4By4v9ldv64ZxslNyS8K10= Subject key identifier: CC:0B:D5:70:98:14:12:5C:B2:74:5E:7D:E3:BE:42:B3:24:8C:0A:C9 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926E5E4BDF21E6D36AAEB80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/15e3a99d-0bb5-3cf4-90a4-64eccb8c306d.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 6698 IP address blocks: 2001:470:2a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:e5:e4:bd:f2:1e:6d:36:aa:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=ca8eacca-e024-44ce-9ac5-01b0e1d78224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:22:1d:07:02:0d:a2:da:98:ee:5a:a9:77:99: fc:dd:db:44:e8:cd:35:bb:25:0c:52:a2:72:8a:59: ad:e6:bd:67:a7:2c:2a:bc:18:64:ac:f2:12:57:aa: 76:3b:9a:e1:92:39:f0:39:d6:22:6f:96:6c:bc:06: 87:b1:f4:82:1b:52:0b:d2:44:22:b2:32:5b:ec:14: 54:65:3f:16:16:3d:5d:8f:68:67:66:1f:62:fb:f7: 90:e3:aa:3b:93:28:c9:3c:ae:fb:a0:e1:50:48:eb: b2:7a:4d:bd:69:9b:a0:10:9e:70:c6:e1:8b:e6:9b: ad:9a:db:a7:50:4d:7c:3d:33:16:89:33:37:a5:cc: fa:b5:59:dd:b4:a6:74:b4:dc:d7:d4:c3:d8:a9:4a: 34:a8:af:f1:4c:fe:1f:fd:42:89:98:4a:e2:87:27: 92:8a:0c:eb:0b:2e:36:39:36:e5:96:e4:5c:6b:69: de:37:26:f4:d3:37:b0:92:1e:58:30:d1:2e:c6:63: 59:53:57:b5:0a:78:ea:21:85:06:0f:3f:be:83:13: b4:c8:f2:8a:06:cc:09:39:e3:be:e9:4b:78:b7:46: 31:89:6c:10:01:fb:e4:de:f2:e9:03:67:d8:d6:f7: d3:39:68:9f:ac:15:58:2a:99:f7:69:5b:10:01:2d: 6f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:0B:D5:70:98:14:12:5C:B2:74:5E:7D:E3:BE:42:B3:24:8C:0A:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/15e3a99d-0bb5-3cf4-90a4-64eccb8c306d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:32:ea:e6:08:68:57:0a:17:4c:fa:01:11:36:a8:9b:94:fe: 97:34:15:58:b6:87:9f:d7:de:ca:76:d3:bb:a2:e3:11:0b:17: a9:d4:b1:77:03:3d:3c:f4:74:c6:7b:ea:e9:32:8f:05:cb:bb: 03:2a:74:eb:bf:e3:28:ba:ed:15:80:d9:09:41:50:e1:37:4c: 89:f5:05:8f:ff:bf:28:23:38:18:b0:8e:81:80:41:4c:7d:fc: 23:cf:13:fe:8f:4a:30:8d:b5:cc:8b:76:9c:1f:12:80:de:9b: 9a:b7:1a:43:73:25:96:de:75:2c:b7:91:0c:36:ed:f3:8b:3c: dc:b7:8b:55:ee:6b:20:b0:93:ba:16:31:a5:90:60:62:85:77: c8:81:32:2b:62:09:a1:5d:68:ef:51:48:0c:98:e6:83:3e:72: a6:01:c0:7b:01:0e:ea:25:d2:7c:ba:f2:73:a5:bb:52:40:94: 81:f5:94:42:87:8d:b1:89:02:45:64:8d:5a:6a:45:61:3b:29: 38:c6:32:35:7f:31:16:6d:66:ee:7a:ae:7d:a5:ce:fc:fd:39: 67:5b:2f:8a:74:77:90:7e:f6:51:70:be:27:35:3d:65:4d:83: f1:3f:8b:06:3d:fb:33:54:65:fa:13:b4:c2:08:bf:cd:43:f5: b8:8d:fd:9d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JuXkvfIebTaq64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk Y2E4ZWFjY2EtZTAyNC00NGNlLTlhYzUtMDFiMGUxZDc4MjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSIdBwINotqY7lqpd5n83dtE6M01uyUMUqJy ilmt5r1npywqvBhkrPISV6p2O5rhkjnwOdYib5ZsvAaHsfSCG1IL0kQisjJb7BRU ZT8WFj1dj2hnZh9i+/eQ46o7kyjJPK77oOFQSOuyek29aZugEJ5wxuGL5putmtun UE18PTMWiTM3pcz6tVndtKZ0tNzX1MPYqUo0qK/xTP4f/UKJmErihyeSigzrCy42 OTblluRca2neNyb00zewkh5YMNEuxmNZU1e1CnjqIYUGDz++gxO0yPKKBswJOeO+ 6Ut4t0YxiWwQAfvk3vLpA2fY1vfTOWifrBVYKpn3aVsQAS1vRQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMwL1XCYFBJcsnRefeO+QrMkjArJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMTVlM2E5OWQtMGJiNS0z Y2Y0LTkwYTQtNjRlY2NiOGMzMDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKQy6uYIaFcKF0z6ARE2qJuU/pc0FVi2h5/X3sp207ui4xELF6nU sXcDPTz0dMZ76ukyjwXLuwMqdOu/4yi67RWA2QlBUOE3TIn1BY//vygjOBiwjoGA QUx9/CPPE/6PSjCNtcyLdpwfEoDem5q3GkNzJZbedSy3kQw27fOLPNy3i1XuayCw k7oWMaWQYGKFd8iBMitiCaFdaO9RSAyY5oM+cqYBwHsBDuol0ny68nOlu1JAlIH1 lEKHjbGJAkVkjVpqRWE7KTjGMjV/MRZtZu56rn2lzvz9OWdbL4p0d5B+9lFwvic1 PWVNg/E/iwY9+zNUZfoTtMIIv81D9biN/Z0= -----END CERTIFICATE-----Generated at Tue Apr 8 18:52:08 2025 by rpki-client