$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1655b238-f2d8-3eb9-9e45-951754c5820c.roa File: 1655b238-f2d8-3eb9-9e45-951754c5820c.roa (raw, json) Hash identifier: WqwVeq4+3gQdF4GZ8ZG8AKL2F6sJbQW3Rsyv9qDTo78= Subject key identifier: 38:8C:11:73:7D:A6:97:F6:6E:8A:6C:56:8F:B1:65:EC:5F:0B:4D:73 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858492F87BB23743905BC88B61080 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1655b238-f2d8-3eb9-9e45-951754c5820c.roa Signing time: Fri 14 Mar 2025 13:30:18 +0000 ROA not before: Fri 14 Mar 2025 13:30:18 +0000 ROA not after: Thu 12 Jun 2025 13:30:18 +0000 asID: 207804 IP address blocks: 2001:470:427::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2f:87:bb:23:74:39:05:bc:88:b6:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 14 13:30:18 2025 GMT Not After : Jun 12 13:30:18 2025 GMT Subject: CN=871f3b7e-7c8a-4f07-ad0a-4b70159f317c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e3:c7:80:33:28:76:b3:37:70:c3:83:aa:24: a9:d4:07:a4:8e:fb:c3:60:24:bd:db:92:98:3f:83: a1:79:3c:7c:4e:ad:77:64:10:1f:04:6b:ed:fe:3e: a3:95:99:68:4c:1c:ca:1d:be:3d:ea:55:d0:47:a2: b2:0a:0e:f3:a3:eb:a4:a6:f7:4b:9e:ce:cd:77:62: 0a:2c:44:32:59:48:b3:1b:71:dd:0c:48:ed:e0:9f: 8d:12:8c:a4:07:55:a7:2c:46:9b:b3:e8:94:4e:45: da:60:fc:01:be:b4:25:63:84:79:81:73:27:ad:b9: 47:1d:83:f3:c0:df:b0:f2:9c:f7:1b:e6:14:04:79: bb:da:45:fe:ed:46:78:f6:b0:92:a0:80:cf:d0:ca: 36:5d:f1:8d:8f:0d:b3:f2:b5:4a:33:c9:bb:bf:9f: 27:2c:47:12:c9:a6:69:40:24:af:08:87:a7:21:c2: 6a:68:b9:ac:36:91:1e:b6:80:3d:e5:75:39:7e:40: a8:04:05:4d:38:0d:48:ac:40:8f:55:af:e8:90:a0: a7:63:8b:dc:48:1d:b4:49:f6:80:75:c6:74:d6:f9: 7a:ab:be:d0:6d:f4:95:62:39:64:70:83:fa:63:0d: 95:d7:b2:7c:1c:55:bc:88:d5:40:36:7c:b8:5c:5b: 37:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:8C:11:73:7D:A6:97:F6:6E:8A:6C:56:8F:B1:65:EC:5F:0B:4D:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1655b238-f2d8-3eb9-9e45-951754c5820c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:427::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:56:2a:ed:27:8a:69:cb:f9:f6:11:2c:5e:07:e9:5d:42:8d: 8f:47:14:cc:ab:6f:80:72:ab:4e:04:9d:1e:68:24:80:8d:73: 68:7b:a9:ff:15:0c:cb:9e:93:02:12:5b:b8:ca:fb:8d:ab:c5: c4:82:47:6f:c8:1a:47:9f:d5:01:71:b2:cb:97:ae:04:f2:12: b3:cf:11:d4:ba:8f:94:34:53:95:81:bd:f6:33:ca:27:a6:41: a9:d9:14:dc:76:15:10:e1:bf:5b:dc:6a:89:d3:fe:22:5e:09: 19:df:a4:f3:5d:be:3a:8e:b9:dc:37:74:ab:e9:7d:f5:81:87: 48:30:a5:89:24:06:bb:5a:c8:04:db:2d:72:ef:c0:24:8a:1d: bf:b7:db:fe:8c:ab:65:e4:53:f9:37:c3:9a:9b:a6:28:26:43: ce:fd:bf:d6:34:8c:c5:ab:3d:37:c1:f2:0e:75:cd:8c:28:0d: 91:21:6c:12:91:3a:b3:85:46:41:c5:b8:1a:2a:99:e3:fc:33: 32:f4:34:7b:3f:80:be:18:82:32:e7:c4:cd:70:ac:31:67:fd: 17:c1:be:19:27:68:70:54:2e:0e:32:19:ae:8e:ce:0d:e7:7a: 42:cd:15:c5:f7:16:bb:85:84:36:31:cf:15:aa:e2:0c:71:93: 94:9b:79:b8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkvh7sjdDkFvIi2EIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMxNDEzMzAxOFoXDTI1MDYxMjEzMzAxOFowLzEtMCsGA1UEAxMk ODcxZjNiN2UtN2M4YS00ZjA3LWFkMGEtNGI3MDE1OWYzMTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOPHgDModrM3cMODqiSp1AekjvvDYCS925KY P4OheTx8Tq13ZBAfBGvt/j6jlZloTBzKHb496lXQR6KyCg7zo+ukpvdLns7Nd2IK LEQyWUizG3HdDEjt4J+NEoykB1WnLEabs+iUTkXaYPwBvrQlY4R5gXMnrblHHYPz wN+w8pz3G+YUBHm72kX+7UZ49rCSoIDP0Mo2XfGNjw2z8rVKM8m7v58nLEcSyaZp QCSvCIenIcJqaLmsNpEetoA95XU5fkCoBAVNOA1IrECPVa/okKCnY4vcSB20SfaA dcZ01vl6q77QbfSVYjlkcIP6Yw2V17J8HFW8iNVANny4XFs3UQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDiMEXN9ppf2bopsVo+xZexfC01zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMTY1NWIyMzgtZjJkOC0z ZWI5LTllNDUtOTUxNzU0YzU4MjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHhWKu0nimnL+fYRLF4H6V1CjY9HFMyrb4Byq04EnR5oJICNc2h7 qf8VDMuekwISW7jK+42rxcSCR2/IGkef1QFxssuXrgTyErPPEdS6j5Q0U5WBvfYz yiemQanZFNx2FRDhv1vcaonT/iJeCRnfpPNdvjqOudw3dKvpffWBh0gwpYkkBrta yATbLXLvwCSKHb+32/6Mq2XkU/k3w5qbpigmQ879v9Y0jMWrPTfB8g51zYwoDZEh bBKROrOFRkHFuBoqmeP8MzL0NHs/gL4YgjLnxM1wrDFn/RfBvhknaHBULg4yGa6O zg3nekLNFcX3FruFhDYxzxWq4gxxk5Sbebg= -----END CERTIFICATE-----Generated at Fri Apr 4 17:57:35 2025 by rpki-client