$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/20328e25-1f6e-352c-9602-d33bdc9796d8.roa File: 20328e25-1f6e-352c-9602-d33bdc9796d8.roa (raw, json) Hash identifier: NCFX9LfyBrr3zK0gTt7LoBIXiaTWgjp9/JXb9ItpReI= Subject key identifier: 59:0F:3A:B9:6A:21:B5:FC:D0:F1:88:9C:D5:46:9C:51:64:AB:14:6B Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584894B47E7C1173004B5B2A7040 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/20328e25-1f6e-352c-9602-d33bdc9796d8.roa Signing time: Sat 18 Jan 2025 02:30:12 +0000 ROA not before: Sat 18 Jan 2025 02:30:12 +0000 ROA not after: Fri 18 Apr 2025 01:30:12 +0000 asID: 196810 IP address blocks: 2001:470:112::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:94:b4:7e:7c:11:73:00:4b:5b:2a:70:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jan 18 02:30:12 2025 GMT Not After : Apr 18 01:30:12 2025 GMT Subject: CN=dd32243d-b25c-49dd-b050-9c404ee3d841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:4a:f3:9c:7e:9f:ae:cc:c0:95:4b:3c:de:95: f5:00:61:44:c6:10:24:78:e9:ac:d4:ac:0b:a8:4a: 8c:5b:5c:f7:80:b7:f7:46:25:24:e1:3b:de:49:bb: c6:0f:6e:1f:68:c3:a1:1f:05:19:eb:0e:f1:f5:9c: ac:8b:0c:b6:ce:04:3a:cb:57:fb:05:c4:bd:f8:76: 19:49:64:f8:52:e3:b8:e8:3b:f6:52:dc:0c:c2:36: e8:a1:94:fc:60:41:31:46:79:a1:ac:f0:9a:41:98: 9f:08:de:39:4f:1d:dc:72:a1:09:1f:f2:74:a3:2c: a6:d5:e7:75:c1:ed:96:61:d4:63:e2:7a:0e:2e:93: 38:65:eb:04:3f:2d:28:5d:f8:8b:23:7f:a1:80:7b: 18:42:63:ed:8d:4a:74:c5:85:e4:ab:84:6f:b7:ad: 82:d9:83:34:e3:67:89:01:21:19:ab:c2:13:01:e2: 6f:49:89:d9:46:f4:0a:fe:ff:c5:fa:f4:30:20:54: 4c:df:ef:04:ce:57:f4:13:2e:f2:ca:d2:3b:87:4a: 6a:ab:4f:57:cd:30:78:fc:23:af:a8:20:82:0b:ea: 89:f2:ba:95:9c:07:c7:fc:a0:7e:d4:85:87:28:4a: d5:59:45:0f:b6:1f:de:39:3f:65:ca:9f:e4:f0:32: c1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:0F:3A:B9:6A:21:B5:FC:D0:F1:88:9C:D5:46:9C:51:64:AB:14:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/20328e25-1f6e-352c-9602-d33bdc9796d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:112::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:78:57:13:7f:83:ff:28:bc:e8:28:6c:ee:de:bd:5c:38:bf: 68:9e:35:22:13:f8:31:4c:bc:50:f0:3f:8b:bd:be:35:d6:a4: 96:38:e4:bb:ee:31:75:6d:08:0d:3c:20:85:00:b4:63:41:77: e5:0a:7f:49:11:27:78:8d:47:d2:a4:c1:54:a0:7a:f2:ee:7a: 92:26:50:66:26:f5:a7:63:13:23:93:76:91:93:7c:dc:3e:2e: d5:f2:e9:b9:78:3b:e9:71:42:d8:0a:25:23:8a:94:8a:3e:2b: c9:d1:ee:ae:43:a1:8c:50:75:00:ed:6c:57:53:c0:08:7a:47: 08:51:cd:07:da:93:72:33:f2:c5:3b:a8:6f:d1:b2:bd:c2:0b: af:16:28:2e:be:04:f5:66:94:45:93:44:3b:44:4f:69:da:2b: de:57:18:4b:de:9e:5b:70:47:43:9b:f0:27:5c:1f:cf:ca:f0: 5d:83:91:6a:4d:9c:47:d1:99:54:27:a0:c4:3b:16:aa:56:4e: a8:a5:1d:e3:f1:ae:a7:49:3c:61:f8:5a:25:51:0c:73:9d:f6: 1e:4f:50:7a:2e:19:70:36:f5:87:04:b7:ba:c0:1a:4d:fb:24: 19:ff:b3:91:f5:8e:3e:b0:cb:f9:cd:57:e5:e6:36:a3:48:20: c8:18:76:aa -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiUtH58EXMAS1sqcEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDExODAyMzAxMloXDTI1MDQxODAxMzAxMlowLzEtMCsGA1UEAxMk ZGQzMjI0M2QtYjI1Yy00OWRkLWIwNTAtOWM0MDRlZTNkODQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7UrznH6frszAlUs83pX1AGFExhAkeOms1KwL qEqMW1z3gLf3RiUk4TveSbvGD24faMOhHwUZ6w7x9Zysiwy2zgQ6y1f7BcS9+HYZ SWT4UuO46Dv2UtwMwjbooZT8YEExRnmhrPCaQZifCN45Tx3ccqEJH/J0oyym1ed1 we2WYdRj4noOLpM4ZesEPy0oXfiLI3+hgHsYQmPtjUp0xYXkq4Rvt62C2YM042eJ ASEZq8ITAeJvSYnZRvQK/v/F+vQwIFRM3+8Ezlf0Ey7yytI7h0pqq09XzTB4/COv qCCCC+qJ8rqVnAfH/KB+1IWHKErVWUUPth/eOT9lyp/k8DLBtQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFkPOrlqIbX80PGInNVGnFFkqxRrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjAzMjhlMjUtMWY2ZS0z NTJjLTk2MDItZDMzYmRjOTc5NmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAES MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGZ4VxN/g/8ovOgobO7evVw4v2ieNSIT+DFMvFDwP4u9vjXWpJY4 5LvuMXVtCA08IIUAtGNBd+UKf0kRJ3iNR9KkwVSgevLuepImUGYm9adjEyOTdpGT fNw+LtXy6bl4O+lxQtgKJSOKlIo+K8nR7q5DoYxQdQDtbFdTwAh6RwhRzQfak3Iz 8sU7qG/Rsr3CC68WKC6+BPVmlEWTRDtET2naK95XGEvenltwR0Ob8CdcH8/K8F2D kWpNnEfRmVQnoMQ7FqpWTqilHePxrqdJPGH4WiVRDHOd9h5PUHouGXA29YcEt7rA Gk37JBn/s5H1jj6wy/nNV+XmNqNIIMgYdqo= -----END CERTIFICATE-----Generated at Wed Feb 5 04:55:59 2025 by rpki-client