$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/20e46fb2-93fe-3e71-9af6-d46b13d12182.roa File: 20e46fb2-93fe-3e71-9af6-d46b13d12182.roa (raw, json) Hash identifier: 4hStNf28TmJRGUhIJmeNf5J5vEGduMrVRNGPvZ4wHH8= Subject key identifier: 76:C4:E3:E4:A8:8E:6C:35:E8:78:3A:95:31:4B:49:58:AA:32:F2:72 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926DD6F983CCC3969C80400 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/20e46fb2-93fe-3e71-9af6-d46b13d12182.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 11320 IP address blocks: 2001:470:183::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:dd:6f:98:3c:cc:39:69:c8:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=a8bd0aca-ca48-4622-a515-49298afa7819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d7:33:19:13:7d:99:9f:b5:37:3a:19:a4:be: a6:28:58:04:25:de:b0:a4:4b:6c:73:3d:0f:ef:39: ef:02:64:a2:ed:26:07:e5:7b:b0:66:5a:cb:8b:c5: a2:b2:76:d8:43:e9:8e:d9:88:4d:aa:cc:35:81:3a: 24:3f:34:8d:3b:a8:34:31:77:fe:cc:df:5c:c6:45: 1d:88:67:67:41:dd:e9:0e:67:71:8e:42:3c:89:ef: 72:c8:1a:c0:b7:9e:cf:a9:82:67:3d:0e:42:62:90: 5e:b9:0e:fc:7b:f4:91:6c:28:a0:eb:50:a2:a6:c6: d0:88:3b:d0:17:b8:b1:3c:c7:37:9e:af:8b:56:bc: 23:b0:a2:9c:9c:75:44:f7:80:b6:00:b8:f5:d7:ec: d0:32:8e:b2:49:26:58:b3:25:29:58:ff:79:53:50: 71:14:8b:61:8d:35:d0:7d:6b:e9:d2:70:36:ff:86: 5f:36:d4:37:83:7a:0a:da:b1:9a:40:d3:78:91:3e: ea:91:96:e7:91:c2:14:07:2a:03:99:9c:6f:73:56: f0:4c:b7:4a:35:dd:6e:a5:f0:4d:3e:1e:f5:89:08: 97:59:8f:62:fe:16:c5:ce:f7:e7:70:ec:96:d0:19: b7:d4:cd:e3:5d:f0:7a:2b:18:0e:fc:3d:62:75:44: ed:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C4:E3:E4:A8:8E:6C:35:E8:78:3A:95:31:4B:49:58:AA:32:F2:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/20e46fb2-93fe-3e71-9af6-d46b13d12182.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:183::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:25:3a:b9:02:d3:6d:33:42:0a:e8:01:f2:2e:a4:54:ab:43: 9a:5a:f8:df:99:ce:a8:45:be:79:4d:8c:ce:35:00:1e:f1:87: 7b:f5:03:fa:68:dc:fd:a9:48:fb:d0:16:4a:a9:05:6c:8d:4b: ad:29:c8:71:9b:a1:5e:b2:45:5d:1a:f7:13:83:45:a4:3e:b4: 01:f8:af:87:d8:6d:bf:00:d3:e9:01:1f:db:fc:92:d8:15:95: fd:48:1f:38:cb:cb:5a:b6:a2:b9:00:f7:17:30:5a:bf:ae:c7: 1d:d4:1c:a3:ed:ca:53:d5:d3:7c:25:b7:4f:08:16:d1:4b:0b: ee:f8:d5:4d:3f:11:0b:82:c4:8e:7e:a8:d4:7d:5d:40:46:05: 65:68:79:97:6c:4f:3f:c6:ca:b6:5b:e0:3d:51:4f:e8:2e:f5: bf:58:06:4c:a8:d2:62:2a:15:a5:83:38:2b:00:fc:4b:33:ad: 36:5c:30:4d:c6:6e:db:c9:8f:ce:3b:73:51:ae:2b:b7:98:b4: a7:b7:01:ab:3f:cd:54:02:1a:d5:2b:f7:5f:59:e1:58:90:c1: 37:47:ad:69:d7:00:c6:eb:73:80:74:ad:4c:2f:2b:c7:0a:bf: 89:14:4c:99:ec:29:47:14:28:3f:02:ff:f5:c0:8c:b9:42:4a: ad:27:e2:54 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5Jt1vmDzMOWnIBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk YThiZDBhY2EtY2E0OC00NjIyLWE1MTUtNDkyOThhZmE3ODE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tczGRN9mZ+1NzoZpL6mKFgEJd6wpEtscz0P 7znvAmSi7SYH5XuwZlrLi8WisnbYQ+mO2YhNqsw1gTokPzSNO6g0MXf+zN9cxkUd iGdnQd3pDmdxjkI8ie9yyBrAt57PqYJnPQ5CYpBeuQ78e/SRbCig61CipsbQiDvQ F7ixPMc3nq+LVrwjsKKcnHVE94C2ALj11+zQMo6ySSZYsyUpWP95U1BxFIthjTXQ fWvp0nA2/4ZfNtQ3g3oK2rGaQNN4kT7qkZbnkcIUByoDmZxvc1bwTLdKNd1upfBN Ph71iQiXWY9i/hbFzvfncOyW0Bm31M3jXfB6KxgO/D1idUTtoQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHbE4+Sojmw16Hg6lTFLSViqMvJyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjBlNDZmYjItOTNmZS0z ZTcxLTlhZjYtZDQ2YjEzZDEyMTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAGD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJclOrkC020zQgroAfIupFSrQ5pa+N+ZzqhFvnlNjM41AB7xh3v1 A/po3P2pSPvQFkqpBWyNS60pyHGboV6yRV0a9xODRaQ+tAH4r4fYbb8A0+kBH9v8 ktgVlf1IHzjLy1q2orkA9xcwWr+uxx3UHKPtylPV03wlt08IFtFLC+741U0/EQuC xI5+qNR9XUBGBWVoeZdsTz/GyrZb4D1RT+gu9b9YBkyo0mIqFaWDOCsA/EszrTZc ME3GbtvJj847c1GuK7eYtKe3Aas/zVQCGtUr919Z4ViQwTdHrWnXAMbrc4B0rUwv K8cKv4kUTJnsKUcUKD8C//XAjLlCSq0n4lQ= -----END CERTIFICATE-----Generated at Fri Apr 4 17:44:13 2025 by rpki-client