$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/23dcb5f6-6a4e-32ea-8c45-e499052c3ef0.roa File: 23dcb5f6-6a4e-32ea-8c45-e499052c3ef0.roa (raw, json) Hash identifier: 6Vgu3R+IMaQObsHPpmYhSj1pP4nqnmxxbN/nan6Yd10= Subject key identifier: 22:80:F6:E1:5A:41:03:42:32:4D:02:83:E7:1E:E9:F5:9D:BC:A7:29 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926E9D47B9EA67E59C1EBE0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/23dcb5f6-6a4e-32ea-8c45-e499052c3ef0.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 63322 IP address blocks: 2001:470:312::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:e9:d4:7b:9e:a6:7e:59:c1:eb:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=de827cb6-0203-4de8-a00b-19f9c1987b54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:06:84:0e:e1:02:b9:e5:8b:cc:64:8e:2d:07: 3e:22:ca:92:dd:f3:26:67:d1:bb:3b:ec:7a:da:95: b6:d5:24:50:4e:17:4a:f8:f8:5a:31:dc:7b:70:92: ed:94:94:76:5f:28:29:66:07:65:f0:4f:1e:3e:23: 71:58:99:95:ae:4b:6b:90:2d:b6:d8:17:76:20:5c: be:fb:82:59:02:89:e1:75:99:33:85:64:63:7d:f6: 74:f3:bf:41:3b:e5:57:4e:96:6e:86:b6:c6:e5:3f: 92:50:69:20:5b:86:8d:33:f5:5e:4a:c5:fc:9f:83: b7:7f:9d:92:c1:cf:aa:2b:a4:55:dc:e3:a8:90:2e: c3:58:62:f3:f9:e4:c1:e1:77:ce:a6:07:73:d2:b1: b8:0b:ca:d6:04:6d:3c:2e:31:74:66:77:e3:e6:99: 17:96:76:dd:03:d8:e7:a1:1c:89:5c:a3:90:62:99: a0:ba:e0:74:16:ac:cd:bd:8f:72:db:19:1f:ea:e1: e0:2c:2c:2f:5e:f9:3d:62:02:10:fe:97:88:47:6a: 64:6f:ee:34:51:fe:30:bb:bf:6e:ed:6d:8b:b1:a4: 8b:1d:de:d4:24:02:50:55:28:3f:5e:76:5e:85:ff: 2c:2a:2c:8b:d1:4c:85:65:56:2a:07:93:1d:f7:cb: bf:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:80:F6:E1:5A:41:03:42:32:4D:02:83:E7:1E:E9:F5:9D:BC:A7:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/23dcb5f6-6a4e-32ea-8c45-e499052c3ef0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:312::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:dc:d4:cc:39:3a:5f:a4:9b:de:68:93:99:6e:92:62:0e:79: d7:ce:58:ac:c1:23:9f:4e:92:db:13:35:ab:9d:10:3f:59:74: 7f:4a:4c:23:f4:dc:12:32:1a:22:90:76:90:77:a1:75:6c:68: 27:4f:6b:90:af:fb:54:1a:a4:47:56:bf:4c:34:4a:9f:be:24: 22:a2:50:c2:ff:1d:22:ea:c2:61:98:03:e1:d5:fb:f1:9d:fc: f1:05:92:06:bc:b0:b9:ce:bb:65:5f:41:0a:63:54:67:c3:14: 13:07:a2:09:1d:ad:7f:e0:75:cf:1b:b7:b7:25:65:c0:3a:33: 0c:bf:bf:6f:74:3f:7d:e8:58:ef:f4:30:c9:19:bc:53:b6:16: 59:4f:3c:60:0a:40:02:85:fe:87:40:a5:46:f0:6a:ee:30:66: e5:0d:96:0c:d4:99:f5:db:1b:fe:01:b6:9e:d5:3a:f6:05:4c: e3:e5:70:aa:d4:f2:1a:41:70:d5:19:a6:f1:ba:22:cc:32:8f: 12:b2:54:db:fa:36:16:d2:b9:ce:ba:14:3d:e6:5e:d9:90:80: 64:3c:9c:c0:d4:a4:8b:4e:e6:76:36:c7:4b:6b:3c:c4:a0:05: dc:e0:a5:e4:75:1d:8a:c4:2c:85:b2:32:b6:63:a0:c3:41:c7: 1e:cb:f4:77 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JunUe56mflnB6+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk ZGU4MjdjYjYtMDIwMy00ZGU4LWEwMGItMTlmOWMxOTg3YjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0waEDuECueWLzGSOLQc+IsqS3fMmZ9G7O+x6 2pW21SRQThdK+PhaMdx7cJLtlJR2XygpZgdl8E8ePiNxWJmVrktrkC222Bd2IFy+ +4JZAonhdZkzhWRjffZ0879BO+VXTpZuhrbG5T+SUGkgW4aNM/VeSsX8n4O3f52S wc+qK6RV3OOokC7DWGLz+eTB4XfOpgdz0rG4C8rWBG08LjF0Znfj5pkXlnbdA9jn oRyJXKOQYpmguuB0FqzNvY9y2xkf6uHgLCwvXvk9YgIQ/peIR2pkb+40Uf4wu79u 7W2LsaSLHd7UJAJQVSg/XnZehf8sKiyL0UyFZVYqB5Md98u/zwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCKA9uFaQQNCMk0Cg+ce6fWdvKcpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjNkY2I1ZjYtNmE0ZS0z MmVhLThjNDUtZTQ5OTA1MmMzZWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAMS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFLc1Mw5Ol+km95ok5lukmIOedfOWKzBI59OktsTNaudED9ZdH9K TCP03BIyGiKQdpB3oXVsaCdPa5Cv+1QapEdWv0w0Sp++JCKiUML/HSLqwmGYA+HV +/Gd/PEFkga8sLnOu2VfQQpjVGfDFBMHogkdrX/gdc8bt7clZcA6Mwy/v290P33o WO/0MMkZvFO2FllPPGAKQAKF/odApUbwau4wZuUNlgzUmfXbG/4Btp7VOvYFTOPl cKrU8hpBcNUZpvG6IswyjxKyVNv6NhbSuc66FD3mXtmQgGQ8nMDUpItO5nY2x0tr PMSgBdzgpeR1HYrELIWyMrZjoMNBxx7L9Hc= -----END CERTIFICATE-----Generated at Fri Apr 4 17:53:16 2025 by rpki-client