$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/252e51df-b074-3d81-91f6-d7a86aee0e02.roa File: 252e51df-b074-3d81-91f6-d7a86aee0e02.roa (raw, json) Hash identifier: JlhIpCozzp3b/Y5CzG338dkYwOaaTaOo48IKOViY4yw= Subject key identifier: D0:99:A8:DC:4F:8B:B2:B4:95:54:B9:5C:AF:2B:5D:59:09:1B:0B:97 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584913AC3F8AA40386AF381CC800 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/252e51df-b074-3d81-91f6-d7a86aee0e02.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 12247 IP address blocks: 2001:470:391::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:3f:8a:a4:03:86:af:38:1c:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=4aa7c14f-2551-4543-b457-d48f923801e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2c:96:07:5c:e2:23:79:5a:95:24:34:fc:8b: fc:7b:81:86:66:e4:4b:be:b0:7d:c4:9b:55:31:3e: 4a:61:83:68:6b:08:97:cc:ee:cb:71:6e:71:68:39: d5:98:7f:cb:3c:fa:1e:6b:90:9e:20:df:c1:d5:2e: b7:f7:a5:5f:8a:eb:6b:4b:e2:39:d0:64:cf:46:cb: a5:39:7e:26:01:bd:ba:21:01:86:ce:e3:82:7d:fc: a5:db:ac:81:aa:f9:41:ea:da:d2:75:ee:c3:8d:62: 34:72:cf:a3:ce:18:8e:5a:88:28:29:ec:ee:60:90: 37:ac:9b:a9:86:93:ef:67:f1:ca:6b:df:35:0d:cf: de:18:68:07:1d:f7:7d:91:40:7a:b1:18:92:7b:8a: 78:2e:5f:cd:1a:be:11:60:f3:ae:4f:4a:7f:fe:38: d5:1f:21:97:9d:0a:c5:99:4d:66:3e:2c:35:13:6c: 5d:26:76:50:9c:22:49:4e:84:37:64:46:70:55:49: 2e:12:21:3c:fc:fa:56:cd:01:17:8f:ba:67:0a:f1: 5d:76:e3:df:fc:17:e0:f3:e3:52:8a:4b:49:5a:94: 32:95:47:5c:15:5a:6a:e4:73:5f:23:9b:7c:fb:86: be:88:1e:fb:d0:81:be:df:92:b3:32:36:90:4b:c8: cc:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:99:A8:DC:4F:8B:B2:B4:95:54:B9:5C:AF:2B:5D:59:09:1B:0B:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/252e51df-b074-3d81-91f6-d7a86aee0e02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:391::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:1a:40:96:de:fb:60:fc:f6:4b:8f:07:9d:35:9c:2d:d4:13: 60:ed:a1:6a:17:ee:aa:e9:7a:25:85:63:7b:e0:b3:52:a7:af: 76:b9:16:3f:b5:c0:07:c3:a3:4d:e1:29:9c:14:2e:e3:2e:93: 6c:63:d1:38:b3:80:fb:b1:ab:40:be:7d:39:38:b9:e4:1f:48: 5f:e4:68:7c:96:76:0c:bf:44:ec:f1:a4:8a:50:33:5c:86:b7: 91:bc:2e:cc:da:5b:73:c4:61:9d:9d:f5:e2:bc:1b:2e:c3:df: 41:58:75:60:a8:8f:1b:fb:52:1a:06:b1:8d:70:c9:a8:15:1d: 16:a2:16:48:65:42:38:8f:3e:01:27:1d:7b:6a:8f:1a:97:a9: 00:a6:78:cd:ba:f4:d4:99:f4:9e:97:b0:66:4e:26:f6:1b:b6: 8a:28:8c:42:7d:13:d7:a8:d1:de:13:58:00:88:4b:84:63:8b: 8f:52:21:2a:ce:34:11:de:36:41:7a:1e:82:65:9f:86:51:e5: 4d:7f:3b:82:d8:42:9c:60:29:11:78:7d:e4:41:67:1e:e1:fc: 75:02:0f:25:db:42:57:10:20:15:c1:8f:67:4f:bf:3d:66:b7: c9:86:d4:15:f1:84:0c:c6:3a:05:d7:83:da:80:6e:53:a1:ed: cc:35:2b:4a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkTrD+KpAOGrzgcyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk NGFhN2MxNGYtMjU1MS00NTQzLWI0NTctZDQ4ZjkyMzgwMWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CyWB1ziI3lalSQ0/Iv8e4GGZuRLvrB9xJtV MT5KYYNoawiXzO7LcW5xaDnVmH/LPPoea5CeIN/B1S6396VfiutrS+I50GTPRsul OX4mAb26IQGGzuOCffyl26yBqvlB6trSde7DjWI0cs+jzhiOWogoKezuYJA3rJup hpPvZ/HKa981Dc/eGGgHHfd9kUB6sRiSe4p4Ll/NGr4RYPOuT0p//jjVHyGXnQrF mU1mPiw1E2xdJnZQnCJJToQ3ZEZwVUkuEiE8/PpWzQEXj7pnCvFdduPf/Bfg8+NS iktJWpQylUdcFVpq5HNfI5t8+4a+iB770IG+35KzMjaQS8jMWwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNCZqNxPi7K0lVS5XK8rXVkJGwuXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjUyZTUxZGYtYjA3NC0z ZDgxLTkxZjYtZDdhODZhZWUwZTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIgaQJbe+2D89kuPB501nC3UE2DtoWoX7qrpeiWFY3vgs1Knr3a5 Fj+1wAfDo03hKZwULuMuk2xj0TizgPuxq0C+fTk4ueQfSF/kaHyWdgy/ROzxpIpQ M1yGt5G8LszaW3PEYZ2d9eK8Gy7D30FYdWCojxv7UhoGsY1wyagVHRaiFkhlQjiP PgEnHXtqjxqXqQCmeM269NSZ9J6XsGZOJvYbtooojEJ9E9eo0d4TWACIS4Rji49S ISrONBHeNkF6HoJln4ZR5U1/O4LYQpxgKRF4feRBZx7h/HUCDyXbQlcQIBXBj2dP vz1mt8mG1BXxhAzGOgXXg9qAblOh7cw1K0o= -----END CERTIFICATE-----Generated at Fri Apr 4 17:44:12 2025 by rpki-client