$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/25b45474-d9f3-30d7-af14-7920e9d69bf9.roa File: 25b45474-d9f3-30d7-af14-7920e9d69bf9.roa (raw, json) Hash identifier: qQI7f1uR8m0e7lYCuMJ4SsTkcACpiJhvADK+CL+iyTc= Subject key identifier: FA:72:D0:ED:51:1A:E5:78:7E:81:7D:84:1C:7D:A4:5F:D8:F7:DD:0B Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926C36C6F23B65FC8FE3A80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/25b45474-d9f3-30d7-af14-7920e9d69bf9.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 396106 IP address blocks: 2001:470:db::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:c3:6c:6f:23:b6:5f:c8:fe:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=46fdb5b8-c6ce-4e9e-a2d2-70468d704870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c2:08:bb:92:7b:08:54:dc:54:e0:4f:32:6c: fc:a2:a1:10:dc:db:8c:0f:0c:5f:dc:ea:04:07:9e: 21:be:ec:fb:37:53:71:c9:b7:6b:72:d7:20:f5:93: e3:18:e4:5c:af:38:53:b9:d0:53:e8:d4:39:e6:59: 31:51:ab:27:0d:2c:10:c5:df:76:45:f3:98:81:84: eb:8f:d2:06:c9:c6:4f:54:93:ce:bf:c3:08:98:45: 31:47:24:a7:02:ed:9c:c2:c5:ed:f9:3e:4a:d3:4a: 4b:9e:00:db:5a:1c:56:3d:15:46:51:df:70:cb:d8: a7:a0:bc:cd:d0:8c:32:a2:1d:a2:a2:70:df:00:9d: f2:aa:7e:8f:a2:50:13:6b:c7:89:0d:ee:d3:b1:42: bb:5c:02:c1:c4:f7:8e:ac:32:8e:5e:b6:7d:3b:fc: 2c:de:ce:1d:8b:72:df:8d:73:ae:45:18:c8:d6:75: 95:fa:df:9a:e8:f8:e6:d9:04:2d:39:26:86:b2:c1: 86:3b:08:7b:45:e2:e5:88:15:85:f8:d7:d4:75:3f: fa:89:f0:6e:e1:da:80:52:e5:c0:2d:da:1e:2b:02: 2a:f5:ae:cb:62:7d:9f:a8:6c:a6:71:e1:51:7e:3c: 36:6f:bb:e2:e7:cf:2c:f8:5d:7c:d4:33:ec:17:51: 7b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:72:D0:ED:51:1A:E5:78:7E:81:7D:84:1C:7D:A4:5F:D8:F7:DD:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/25b45474-d9f3-30d7-af14-7920e9d69bf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:db::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:f7:94:8b:41:2c:8e:9d:9f:45:05:99:29:ef:e4:9f:4f:e6: 1c:d1:57:39:22:92:d2:2c:1f:20:11:c8:79:65:90:90:bc:64: f4:d3:60:33:32:57:87:46:db:2a:2d:2e:6c:d7:b0:b8:49:49: 06:34:4a:d2:03:26:5e:db:53:6b:93:41:de:81:d5:64:b9:e5: dc:bd:d4:fd:c0:f4:e4:2b:82:db:2a:f4:72:1a:f6:4f:54:94: 47:70:d1:c7:b3:24:fc:5c:42:9c:33:39:dd:8b:f0:fd:87:46: 09:bd:c9:46:b3:d0:46:37:99:9a:d8:7e:b3:2b:f9:7a:91:61: f6:89:1a:27:05:6c:e8:e3:fc:3b:27:5b:04:2e:a2:32:a5:91: 48:26:33:cf:43:fe:75:fe:f9:d4:d6:73:1f:7b:3e:e1:cf:fa: 7e:65:34:cf:31:07:0b:b4:d8:5f:c9:13:1b:70:c6:c5:7e:74: 1c:67:0f:94:f0:a1:7f:e0:41:59:46:0a:e4:1b:8a:7d:af:38: 96:c4:ee:26:10:ad:5f:a3:ba:71:79:88:2c:87:ac:3f:df:10: ac:02:65:d3:5a:eb:63:cc:11:eb:a8:02:33:6e:ed:d0:ea:ef: 96:18:51:8f:79:38:72:98:8f:46:c8:45:fa:fa:a7:6c:c7:47: c5:88:92:27 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JsNsbyO2X8j+OoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk NDZmZGI1YjgtYzZjZS00ZTllLWEyZDItNzA0NjhkNzA0ODcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcIIu5J7CFTcVOBPMmz8oqEQ3NuMDwxf3OoE B54hvuz7N1Nxybdrctcg9ZPjGORcrzhTudBT6NQ55lkxUasnDSwQxd92RfOYgYTr j9IGycZPVJPOv8MImEUxRySnAu2cwsXt+T5K00pLngDbWhxWPRVGUd9wy9inoLzN 0Iwyoh2ionDfAJ3yqn6PolATa8eJDe7TsUK7XALBxPeOrDKOXrZ9O/ws3s4di3Lf jXOuRRjI1nWV+t+a6Pjm2QQtOSaGssGGOwh7ReLliBWF+NfUdT/6ifBu4dqAUuXA LdoeKwIq9a7LYn2fqGymceFRfjw2b7vi588s+F181DPsF1F7xwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPpy0O1RGuV4foF9hBx9pF/Y990LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjViNDU0NzQtZDlmMy0z MGQ3LWFmMTQtNzkyMGU5ZDY5YmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFT3lItBLI6dn0UFmSnv5J9P5hzRVzkiktIsHyARyHllkJC8ZPTT YDMyV4dG2yotLmzXsLhJSQY0StIDJl7bU2uTQd6B1WS55dy91P3A9OQrgtsq9HIa 9k9UlEdw0cezJPxcQpwzOd2L8P2HRgm9yUaz0EY3mZrYfrMr+XqRYfaJGicFbOjj /DsnWwQuojKlkUgmM89D/nX++dTWcx97PuHP+n5lNM8xBwu02F/JExtwxsV+dBxn D5TwoX/gQVlGCuQbin2vOJbE7iYQrV+junF5iCyHrD/fEKwCZdNa62PMEeuoAjNu 7dDq75YYUY95OHKYj0bIRfr6p2zHR8WIkic= -----END CERTIFICATE-----Generated at Fri Apr 4 17:48:41 2025 by rpki-client