$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/27da4372-28cc-3f9f-a428-100dbb240185.roa File: 27da4372-28cc-3f9f-a428-100dbb240185.roa (raw, json) Hash identifier: tEpXfWpT6ChnUeA4NhKpb9zdE0HujaiDt7/yVSprhG8= Subject key identifier: 21:A7:C1:87:00:00:C5:28:61:80:53:A4:41:32:53:02:41:D7:1D:4B Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848A6D9EE8006E11E9C619F6C80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/27da4372-28cc-3f9f-a428-100dbb240185.roa Signing time: Fri 24 Jan 2025 14:30:11 +0000 ROA not before: Fri 24 Jan 2025 14:30:11 +0000 ROA not after: Thu 24 Apr 2025 13:30:11 +0000 asID: 134346 IP address blocks: 2001:470:3fd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a6:d9:ee:80:06:e1:1e:9c:61:9f:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jan 24 14:30:11 2025 GMT Not After : Apr 24 13:30:11 2025 GMT Subject: CN=c33735d6-be56-4902-b919-e5c6fad9c887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1f:2c:c7:48:f5:99:38:7a:8c:c9:47:9a:52: 62:d9:89:3b:8d:66:76:7d:6c:cc:d8:26:41:0c:ae: 83:e8:91:70:eb:ee:f7:45:bd:a8:4a:6d:b5:97:56: be:d7:e5:bd:78:42:20:d5:76:3b:8e:c6:01:2b:de: b1:c1:24:d2:17:34:e1:72:09:9a:ac:d4:a8:31:73: 35:0e:e2:35:d2:4a:d4:f3:29:62:d8:86:ab:55:05: c7:d2:f1:a7:27:41:56:d5:47:04:38:14:5f:05:c9: bf:bb:37:a4:0e:dc:e0:93:92:5a:51:04:a1:28:d2: a0:a7:c1:b5:70:81:e1:ec:94:1f:4c:62:d4:22:7a: 0c:b8:ff:5d:7c:2c:ff:fd:47:ef:5b:a2:72:44:c4: 1b:1c:8c:36:dc:58:26:9b:14:10:26:83:53:cb:a1: 84:f1:7e:a6:78:81:19:cb:8e:cf:d3:e3:78:81:d1: 4c:26:a9:1b:2f:5b:df:f1:8a:7b:da:2f:bd:95:c4: 79:39:35:cb:91:37:e4:bf:ae:8e:08:4e:c9:79:6a: e5:49:3e:29:7e:c1:ed:1b:fa:0b:27:6e:1e:f2:15: cb:99:50:94:b5:76:e0:f9:8a:7a:b7:a5:1c:e0:27: 6d:15:f6:49:2a:97:b2:e0:74:f4:b4:2c:19:44:c5: 17:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A7:C1:87:00:00:C5:28:61:80:53:A4:41:32:53:02:41:D7:1D:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/27da4372-28cc-3f9f-a428-100dbb240185.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3fd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:e4:89:1a:6d:b1:82:59:c9:18:0e:6b:17:96:6f:9d:b5:1d: 89:1a:21:60:30:56:34:09:67:9b:f0:0a:ba:a0:33:05:26:9f: 37:c1:aa:ff:9c:9a:b9:68:11:53:82:53:5f:99:47:fd:bb:45: cf:29:a5:5d:65:df:a3:8e:9b:42:f4:e2:e4:25:0d:09:68:e1: 20:27:83:a7:b1:fd:5e:7c:20:d9:52:08:00:19:7e:dd:4b:d6: 38:e0:79:7c:45:52:6c:3a:f8:d3:ec:ef:4d:8c:46:37:c4:1f: a9:5d:c6:45:91:c2:f8:c5:f2:e2:0a:62:eb:bf:aa:f6:f8:13: a0:0d:13:14:29:27:aa:34:3f:07:ea:f1:29:97:e6:d4:1d:da: ff:79:7f:bf:fb:55:03:04:ce:ee:42:c6:95:b4:5e:f4:26:28: 50:07:9d:5b:f7:19:c3:a5:54:e1:51:37:85:4b:e0:0b:a8:bf: 2d:d4:7d:71:2a:e4:b9:69:f8:6c:2b:3f:99:1c:72:12:93:75: 24:f2:a6:74:51:d4:1c:3f:54:4a:e2:52:96:1e:ef:db:cc:78: fc:a2:18:bb:e1:dc:53:2c:a4:ff:66:58:b9:fa:80:c4:5d:fe: 8c:58:dc:79:0c:ee:8b:1c:43:29:1e:82:5d:89:ad:4d:47:34: 5a:31:1a:4e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEim2e6ABuEenGGfbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDEyNDE0MzAxMVoXDTI1MDQyNDEzMzAxMVowLzEtMCsGA1UEAxMk YzMzNzM1ZDYtYmU1Ni00OTAyLWI5MTktZTVjNmZhZDljODg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmx8sx0j1mTh6jMlHmlJi2Yk7jWZ2fWzM2CZB DK6D6JFw6+73Rb2oSm21l1a+1+W9eEIg1XY7jsYBK96xwSTSFzThcgmarNSoMXM1 DuI10krU8yli2IarVQXH0vGnJ0FW1UcEOBRfBcm/uzekDtzgk5JaUQShKNKgp8G1 cIHh7JQfTGLUInoMuP9dfCz//UfvW6JyRMQbHIw23FgmmxQQJoNTy6GE8X6meIEZ y47P0+N4gdFMJqkbL1vf8Yp72i+9lcR5OTXLkTfkv66OCE7JeWrlST4pfsHtG/oL J24e8hXLmVCUtXbg+Yp6t6Uc4CdtFfZJKpey4HT0tCwZRMUXDwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCGnwYcAAMUoYYBTpEEyUwJB1x1LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjdkYTQzNzItMjhjYy0z ZjlmLWE0MjgtMTAwZGJiMjQwMTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAP9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAHkiRptsYJZyRgOaxeWb521HYkaIWAwVjQJZ5vwCrqgMwUmnzfB qv+cmrloEVOCU1+ZR/27Rc8ppV1l36OOm0L04uQlDQlo4SAng6ex/V58INlSCAAZ ft1L1jjgeXxFUmw6+NPs702MRjfEH6ldxkWRwvjF8uIKYuu/qvb4E6ANExQpJ6o0 Pwfq8SmX5tQd2v95f7/7VQMEzu5CxpW0XvQmKFAHnVv3GcOlVOFRN4VL4Auovy3U fXEq5Llp+GwrP5kcchKTdSTypnRR1Bw/VEriUpYe79vMePyiGLvh3FMspP9mWLn6 gMRd/oxY3HkM7oscQykegl2JrU1HNFoxGk4= -----END CERTIFICATE-----Generated at Fri Mar 14 12:17:41 2025 by rpki-client