$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/29a4b461-5e2c-3fb0-8dce-3ade2ac78f5b.roa File: 29a4b461-5e2c-3fb0-8dce-3ade2ac78f5b.roa (raw, json) Hash identifier: G5SNj/qY6QFBNH3O/3R1LdsFw2HbI7aftI6QQjTSa30= Subject key identifier: 59:FF:8E:4B:63:79:16:19:E6:9C:6B:A4:7D:43:22:B3:C5:A3:F5:77 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858494FA2940494D159EA313B3E80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/29a4b461-5e2c-3fb0-8dce-3ade2ac78f5b.roa Signing time: Wed 26 Mar 2025 01:30:16 +0000 ROA not before: Wed 26 Mar 2025 01:30:16 +0000 ROA not after: Tue 24 Jun 2025 01:30:16 +0000 asID: 149290 IP address blocks: 2001:470:112::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4f:a2:94:04:94:d1:59:ea:31:3b:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 26 01:30:16 2025 GMT Not After : Jun 24 01:30:16 2025 GMT Subject: CN=248d209d-94df-4970-a828-c933ba07209f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fc:60:c9:28:f7:0e:52:22:d8:75:70:bf:1f: f3:64:83:60:ae:a9:5c:3a:52:e2:2c:0b:c5:48:73: e2:dc:43:e4:c1:5a:2a:bd:ff:ba:bf:f6:50:6a:13: 55:cd:12:94:df:d8:9d:8c:f2:fa:de:70:d9:24:55: fc:c7:fa:c8:8f:b5:c1:4d:40:9e:50:d9:2d:78:41: c9:a3:6c:f6:54:1c:db:ce:46:8a:ac:a4:9a:0a:af: 47:14:bd:48:3f:66:b7:71:14:a3:57:e7:ef:4f:0b: 84:c9:3e:f7:de:58:d5:fd:83:f5:1b:9c:cf:c5:6f: 7e:c8:45:68:64:31:9e:79:f5:ac:79:06:0b:70:84: 85:27:d9:6c:48:86:59:78:5e:3a:91:6f:42:94:4c: 37:4f:32:2f:a9:a0:a8:32:f0:f8:25:74:2c:80:13: e3:03:ae:9b:8c:51:72:14:fe:b7:f8:6f:59:ee:58: f0:fb:0e:76:8c:5f:ed:f0:8d:59:bc:49:b8:4b:61: b7:83:e7:b3:b4:31:69:9b:64:d3:12:33:c4:5e:32: b1:a7:1f:c9:b9:03:80:1f:ae:ef:43:c3:22:b7:2b: 9b:54:93:9d:6d:5b:3d:6f:40:d0:3a:5a:a5:03:db: f2:8e:81:79:e8:0d:98:13:5d:28:72:39:85:0c:88: 16:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:FF:8E:4B:63:79:16:19:E6:9C:6B:A4:7D:43:22:B3:C5:A3:F5:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/29a4b461-5e2c-3fb0-8dce-3ade2ac78f5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:112::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:97:63:47:dd:4a:af:0b:92:7c:6a:08:30:3d:1e:83:c0:c7: a6:c4:b8:b8:7e:10:db:eb:a1:25:bd:0b:9e:a8:11:60:29:e4: 04:87:1d:e4:72:52:4e:96:2e:c1:71:9a:8c:e9:64:a3:12:fd: fd:04:99:1a:d7:87:e5:f7:0f:f8:83:3d:1f:bc:5c:9a:d8:04: 82:06:d4:45:73:81:90:09:d1:27:ae:44:c5:e5:25:8e:eb:f1: 3f:5e:f0:b8:43:84:97:e9:5e:a2:d0:45:04:f6:98:06:a6:c4: b7:82:ca:9e:1e:51:5b:9b:34:cc:ee:18:fb:b9:6e:4e:dd:96: fe:ea:87:17:9b:41:65:7e:9f:51:69:df:cf:fd:10:74:84:97: 55:03:be:f3:11:04:78:94:90:77:0b:be:8d:69:fb:63:6e:57: bd:3a:67:e4:b2:64:97:6c:98:01:02:23:09:9f:ae:ed:e4:dc: 46:37:9b:b1:ef:c5:2e:cb:6e:bd:d5:91:52:9e:b7:f0:ad:32: e5:91:57:e2:1d:42:0b:9d:d3:4d:74:f5:26:be:55:88:3b:04: 3c:2f:ab:0d:4b:60:c3:39:b1:33:39:d2:a6:31:d3:0e:97:dd: c2:1e:19:26:26:9c:8c:2e:fe:33:b4:8c:04:f9:4e:3e:fc:50: 48:55:93:da -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElPopQElNFZ6jE7PoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMyNjAxMzAxNloXDTI1MDYyNDAxMzAxNlowLzEtMCsGA1UEAxMk MjQ4ZDIwOWQtOTRkZi00OTcwLWE4MjgtYzkzM2JhMDcyMDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifxgySj3DlIi2HVwvx/zZINgrqlcOlLiLAvF SHPi3EPkwVoqvf+6v/ZQahNVzRKU39idjPL63nDZJFX8x/rIj7XBTUCeUNkteEHJ o2z2VBzbzkaKrKSaCq9HFL1IP2a3cRSjV+fvTwuEyT733ljV/YP1G5zPxW9+yEVo ZDGeefWseQYLcISFJ9lsSIZZeF46kW9ClEw3TzIvqaCoMvD4JXQsgBPjA66bjFFy FP63+G9Z7ljw+w52jF/t8I1ZvEm4S2G3g+eztDFpm2TTEjPEXjKxpx/JuQOAH67v Q8MityubVJOdbVs9b0DQOlqlA9vyjoF56A2YE10ocjmFDIgWSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFn/jktjeRYZ5pxrpH1DIrPFo/V3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjlhNGI0NjEtNWUyYy0z ZmIwLThkY2UtM2FkZTJhYzc4ZjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAES MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEeXY0fdSq8LknxqCDA9HoPAx6bEuLh+ENvroSW9C56oEWAp5ASH HeRyUk6WLsFxmozpZKMS/f0EmRrXh+X3D/iDPR+8XJrYBIIG1EVzgZAJ0SeuRMXl JY7r8T9e8LhDhJfpXqLQRQT2mAamxLeCyp4eUVubNMzuGPu5bk7dlv7qhxebQWV+ n1Fp38/9EHSEl1UDvvMRBHiUkHcLvo1p+2NuV706Z+SyZJdsmAECIwmfru3k3EY3 m7HvxS7Lbr3VkVKet/CtMuWRV+IdQgud00109Sa+VYg7BDwvqw1LYMM5sTM50qYx 0w6X3cIeGSYmnIwu/jO0jAT5Tj78UEhVk9o= -----END CERTIFICATE-----Generated at Fri Apr 4 17:44:07 2025 by rpki-client