$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2b212c3f-0bb9-36d8-a389-9f219be91036.roa File: 2b212c3f-0bb9-36d8-a389-9f219be91036.roa (raw, json) Hash identifier: crKM2tTpgZXRiPcUrhgIjck/hWcGLxELbqBye2TtLB0= Subject key identifier: 84:FE:84:F9:F8:BE:F8:8A:80:9C:47:53:DA:B9:21:C7:B7:3B:77:84 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858491C0C1EE6D7E408F7FCFA2480 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2b212c3f-0bb9-36d8-a389-9f219be91036.roa Signing time: Fri 07 Mar 2025 14:00:52 +0000 ROA not before: Fri 07 Mar 2025 14:00:52 +0000 ROA not after: Thu 05 Jun 2025 13:00:52 +0000 asID: 52389 IP address blocks: 2001:470:87::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1c:0c:1e:e6:d7:e4:08:f7:fc:fa:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 7 14:00:52 2025 GMT Not After : Jun 5 13:00:52 2025 GMT Subject: CN=a31e8b47-6aa7-4741-9378-075b108eb651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:24:d5:1a:61:5f:f1:91:04:ad:8b:79:c9:34: 4e:12:f1:45:8b:43:0e:b4:09:36:15:3e:94:29:84: 0a:99:e7:c9:f2:4d:7f:ad:7d:51:2d:07:4c:9a:ef: 87:ba:b3:a0:b1:08:0e:fd:95:83:46:87:e9:e3:7c: 0e:0c:84:5e:a9:33:e1:82:11:8d:2d:8c:df:1e:89: 7c:1b:2a:e5:22:18:71:97:94:5d:d1:3d:30:84:d4: b0:1d:a6:09:bc:db:0e:18:ef:49:cd:6a:37:b0:2f: c7:20:77:69:11:25:a0:11:dd:bb:20:74:bf:ff:e8: f2:c6:5d:bb:f6:10:fc:a7:ca:25:a3:12:e0:02:81: 99:da:75:bb:c5:a7:6d:24:bc:3e:22:8a:bd:4d:cb: 89:90:88:c4:1f:83:8c:74:ea:cb:42:c8:5f:5b:02: d2:d9:dd:76:b3:ab:24:48:b7:13:7e:e2:72:9e:ac: fc:d9:b2:96:19:60:16:da:2c:eb:42:3c:f3:1c:c9: 2c:65:05:9e:ed:86:66:fb:a4:df:ba:62:9b:3c:9a: 43:6f:0b:4e:f2:a3:4d:5c:06:73:ab:48:23:8a:cf: bf:37:b1:58:2b:41:6e:8d:10:5d:4a:62:8e:70:15: c6:9c:69:5f:01:16:d3:11:21:78:90:2a:70:f2:fc: 8b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:FE:84:F9:F8:BE:F8:8A:80:9C:47:53:DA:B9:21:C7:B7:3B:77:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2b212c3f-0bb9-36d8-a389-9f219be91036.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:87::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:90:50:18:ae:44:60:1e:4c:fd:7c:5a:36:55:9c:b9:dd:91: 1c:52:5f:da:e0:7a:6d:1f:57:e6:18:5e:35:09:38:00:ad:f8: 60:ba:a8:63:86:18:8d:89:cd:4c:3c:c7:d9:84:62:18:a7:71: 65:94:2a:7c:96:f2:d6:ff:d5:27:e0:9f:03:33:65:b5:36:f2: bb:7d:23:99:55:77:84:1b:b9:15:62:71:cc:41:8e:55:bb:1c: c5:d2:61:6b:f5:6b:96:09:5c:80:2a:fb:89:ea:42:42:1a:11: f4:34:d6:29:66:2c:6c:f4:27:74:be:c3:28:26:ee:70:59:79: 71:00:1e:05:9d:17:e7:ee:f0:32:16:5a:9e:2b:6a:c6:bb:a6: ad:eb:12:79:d2:93:1d:52:d0:fe:b3:41:10:c5:92:cd:d6:8a: f3:8d:85:2d:0a:b5:25:fc:cc:6d:12:46:d0:62:7f:33:6d:a8: b5:80:2a:21:c7:45:81:1c:b9:11:36:40:ad:88:53:cf:2b:c9: 1b:1c:ed:1d:47:ea:ef:93:3b:8a:81:9e:8c:ac:b2:15:00:a6: 28:c1:9e:e8:4a:a1:c7:af:a5:a6:81:1d:70:3b:93:f2:fe:5b: bf:20:30:13:42:94:f5:99:2a:3a:db:61:69:7d:86:f5:ca:d8: b3:bd:b6:1d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkcDB7m1+QI9/z6JIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMwNzE0MDA1MloXDTI1MDYwNTEzMDA1MlowLzEtMCsGA1UEAxMk YTMxZThiNDctNmFhNy00NzQxLTkzNzgtMDc1YjEwOGViNjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiTVGmFf8ZEErYt5yTROEvFFi0MOtAk2FT6U KYQKmefJ8k1/rX1RLQdMmu+HurOgsQgO/ZWDRofp43wODIReqTPhghGNLYzfHol8 GyrlIhhxl5Rd0T0whNSwHaYJvNsOGO9JzWo3sC/HIHdpESWgEd27IHS//+jyxl27 9hD8p8oloxLgAoGZ2nW7xadtJLw+Ioq9TcuJkIjEH4OMdOrLQshfWwLS2d12s6sk SLcTfuJynqz82bKWGWAW2izrQjzzHMksZQWe7YZm+6TfumKbPJpDbwtO8qNNXAZz q0gjis+/N7FYK0FujRBdSmKOcBXGnGlfARbTESF4kCpw8vyL8QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIT+hPn4vviKgJxHU9q5Ice3O3eEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMmIyMTJjM2YtMGJiOS0z NmQ4LWEzODktOWYyMTliZTkxMDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEiQUBiuRGAeTP18WjZVnLndkRxSX9rgem0fV+YYXjUJOACt+GC6 qGOGGI2JzUw8x9mEYhincWWUKnyW8tb/1SfgnwMzZbU28rt9I5lVd4QbuRViccxB jlW7HMXSYWv1a5YJXIAq+4nqQkIaEfQ01ilmLGz0J3S+wygm7nBZeXEAHgWdF+fu 8DIWWp4rasa7pq3rEnnSkx1S0P6zQRDFks3WivONhS0KtSX8zG0SRtBifzNtqLWA KiHHRYEcuRE2QK2IU88ryRsc7R1H6u+TO4qBnoysshUApijBnuhKocevpaaBHXA7 k/L+W78gMBNClPWZKjrbYWl9hvXK2LO9th0= -----END CERTIFICATE-----Generated at Thu Apr 17 15:34:29 2025 by rpki-client