$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2d058fc2-9d1b-37ce-bcc7-9dbd2627d488.roa File: 2d058fc2-9d1b-37ce-bcc7-9dbd2627d488.roa (raw, json) Hash identifier: v6n2r49CnGEkOEm7f1XS8rgOovISD7kTP9I6XERQyFI= Subject key identifier: 24:3D:28:B9:94:35:D1:09:89:E0:86:E7:A0:B6:3B:3C:CF:3F:6C:8B Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926C6C239F09AF0CB1D3E40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2d058fc2-9d1b-37ce-bcc7-9dbd2627d488.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 33621 IP address blocks: 2001:470:1cb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:c6:c2:39:f0:9a:f0:cb:1d:3e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=d79f7723-cd01-4279-be59-3d3a8fc96e32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:48:de:2f:ad:3b:c9:6f:39:92:2c:5f:1d:05: 3a:a3:1f:c6:6c:41:ed:79:20:33:dd:bc:03:86:5d: 63:6f:f0:94:73:88:28:e5:87:13:34:60:e7:85:67: c8:8c:9c:13:7a:ca:9a:e6:f7:5f:86:07:d5:5b:bb: b4:a2:10:11:7e:e0:0a:2c:0f:42:f2:99:ed:c1:38: 31:95:93:10:ca:03:fc:f4:56:e5:f0:91:6b:73:70: fa:dd:f1:bb:06:33:42:be:7b:03:9f:fc:67:cd:a2: 8b:bb:3f:4d:7c:c6:59:9b:98:12:fa:f2:19:64:58: 1a:44:c3:37:a4:e8:12:94:05:43:5b:d8:21:b4:ee: 31:f1:ae:d2:0f:d6:6e:8f:33:7f:4f:fb:df:93:c3: 57:8e:27:2e:ed:2b:e1:44:31:90:a8:b5:f3:c8:8a: 84:3d:74:3b:52:7a:a3:72:af:d4:99:90:ff:6d:ec: bc:9e:07:5c:a7:3c:10:66:5b:b8:b9:3c:29:e4:1a: 91:30:d0:3a:04:0a:4a:04:50:4b:de:06:f3:58:6a: 9f:07:64:4b:f6:45:4d:6d:14:a2:76:7e:1e:ad:6d: 6e:69:aa:77:23:10:4d:3c:5a:fd:07:0c:55:8f:10: 64:20:91:f0:99:8d:84:c9:4a:66:a6:af:cc:bc:39: 7d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:3D:28:B9:94:35:D1:09:89:E0:86:E7:A0:B6:3B:3C:CF:3F:6C:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2d058fc2-9d1b-37ce-bcc7-9dbd2627d488.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1cb::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:e1:0e:ec:4d:dc:bd:9f:9d:76:0b:bd:c8:ee:34:8b:45:bc: 12:e3:ae:28:dd:a6:e3:67:5a:39:be:08:b0:83:78:95:05:85: 72:77:7e:eb:39:25:41:21:cd:77:ef:61:9c:61:d8:e5:4e:ac: ba:d0:05:09:96:3b:d0:de:df:a0:7b:6e:88:33:0a:7f:b0:6b: 27:2b:e5:79:e9:5c:92:b7:3a:43:5e:24:43:05:12:09:7f:75: f3:29:96:64:db:d1:c3:03:92:8a:da:a2:e6:ce:b8:55:cd:e4: 07:e1:66:54:4b:32:96:f5:1f:c2:22:1d:e0:f8:d9:81:bb:2a: fd:a1:fb:48:a9:66:8f:6f:28:d9:bb:3c:15:c1:3a:55:9a:e0: 8a:15:cc:9c:51:14:c9:ed:a0:86:3c:ec:39:16:29:43:0a:e7: ca:b0:e5:df:99:a1:fa:79:22:2c:e5:74:5a:81:c0:da:ee:99: 66:c7:ca:b5:11:2d:e7:9c:d6:52:b1:d2:44:1e:ab:ef:7f:14: 53:a2:5b:19:ae:05:be:d3:51:aa:c6:1c:37:b1:42:61:3b:53: e3:b7:c0:fc:f4:04:a8:b3:da:8d:7f:44:3c:fc:79:7e:21:c8: 60:97:e8:df:2d:c6:83:fd:81:91:a5:7f:c8:fc:6e:d5:ef:01: 0d:7b:ed:0b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JsbCOfCa8MsdPkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk ZDc5Zjc3MjMtY2QwMS00Mjc5LWJlNTktM2QzYThmYzk2ZTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkjeL607yW85kixfHQU6ox/GbEHteSAz3bwD hl1jb/CUc4go5YcTNGDnhWfIjJwTesqa5vdfhgfVW7u0ohARfuAKLA9C8pntwTgx lZMQygP89Fbl8JFrc3D63fG7BjNCvnsDn/xnzaKLuz9NfMZZm5gS+vIZZFgaRMM3 pOgSlAVDW9ghtO4x8a7SD9ZujzN/T/vfk8NXjicu7SvhRDGQqLXzyIqEPXQ7Unqj cq/UmZD/bey8ngdcpzwQZlu4uTwp5BqRMNA6BApKBFBL3gbzWGqfB2RL9kVNbRSi dn4erW1uaap3IxBNPFr9BwxVjxBkIJHwmY2EyUpmpq/MvDl9nwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCQ9KLmUNdEJieCG56C2OzzPP2yLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMmQwNThmYzItOWQxYi0z N2NlLWJjYzctOWRiZDI2MjdkNDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADjhDuxN3L2fnXYLvcjuNItFvBLjrijdpuNnWjm+CLCDeJUFhXJ3 fus5JUEhzXfvYZxh2OVOrLrQBQmWO9De36B7bogzCn+waycr5XnpXJK3OkNeJEMF Egl/dfMplmTb0cMDkoraoubOuFXN5AfhZlRLMpb1H8IiHeD42YG7Kv2h+0ipZo9v KNm7PBXBOlWa4IoVzJxRFMntoIY87DkWKUMK58qw5d+Zofp5IizldFqBwNrumWbH yrURLeec1lKx0kQeq+9/FFOiWxmuBb7TUarGHDexQmE7U+O3wPz0BKiz2o1/RDz8 eX4hyGCX6N8txoP9gZGlf8j8btXvAQ177Qs= -----END CERTIFICATE-----Generated at Fri Apr 4 17:48:43 2025 by rpki-client