$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2ee819ea-7da9-359a-b83f-0e9588d07556.roa File: 2ee819ea-7da9-359a-b83f-0e9588d07556.roa (raw, json) Hash identifier: Q6dFobpccnHZJm9J8P/AKjJhccyx9zeiEQtRRfZ6rGk= Subject key identifier: 00:10:08:5C:2F:0E:D5:6C:A5:A2:A0:B3:AF:A8:96:AB:86:28:92:09 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926E24279A8888ABF8B9660 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2ee819ea-7da9-359a-b83f-0e9588d07556.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 196975 IP address blocks: 2001:470:23d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:e2:42:79:a8:88:8a:bf:8b:96:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=72759f28-fb13-49aa-84cf-beca22b956b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:39:a6:53:4b:ff:39:ce:fa:63:73:69:1c:a3: ef:69:e0:9d:5b:17:b0:72:93:13:7e:54:e2:66:82: ec:e7:61:2b:16:29:37:83:5a:1a:62:7d:6d:b4:06: ad:43:a4:15:12:4f:fe:96:7e:8d:7b:c2:74:89:70: 12:4f:b9:e2:d8:ec:f2:81:1b:b6:d9:6f:1b:ed:6a: 4f:4e:bf:1a:8b:f4:2d:b2:63:76:a4:3f:12:e5:92: ae:88:49:31:b9:0a:db:d4:62:34:c1:e6:e9:ee:a1: 51:65:fe:c1:4e:2f:ac:66:24:8b:d3:c9:20:bc:80: b8:e3:d4:dd:01:fd:6f:6c:7f:85:22:73:e8:f3:a6: 0e:60:03:16:0f:42:f3:84:d7:4d:2f:a1:ab:69:e6: d9:60:9d:50:d8:b6:f8:56:8f:66:3a:2e:66:4a:c0: a0:b5:60:24:85:ce:31:72:db:c2:b3:ad:6e:00:b5: 07:7e:93:e4:fa:4e:29:b8:09:ff:04:19:2b:21:c4: 1b:0a:67:35:86:13:43:55:89:d6:06:22:15:91:96: f1:24:d8:90:b8:31:df:c2:89:4d:0d:c3:f5:3a:f5: a7:7a:ff:4a:e6:a5:3e:f1:37:84:e7:3f:05:2d:70: df:23:aa:8c:b9:56:50:f5:d9:b9:6b:e1:cf:78:1e: c3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:10:08:5C:2F:0E:D5:6C:A5:A2:A0:B3:AF:A8:96:AB:86:28:92:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2ee819ea-7da9-359a-b83f-0e9588d07556.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:23d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:b4:67:45:0e:5e:bf:cf:36:00:1d:06:ba:19:65:53:d5:06: 54:ff:6e:02:e1:22:8e:c8:bd:06:cb:1e:a5:fe:25:e7:7b:67: c4:cf:80:f2:7b:67:8d:62:84:a1:2c:63:82:89:a5:1d:7b:bb: 97:fa:cb:4f:23:3f:a3:85:98:16:79:e9:f1:11:49:a2:c6:f1: c9:ac:e1:84:ce:ec:8c:49:f3:7c:33:9d:79:ae:61:e9:17:bb: 6f:6d:11:c7:c6:0a:a2:d6:37:17:d1:b4:a8:4c:77:1b:7e:eb: b3:77:63:9d:50:0b:07:a8:72:68:c3:1a:df:e1:50:a8:7d:f8: 38:3d:f2:30:f2:69:a9:27:98:f2:b2:4c:7f:51:b1:40:dc:6b: 3c:b3:09:44:b1:b0:40:81:72:25:d4:17:1c:01:b9:c5:28:18: 79:16:c3:f8:5d:96:e7:67:3e:ae:5a:d1:01:59:0d:7b:88:fa: ac:0a:36:c5:c7:cc:32:49:74:db:bc:f6:dc:e9:38:91:07:20: dc:e9:3a:7c:4c:0a:1a:51:e6:1e:d0:5a:11:cb:c5:43:94:23: 09:6d:44:bf:88:02:59:e7:c1:81:fe:14:20:f0:9c:1b:51:86: 4d:5d:b8:9a:5a:b3:d4:55:37:af:b2:ce:91:21:3d:b0:7f:e6: dc:1b:7f:c9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JuJCeaiIir+LlmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk NzI3NTlmMjgtZmIxMy00OWFhLTg0Y2YtYmVjYTIyYjk1NmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDmmU0v/Oc76Y3NpHKPvaeCdWxewcpMTflTi ZoLs52ErFik3g1oaYn1ttAatQ6QVEk/+ln6Ne8J0iXAST7ni2OzygRu22W8b7WpP Tr8ai/QtsmN2pD8S5ZKuiEkxuQrb1GI0webp7qFRZf7BTi+sZiSL08kgvIC449Td Af1vbH+FInPo86YOYAMWD0LzhNdNL6GraebZYJ1Q2Lb4Vo9mOi5mSsCgtWAkhc4x ctvCs61uALUHfpPk+k4puAn/BBkrIcQbCmc1hhNDVYnWBiIVkZbxJNiQuDHfwolN DcP1OvWnev9K5qU+8TeE5z8FLXDfI6qMuVZQ9dm5a+HPeB7DSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAAQCFwvDtVspaKgs6+olquGKJIJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMmVlODE5ZWEtN2RhOS0z NTlhLWI4M2YtMGU5NTg4ZDA3NTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGi0Z0UOXr/PNgAdBroZZVPVBlT/bgLhIo7IvQbLHqX+Jed7Z8TP gPJ7Z41ihKEsY4KJpR17u5f6y08jP6OFmBZ56fERSaLG8cms4YTO7IxJ83wznXmu YekXu29tEcfGCqLWNxfRtKhMdxt+67N3Y51QCweocmjDGt/hUKh9+Dg98jDyaakn mPKyTH9RsUDcazyzCUSxsECBciXUFxwBucUoGHkWw/hdludnPq5a0QFZDXuI+qwK NsXHzDJJdNu89tzpOJEHINzpOnxMChpR5h7QWhHLxUOUIwltRL+IAlnnwYH+FCDw nBtRhk1duJpas9RVN6+yzpEhPbB/5twbf8k= -----END CERTIFICATE-----Generated at Fri Apr 4 17:50:29 2025 by rpki-client