$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/31fd654c-76df-3c0c-bfac-b7328c9de61b.roa File: 31fd654c-76df-3c0c-bfac-b7328c9de61b.roa (raw, json) Hash identifier: REn4kMVbloZBWB87B3EnxvEB9Z7cL+ER2p/ltsoZdHY= Subject key identifier: 0C:B4:11:E3:77:FA:BA:78:88:0D:91:37:80:BC:23:2A:10:BA:0F:E9 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926D1A8F70466519234DCC0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/31fd654c-76df-3c0c-bfac-b7328c9de61b.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 132139 IP address blocks: 2001:470:309::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:d1:a8:f7:04:66:51:92:34:dc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=7c2c6923-5366-4198-8253-2121e62f90d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d6:56:47:76:a2:65:d0:cd:8e:ef:4c:3b:b3: 42:f1:e7:35:3c:dc:2d:f2:19:14:c9:c7:75:3a:80: b2:a5:a5:1b:06:3a:78:4f:72:73:22:04:eb:d7:53: 89:0b:e4:51:09:1d:32:1f:62:a1:1c:c7:18:cd:af: 73:53:28:c9:90:2e:30:40:86:66:bf:41:1f:57:61: 4d:53:65:00:f6:8d:41:5f:f5:91:8d:52:ab:41:38: 9c:9a:9d:55:9d:a2:ef:57:6a:64:fd:75:12:ee:3b: 62:11:9c:42:68:8b:d8:fa:09:1a:fe:cf:a5:cc:90: 90:69:a4:e6:2a:46:86:2a:7b:c6:13:cc:27:48:1b: e7:c9:f4:0d:5a:93:4f:71:96:cd:7f:f7:e3:ab:c9: 06:c1:ac:e1:56:92:96:1f:f4:fe:dd:7a:59:d9:bd: be:79:61:0d:e3:03:eb:55:bf:bd:d4:06:d5:ba:87: 6d:21:2b:20:c8:e0:be:38:8f:65:22:4e:aa:2a:10: d8:74:56:78:fd:19:37:01:ae:6b:30:3b:d0:69:66: 76:23:a1:af:94:95:df:b1:aa:fe:8f:ff:ca:7c:12: 8d:60:ce:f2:e6:00:0c:b3:d9:dc:de:61:2b:eb:41: 0d:bc:9d:d1:c5:98:94:dc:5e:38:b3:56:d0:74:d4: 62:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B4:11:E3:77:FA:BA:78:88:0D:91:37:80:BC:23:2A:10:BA:0F:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/31fd654c-76df-3c0c-bfac-b7328c9de61b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:309::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:ad:43:e6:b1:3c:05:0e:23:bd:2e:a4:24:2a:27:7b:7f:76: 4b:9f:43:31:dc:c2:72:d3:f1:78:bb:43:76:47:22:3e:6b:c4: 16:18:b4:9f:6d:35:5f:c7:d9:22:a8:fd:c9:bc:d9:71:71:7f: 5d:e9:41:c9:30:91:9c:a7:3b:62:b1:c1:f9:cc:34:c1:d9:04: 86:b2:d5:dc:2a:c2:ba:d4:26:84:37:3a:d4:72:06:d6:17:64: 1f:b1:16:1a:1d:d5:51:1f:e8:9c:c0:bd:58:bc:d9:54:77:8a: ba:4a:3f:11:ed:ae:ad:75:a0:c0:ad:89:cc:7c:ff:36:c3:83: f3:e9:37:ca:60:a1:d4:ac:ba:45:6d:ee:14:08:6d:29:fc:f6: 36:d3:ae:71:6f:23:e6:a8:17:f1:60:14:a2:10:7b:e8:e3:b2: 6e:5e:fd:3c:5c:8e:2e:df:8f:e3:8e:0a:02:64:5a:2b:2d:f7: f7:90:89:67:02:08:14:ef:2e:85:b9:59:2e:28:27:9e:6f:e3: 5c:55:69:da:7f:6b:2b:0f:b8:16:50:82:d8:50:92:9f:1e:66: 4e:22:82:f5:0d:f5:89:f7:54:31:40:e4:d6:01:bd:1b:92:87: f3:a1:6e:38:06:26:12:98:03:09:ff:0b:20:4f:54:14:92:04: f3:95:06:5c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JtGo9wRmUZI03MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk N2MyYzY5MjMtNTM2Ni00MTk4LTgyNTMtMjEyMWU2MmY5MGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNZWR3aiZdDNju9MO7NC8ec1PNwt8hkUycd1 OoCypaUbBjp4T3JzIgTr11OJC+RRCR0yH2KhHMcYza9zUyjJkC4wQIZmv0EfV2FN U2UA9o1BX/WRjVKrQTicmp1VnaLvV2pk/XUS7jtiEZxCaIvY+gka/s+lzJCQaaTm KkaGKnvGE8wnSBvnyfQNWpNPcZbNf/fjq8kGwazhVpKWH/T+3XpZ2b2+eWEN4wPr Vb+91AbVuodtISsgyOC+OI9lIk6qKhDYdFZ4/Rk3Aa5rMDvQaWZ2I6GvlJXfsar+ j//KfBKNYM7y5gAMs9nc3mEr60ENvJ3RxZiU3F44s1bQdNRivQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAy0EeN3+rp4iA2RN4C8IyoQug/pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzFmZDY1NGMtNzZkZi0z YzBjLWJmYWMtYjczMjhjOWRlNjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAMJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIqtQ+axPAUOI70upCQqJ3t/dkufQzHcwnLT8Xi7Q3ZHIj5rxBYY tJ9tNV/H2SKo/cm82XFxf13pQckwkZynO2KxwfnMNMHZBIay1dwqwrrUJoQ3OtRy BtYXZB+xFhod1VEf6JzAvVi82VR3irpKPxHtrq11oMCticx8/zbDg/PpN8pgodSs ukVt7hQIbSn89jbTrnFvI+aoF/FgFKIQe+jjsm5e/Txcji7fj+OOCgJkWist9/eQ iWcCCBTvLoW5WS4oJ55v41xVadp/aysPuBZQgthQkp8eZk4igvUN9Yn3VDFA5NYB vRuSh/OhbjgGJhKYAwn/CyBPVBSSBPOVBlw= -----END CERTIFICATE-----Generated at Fri Apr 4 17:42:20 2025 by rpki-client