$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/32b84e40-c9d9-3178-9f7c-94cd8d6eb8fe.roa File: 32b84e40-c9d9-3178-9f7c-94cd8d6eb8fe.roa (raw, json) Hash identifier: dpoW5a78029B6m2eec9WacRkR+j6EomjdeOzQBI87SM= Subject key identifier: AB:9F:5C:E7:97:56:DF:D6:B9:E4:E7:46:EE:BA:2B:DE:99:3C:2C:29 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584973ED70A4CF462D5F7F575D80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/32b84e40-c9d9-3178-9f7c-94cd8d6eb8fe.roa Signing time: Tue 08 Apr 2025 01:30:12 +0000 ROA not before: Tue 08 Apr 2025 01:30:12 +0000 ROA not after: Mon 07 Jul 2025 01:30:12 +0000 asID: 211448 IP address blocks: 2001:470:112::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:73:ed:70:a4:cf:46:2d:5f:7f:57:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 8 01:30:12 2025 GMT Not After : Jul 7 01:30:12 2025 GMT Subject: CN=1147a04a-6789-45ab-bae1-6362a5280f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d0:32:98:34:e5:a2:46:ef:7f:37:0c:3d:c8: f7:c7:bd:95:ab:90:4b:01:59:07:cb:a4:05:a4:17: 89:fe:2e:df:73:1e:a9:19:a4:bc:7b:28:bf:ac:47: c1:ae:c1:d2:64:b9:56:58:48:3b:0f:e5:0a:a7:7c: cd:b4:2d:3d:93:b5:38:d4:35:7d:20:f1:b9:53:c5: 5c:03:9a:3e:46:4b:c6:25:50:04:b1:16:cd:a3:42: f5:fa:0e:2a:82:75:5a:a9:95:86:04:e1:d7:e8:a0: 26:ba:d9:e2:0b:d5:c2:11:64:bc:83:7c:21:df:43: 2a:c3:14:ab:a1:93:8a:19:5f:08:82:9c:3e:10:0c: 42:da:7d:26:46:67:1e:77:7e:89:2d:7a:6a:1a:a7: 54:0c:fd:56:ec:81:86:92:08:87:02:c3:8e:d4:6c: e5:59:e4:e5:70:5e:f0:0b:7a:32:db:c3:71:1b:75: c9:93:64:43:fc:09:21:38:6f:5f:e1:18:e0:a3:5c: 28:d8:e3:5e:8d:aa:ce:b8:a4:df:9c:e9:18:6c:b0: ae:67:7a:14:a0:22:58:4c:4b:69:52:60:72:df:40: c8:68:6d:4b:0e:c0:0d:89:c7:ad:e0:51:52:06:f9: 79:f3:e1:c9:34:30:61:2d:f7:a2:49:e5:f5:cf:73: cf:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:9F:5C:E7:97:56:DF:D6:B9:E4:E7:46:EE:BA:2B:DE:99:3C:2C:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/32b84e40-c9d9-3178-9f7c-94cd8d6eb8fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:112::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:32:e9:c1:32:86:22:12:a0:fc:04:d9:e9:d6:28:41:2f:e3: 1f:94:d3:e2:d6:ff:0e:92:06:95:46:10:0e:87:9b:44:9c:78: d8:81:ed:b8:cc:7b:ea:25:d8:1b:dd:a1:4b:ff:fa:96:ea:7c: 5b:bd:be:cf:11:7e:34:a9:75:ae:f1:dc:92:cc:72:22:c8:ef: 0b:a2:bf:3a:2f:05:d6:f6:f5:ad:be:64:f6:a7:c0:9f:4c:e1: 59:3d:eb:0c:59:45:25:dc:fc:c1:11:18:47:7b:54:ac:ad:c2: 1c:5f:6b:57:0e:5c:e2:c4:23:ad:e4:35:bb:7d:bd:c5:ab:4c: 2e:1b:46:89:4d:76:87:71:2b:fc:ee:5c:e9:a9:27:86:1e:99: c4:60:d2:5a:57:d9:98:97:62:e4:94:65:3a:fa:63:35:84:51: c8:1a:8e:d6:07:98:bf:c5:db:4f:03:f0:05:9f:b9:fd:b0:16: bc:02:77:0e:58:09:e1:5e:d1:37:94:90:27:34:98:a6:2d:87: be:9d:4f:7d:39:33:df:b6:ee:9d:5d:36:10:57:56:57:af:6b: 72:c2:b6:77:9d:85:32:61:c2:9f:26:a4:c3:1b:3a:33:c8:77: a1:71:4b:9a:f1:44:d7:ba:e1:5b:65:6d:6c:88:29:52:7c:7d: 0a:ba:98:d5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElz7XCkz0YtX39XXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDQwODAxMzAxMloXDTI1MDcwNzAxMzAxMlowLzEtMCsGA1UEAxMk MTE0N2EwNGEtNjc4OS00NWFiLWJhZTEtNjM2MmE1MjgwZjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNAymDTlokbvfzcMPcj3x72Vq5BLAVkHy6QF pBeJ/i7fcx6pGaS8eyi/rEfBrsHSZLlWWEg7D+UKp3zNtC09k7U41DV9IPG5U8Vc A5o+RkvGJVAEsRbNo0L1+g4qgnVaqZWGBOHX6KAmutniC9XCEWS8g3wh30MqwxSr oZOKGV8Igpw+EAxC2n0mRmced36JLXpqGqdUDP1W7IGGkgiHAsOO1GzlWeTlcF7w C3oy28NxG3XJk2RD/AkhOG9f4Rjgo1wo2ONejarOuKTfnOkYbLCuZ3oUoCJYTEtp UmBy30DIaG1LDsANicet4FFSBvl58+HJNDBhLfeiSeX1z3PPMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKufXOeXVt/WueTnRu66K96ZPCwpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzJiODRlNDAtYzlkOS0z MTc4LTlmN2MtOTRjZDhkNmViOGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAES MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALYy6cEyhiISoPwE2enWKEEv4x+U0+LW/w6SBpVGEA6Hm0SceNiB 7bjMe+ol2BvdoUv/+pbqfFu9vs8RfjSpda7x3JLMciLI7wuivzovBdb29a2+ZPan wJ9M4Vk96wxZRSXc/MERGEd7VKytwhxfa1cOXOLEI63kNbt9vcWrTC4bRolNdodx K/zuXOmpJ4YemcRg0lpX2ZiXYuSUZTr6YzWEUcgajtYHmL/F208D8AWfuf2wFrwC dw5YCeFe0TeUkCc0mKYth76dT305M9+27p1dNhBXVleva3LCtnedhTJhwp8mpMMb OjPId6FxS5rxRNe64VtlbWyIKVJ8fQq6mNU= -----END CERTIFICATE-----Generated at Sat Apr 19 14:01:51 2025 by rpki-client