$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33289b88-fa83-3536-a945-62a5541157ad.roa File: 33289b88-fa83-3536-a945-62a5541157ad.roa (raw, json) Hash identifier: sf0NiJwyXf8cYQHTuDSMmc49iC5inCG/NKDLLPCA5KA= Subject key identifier: C4:08:6B:28:18:3E:B9:2A:98:A7:9D:AC:D0:2E:CA:B8:4A:FD:A9:A3 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858489FDF3668ABE8F3C0A6D6F840 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33289b88-fa83-3536-a945-62a5541157ad.roa Signing time: Wed 22 Jan 2025 02:30:10 +0000 ROA not before: Wed 22 Jan 2025 02:30:10 +0000 ROA not after: Tue 22 Apr 2025 01:30:10 +0000 asID: 22168 IP address blocks: 2001:470:3f6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9f:df:36:68:ab:e8:f3:c0:a6:d6:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jan 22 02:30:10 2025 GMT Not After : Apr 22 01:30:10 2025 GMT Subject: CN=a0f4ec06-1487-43aa-a1a6-c14342962115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c1:0e:f1:c3:a8:17:62:da:9c:93:78:92:3f: ed:1f:37:b1:cc:10:d0:c6:46:00:2a:6e:a4:3e:f4: e2:3e:96:9f:eb:96:32:9f:72:f0:2a:cd:96:49:d9: aa:ea:b6:48:02:48:84:a4:92:d6:90:19:e8:c6:76: bb:8e:e7:c4:6b:2c:25:8c:90:88:3f:d7:7f:01:75: 1f:8c:f6:14:de:34:8c:7d:92:fa:f4:39:a6:49:05: 16:7d:cc:e7:94:07:21:e8:d2:69:34:71:2e:1d:34: 22:3a:8e:ef:a5:6d:63:0b:15:c2:cb:25:2d:62:d7: 04:b6:f0:d2:b2:fd:99:1e:b5:a3:18:39:07:87:08: 3f:f3:9b:35:0e:69:5b:d9:06:99:aa:78:e9:94:3f: 20:e3:a5:f0:11:86:78:fa:30:7f:ea:2b:ac:77:5d: ec:e9:08:2d:e3:5c:f2:11:f4:97:33:03:ed:a4:f2: 57:4a:2d:cc:cd:95:8f:62:38:ca:3d:bf:94:4f:51: fa:25:7a:53:0a:bd:67:f9:a6:1a:72:e5:5c:e5:f7: 87:be:67:9e:30:9a:47:fc:0b:21:61:f0:4b:9c:e4: 98:e5:c9:36:56:0a:56:7f:e7:64:85:3d:c0:c7:b3: 73:b4:46:9a:6c:c0:93:f4:51:88:ce:56:e7:84:6d: 9b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:08:6B:28:18:3E:B9:2A:98:A7:9D:AC:D0:2E:CA:B8:4A:FD:A9:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33289b88-fa83-3536-a945-62a5541157ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3f6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:0c:72:79:15:a9:b3:d9:18:aa:09:6e:ee:ac:a8:80:8a:8d: ec:a3:89:4f:7f:fa:bd:35:3f:a6:d6:08:7c:9d:2b:f7:77:c7: 45:de:54:5c:f5:d6:3b:cb:ec:11:44:d3:99:2e:d2:2a:13:ee: 80:29:5e:89:94:87:3b:3a:51:5d:e7:c3:0b:c9:69:c8:3e:10: 53:14:2d:f5:19:99:c2:f6:d4:84:58:e2:5d:b5:90:c5:ad:b6: f6:20:d7:c4:6d:02:d6:64:0f:00:fc:32:29:bd:79:48:3d:07: 3a:f8:28:68:bc:fd:03:4d:d5:81:78:8b:83:72:74:f1:fa:60: 7b:52:17:83:57:ec:ea:63:0a:07:76:29:15:d8:5f:54:e1:a4: 8d:f3:07:aa:8b:8b:b6:66:14:8c:da:8b:97:94:61:3a:f0:02: f2:5d:74:9c:7f:74:9b:9d:50:f1:fc:c2:f9:54:a7:37:d4:b8: a1:65:8e:60:5b:eb:0a:24:36:d0:ca:21:a9:5a:5b:f9:f6:b6: 4d:6b:74:ad:c2:b3:66:f1:3f:e7:dc:b8:80:60:d4:1c:56:dd: e3:e1:ff:e1:70:fb:ed:95:e9:ed:ef:f8:37:c6:6b:a1:aa:eb: db:a2:03:77:8c:72:b7:d1:91:b4:09:38:d4:13:3a:4f:5c:39: 6d:06:b2:a0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEif3zZoq+jzwKbW+EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDEyMjAyMzAxMFoXDTI1MDQyMjAxMzAxMFowLzEtMCsGA1UEAxMk YTBmNGVjMDYtMTQ4Ny00M2FhLWExYTYtYzE0MzQyOTYyMTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28EO8cOoF2LanJN4kj/tHzexzBDQxkYAKm6k PvTiPpaf65Yyn3LwKs2WSdmq6rZIAkiEpJLWkBnoxna7jufEaywljJCIP9d/AXUf jPYU3jSMfZL69DmmSQUWfcznlAch6NJpNHEuHTQiOo7vpW1jCxXCyyUtYtcEtvDS sv2ZHrWjGDkHhwg/85s1Dmlb2QaZqnjplD8g46XwEYZ4+jB/6iusd13s6Qgt41zy EfSXMwPtpPJXSi3MzZWPYjjKPb+UT1H6JXpTCr1n+aYacuVc5feHvmeeMJpH/Ash YfBLnOSY5ck2VgpWf+dkhT3Ax7NztEaabMCT9FGIzlbnhG2b5QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMQIaygYPrkqmKedrNAuyrhK/amjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzMyODliODgtZmE4My0z NTM2LWE5NDUtNjJhNTU0MTE1N2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAP2 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJIMcnkVqbPZGKoJbu6sqICKjeyjiU9/+r01P6bWCHydK/d3x0Xe VFz11jvL7BFE05ku0ioT7oApXomUhzs6UV3nwwvJacg+EFMULfUZmcL21IRY4l21 kMWttvYg18RtAtZkDwD8Mim9eUg9Bzr4KGi8/QNN1YF4i4NydPH6YHtSF4NX7Opj Cgd2KRXYX1ThpI3zB6qLi7ZmFIzai5eUYTrwAvJddJx/dJudUPH8wvlUpzfUuKFl jmBb6wokNtDKIalaW/n2tk1rdK3Cs2bxP+fcuIBg1BxW3ePh/+Fw++2V6e3v+DfG a6Gq69uiA3eMcrfRkbQJONQTOk9cOW0GsqA= -----END CERTIFICATE-----Generated at Fri Mar 14 12:50:16 2025 by rpki-client