$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33b725f1-5fb3-308f-8792-e7c898b5e67a.roa File: 33b725f1-5fb3-308f-8792-e7c898b5e67a.roa (raw, json) Hash identifier: m1tnC/yvnSADJgrPLJGseJacqxiB3YPRvArCVFscGEw= Subject key identifier: 4C:8B:9E:EF:B7:34:A0:AC:AD:AE:C4:03:75:41:C9:07:68:22:2F:68 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584834555A6CEDBF775C41C92B40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33b725f1-5fb3-308f-8792-e7c898b5e67a.roa Signing time: Sat 14 Dec 2024 14:00:52 +0000 ROA not before: Sat 14 Dec 2024 14:00:52 +0000 ROA not after: Fri 14 Mar 2025 13:00:52 +0000 asID: 22709 IP address blocks: 2001:470:394::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Feb 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:34:55:5a:6c:ed:bf:77:5c:41:c9:2b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Dec 14 14:00:52 2024 GMT Not After : Mar 14 13:00:52 2025 GMT Subject: CN=08f3ddf2-f5fa-4f96-9d41-36da678ac6bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c0:35:f5:f4:5d:21:b5:65:01:e7:d9:d0:7c: ba:96:23:f6:8b:0c:a9:50:ec:76:b2:f2:88:30:1d: 0f:80:3b:4d:20:c3:12:86:d8:cb:ee:90:55:3c:40: 4f:72:df:0a:c1:94:4a:f9:58:e6:3b:a0:66:69:63: ba:0c:8f:b3:95:5f:20:62:3c:71:b0:e0:41:b5:2a: 79:0c:0c:12:41:d2:a1:44:4b:61:fd:e1:67:7f:92: 7f:a7:49:51:bf:ee:3a:ee:cd:70:20:9b:b8:fa:33: bc:fc:6d:d5:36:80:28:82:b0:bf:53:6e:65:13:f4: 09:ab:be:5a:40:73:e1:ed:71:fd:0a:d7:e2:5f:02: fe:72:98:f9:79:73:f2:df:8c:e4:da:05:bf:a1:ab: ff:97:46:89:f0:ce:19:6f:c1:ec:c6:42:6d:c1:d3: cf:ab:5c:e9:57:4c:58:7a:56:9c:ee:4b:e7:61:a4: 18:20:44:aa:e0:ac:f7:3d:1e:85:69:2f:6c:ac:15: 0e:33:f2:22:38:a8:42:a8:fa:cc:36:51:f8:af:dd: 1d:91:bd:ea:1e:30:90:de:17:c2:35:37:d2:2c:ca: e3:79:e5:09:ce:a1:87:82:5b:78:c0:37:0e:a5:b1: 7a:cc:31:da:05:4d:0b:43:e9:ec:83:de:94:f3:a1: 2b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:8B:9E:EF:B7:34:A0:AC:AD:AE:C4:03:75:41:C9:07:68:22:2F:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33b725f1-5fb3-308f-8792-e7c898b5e67a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:394::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:9f:30:2b:46:4e:e2:65:7a:d1:26:12:30:f1:33:cf:78:6d: e6:1a:a8:85:49:ba:9d:26:ce:20:94:55:bd:bb:6b:59:35:68: 98:ff:f3:6e:25:54:28:cf:e0:fa:7a:62:b8:bd:d7:0a:86:8d: c2:f3:f4:69:37:9e:45:0d:23:23:9e:6f:6a:43:f5:93:71:4c: f7:c2:34:bc:e9:d9:36:23:0a:0e:0d:89:61:05:96:a5:80:1b: f9:4b:97:91:39:dd:b6:ca:17:40:92:3f:c8:dc:e1:5b:df:ab: c0:b9:c3:f8:30:f4:10:2c:50:9f:e4:38:b7:eb:b5:8b:e3:32: 4e:5a:99:aa:56:f9:5c:b2:3d:ef:76:ae:a5:8a:d0:14:b3:f8: bb:f8:ee:8c:cf:83:8d:3c:4f:4a:ce:f6:f0:25:93:87:f8:15: b8:68:03:10:9e:e8:53:77:aa:3d:d9:7c:02:55:e5:55:a7:74: ac:dc:06:1b:88:98:ef:d0:9c:cd:c8:9f:a3:ad:5a:c3:3b:cc: 83:a6:65:f0:fc:97:68:68:a8:e9:09:f5:ef:39:4f:8f:16:89: 92:59:b1:9c:39:e1:04:bd:1d:7d:01:cb:5a:1b:ab:24:c2:c7: 43:36:08:93:49:21:18:4e:2f:78:f1:da:b2:2a:25:ac:f0:09: d9:64:ae:9f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEg0VVps7b93XEHJK0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MTIxNDE0MDA1MloXDTI1MDMxNDEzMDA1MlowLzEtMCsGA1UEAxMk MDhmM2RkZjItZjVmYS00Zjk2LTlkNDEtMzZkYTY3OGFjNmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMA19fRdIbVlAefZ0Hy6liP2iwypUOx2svKI MB0PgDtNIMMShtjL7pBVPEBPct8KwZRK+VjmO6BmaWO6DI+zlV8gYjxxsOBBtSp5 DAwSQdKhREth/eFnf5J/p0lRv+467s1wIJu4+jO8/G3VNoAogrC/U25lE/QJq75a QHPh7XH9CtfiXwL+cpj5eXPy34zk2gW/oav/l0aJ8M4Zb8HsxkJtwdPPq1zpV0xY elac7kvnYaQYIESq4Kz3PR6FaS9srBUOM/IiOKhCqPrMNlH4r90dkb3qHjCQ3hfC NTfSLMrjeeUJzqGHglt4wDcOpbF6zDHaBU0LQ+nsg96U86ErcwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEyLnu+3NKCsra7EA3VByQdoIi9oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzNiNzI1ZjEtNWZiMy0z MDhmLTg3OTItZTdjODk4YjVlNjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALafMCtGTuJletEmEjDxM894beYaqIVJup0mziCUVb27a1k1aJj/ 824lVCjP4Pp6Yri91wqGjcLz9Gk3nkUNIyOeb2pD9ZNxTPfCNLzp2TYjCg4NiWEF lqWAG/lLl5E53bbKF0CSP8jc4Vvfq8C5w/gw9BAsUJ/kOLfrtYvjMk5amapW+Vyy Pe92rqWK0BSz+Lv47ozPg408T0rO9vAlk4f4FbhoAxCe6FN3qj3ZfAJV5VWndKzc BhuImO/QnM3In6OtWsM7zIOmZfD8l2hoqOkJ9e85T48WiZJZsZw54QS9HX0By1ob qyTCx0M2CJNJIRhOL3jx2rIqJazwCdlkrp8= -----END CERTIFICATE-----Generated at Fri Feb 7 11:41:32 2025 by rpki-client