$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3553375a-143d-3f50-8c5c-c42f0ee96511.roa File: 3553375a-143d-3f50-8c5c-c42f0ee96511.roa (raw, json) Hash identifier: j33w1eST3FBe3wKgvs9F+lryxWRAI1ns2kRh7jIXnac= Subject key identifier: 19:1B:AE:9F:A8:8C:30:5A:0E:DD:FB:45:6C:9C:FB:33:A0:AC:84:76 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848AC60C226031C314B70A38080 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3553375a-143d-3f50-8c5c-c42f0ee96511.roa Signing time: Sun 26 Jan 2025 14:00:52 +0000 ROA not before: Sun 26 Jan 2025 14:00:52 +0000 ROA not after: Sat 26 Apr 2025 13:00:52 +0000 asID: 135300 IP address blocks: 2001:470:230::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ac:60:c2:26:03:1c:31:4b:70:a3:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jan 26 14:00:52 2025 GMT Not After : Apr 26 13:00:52 2025 GMT Subject: CN=df20328f-75d8-422c-8d60-d7de9faedf35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:2b:62:2c:0c:a4:7e:49:9b:e7:58:33:1a:ea: 05:93:8b:39:1d:dd:71:be:88:8e:3a:5a:91:b1:bb: 06:7d:0b:2d:2c:0a:e6:ac:59:09:fc:5a:c6:45:b6: 7e:e2:9d:ab:c2:2c:96:6b:1e:e5:26:68:19:46:bc: c1:97:b9:b4:df:8a:e2:8c:e4:47:9b:f1:38:af:79: 6a:23:38:79:91:30:60:68:bb:2b:2c:9d:85:5f:89: c3:79:03:42:b9:c4:fe:00:aa:88:92:c0:ec:31:40: 1b:4e:af:36:bc:15:ab:a9:45:c9:f9:b5:57:b1:8e: 77:69:55:70:09:b7:3e:c2:bf:71:68:9a:bb:50:ce: 23:69:d7:4e:9b:1c:b7:03:07:ee:7f:5e:4b:31:a8: ab:81:56:ef:8c:e3:94:cd:51:22:7d:0e:f2:6f:bd: 2d:56:b4:c0:bc:08:88:35:a7:df:0a:5f:24:27:72: b7:68:9c:f8:b5:45:9c:d2:5a:d7:36:a6:46:e9:7d: cf:a8:b8:3c:90:31:8c:67:8e:b4:4d:94:2a:81:88: 25:06:9f:30:b3:74:08:32:3d:58:9d:01:c4:c4:2b: e8:48:56:6f:94:3f:48:5a:98:46:52:87:62:0c:b2: 75:aa:09:93:26:14:37:e5:ee:c4:aa:68:56:94:28: b7:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:1B:AE:9F:A8:8C:30:5A:0E:DD:FB:45:6C:9C:FB:33:A0:AC:84:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3553375a-143d-3f50-8c5c-c42f0ee96511.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:230::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:1c:b2:fa:15:46:c5:c3:ff:25:96:63:8d:74:18:16:bd:4c: 4e:99:d8:f8:61:38:dc:50:07:88:4a:8e:13:e8:3b:53:1c:f6: 57:7a:ff:b6:9e:f8:2f:bf:46:d2:83:6b:88:a0:de:8a:d8:bf: b1:e6:7e:f3:77:0c:43:8b:fb:ca:0e:ad:93:4d:f3:15:79:9f: 17:3a:11:3d:9b:73:2f:d4:fc:55:4f:79:a8:31:90:a1:a3:3d: c1:42:dc:ee:b3:bd:e2:89:57:cd:cf:b0:92:64:a5:e6:85:13: d4:2f:33:95:73:30:41:d5:7b:ab:f4:58:f0:06:da:8f:21:87: a1:8d:6f:53:28:08:2f:7d:c9:27:9c:17:dc:44:50:6e:cb:41: 8a:67:22:8f:dd:e3:51:eb:40:06:3a:9d:27:9f:1f:76:ed:c7: e6:07:90:bc:1b:8f:5b:12:12:83:2d:78:24:17:bc:b2:1d:a5: d1:84:14:38:97:e1:6e:de:70:57:2a:51:67:34:f2:f2:bf:c0: ce:ad:cc:91:f6:40:ed:e5:ac:bf:1a:1d:29:16:31:30:6b:5d: 81:65:92:7f:0f:45:90:52:cf:fa:96:b6:46:24:88:cc:fc:61: 85:d1:94:c8:5c:af:cc:81:81:23:b2:f5:63:75:c1:de:0f:c9: dc:47:a0:9e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEisYMImAxwxS3CjgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDEyNjE0MDA1MloXDTI1MDQyNjEzMDA1MlowLzEtMCsGA1UEAxMk ZGYyMDMyOGYtNzVkOC00MjJjLThkNjAtZDdkZTlmYWVkZjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCtiLAykfkmb51gzGuoFk4s5Hd1xvoiOOlqR sbsGfQstLArmrFkJ/FrGRbZ+4p2rwiyWax7lJmgZRrzBl7m034rijORHm/E4r3lq Izh5kTBgaLsrLJ2FX4nDeQNCucT+AKqIksDsMUAbTq82vBWrqUXJ+bVXsY53aVVw Cbc+wr9xaJq7UM4jaddOmxy3Awfuf15LMairgVbvjOOUzVEifQ7yb70tVrTAvAiI NaffCl8kJ3K3aJz4tUWc0lrXNqZG6X3PqLg8kDGMZ460TZQqgYglBp8ws3QIMj1Y nQHExCvoSFZvlD9IWphGUodiDLJ1qgmTJhQ35e7EqmhWlCi3hQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBkbrp+ojDBaDt37RWyc+zOgrIR2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzU1MzM3NWEtMTQzZC0z ZjUwLThjNWMtYzQyZjBlZTk2NTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAIw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAocsvoVRsXD/yWWY410GBa9TE6Z2PhhONxQB4hKjhPoO1Mc9ld6 /7ae+C+/RtKDa4ig3orYv7HmfvN3DEOL+8oOrZNN8xV5nxc6ET2bcy/U/FVPeagx kKGjPcFC3O6zveKJV83PsJJkpeaFE9QvM5VzMEHVe6v0WPAG2o8hh6GNb1MoCC99 ySecF9xEUG7LQYpnIo/d41HrQAY6nSefH3btx+YHkLwbj1sSEoMteCQXvLIdpdGE FDiX4W7ecFcqUWc08vK/wM6tzJH2QO3lrL8aHSkWMTBrXYFlkn8PRZBSz/qWtkYk iMz8YYXRlMhcr8yBgSOy9WN1wd4PydxHoJ4= -----END CERTIFICATE-----Generated at Fri Apr 4 17:44:14 2025 by rpki-client