$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/37213c10-c79f-37a6-96a9-f209d13ecb33.roa File: 37213c10-c79f-37a6-96a9-f209d13ecb33.roa (raw, json) Hash identifier: WgJIcJaB+NoU03dmtdAnE4zUGr13As6JHrXAn2H+x8c= Subject key identifier: FB:0F:76:B7:54:D4:38:EF:EB:97:FB:85:95:7E:50:55:4E:C1:A4:CF Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848A2A9F11DF785553CFE808630 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/37213c10-c79f-37a6-96a9-f209d13ecb33.roa Signing time: Thu 23 Jan 2025 02:30:15 +0000 ROA not before: Thu 23 Jan 2025 02:30:15 +0000 ROA not after: Wed 23 Apr 2025 01:30:15 +0000 asID: 32267 IP address blocks: 2001:470:3f7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:a9:f1:1d:f7:85:55:3c:fe:80:86:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jan 23 02:30:15 2025 GMT Not After : Apr 23 01:30:15 2025 GMT Subject: CN=c92bd33c-53a0-4543-b47d-7cb4e1d48eab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c9:29:33:af:d8:eb:c3:ff:db:61:ec:f5:d2: 27:b8:40:0c:97:b5:ca:30:53:43:94:47:47:11:34: c1:08:d4:47:b2:b8:94:43:3d:7a:64:41:23:ad:3a: 7a:a8:8e:e5:f1:9c:3b:a4:ed:65:46:91:b1:e3:32: 01:94:3b:59:e5:47:0b:6c:73:01:30:9f:7f:b2:87: 61:b3:c2:26:cb:c3:df:54:9a:6d:c8:a8:0c:42:ab: 4e:07:ec:ff:10:5a:7a:13:e9:72:e5:e6:fe:d3:a4: b4:96:f7:27:d1:2c:b8:7a:81:30:2c:87:c3:1a:12: b4:1b:a2:d7:d6:67:8f:fa:75:4e:1a:4f:b3:97:0c: e0:58:c0:08:9a:96:45:00:58:48:17:13:f9:39:f7: 31:1a:16:5b:de:54:c9:06:94:21:d2:c7:9a:2e:77: 1c:43:a4:19:4e:12:5c:83:31:2c:eb:44:5b:0d:63: ce:1e:a3:b0:f0:09:de:59:26:69:ba:3b:10:bb:52: c1:7a:70:49:5b:a0:e7:dd:6d:58:95:ba:7c:d3:30: 83:93:47:00:60:58:e7:96:91:70:ec:98:a3:23:0f: 2c:60:34:a8:f0:06:57:44:8f:e0:f0:b2:21:24:b6: f0:fd:22:84:f2:46:c0:ad:28:a3:5f:d3:ef:2c:03: 42:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:0F:76:B7:54:D4:38:EF:EB:97:FB:85:95:7E:50:55:4E:C1:A4:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/37213c10-c79f-37a6-96a9-f209d13ecb33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3f7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:6b:1b:6e:d1:16:fa:dc:e1:36:1b:8d:97:c5:a7:7a:45:1d: c9:c2:6e:c3:3b:50:98:0b:e5:5f:1e:50:85:bc:72:9d:e4:ea: 46:e3:ea:58:60:14:86:e1:fc:b3:c9:a9:18:18:ee:66:54:34: a9:cf:d4:a2:35:74:ba:0c:05:21:df:55:ab:eb:4b:da:ff:15: d4:eb:c8:05:a5:5d:dc:35:9e:3b:ea:e6:5e:29:53:d2:06:0a: 55:1d:3d:35:a3:5a:4d:d3:61:f3:b7:7a:ce:c2:c1:0d:bc:4a: 23:79:28:88:0a:b3:ed:3d:58:87:56:60:9d:28:31:09:56:e0: 8b:dd:00:a7:cf:33:49:42:91:60:e0:20:e3:c8:86:aa:db:e3: 08:2b:7f:52:e7:39:d3:a7:ff:2e:47:8a:02:cb:4e:74:10:bc: b0:cd:3a:a1:7c:9f:fe:64:f7:21:12:9e:fa:50:15:0a:2c:60: 7f:8e:de:7d:5d:6d:7e:58:ee:70:fd:06:91:81:96:03:27:4b: 79:a1:ed:68:f2:6d:aa:65:f0:89:57:3f:3a:20:cf:3d:f9:d5: c2:0c:c3:27:56:e5:a2:d3:1c:69:02:c7:22:62:35:12:1c:41: 94:44:40:26:7d:91:c8:08:e5:d0:e6:b9:91:ee:79:06:9d:99: c6:59:05:d2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiiqfEd94VVPP6AhjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDEyMzAyMzAxNVoXDTI1MDQyMzAxMzAxNVowLzEtMCsGA1UEAxMk YzkyYmQzM2MtNTNhMC00NTQzLWI0N2QtN2NiNGUxZDQ4ZWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoskpM6/Y68P/22Hs9dInuEAMl7XKMFNDlEdH ETTBCNRHsriUQz16ZEEjrTp6qI7l8Zw7pO1lRpGx4zIBlDtZ5UcLbHMBMJ9/sodh s8Imy8PfVJptyKgMQqtOB+z/EFp6E+ly5eb+06S0lvcn0Sy4eoEwLIfDGhK0G6LX 1meP+nVOGk+zlwzgWMAImpZFAFhIFxP5OfcxGhZb3lTJBpQh0seaLnccQ6QZThJc gzEs60RbDWPOHqOw8AneWSZpujsQu1LBenBJW6Dn3W1Ylbp80zCDk0cAYFjnlpFw 7JijIw8sYDSo8AZXRI/g8LIhJLbw/SKE8kbArSijX9PvLANCCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPsPdrdU1Djv65f7hZV+UFVOwaTPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzcyMTNjMTAtYzc5Zi0z N2E2LTk2YTktZjIwOWQxM2VjYjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAP3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADRrG27RFvrc4TYbjZfFp3pFHcnCbsM7UJgL5V8eUIW8cp3k6kbj 6lhgFIbh/LPJqRgY7mZUNKnP1KI1dLoMBSHfVavrS9r/FdTryAWlXdw1njvq5l4p U9IGClUdPTWjWk3TYfO3es7CwQ28SiN5KIgKs+09WIdWYJ0oMQlW4IvdAKfPM0lC kWDgIOPIhqrb4wgrf1LnOdOn/y5HigLLTnQQvLDNOqF8n/5k9yESnvpQFQosYH+O 3n1dbX5Y7nD9BpGBlgMnS3mh7Wjybapl8IlXPzogzz351cIMwydW5aLTHGkCxyJi NRIcQZREQCZ9kcgI5dDmuZHueQadmcZZBdI= -----END CERTIFICATE-----Generated at Wed Feb 5 09:46:25 2025 by rpki-client