$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3ad850bf-846e-34c7-9e00-d96da62c376f.roa File: 3ad850bf-846e-34c7-9e00-d96da62c376f.roa (raw, json) Hash identifier: Hz+nP9hcgBvoVc+prx2OJo/pMNE9MR5+07/W8Qv9rd0= Subject key identifier: D0:E4:59:B7:94:9E:C1:30:36:12:CD:DB:41:14:0D:26:66:C3:2C:4B Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858492F87B4D6B3E2743576732040 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3ad850bf-846e-34c7-9e00-d96da62c376f.roa Signing time: Fri 14 Mar 2025 13:30:15 +0000 ROA not before: Fri 14 Mar 2025 13:30:15 +0000 ROA not after: Thu 12 Jun 2025 13:30:15 +0000 asID: 198408 IP address blocks: 2001:470:427::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2f:87:b4:d6:b3:e2:74:35:76:73:20:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 14 13:30:15 2025 GMT Not After : Jun 12 13:30:15 2025 GMT Subject: CN=33b09d33-79c5-4f77-98ae-d4cf8cb8ae64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9a:57:f0:68:98:f4:54:ee:ec:af:43:31:4b: d4:a1:a0:8b:7f:0a:ca:6e:d9:9d:57:cd:14:48:2f: 35:76:eb:ef:02:fc:54:ee:4f:06:ad:1a:06:74:8b: af:a3:e6:34:7d:d4:d6:5c:e3:ed:23:8f:09:dd:a1: 5d:0c:0d:cd:3f:b5:c8:2a:df:96:d4:9a:bd:d6:c1: 6d:f4:2c:bd:e3:bf:71:f8:dd:b4:8f:7d:c4:e1:c3: 44:83:86:a1:28:05:72:c4:f2:5a:e9:77:43:c4:8b: 6b:b1:77:53:66:30:9f:b7:ae:5e:60:9e:70:2a:1b: c7:0c:9d:dd:23:b0:07:08:d9:f0:ff:88:cb:38:63: f1:e6:38:a1:c7:6c:16:08:ff:0c:15:57:bc:65:a0: f3:71:d9:57:e3:55:96:ce:4d:db:ee:bf:3a:d2:bd: 31:f4:3b:13:da:e3:37:8b:3e:a6:d7:1e:68:ce:82: d4:0a:c7:41:a7:28:e4:1c:67:1d:38:e8:e5:1b:ea: c5:fd:5c:13:8a:43:d8:93:1f:c2:6b:9b:3a:d6:c5: 2a:1d:78:0d:45:f4:04:07:8a:a1:82:df:29:17:5b: 42:2e:29:c8:23:a3:c6:c3:ca:7e:8e:18:76:2b:47: d3:b4:6a:1e:bd:e1:01:2d:2b:bf:da:28:a4:49:c6: 23:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E4:59:B7:94:9E:C1:30:36:12:CD:DB:41:14:0D:26:66:C3:2C:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3ad850bf-846e-34c7-9e00-d96da62c376f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:427::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:75:7b:a8:d3:2a:ca:ad:ea:02:89:af:a0:8a:c8:50:f9:72: 44:08:bc:b0:4c:ef:03:90:28:d9:44:89:14:29:3b:04:f2:c6: 65:c0:b9:39:44:a4:7f:c1:25:e9:66:1a:4d:09:ce:94:ff:05: b3:6b:bb:94:60:d5:e1:ae:8c:b1:97:f6:be:6b:d1:00:2e:6d: 97:69:17:34:80:3b:d0:54:dc:4c:16:91:da:8c:40:c6:71:c9: e0:38:04:da:33:bc:fd:48:e5:00:e9:9e:d3:a3:7d:32:3e:84: 93:4b:4d:1e:35:a7:ec:fc:da:b8:90:92:fd:23:ba:9b:f2:a1: 95:9c:9e:12:4a:a8:82:1d:51:cd:86:c1:d2:6f:a7:1f:6c:a5: 44:24:fd:12:91:40:31:74:7c:9b:2f:ce:7d:1b:8b:2e:7f:a9: f3:99:c7:43:a4:a4:ce:bb:64:36:90:fc:71:0c:36:51:5f:50: 01:ee:ff:14:73:63:71:43:bc:bb:79:3c:38:10:a7:d9:e4:60: 14:2b:ca:73:31:f2:df:10:ce:49:04:aa:1f:bc:f4:c9:6d:fa: 48:87:0a:d1:22:d9:2f:d4:92:3f:c3:ab:45:0f:a7:59:62:2c: c7:2e:34:2c:c4:b9:a7:2d:c8:81:d7:b0:5a:55:4c:45:8d:9e: be:1e:06:d3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkvh7TWs+J0NXZzIEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMxNDEzMzAxNVoXDTI1MDYxMjEzMzAxNVowLzEtMCsGA1UEAxMk MzNiMDlkMzMtNzljNS00Zjc3LTk4YWUtZDRjZjhjYjhhZTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJpX8GiY9FTu7K9DMUvUoaCLfwrKbtmdV80U SC81duvvAvxU7k8GrRoGdIuvo+Y0fdTWXOPtI48J3aFdDA3NP7XIKt+W1Jq91sFt 9Cy9479x+N20j33E4cNEg4ahKAVyxPJa6XdDxItrsXdTZjCft65eYJ5wKhvHDJ3d I7AHCNnw/4jLOGPx5jihx2wWCP8MFVe8ZaDzcdlX41WWzk3b7r860r0x9DsT2uM3 iz6m1x5ozoLUCsdBpyjkHGcdOOjlG+rF/VwTikPYkx/Ca5s61sUqHXgNRfQEB4qh gt8pF1tCLinII6PGw8p+jhh2K0fTtGoeveEBLSu/2iikScYjjQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNDkWbeUnsEwNhLN20EUDSZmwyxLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2FkODUwYmYtODQ2ZS0z NGM3LTllMDAtZDk2ZGE2MmMzNzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACF1e6jTKsqt6gKJr6CKyFD5ckQIvLBM7wOQKNlEiRQpOwTyxmXA uTlEpH/BJelmGk0JzpT/BbNru5Rg1eGujLGX9r5r0QAubZdpFzSAO9BU3EwWkdqM QMZxyeA4BNozvP1I5QDpntOjfTI+hJNLTR41p+z82riQkv0jupvyoZWcnhJKqIId Uc2GwdJvpx9spUQk/RKRQDF0fJsvzn0biy5/qfOZx0OkpM67ZDaQ/HEMNlFfUAHu /xRzY3FDvLt5PDgQp9nkYBQrynMx8t8QzkkEqh+89Mlt+kiHCtEi2S/Ukj/Dq0UP p1liLMcuNCzEuactyIHXsFpVTEWNnr4eBtM= -----END CERTIFICATE-----Generated at Fri Apr 4 17:53:15 2025 by rpki-client