$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b6e6abe-f29e-34ef-9929-5aa13c0d216a.roa File: 3b6e6abe-f29e-34ef-9929-5aa13c0d216a.roa (raw, json) Hash identifier: WrJzi4NZNzrT4fj0LG4tBaf5P4jLchMCWKvGVFTiY6c= Subject key identifier: 6A:4B:B8:42:AC:45:CE:75:21:D7:59:17:00:32:FC:F8:F7:E5:3E:A3 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926B5FAA07C14EDC8A37280 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b6e6abe-f29e-34ef-9929-5aa13c0d216a.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 22989 IP address blocks: 2001:470:142::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:b5:fa:a0:7c:14:ed:c8:a3:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=88395a68-acd6-4996-b91b-f87774e7cd4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1a:2d:68:4a:fa:f1:ec:ad:f8:3f:33:0b:b3: f7:10:3a:a3:7d:d5:b7:94:45:2a:0d:d2:b8:18:61: b1:49:30:6c:6e:3f:39:e7:a1:31:cd:9c:7c:6b:ac: 2d:1d:87:a2:be:d5:6e:6a:fa:0f:53:86:3a:cb:14: b1:18:eb:e2:70:4e:12:63:d4:ec:c2:cb:d3:74:c1: c5:ac:1e:38:d3:88:e5:9d:75:c2:b4:09:d5:51:92: a1:d7:30:1d:e7:db:97:5a:24:9c:f8:52:64:71:d4: 46:50:1a:bc:64:9a:85:b7:88:f0:ed:e9:7c:a6:85: d3:d7:c3:fa:c0:41:c0:1a:e4:9b:b0:be:00:bd:1c: 44:bc:00:25:bd:50:f7:cc:0c:c9:65:cc:6f:da:b8: 6a:e4:82:f9:bc:0c:00:d4:46:e9:e5:d5:1b:78:4e: e7:f9:22:28:8c:65:56:3c:16:ca:62:22:ed:20:10: 65:8d:04:cc:94:0b:ae:1a:a3:be:22:e9:44:10:45: 72:50:bf:41:c4:59:60:bd:1e:94:ba:f3:56:52:69: 28:41:1d:c3:c7:1b:b7:89:6d:07:06:08:b0:21:e7: be:fb:bd:6e:c2:67:27:9b:0c:de:8c:77:a0:21:fd: ad:3d:65:b9:52:5f:cb:85:05:97:4d:96:fc:75:93: 04:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:4B:B8:42:AC:45:CE:75:21:D7:59:17:00:32:FC:F8:F7:E5:3E:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b6e6abe-f29e-34ef-9929-5aa13c0d216a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:142::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:74:b9:02:c2:40:39:2b:0e:43:e1:66:10:88:b2:82:4e:42: 71:c2:8a:c8:8c:7f:33:a7:ff:32:01:22:d6:fb:11:42:12:89: b8:06:69:08:58:b4:2c:f0:de:df:c2:98:42:2e:cf:1f:d6:e5: c1:9d:70:f9:b6:c1:54:c9:19:0c:24:38:9d:a6:e1:72:ec:ac: f5:f3:69:90:ee:9f:b1:40:06:d3:3a:b6:40:04:96:64:db:1e: 65:59:8e:5b:52:a5:d6:42:38:6e:8f:9f:c0:5e:84:cb:02:d3: a0:e0:be:61:4b:62:1f:7e:95:a1:07:7f:68:f3:86:e8:6e:68: 03:18:4e:d2:38:5b:97:0f:d8:c0:79:d8:e4:c9:0e:63:d9:2d: ee:ca:22:31:34:2c:bf:72:c9:62:5e:21:ca:ae:ad:3a:00:8e: 4e:8d:1c:e2:1d:53:e0:85:8f:84:62:15:64:8e:1e:0d:c3:ab: 2c:a4:d9:51:56:8d:4a:4b:83:9b:dc:fb:08:eb:9d:c4:e3:01: 16:56:6c:00:cf:cb:8c:ea:bb:30:c1:91:a6:18:90:7b:74:97: 33:6a:ff:b0:42:f3:6c:06:da:db:7f:dc:29:94:3d:3b:15:0a: 14:6f:4a:ef:da:20:74:f7:41:bf:57:bc:0b:11:58:36:b0:44: 3d:52:3d:f9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JrX6oHwU7cijcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk ODgzOTVhNjgtYWNkNi00OTk2LWI5MWItZjg3Nzc0ZTdjZDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxotaEr68eyt+D8zC7P3EDqjfdW3lEUqDdK4 GGGxSTBsbj8556ExzZx8a6wtHYeivtVuavoPU4Y6yxSxGOvicE4SY9TswsvTdMHF rB4404jlnXXCtAnVUZKh1zAd59uXWiSc+FJkcdRGUBq8ZJqFt4jw7el8poXT18P6 wEHAGuSbsL4AvRxEvAAlvVD3zAzJZcxv2rhq5IL5vAwA1Ebp5dUbeE7n+SIojGVW PBbKYiLtIBBljQTMlAuuGqO+IulEEEVyUL9BxFlgvR6UuvNWUmkoQR3Dxxu3iW0H BgiwIee++71uwmcnmwzejHegIf2tPWW5Ul/LhQWXTZb8dZMEHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGpLuEKsRc51IddZFwAy/Pj35T6jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2I2ZTZhYmUtZjI5ZS0z NGVmLTk5MjktNWFhMTNjMGQyMTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAFC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFV0uQLCQDkrDkPhZhCIsoJOQnHCisiMfzOn/zIBItb7EUISibgG aQhYtCzw3t/CmEIuzx/W5cGdcPm2wVTJGQwkOJ2m4XLsrPXzaZDun7FABtM6tkAE lmTbHmVZjltSpdZCOG6Pn8BehMsC06DgvmFLYh9+laEHf2jzhuhuaAMYTtI4W5cP 2MB52OTJDmPZLe7KIjE0LL9yyWJeIcqurToAjk6NHOIdU+CFj4RiFWSOHg3Dqyyk 2VFWjUpLg5vc+wjrncTjARZWbADPy4zquzDBkaYYkHt0lzNq/7BC82wG2tt/3CmU PTsVChRvSu/aIHT3Qb9XvAsRWDawRD1SPfk= -----END CERTIFICATE-----Generated at Fri Apr 4 17:48:45 2025 by rpki-client