$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b7188ad-ff41-35c7-9712-db1897af0ca8.roa File: 3b7188ad-ff41-35c7-9712-db1897af0ca8.roa (raw, json) Hash identifier: pnjkyLoG9OkXOMc6v/uI67lZA6jjIB6MN2vJfTmUR8s= Subject key identifier: 04:D6:CA:A0:2F:26:9F:AB:AF:56:EA:95:25:F8:C9:0A:14:9E:02:4E Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858492F87C33B64114423814A3D00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b7188ad-ff41-35c7-9712-db1897af0ca8.roa Signing time: Fri 14 Mar 2025 13:30:22 +0000 ROA not before: Fri 14 Mar 2025 13:30:22 +0000 ROA not after: Thu 12 Jun 2025 13:30:22 +0000 asID: 34187 IP address blocks: 2001:470:427::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2f:87:c3:3b:64:11:44:23:81:4a:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 14 13:30:22 2025 GMT Not After : Jun 12 13:30:22 2025 GMT Subject: CN=3798e87c-1eb7-44db-b538-bc398005c338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:cf:85:c8:2a:e3:0c:9b:2c:65:d4:cc:b9:e9: e9:30:a3:90:bf:29:cd:47:19:01:50:5a:fc:e1:4b: d4:74:77:aa:6e:c1:bc:84:95:a6:8e:c3:80:88:b2: 4d:9d:03:92:1a:e7:8e:e2:48:9d:de:68:ea:7c:a8: 75:cd:f9:5f:8d:ce:fc:ee:0d:1c:6a:63:85:ff:4d: 84:f1:74:85:1c:b8:3c:11:63:be:ae:6c:d0:f3:e2: f2:4c:de:32:db:86:f2:65:a5:97:53:d8:ff:b6:db: e0:c0:a9:17:04:37:d9:f1:0c:1e:50:5c:f9:6a:fd: 80:f2:ec:60:10:69:e0:7c:38:3b:0c:ea:61:73:fa: ce:1b:53:ed:d0:f6:cd:79:f5:36:1b:9f:87:2e:00: 73:2a:c8:24:4b:4a:25:f9:6b:da:a0:98:9d:80:4f: ed:7d:0d:2e:a0:65:1b:d5:17:77:1f:d4:be:fb:d9: 21:84:ae:67:4c:2d:2b:11:d9:e0:bd:4d:c6:69:c4: 1e:5c:d5:ca:b1:44:f9:4d:b9:7f:6e:a3:08:6f:16: 03:8c:a0:99:68:d3:b9:a0:89:9a:65:ee:60:d4:a4: a5:97:a2:c9:db:de:1f:c4:0e:05:d3:a8:e1:b3:e7: 8e:8f:f4:8b:84:bc:95:2c:ad:01:3a:59:ae:43:18: c8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D6:CA:A0:2F:26:9F:AB:AF:56:EA:95:25:F8:C9:0A:14:9E:02:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b7188ad-ff41-35c7-9712-db1897af0ca8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:427::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:45:ee:3e:73:d5:e4:e8:36:24:48:52:44:5c:2b:fd:2b:83: b7:7c:81:2a:c7:5e:6d:5c:07:94:77:f8:ad:cf:42:c1:a3:f9: 1f:b1:b6:4f:4f:77:84:6e:12:23:22:79:61:c1:d1:de:ed:fb: db:76:1c:1d:ac:5c:fa:95:74:d0:73:21:39:ff:2f:1e:0d:c9: 86:39:c0:dd:30:c8:ef:a7:b5:5f:79:09:92:8b:61:25:91:7d: ac:13:37:17:7c:2d:5b:7e:1d:c9:d3:7e:5d:a9:f8:e1:a9:3a: a9:5c:71:b2:98:e4:16:dc:7f:77:c1:71:b3:a5:3e:ff:64:a1: 96:2f:69:e4:18:3e:fa:51:67:63:5c:98:bd:24:66:48:1f:db: 63:dd:0c:49:08:70:5b:74:13:ac:b1:45:54:9e:6e:c0:f9:2e: 06:fd:58:6f:f0:52:3d:5b:ad:81:37:65:52:54:b7:75:f3:29: 71:af:9c:17:bf:78:e4:df:ac:8a:7f:62:bb:6a:98:34:f8:b1: 47:f3:a9:3d:7e:97:cf:0b:f6:64:19:23:f7:09:2c:dd:cb:d9: a5:88:1c:15:72:a7:87:d4:8a:cf:71:b7:0a:d5:8f:f5:b7:05: 36:fd:be:cb:38:aa:40:e6:e9:3d:65:81:a5:0b:3e:a2:7b:a6: d3:d4:74:c7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkvh8M7ZBFEI4FKPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMxNDEzMzAyMloXDTI1MDYxMjEzMzAyMlowLzEtMCsGA1UEAxMk Mzc5OGU4N2MtMWViNy00NGRiLWI1MzgtYmMzOTgwMDVjMzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgM+FyCrjDJssZdTMuenpMKOQvynNRxkBUFr8 4UvUdHeqbsG8hJWmjsOAiLJNnQOSGueO4kid3mjqfKh1zflfjc787g0camOF/02E 8XSFHLg8EWO+rmzQ8+LyTN4y24byZaWXU9j/ttvgwKkXBDfZ8QweUFz5av2A8uxg EGngfDg7DOphc/rOG1Pt0PbNefU2G5+HLgBzKsgkS0ol+WvaoJidgE/tfQ0uoGUb 1Rd3H9S++9khhK5nTC0rEdngvU3GacQeXNXKsUT5Tbl/bqMIbxYDjKCZaNO5oIma Ze5g1KSll6LJ294fxA4F06jhs+eOj/SLhLyVLK0BOlmuQxjITwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFATWyqAvJp+rr1bqlSX4yQoUngJOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2I3MTg4YWQtZmY0MS0z NWM3LTk3MTItZGIxODk3YWYwY2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHBF7j5z1eToNiRIUkRcK/0rg7d8gSrHXm1cB5R3+K3PQsGj+R+x tk9Pd4RuEiMieWHB0d7t+9t2HB2sXPqVdNBzITn/Lx4NyYY5wN0wyO+ntV95CZKL YSWRfawTNxd8LVt+HcnTfl2p+OGpOqlccbKY5Bbcf3fBcbOlPv9koZYvaeQYPvpR Z2NcmL0kZkgf22PdDEkIcFt0E6yxRVSebsD5Lgb9WG/wUj1brYE3ZVJUt3XzKXGv nBe/eOTfrIp/YrtqmDT4sUfzqT1+l88L9mQZI/cJLN3L2aWIHBVyp4fUis9xtwrV j/W3BTb9vss4qkDm6T1lgaULPqJ7ptPUdMc= -----END CERTIFICATE-----Generated at Sun Apr 27 22:55:36 2025 by rpki-client