$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3bcf2926-b1ca-394c-bbbb-279d30293cd8.roa File: 3bcf2926-b1ca-394c-bbbb-279d30293cd8.roa (raw, json) Hash identifier: VVS91KRtdhlVxAmdsl9hnT9RDTQVKNoipjTF7UPtVLo= Subject key identifier: A7:FF:C4:83:34:EE:C6:1A:3C:30:63:5D:46:BA:C6:88:8A:BE:92:20 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858494CD7D84262B9D6AF3BB1EA30 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3bcf2926-b1ca-394c-bbbb-279d30293cd8.roa Signing time: Tue 25 Mar 2025 01:30:10 +0000 ROA not before: Tue 25 Mar 2025 01:30:10 +0000 ROA not after: Mon 23 Jun 2025 01:30:10 +0000 asID: 48519 IP address blocks: 2001:470:42b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:d7:d8:42:62:b9:d6:af:3b:b1:ea:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 25 01:30:10 2025 GMT Not After : Jun 23 01:30:10 2025 GMT Subject: CN=d94973d0-a31b-463c-85d4-b4c2eaf86002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d8:04:54:39:3b:f8:74:98:2e:4d:3a:10:fc: 56:25:a3:3f:75:40:a4:9b:66:db:07:cd:36:ce:70: 00:b8:da:41:ec:84:66:09:a5:7a:ec:3a:d7:6d:17: d6:41:02:78:0d:b8:fe:7c:9c:c2:c2:e5:d0:10:d9: 67:a0:b0:03:06:fa:8e:fd:79:dd:0a:22:37:20:dc: 8b:66:4a:fd:c5:a6:42:c7:bc:25:17:a9:74:7a:32: 7a:b0:0d:13:55:79:88:72:93:8b:5b:4f:5f:ad:f0: 36:44:99:1b:45:80:01:ef:1b:ec:db:77:a2:7c:b9: 53:06:97:07:b6:c7:b2:a8:25:c9:9e:fd:48:ee:ff: 0f:7f:e2:67:33:54:b4:47:81:5a:17:d9:7a:20:74: a1:64:4b:4b:2f:c7:cd:3c:bb:b4:0b:51:b5:57:5b: c5:22:e1:5f:a2:24:66:9c:c0:48:f6:f6:d3:d5:10: fb:34:1d:dd:6e:36:de:8e:26:5e:19:8c:cc:c2:8a: 32:21:37:c8:f3:10:3e:06:b4:e8:10:e8:fa:8e:55: 6f:44:4e:0d:ea:1d:79:3a:bc:bf:35:17:15:2d:bf: 91:33:f4:5b:f0:5e:1a:0a:73:cd:98:01:7b:9d:2c: 73:db:47:ce:04:56:4f:dc:78:d3:d6:89:30:2e:15: 1e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FF:C4:83:34:EE:C6:1A:3C:30:63:5D:46:BA:C6:88:8A:BE:92:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3bcf2926-b1ca-394c-bbbb-279d30293cd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:42b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:05:77:db:65:21:45:8c:bc:1c:c7:6d:6e:ca:ca:e3:e3:ef: 81:fd:d6:b1:44:6f:3c:09:e1:42:e0:b8:98:2f:bd:ea:53:16: 4a:e1:1b:b9:4a:22:a7:22:b4:5d:96:7c:45:c2:2d:5d:44:f0: ba:63:05:ce:40:4e:2b:f6:68:a1:72:21:a1:45:3c:ed:8b:e8: c4:86:a9:93:e8:c5:9f:41:a3:d5:91:9b:a6:11:54:49:2a:97: 10:80:eb:26:59:c5:4d:98:ec:b9:ce:05:c8:0c:31:66:d4:b8: c4:2e:d3:2c:4c:9f:50:b8:d9:d9:72:7e:b7:19:11:9f:fe:6d: e2:b9:2c:c3:22:c0:46:30:09:d9:bf:38:50:75:4f:e8:64:b2: 57:01:9d:13:77:ea:d2:b9:49:79:8e:ec:64:fa:a0:38:76:ab: 29:e8:31:cc:e2:7c:95:a5:87:74:e4:ff:53:f3:26:dd:66:a6: 2e:6d:9c:99:75:1a:53:be:34:9a:ea:75:1e:c1:6b:5a:37:06: b0:27:f9:d1:23:97:09:97:ab:3f:5f:38:78:08:29:c8:de:f1: 39:93:6f:d6:8a:8a:b8:9d:94:7d:37:a6:5a:55:37:07:53:67: 0d:55:d5:92:3d:b0:3e:78:e2:50:fd:e1:7d:51:b9:13:b5:23: 79:0a:30:97 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElM19hCYrnWrzux6jAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMyNTAxMzAxMFoXDTI1MDYyMzAxMzAxMFowLzEtMCsGA1UEAxMk ZDk0OTczZDAtYTMxYi00NjNjLTg1ZDQtYjRjMmVhZjg2MDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNgEVDk7+HSYLk06EPxWJaM/dUCkm2bbB802 znAAuNpB7IRmCaV67DrXbRfWQQJ4Dbj+fJzCwuXQENlnoLADBvqO/XndCiI3INyL Zkr9xaZCx7wlF6l0ejJ6sA0TVXmIcpOLW09frfA2RJkbRYAB7xvs23eifLlTBpcH tseyqCXJnv1I7v8Pf+JnM1S0R4FaF9l6IHShZEtLL8fNPLu0C1G1V1vFIuFfoiRm nMBI9vbT1RD7NB3dbjbejiZeGYzMwooyITfI8xA+BrToEOj6jlVvRE4N6h15Ory/ NRcVLb+RM/Rb8F4aCnPNmAF7nSxz20fOBFZP3HjT1okwLhUeOQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKf/xIM07sYaPDBjXUa6xoiKvpIgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2JjZjI5MjYtYjFjYS0z OTRjLWJiYmItMjc5ZDMwMjkzY2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAAFd9tlIUWMvBzHbW7KyuPj74H91rFEbzwJ4ULguJgvvepTFkrh G7lKIqcitF2WfEXCLV1E8LpjBc5ATiv2aKFyIaFFPO2L6MSGqZPoxZ9Bo9WRm6YR VEkqlxCA6yZZxU2Y7LnOBcgMMWbUuMQu0yxMn1C42dlyfrcZEZ/+beK5LMMiwEYw Cdm/OFB1T+hkslcBnRN36tK5SXmO7GT6oDh2qynoMczifJWlh3Tk/1PzJt1mpi5t nJl1GlO+NJrqdR7Ba1o3BrAn+dEjlwmXqz9fOHgIKcje8TmTb9aKiridlH03plpV NwdTZw1V1ZI9sD544lD94X1RuRO1I3kKMJc= -----END CERTIFICATE-----Generated at Fri Apr 4 17:58:32 2025 by rpki-client