$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3cef3b85-1bf0-31fa-81e7-76d7a053c636.roa File: 3cef3b85-1bf0-31fa-81e7-76d7a053c636.roa (raw, json) Hash identifier: 1rh9V+jv9xiBSlLc8PONmWIEoSvsJlxAIDxsS6FQqa4= Subject key identifier: B3:42:86:6F:7F:9C:E6:F7:0F:94:CE:A4:C3:F4:38:33:02:A7:CF:FB Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926C7337FDD15AFF6CECAC4 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3cef3b85-1bf0-31fa-81e7-76d7a053c636.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 41529 IP address blocks: 2001:470:1d4::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:c7:33:7f:dd:15:af:f6:ce:ca:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=a2c49c26-b619-4317-8a5e-d8428812af56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:5a:ab:10:d8:ec:58:ac:64:d9:3c:9a:bc:d5: b0:46:48:a5:bc:c5:a2:ca:10:99:a1:38:8d:0c:c6: 1d:e2:45:7f:12:31:7a:5f:7e:93:6e:fa:83:84:bb: 1f:e4:5c:2a:c9:a6:13:80:9d:c9:ff:0b:75:3f:76: ae:81:83:87:0a:22:12:2b:c0:39:54:99:f2:1d:1d: 19:4c:75:c2:a8:05:b6:dd:22:2d:78:87:58:79:14: 49:29:02:36:93:7b:4d:b7:17:32:dd:b1:23:89:64: f9:4a:9e:30:76:8d:1e:07:37:4c:97:e5:3b:e4:43: f6:2c:f4:3b:f4:18:82:3d:66:77:40:8b:3d:4c:0c: f4:db:2c:5a:0d:dd:6d:9c:28:37:dd:8e:a9:fe:a1: 2b:21:20:8b:84:da:8b:45:db:87:44:52:f8:0c:d0: 2a:99:fb:e6:ca:b5:ed:e6:cc:04:4d:af:c3:21:5a: fe:df:c8:d0:d3:dd:fb:b6:12:39:d9:c7:51:3a:0e: c3:a7:93:b5:25:49:55:a0:a3:12:d6:8f:cf:4c:4d: 62:23:7a:64:f0:38:78:ed:1b:75:98:4a:a6:82:66: 7a:9e:14:ce:7b:7c:6f:0b:09:be:ae:3e:13:f5:5e: 92:11:75:df:f3:63:05:df:3f:8c:96:39:f3:09:2f: 09:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:42:86:6F:7F:9C:E6:F7:0F:94:CE:A4:C3:F4:38:33:02:A7:CF:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3cef3b85-1bf0-31fa-81e7-76d7a053c636.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1d4::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:08:c1:6e:86:ab:14:fa:92:51:46:68:a1:62:a7:4d:74:30: 83:fe:d0:67:f2:28:5b:6a:f0:9d:14:5a:8f:2b:11:90:77:1d: 51:ab:de:ff:b5:f1:d2:12:89:27:87:08:a8:46:75:d3:27:a8: 6f:24:c4:90:51:0c:73:83:3e:5f:6a:34:ea:9a:0a:24:55:d1: 1e:eb:e0:b7:14:40:77:d2:ae:33:7b:34:3b:0a:9f:2b:85:a0: 64:85:fc:30:67:70:72:68:41:59:57:fe:08:6c:69:bd:79:75: 4b:b0:30:17:cb:b3:3d:c8:f4:a3:72:61:12:8d:1e:5e:27:07: e4:cc:8d:ff:ef:cf:57:b0:28:6b:e5:ec:41:ec:ed:3b:d2:48: c2:67:07:e2:08:43:c7:31:06:92:fd:ee:48:fa:48:8d:0b:3e: f9:86:9c:60:d6:fa:25:8b:0e:32:90:48:08:4f:25:31:ae:52: 99:92:f4:69:c2:41:df:1f:b2:1a:1d:06:e3:ca:e4:7f:24:5d: 3d:a8:3a:5c:e8:f6:17:7c:84:f7:84:91:10:b0:2d:ca:47:4f: 29:4e:39:19:80:29:c2:14:82:57:db:7b:00:34:11:5f:d4:ee: 15:29:76:e1:a8:a8:d4:32:bd:43:79:86:7b:10:89:69:70:8a: 84:86:16:0d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5Jsczf90Vr/bOysQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk YTJjNDljMjYtYjYxOS00MzE3LThhNWUtZDg0Mjg4MTJhZjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFqrENjsWKxk2TyavNWwRkilvMWiyhCZoTiN DMYd4kV/EjF6X36TbvqDhLsf5FwqyaYTgJ3J/wt1P3augYOHCiISK8A5VJnyHR0Z THXCqAW23SIteIdYeRRJKQI2k3tNtxcy3bEjiWT5Sp4wdo0eBzdMl+U75EP2LPQ7 9BiCPWZ3QIs9TAz02yxaDd1tnCg33Y6p/qErISCLhNqLRduHRFL4DNAqmfvmyrXt 5swETa/DIVr+38jQ0937thI52cdROg7Dp5O1JUlVoKMS1o/PTE1iI3pk8Dh47Rt1 mEqmgmZ6nhTOe3xvCwm+rj4T9V6SEXXf82MF3z+MljnzCS8JjQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLNChm9/nOb3D5TOpMP0ODMCp8/7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2NlZjNiODUtMWJmMC0z MWZhLTgxZTctNzZkN2EwNTNjNjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBIAEEcAHU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD4IwW6GqxT6klFGaKFip010MIP+0GfyKFtq8J0UWo8rEZB3HVGr 3v+18dISiSeHCKhGddMnqG8kxJBRDHODPl9qNOqaCiRV0R7r4LcUQHfSrjN7NDsK nyuFoGSF/DBncHJoQVlX/ghsab15dUuwMBfLsz3I9KNyYRKNHl4nB+TMjf/vz1ew KGvl7EHs7TvSSMJnB+IIQ8cxBpL97kj6SI0LPvmGnGDW+iWLDjKQSAhPJTGuUpmS 9GnCQd8fshodBuPK5H8kXT2oOlzo9hd8hPeEkRCwLcpHTylOORmAKcIUglfbewA0 EV/U7hUpduGoqNQyvUN5hnsQiWlwioSGFg0= -----END CERTIFICATE-----Generated at Fri Apr 4 17:51:15 2025 by rpki-client