$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/415e1add-d08a-35ca-a00e-d9e16c81efbb.roa File: 415e1add-d08a-35ca-a00e-d9e16c81efbb.roa (raw, json) Hash identifier: xm7f2vp4kbAUs8OHsmLgwGMG73KmkhOaBhtg/aet9YI= Subject key identifier: 95:D9:D1:62:88:6B:33:7D:42:95:AD:CA:C6:27:A4:86:94:F5:DA:87 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926E12BDCEFF5A8358F9E00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/415e1add-d08a-35ca-a00e-d9e16c81efbb.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 33725 IP address blocks: 2001:470:219::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:e1:2b:dc:ef:f5:a8:35:8f:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=4257f323-407b-49c9-aeb5-74fa2bcd28fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9c:a8:28:b5:a5:c5:6d:95:df:55:f1:d2:96: 8c:ac:0d:26:86:99:b4:cd:56:eb:c5:d9:7c:7f:04: 14:1b:e3:55:12:0a:ec:84:62:6d:26:52:fa:fc:9d: fe:cb:04:52:ec:62:bd:a6:ca:d3:8b:23:29:4f:3f: ea:c7:aa:3c:c1:85:92:05:f1:21:2b:59:31:c6:0f: 31:ce:26:38:10:36:54:66:ca:e1:1f:74:9c:b4:83: c2:b9:8b:c3:6a:23:99:a5:0e:7c:ea:14:09:74:35: 6c:df:e7:71:52:4e:52:67:3c:f0:aa:0c:43:d7:36: 2f:b7:39:9b:bd:45:b2:46:f0:83:74:d7:bd:e2:8a: 51:7a:92:70:83:a4:be:43:4f:17:e9:24:ec:92:de: 10:84:b1:78:a9:3a:be:a7:93:4f:bf:c4:74:3e:8e: f2:68:fd:e2:21:95:cf:98:ef:e6:5e:a2:f3:d2:35: 7f:1c:b6:d0:fa:e5:93:38:94:0f:ec:a9:7c:14:5f: 98:ca:54:d0:98:82:9b:21:f3:9e:04:9d:8a:41:1a: d1:c7:75:7b:d2:de:f7:ca:1c:5a:6e:94:70:15:65: 96:76:10:af:d7:5d:f3:06:26:6e:6d:fc:c8:99:45: dc:ca:50:3e:30:96:ab:4a:3d:7d:1c:2e:ff:03:67: ad:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D9:D1:62:88:6B:33:7D:42:95:AD:CA:C6:27:A4:86:94:F5:DA:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/415e1add-d08a-35ca-a00e-d9e16c81efbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:219::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:f1:6b:be:97:aa:21:12:a7:8d:f8:5a:e4:6d:28:5d:a1:7a: 0f:da:4c:47:0c:3a:03:0d:69:b6:31:02:69:a8:0a:ba:dd:2b: 62:08:dd:16:f1:05:3d:3e:be:63:91:8d:e4:a0:37:32:07:d5: 7d:79:6f:a2:f6:56:70:3c:e4:4e:5f:a0:e4:ee:c5:1a:a0:0a: bf:08:a2:b0:fc:ad:a3:c8:68:fb:29:ca:b0:17:fc:47:11:b6: b7:db:b5:ba:70:73:4b:9b:4a:74:65:e8:a9:90:8b:49:6f:11: 4e:79:52:ca:7e:29:32:67:38:40:69:96:4e:72:da:d4:b5:b7: c3:8a:e5:a4:9d:70:0d:37:c8:94:c8:4a:b3:ad:5d:11:73:75: e1:61:de:60:60:e0:97:c7:bd:af:60:b7:95:1c:c4:e4:72:9d: 2d:94:77:f7:98:97:20:6c:db:17:73:43:d2:fe:e5:01:cd:4c: 7a:18:88:69:71:a6:84:bd:0b:b8:bb:c7:be:d0:2c:f2:67:7b: bc:2d:dc:46:1f:d4:c8:7e:54:52:e5:28:b9:cf:63:ea:ec:78: 3a:48:3f:c6:a7:e6:1e:43:a6:db:13:65:0f:f9:bf:bf:70:e5: 22:2b:b1:65:c2:94:c1:43:6e:19:82:16:35:2b:83:5c:1a:e8: 13:4b:db:c2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JuEr3O/1qDWPngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk NDI1N2YzMjMtNDA3Yi00OWM5LWFlYjUtNzRmYTJiY2QyOGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJyoKLWlxW2V31Xx0paMrA0mhpm0zVbrxdl8 fwQUG+NVEgrshGJtJlL6/J3+ywRS7GK9psrTiyMpTz/qx6o8wYWSBfEhK1kxxg8x ziY4EDZUZsrhH3SctIPCuYvDaiOZpQ586hQJdDVs3+dxUk5SZzzwqgxD1zYvtzmb vUWyRvCDdNe94opRepJwg6S+Q08X6STskt4QhLF4qTq+p5NPv8R0Po7yaP3iIZXP mO/mXqLz0jV/HLbQ+uWTOJQP7Kl8FF+YylTQmIKbIfOeBJ2KQRrRx3V70t73yhxa bpRwFWWWdhCv113zBiZubfzImUXcylA+MJarSj19HC7/A2etsQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJXZ0WKIazN9QpWtysYnpIaU9dqHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDE1ZTFhZGQtZDA4YS0z NWNhLWEwMGUtZDllMTZjODFlZmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAIZ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI/xa76XqiESp434WuRtKF2heg/aTEcMOgMNabYxAmmoCrrdK2II 3RbxBT0+vmORjeSgNzIH1X15b6L2VnA85E5foOTuxRqgCr8IorD8raPIaPspyrAX /EcRtrfbtbpwc0ubSnRl6KmQi0lvEU55Usp+KTJnOEBplk5y2tS1t8OK5aSdcA03 yJTISrOtXRFzdeFh3mBg4JfHva9gt5UcxORynS2Ud/eYlyBs2xdzQ9L+5QHNTHoY iGlxpoS9C7i7x77QLPJne7wt3EYf1Mh+VFLlKLnPY+rseDpIP8an5h5DptsTZQ/5 v79w5SIrsWXClMFDbhmCFjUrg1wa6BNL28I= -----END CERTIFICATE-----Generated at Fri Apr 4 17:44:09 2025 by rpki-client