$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/43228dc2-fee6-3213-85b8-367652bd3ae7.roa File: 43228dc2-fee6-3213-85b8-367652bd3ae7.roa (raw, json) Hash identifier: hexqNmCF0YCuGsI4nhuOu43CgaspW8gJhvpKYayXqDU= Subject key identifier: C5:86:FF:87:62:F2:F4:13:75:E7:9C:9B:09:41:3D:BD:4E:65:83:FA Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926C31A01DC654B850AC380 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/43228dc2-fee6-3213-85b8-367652bd3ae7.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 217 IP address blocks: 2001:470:22::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:c3:1a:01:dc:65:4b:85:0a:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=797f2e23-97c6-4f50-91d2-b737dffe7881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5e:37:70:9d:e6:67:69:5d:d7:6d:4f:41:68: b8:09:33:9b:96:84:74:3c:ff:90:14:3b:52:41:eb: fc:57:db:53:e1:94:2c:93:09:7e:ef:4c:4c:26:2b: 7c:44:0d:3a:95:04:ee:f7:87:18:75:20:0a:bd:86: d9:0e:85:67:2e:6b:e4:b3:78:eb:91:a6:d4:8a:ac: 54:5e:3f:08:4c:25:0f:9a:9c:e2:75:a6:0e:1c:fa: a6:39:62:02:40:a9:24:31:69:07:2d:42:32:9f:d4: 73:1c:48:7b:18:83:5c:ea:2a:96:46:ba:8b:97:64: ae:39:cd:59:d9:9a:c1:a8:6f:a1:e4:48:2e:c7:9d: c7:45:19:c9:77:fd:12:92:32:20:13:d0:ce:36:fe: 1c:72:07:81:d7:05:00:25:87:78:55:66:04:98:c4: cb:50:da:71:83:ab:88:d1:60:5a:f3:c0:88:9b:db: f9:55:9b:0f:a0:88:b4:02:33:b4:31:2b:43:52:41: 15:1d:b7:75:54:b9:04:7e:f5:0e:72:51:25:27:5e: d9:1a:18:f7:11:44:f3:4d:6a:a5:f2:c7:7c:12:34: fd:bb:d4:bf:06:46:cd:94:ef:96:a8:05:4f:3b:13: aa:da:a5:2f:3d:aa:78:4a:36:67:6a:0a:da:1c:3c: 3e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:86:FF:87:62:F2:F4:13:75:E7:9C:9B:09:41:3D:BD:4E:65:83:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/43228dc2-fee6-3213-85b8-367652bd3ae7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:22::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:3e:6d:94:60:a5:5c:3e:18:f7:2c:8b:e8:e9:a1:96:4a:ab: bb:6a:1e:cf:e5:9c:f3:22:8a:7a:9c:19:b7:17:16:24:d9:13: 9a:12:eb:d8:75:79:32:9f:51:3a:1a:87:3f:3c:86:9e:a5:7d: 45:91:96:22:59:06:1e:61:86:10:9e:b8:f8:24:26:8d:c7:e9: 36:59:54:f3:c6:40:d9:a0:50:47:d5:cb:be:c2:23:80:e5:13: b2:c9:36:b8:1f:d4:ec:bd:06:9c:11:03:1b:ed:f0:fa:a5:dd: 6f:03:1c:90:e5:8c:82:9a:53:1e:ef:25:41:11:77:5b:f2:fb: 21:0c:c6:b3:e9:73:fa:a3:ba:df:15:f4:88:1f:79:38:1c:30: 61:d9:8c:66:5d:af:2e:f2:99:29:9c:b0:57:bd:02:df:3b:73: 29:d3:90:b4:ea:62:61:95:b2:dc:7f:06:e0:e7:d9:eb:3d:55: d9:f7:59:d6:e7:3e:36:43:22:17:da:fb:ec:ac:38:b7:76:cb: e1:7f:8e:91:40:cf:08:6c:65:fe:33:5a:a4:56:d4:89:5b:d5: 46:98:e6:15:cf:e0:3b:91:25:c2:38:5a:53:50:ef:66:8a:b0: 55:94:a7:ed:05:4b:e0:b6:9b:47:c3:b6:b1:ea:36:29:31:54: 67:ca:b9:e3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JsMaAdxlS4UKw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk Nzk3ZjJlMjMtOTdjNi00ZjUwLTkxZDItYjczN2RmZmU3ODgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjF43cJ3mZ2ld121PQWi4CTObloR0PP+QFDtS Qev8V9tT4ZQskwl+70xMJit8RA06lQTu94cYdSAKvYbZDoVnLmvks3jrkabUiqxU Xj8ITCUPmpzidaYOHPqmOWICQKkkMWkHLUIyn9RzHEh7GINc6iqWRrqLl2SuOc1Z 2ZrBqG+h5Egux53HRRnJd/0SkjIgE9DONv4ccgeB1wUAJYd4VWYEmMTLUNpxg6uI 0WBa88CIm9v5VZsPoIi0AjO0MStDUkEVHbd1VLkEfvUOclElJ17ZGhj3EUTzTWql 8sd8EjT9u9S/BkbNlO+WqAVPOxOq2qUvPap4SjZnagraHDw+NQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMWG/4di8vQTdeecmwlBPb1OZYP6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDMyMjhkYzItZmVlNi0z MjEzLTg1YjgtMzY3NjUyYmQzYWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAAi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKo+bZRgpVw+GPcsi+jpoZZKq7tqHs/lnPMiinqcGbcXFiTZE5oS 69h1eTKfUToahz88hp6lfUWRliJZBh5hhhCeuPgkJo3H6TZZVPPGQNmgUEfVy77C I4DlE7LJNrgf1Oy9BpwRAxvt8Pql3W8DHJDljIKaUx7vJUERd1vy+yEMxrPpc/qj ut8V9IgfeTgcMGHZjGZdry7ymSmcsFe9At87cynTkLTqYmGVstx/BuDn2es9Vdn3 WdbnPjZDIhfa++ysOLd2y+F/jpFAzwhsZf4zWqRW1Ilb1UaY5hXP4DuRJcI4WlNQ 72aKsFWUp+0FS+C2m0fDtrHqNikxVGfKueM= -----END CERTIFICATE-----Generated at Fri Apr 4 17:52:24 2025 by rpki-client