$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/44fc710b-c76f-3e56-a52b-543174209f1d.roa File: 44fc710b-c76f-3e56-a52b-543174209f1d.roa (raw, json) Hash identifier: BYg5aEKRImn4PDn0afkuF/GXzYTqAvWfEEoQq3pdkOU= Subject key identifier: C5:CC:32:18:A7:99:E3:E9:B0:0C:C5:8D:A3:F2:C1:49:EF:77:78:29 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584819D00136BF5E5AF199F58880 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/44fc710b-c76f-3e56-a52b-543174209f1d.roa Signing time: Thu 05 Dec 2024 02:00:39 +0000 ROA not before: Thu 05 Dec 2024 02:00:39 +0000 ROA not after: Wed 05 Mar 2025 02:00:39 +0000 asID: 211156 IP address blocks: 2001:470:2a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:19:d0:01:36:bf:5e:5a:f1:99:f5:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Dec 5 02:00:39 2024 GMT Not After : Mar 5 02:00:39 2025 GMT Subject: CN=b8534fab-0142-4bb7-aa94-3ee66d850bc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:3f:c3:6a:92:7b:50:32:4a:4e:1d:4b:72:e9: c2:eb:d6:74:ee:3b:61:38:78:d0:2d:a1:70:db:21: aa:ca:7a:80:4a:b6:1c:99:33:d9:41:b9:f7:98:fc: d5:21:57:13:89:e9:21:56:37:19:0d:14:54:53:48: 83:8e:a9:7a:4f:8f:ec:2c:7d:16:64:84:06:37:39: ee:fe:8b:84:37:aa:ff:07:54:e9:b2:f0:8f:61:d2: 02:58:cf:8a:ab:24:28:b2:c8:af:25:3e:99:e8:b3: 68:99:68:6b:ab:ae:49:6a:b9:7c:9c:99:c9:7f:5f: 8a:5b:dd:ed:7c:e1:8a:35:12:6e:7b:25:00:92:f2: d6:38:a5:77:07:ec:74:a3:24:db:a0:12:b4:1a:fb: 72:4e:c9:d8:3e:da:79:dc:0d:18:97:07:60:2d:d6: d9:c5:d3:3d:aa:a6:05:a4:aa:36:c4:a9:2a:17:03: e9:09:ac:ca:1a:66:40:11:9c:a7:c8:08:9b:20:e3: 7a:58:99:e7:e5:b0:c7:d9:30:e6:d4:16:58:6c:97: 81:6a:d2:79:49:47:5f:fd:b1:00:5b:1b:38:8f:2e: e6:06:6e:ca:e6:95:7a:81:29:19:63:23:b2:9f:cd: aa:ac:b2:fe:57:81:19:9c:f0:99:93:e4:c4:d4:44: fc:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:CC:32:18:A7:99:E3:E9:B0:0C:C5:8D:A3:F2:C1:49:EF:77:78:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/44fc710b-c76f-3e56-a52b-543174209f1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:e2:8e:f6:76:ac:ba:9b:45:69:8b:33:c6:50:8a:e5:b1:78: 0f:cc:a7:74:e4:ed:ca:f0:9f:55:3d:33:d5:cb:df:82:94:2a: aa:12:fb:be:0f:92:dc:fd:a8:27:e8:91:c8:14:a4:5c:6e:de: ce:30:72:ff:17:bd:ad:45:26:97:f1:0a:2a:99:09:7f:80:c2: 49:be:06:8a:d7:79:7e:68:27:f0:09:67:23:86:2a:cb:a0:d8: f8:69:5f:37:96:56:04:ec:77:08:a5:3d:7d:89:2f:48:41:7d: ae:fb:66:23:ae:4d:75:8f:eb:8c:b1:9c:0d:ae:19:cd:c6:78: 5b:d4:20:d8:7a:73:05:97:22:9f:fd:10:06:8c:64:71:04:3b: 80:dd:55:62:e0:d6:ad:d5:85:7c:78:ad:c6:76:c6:57:85:a1: 31:61:cd:42:df:b4:87:b2:c9:68:54:96:cb:33:8f:a9:85:96: 51:27:4b:c4:89:d1:cf:99:d3:60:b0:b1:5f:21:9d:99:72:93: 1b:bd:a9:4d:89:17:05:5a:93:05:f7:c6:b8:54:dc:4b:c0:de: 87:6b:ba:03:d5:c6:cd:ec:d3:97:09:93:01:ce:fe:c0:18:54: 3e:5f:b9:9a:10:1d:3f:44:4f:46:c5:f0:45:99:0c:98:f1:82: 2a:73:64:c9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgZ0AE2v15a8Zn1iIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk Yjg1MzRmYWItMDE0Mi00YmI3LWFhOTQtM2VlNjZkODUwYmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkz/DapJ7UDJKTh1LcunC69Z07jthOHjQLaFw 2yGqynqASrYcmTPZQbn3mPzVIVcTiekhVjcZDRRUU0iDjql6T4/sLH0WZIQGNznu /ouEN6r/B1TpsvCPYdICWM+KqyQossivJT6Z6LNomWhrq65Jarl8nJnJf1+KW93t fOGKNRJueyUAkvLWOKV3B+x0oyTboBK0GvtyTsnYPtp53A0YlwdgLdbZxdM9qqYF pKo2xKkqFwPpCazKGmZAEZynyAibION6WJnn5bDH2TDm1BZYbJeBatJ5SUdf/bEA Wxs4jy7mBm7K5pV6gSkZYyOyn82qrLL+V4EZnPCZk+TE1ET8iQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMXMMhinmePpsAzFjaPywUnvd3gpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDRmYzcxMGItYzc2Zi0z ZTU2LWE1MmItNTQzMTc0MjA5ZjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJLijvZ2rLqbRWmLM8ZQiuWxeA/Mp3Tk7crwn1U9M9XL34KUKqoS +74Pktz9qCfokcgUpFxu3s4wcv8Xva1FJpfxCiqZCX+Awkm+BorXeX5oJ/AJZyOG Ksug2PhpXzeWVgTsdwilPX2JL0hBfa77ZiOuTXWP64yxnA2uGc3GeFvUINh6cwWX Ip/9EAaMZHEEO4DdVWLg1q3VhXx4rcZ2xleFoTFhzULftIeyyWhUlsszj6mFllEn S8SJ0c+Z02CwsV8hnZlykxu9qU2JFwVakwX3xrhU3EvA3odrugPVxs3s05cJkwHO /sAYVD5fuZoQHT9ET0bF8EWZDJjxgipzZMk= -----END CERTIFICATE-----Generated at Sun Feb 16 22:22:50 2025 by rpki-client