$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4a870679-debe-348f-a33d-6e54916a83ca.roa File: 4a870679-debe-348f-a33d-6e54916a83ca.roa (raw, json) Hash identifier: JhnO1lhxatf0ZYLx4ORtaa5hSgiHWgiS7m8t2p/r7UU= Subject key identifier: 19:E4:8E:CD:8D:A0:AC:5E:12:93:66:92:C8:68:40:AF:A7:93:7C:72 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858488129B45232C382CCAABF38C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4a870679-debe-348f-a33d-6e54916a83ca.roa Signing time: Sat 11 Jan 2025 02:30:12 +0000 ROA not before: Sat 11 Jan 2025 02:30:12 +0000 ROA not after: Fri 11 Apr 2025 01:30:12 +0000 asID: 400587 IP address blocks: 2001:470:3ef::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:81:29:b4:52:32:c3:82:cc:aa:bf:38:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jan 11 02:30:12 2025 GMT Not After : Apr 11 01:30:12 2025 GMT Subject: CN=5f1777cd-40fd-410e-ac41-2f470f9ac7e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:dc:dc:a5:ec:9e:45:1d:eb:36:19:c3:60:17: f5:fd:0e:84:0e:97:44:50:68:7d:96:97:e2:93:d5: 1b:82:fd:c0:a9:1d:0b:1b:19:1d:9a:41:4a:b7:69: 8c:44:ae:05:cb:0f:a0:b8:c8:86:8a:9c:2a:5f:91: 45:41:98:b6:30:ed:1a:09:b0:2b:7d:ad:3e:e3:24: 55:ce:c2:ea:d3:64:bb:c4:bd:4d:df:cd:35:05:cc: 01:31:36:dc:33:75:9d:d5:98:af:2e:81:9a:52:40: cb:40:1c:7c:54:e5:46:c2:34:26:43:5b:c4:7c:3e: eb:3b:79:51:87:25:ba:c2:96:bf:d5:c7:d1:39:42: b2:b8:10:95:75:fb:ec:6e:a1:b7:09:2e:37:10:f5: c7:b5:4b:1a:43:5f:cf:5f:90:98:3d:06:97:20:59: be:19:59:16:45:67:8d:56:e7:1d:25:90:f4:1d:9f: bd:7c:cc:21:e7:55:bb:c7:d1:0d:85:ab:66:7b:90: e0:7d:1c:5a:82:cb:92:d0:6e:62:ed:4b:e0:c3:be: cb:9a:ee:e5:fe:43:dd:d0:cf:58:c8:35:ea:7f:c2: 14:97:62:db:c3:1b:06:fd:c4:ae:ce:b4:b7:35:77: 95:9a:97:f1:12:06:62:89:13:5e:02:e9:c0:81:b5: 1f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:E4:8E:CD:8D:A0:AC:5E:12:93:66:92:C8:68:40:AF:A7:93:7C:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4a870679-debe-348f-a33d-6e54916a83ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3ef::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:33:55:64:ce:6e:ac:95:c3:8a:a3:a0:b3:fa:df:f2:28:17: 01:86:71:a5:0c:63:63:fa:50:f2:d0:6e:ac:0a:96:c3:30:ee: 39:0a:52:f2:e5:41:82:0c:81:d5:ef:f4:07:0b:e5:b9:dc:8b: 22:12:3f:4f:cb:7a:1a:75:38:75:52:57:55:e8:c8:32:5b:13: da:df:1b:22:72:96:44:15:06:d5:83:3d:98:97:13:4a:71:47: d3:b5:2c:f8:da:7d:1f:86:04:50:de:28:97:02:8e:13:5e:e7: 3c:a3:6c:7a:87:43:bf:92:b8:ca:24:b2:d6:a8:52:cf:ae:31: 0d:61:58:60:53:bf:f6:32:bf:9c:86:cb:1f:8b:2b:91:b3:e3: 16:d0:db:35:ad:d5:e3:5a:d7:a8:e7:a3:44:44:80:a7:6c:06: 3c:32:32:2a:fc:5e:d0:5a:92:7d:dd:9a:ee:d4:0c:d1:47:d7: 50:53:bd:35:9f:6d:f1:0d:8f:d9:bf:2b:46:01:f6:af:1f:e6: 9c:94:c1:d5:d3:a7:37:33:3c:d2:3f:5b:2f:ff:8f:ad:43:48: 62:b5:41:2c:83:16:1f:a8:28:d5:08:8a:5e:24:00:f2:a8:eb: 5b:61:34:0f:62:03:6d:4f:cd:27:44:90:22:da:e5:84:49:2e: 97:07:f6:69 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiBKbRSMsOCzKq/OMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDExMTAyMzAxMloXDTI1MDQxMTAxMzAxMlowLzEtMCsGA1UEAxMk NWYxNzc3Y2QtNDBmZC00MTBlLWFjNDEtMmY0NzBmOWFjN2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA89zcpeyeRR3rNhnDYBf1/Q6EDpdEUGh9lpfi k9Ubgv3AqR0LGxkdmkFKt2mMRK4Fyw+guMiGipwqX5FFQZi2MO0aCbArfa0+4yRV zsLq02S7xL1N3801BcwBMTbcM3Wd1ZivLoGaUkDLQBx8VOVGwjQmQ1vEfD7rO3lR hyW6wpa/1cfROUKyuBCVdfvsbqG3CS43EPXHtUsaQ1/PX5CYPQaXIFm+GVkWRWeN VucdJZD0HZ+9fMwh51W7x9ENhatme5DgfRxagsuS0G5i7Uvgw77Lmu7l/kPd0M9Y yDXqf8IUl2LbwxsG/cSuzrS3NXeVmpfxEgZiiRNeAunAgbUfUQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBnkjs2NoKxeEpNmkshoQK+nk3xyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNGE4NzA2NzktZGViZS0z NDhmLWEzM2QtNmU1NDkxNmE4M2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPv MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGgzVWTObqyVw4qjoLP63/IoFwGGcaUMY2P6UPLQbqwKlsMw7jkK UvLlQYIMgdXv9AcL5bnciyISP0/Lehp1OHVSV1XoyDJbE9rfGyJylkQVBtWDPZiX E0pxR9O1LPjafR+GBFDeKJcCjhNe5zyjbHqHQ7+SuMokstaoUs+uMQ1hWGBTv/Yy v5yGyx+LK5Gz4xbQ2zWt1eNa16jno0REgKdsBjwyMir8XtBakn3dmu7UDNFH11BT vTWfbfENj9m/K0YB9q8f5pyUwdXTpzczPNI/Wy//j61DSGK1QSyDFh+oKNUIil4k APKo61thNA9iA21PzSdEkCLa5YRJLpcH9mk= -----END CERTIFICATE-----Generated at Wed Feb 5 04:43:11 2025 by rpki-client