$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b517c43-ea97-343a-99fc-280d4c978941.roa File: 4b517c43-ea97-343a-99fc-280d4c978941.roa (raw, json) Hash identifier: df0zIeJaueHdEiq2PZmMWv1lmgfAALGkG4XZqLz/H/Q= Subject key identifier: C1:C2:5D:C6:5C:52:FD:8D:24:43:6D:4C:45:6C:C2:EB:05:65:34:B0 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858487E5F06355560BE703AFA9000 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b517c43-ea97-343a-99fc-280d4c978941.roa Signing time: Fri 10 Jan 2025 02:30:12 +0000 ROA not before: Fri 10 Jan 2025 02:30:12 +0000 ROA not after: Thu 10 Apr 2025 01:30:12 +0000 asID: 400535 IP address blocks: 2001:470:3ee::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7e:5f:06:35:55:60:be:70:3a:fa:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jan 10 02:30:12 2025 GMT Not After : Apr 10 01:30:12 2025 GMT Subject: CN=ad5e7b79-23f6-4db7-aae6-35febb77207e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:37:5e:3f:24:87:03:fb:95:1a:79:49:c1:ed: a4:97:d1:b2:e6:00:a8:21:9e:aa:39:08:e3:1a:3d: 60:d8:ae:11:00:c6:32:7e:8a:2c:ad:84:f8:ca:65: 13:17:07:47:33:77:62:bb:ed:c3:19:af:8c:e3:c9: 8f:69:b5:37:de:58:92:8c:30:87:4b:10:dd:24:51: 67:b7:23:ea:e8:cc:e5:62:39:40:86:4d:34:c3:ed: 38:72:32:ae:c1:e7:45:cc:d4:17:e9:2f:fd:3f:d7: f5:4c:de:a6:af:6f:89:4e:2a:0b:02:78:34:a8:76: 53:74:c1:bb:a4:0a:1b:1f:c6:4b:8a:e0:4c:aa:78: 87:26:76:85:38:94:b5:f5:8f:e5:b1:36:cf:9d:ad: ae:40:73:40:cc:33:f8:dc:e5:c6:9b:1d:38:25:f7: 57:d8:fa:17:91:4c:98:a3:c6:0b:9e:21:67:22:4d: c1:fb:14:6e:4f:b2:77:80:c6:6d:93:c1:c3:15:d7: ab:d5:2b:31:b1:ab:90:4f:3b:10:87:5c:92:92:9c: e7:af:13:8b:2f:90:a1:41:da:77:84:68:f1:f3:c8: 1c:1f:6c:b6:53:fa:47:78:e6:37:7b:94:e3:81:a7: 8b:e5:5f:ad:4d:f1:ba:16:c4:88:a6:9e:63:6d:2f: bd:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C2:5D:C6:5C:52:FD:8D:24:43:6D:4C:45:6C:C2:EB:05:65:34:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b517c43-ea97-343a-99fc-280d4c978941.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3ee::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:0b:4a:c2:2f:1b:25:f5:17:38:86:a6:ae:79:49:1c:4d:13: 85:80:bc:63:73:8a:13:55:99:33:b4:79:9f:cb:b7:d2:ee:0e: 08:d6:5b:ce:e0:44:9a:46:6a:58:51:4c:a7:d9:54:ed:3d:7b: 18:a3:a2:f7:39:d6:b3:fd:8c:9a:1a:03:51:76:89:b8:1b:44: 91:d9:10:6d:8b:bb:14:56:13:2b:50:98:0a:ea:f8:ca:5d:b7: da:04:b7:ac:af:e7:69:62:ea:6e:bd:df:97:72:35:d7:aa:dc: 88:2f:35:6d:20:eb:30:1b:6e:50:c7:d7:ab:b0:65:1f:4f:6e: c1:55:c1:4d:2f:67:d0:ca:71:5f:8d:0c:55:b8:39:c3:db:84: 70:8e:53:32:74:8b:75:e8:c0:6e:fe:52:fa:5b:74:fb:d4:78: 60:c2:b8:9c:a2:c1:7a:21:ae:67:13:77:47:7f:e1:91:d9:09: 82:04:b3:52:8e:25:71:c4:b9:76:bc:0b:b7:f7:62:a9:e5:8c: 12:83:9d:19:9f:96:5d:3c:b8:f3:00:0d:af:68:de:db:51:57: 8e:69:da:31:4f:d3:85:95:26:c3:04:7e:e0:55:76:ad:a9:d8: 14:9c:f3:9d:67:5e:7a:4d:ae:e5:da:80:bd:e9:36:ae:d8:34: c6:82:cc:4c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEh+XwY1VWC+cDr6kAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDExMDAyMzAxMloXDTI1MDQxMDAxMzAxMlowLzEtMCsGA1UEAxMk YWQ1ZTdiNzktMjNmNi00ZGI3LWFhZTYtMzVmZWJiNzcyMDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDdePySHA/uVGnlJwe2kl9Gy5gCoIZ6qOQjj Gj1g2K4RAMYyfoosrYT4ymUTFwdHM3diu+3DGa+M48mPabU33liSjDCHSxDdJFFn tyPq6MzlYjlAhk00w+04cjKuwedFzNQX6S/9P9f1TN6mr2+JTioLAng0qHZTdMG7 pAobH8ZLiuBMqniHJnaFOJS19Y/lsTbPna2uQHNAzDP43OXGmx04JfdX2PoXkUyY o8YLniFnIk3B+xRuT7J3gMZtk8HDFder1SsxsauQTzsQh1ySkpznrxOLL5ChQdp3 hGjx88gcH2y2U/pHeOY3e5TjgaeL5V+tTfG6FsSIpp5jbS+93wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMHCXcZcUv2NJENtTEVswusFZTSwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNGI1MTdjNDMtZWE5Ny0z NDNhLTk5ZmMtMjgwZDRjOTc4OTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAcLSsIvGyX1FziGpq55SRxNE4WAvGNzihNVmTO0eZ/Lt9LuDgjW W87gRJpGalhRTKfZVO09exijovc51rP9jJoaA1F2ibgbRJHZEG2LuxRWEytQmArq +Mpdt9oEt6yv52li6m6935dyNdeq3IgvNW0g6zAbblDH16uwZR9PbsFVwU0vZ9DK cV+NDFW4OcPbhHCOUzJ0i3XowG7+UvpbdPvUeGDCuJyiwXohrmcTd0d/4ZHZCYIE s1KOJXHEuXa8C7f3YqnljBKDnRmfll08uPMADa9o3ttRV45p2jFP04WVJsMEfuBV dq2p2BSc851nXnpNruXagL3pNq7YNMaCzEw= -----END CERTIFICATE-----Generated at Wed Feb 5 04:52:39 2025 by rpki-client