$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4bc8ba73-8e29-38d5-b46f-7a6a4b988d16.roa File: 4bc8ba73-8e29-38d5-b46f-7a6a4b988d16.roa (raw, json) Hash identifier: ZKeMQG0MMxn1V9gAUpNT0xm14TIEwO3y9KFM1KxeYgQ= Subject key identifier: 72:86:DB:78:78:5A:92:89:D8:51:00:A7:4A:78:ED:4C:CE:F9:EF:EF Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858490B4C3BBCD7066BED774A3CD0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4bc8ba73-8e29-38d5-b46f-7a6a4b988d16.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 395517 IP address blocks: 2001:470:57::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:3b:bc:d7:06:6b:ed:77:4a:3c:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=15e88048-7a99-4607-ae9a-7250707770eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d7:bf:e5:d5:64:32:a6:f4:b5:6d:ac:db:6b: 49:6b:e1:ec:86:54:4b:b7:9e:a7:25:b8:de:b5:03: 69:71:3f:a2:87:8f:19:04:b4:3b:5e:a3:71:54:54: 65:3d:2d:f7:f1:3a:b8:4f:bc:2f:8b:01:c9:b1:88: 7f:07:7b:ea:9d:fb:6c:6e:b3:60:59:7b:7c:55:10: f8:ca:b4:a7:84:da:22:3a:02:07:41:ec:26:00:96: fc:9f:ac:7c:81:60:71:f8:1c:f5:27:9c:8e:f3:4f: fa:e7:7b:91:24:45:6e:32:3a:9f:c8:cd:49:80:d3: 77:df:0e:51:3d:a6:9f:f7:86:bf:ee:9a:2b:aa:a9: 2b:1f:43:e8:91:b6:cf:f1:30:b3:6c:78:5f:a5:5d: f7:e5:89:8a:7e:f6:44:86:88:0b:82:37:60:4a:5c: e9:49:c1:4f:ed:f7:30:2e:8d:35:4e:d4:56:68:39: 8f:d7:a2:0e:87:76:f9:6f:b8:fa:36:27:9b:31:0e: 95:42:1f:22:24:ed:88:3b:ec:30:b2:9b:3b:eb:ff: 8a:9f:39:ed:7f:00:39:40:f4:c6:d5:b5:c1:c7:a2: 1a:c8:b2:87:01:7a:40:1d:2d:8c:27:cf:6e:75:06: 0a:39:f6:ce:7a:f1:8b:73:60:c9:ea:ea:82:c8:5f: a3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:86:DB:78:78:5A:92:89:D8:51:00:A7:4A:78:ED:4C:CE:F9:EF:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4bc8ba73-8e29-38d5-b46f-7a6a4b988d16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:57::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:a6:e5:70:0c:12:ef:fb:4b:c3:64:90:39:f0:09:57:61:cf: 56:09:1d:aa:c8:75:71:e8:d6:4a:48:84:92:bc:76:17:c4:ac: 88:dd:24:c7:93:3f:c8:53:aa:1b:fe:60:a8:c7:72:eb:4d:af: 1d:60:0d:73:6a:24:95:37:7c:74:4c:b6:83:6e:ae:60:49:a5: fb:c0:8a:c1:3c:4c:a3:06:d6:78:e9:f9:9d:3a:51:f7:c2:0e: 8b:ff:46:43:89:e7:a9:25:60:55:6e:26:d6:08:85:7c:73:87: fe:8f:ec:c1:e7:d7:df:73:4f:9f:aa:7d:88:14:dd:05:a3:da: 45:89:01:62:2a:28:95:ae:27:20:5c:db:2c:43:f9:dc:d0:d2: 43:38:af:28:cf:21:24:1e:26:66:4d:4f:58:9d:66:20:c2:59: 62:85:b4:d0:99:77:cb:67:92:d9:da:4f:3f:d8:c6:fc:26:27: e0:6f:d4:86:23:94:3e:7b:7b:40:e3:06:5d:39:c5:a7:bd:97: ec:42:e2:a6:89:24:3d:b4:2c:b5:5a:ed:0b:a5:9b:a3:e2:51: bc:3f:44:e3:7f:3d:32:aa:1a:12:29:35:94:2e:a7:be:c2:33: c0:4b:7f:90:eb:a4:9e:b9:68:01:7f:2d:f5:97:c5:90:28:b2: b8:81:4d:ce -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkLTDu81wZr7XdKPNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk MTVlODgwNDgtN2E5OS00NjA3LWFlOWEtNzI1MDcwNzc3MGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0te/5dVkMqb0tW2s22tJa+HshlRLt56nJbje tQNpcT+ih48ZBLQ7XqNxVFRlPS338Tq4T7wviwHJsYh/B3vqnftsbrNgWXt8VRD4 yrSnhNoiOgIHQewmAJb8n6x8gWBx+Bz1J5yO80/653uRJEVuMjqfyM1JgNN33w5R Paaf94a/7porqqkrH0PokbbP8TCzbHhfpV335YmKfvZEhogLgjdgSlzpScFP7fcw Lo01TtRWaDmP16IOh3b5b7j6NiebMQ6VQh8iJO2IO+wwsps76/+KnzntfwA5QPTG 1bXBx6IayLKHAXpAHS2MJ89udQYKOfbOevGLc2DJ6uqCyF+jUQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHKG23h4WpKJ2FEAp0p47UzO+e/vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNGJjOGJhNzMtOGUyOS0z OGQ1LWI0NmYtN2E2YTRiOTg4ZDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcABX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHmm5XAMEu/7S8NkkDnwCVdhz1YJHarIdXHo1kpIhJK8dhfErIjd JMeTP8hTqhv+YKjHcutNrx1gDXNqJJU3fHRMtoNurmBJpfvAisE8TKMG1njp+Z06 UffCDov/RkOJ56klYFVuJtYIhXxzh/6P7MHn199zT5+qfYgU3QWj2kWJAWIqKJWu JyBc2yxD+dzQ0kM4ryjPISQeJmZNT1idZiDCWWKFtNCZd8tnktnaTz/YxvwmJ+Bv 1IYjlD57e0DjBl05xae9l+xC4qaJJD20LLVa7Qulm6PiUbw/RON/PTKqGhIpNZQu p77CM8BLf5DrpJ65aAF/LfWXxZAosriBTc4= -----END CERTIFICATE-----Generated at Fri Apr 4 17:48:44 2025 by rpki-client