$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4da3e417-cfa4-39f7-b665-a455c2257100.roa File: 4da3e417-cfa4-39f7-b665-a455c2257100.roa (raw, json) Hash identifier: g9tBMIduUTUZfAtLjpaf0CjTs+2QfMNOw9hvEaENa2I= Subject key identifier: 51:4B:D2:02:16:54:00:8D:65:03:55:F9:02:0A:DB:9D:AC:03:8B:D0 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584941AD1F4BA892EB3413DEA180 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4da3e417-cfa4-39f7-b665-a455c2257100.roa Signing time: Fri 21 Mar 2025 01:30:11 +0000 ROA not before: Fri 21 Mar 2025 01:30:11 +0000 ROA not after: Thu 19 Jun 2025 01:30:11 +0000 asID: 329510 IP address blocks: 2001:470:1eb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:41:ad:1f:4b:a8:92:eb:34:13:de:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 21 01:30:11 2025 GMT Not After : Jun 19 01:30:11 2025 GMT Subject: CN=ac50938b-7057-4da1-931c-d574f615a10a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d2:2d:21:59:8c:53:6c:e4:ec:33:bb:6b:9f: 85:fd:13:04:07:20:f7:f5:de:94:7d:a4:33:2b:93: d8:0c:db:68:8b:6b:2d:d5:00:48:3a:0d:07:d0:e8: d7:f6:66:63:34:36:99:71:a4:56:c6:20:58:4a:1f: 06:4b:01:5e:5a:ba:ba:79:2d:b0:ed:74:fc:f8:71: 8b:b7:e8:41:3e:91:56:52:b5:fe:bd:1a:79:a8:92: 41:27:00:8b:1d:71:ec:7b:09:af:fc:c6:4c:64:4d: 8a:82:c0:f4:96:4f:b3:a5:3c:ca:c4:94:2c:aa:77: c1:e0:cd:90:08:88:d1:a0:97:9f:b2:e5:8a:74:89: b3:82:63:f4:f8:f5:cf:67:55:ab:01:e9:dd:91:e7: e6:ff:b1:e3:52:44:91:0e:8e:a5:79:1d:01:3a:76: 92:fe:18:51:b4:f3:cd:a7:32:2a:8c:3a:d5:d3:13: f2:d1:fb:a4:ef:21:e2:47:12:5c:88:0d:1e:08:15: 8f:d2:89:57:66:2b:31:e4:37:33:3b:b9:01:5b:ef: d1:0e:9a:2a:df:7a:10:01:39:e2:ab:df:b5:da:20: 62:c8:16:6e:8e:63:25:7e:3f:65:a2:5d:68:52:9c: 32:f4:1d:5a:93:75:2a:fb:61:27:63:88:29:5e:5b: 99:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:4B:D2:02:16:54:00:8D:65:03:55:F9:02:0A:DB:9D:AC:03:8B:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4da3e417-cfa4-39f7-b665-a455c2257100.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1eb::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:97:38:a8:d3:73:55:04:ae:0a:fe:df:95:db:6b:4c:de:6f: 06:06:a0:87:19:02:9d:e7:85:ea:15:16:1f:a5:54:95:a6:57: 93:9b:18:d1:a6:eb:74:c4:ae:68:52:72:26:7f:89:04:5e:c6: 5c:7f:16:9a:b8:c3:e2:58:2d:4d:68:a8:de:b1:11:1d:59:4b: bf:68:15:3b:90:7e:9e:77:97:c2:ac:32:4e:e7:d8:f4:cf:35: 06:7c:4d:ed:89:a9:7c:6d:b3:be:4b:1c:a2:fa:93:a7:ae:1b: 8e:2a:97:0c:e3:6b:36:ad:0a:c7:2b:45:88:67:29:fa:34:ad: ca:20:5c:e9:66:85:1f:7e:c2:00:87:e0:8c:44:20:14:2d:82: 69:e3:e7:41:d9:62:c4:b0:ff:08:bd:34:d7:09:fd:5e:dd:26: b1:82:f2:0d:0a:45:11:38:e5:80:90:96:e0:f2:29:ae:47:ac: 88:6a:54:96:59:86:ec:34:f8:cb:aa:5e:55:02:54:33:8c:e6: b1:c1:24:0b:98:5d:96:63:67:4d:ac:25:6f:44:0b:c5:46:e4: f4:52:26:c6:a0:0f:cd:7f:a5:34:40:04:a8:c8:49:bb:b8:58: 97:76:d9:b9:27:75:7a:93:a6:92:7d:87:df:51:46:8e:22:aa: d3:8f:30:a2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElBrR9LqJLrNBPeoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMyMTAxMzAxMVoXDTI1MDYxOTAxMzAxMVowLzEtMCsGA1UEAxMk YWM1MDkzOGItNzA1Ny00ZGExLTkzMWMtZDU3NGY2MTVhMTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtItIVmMU2zk7DO7a5+F/RMEByD39d6UfaQz K5PYDNtoi2st1QBIOg0H0OjX9mZjNDaZcaRWxiBYSh8GSwFeWrq6eS2w7XT8+HGL t+hBPpFWUrX+vRp5qJJBJwCLHXHsewmv/MZMZE2KgsD0lk+zpTzKxJQsqnfB4M2Q CIjRoJefsuWKdImzgmP0+PXPZ1WrAendkefm/7HjUkSRDo6leR0BOnaS/hhRtPPN pzIqjDrV0xPy0fuk7yHiRxJciA0eCBWP0olXZisx5DczO7kBW+/RDpoq33oQATni q9+12iBiyBZujmMlfj9lol1oUpwy9B1ak3Uq+2EnY4gpXluZywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFFL0gIWVACNZQNV+QIK252sA4vQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNGRhM2U0MTctY2ZhNC0z OWY3LWI2NjUtYTQ1NWMyMjU3MTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADWXOKjTc1UErgr+35Xba0zebwYGoIcZAp3nheoVFh+lVJWmV5Ob GNGm63TErmhSciZ/iQRexlx/Fpq4w+JYLU1oqN6xER1ZS79oFTuQfp53l8KsMk7n 2PTPNQZ8Te2JqXxts75LHKL6k6euG44qlwzjazatCscrRYhnKfo0rcogXOlmhR9+ wgCH4IxEIBQtgmnj50HZYsSw/wi9NNcJ/V7dJrGC8g0KRRE45YCQluDyKa5HrIhq VJZZhuw0+MuqXlUCVDOM5rHBJAuYXZZjZ02sJW9EC8VG5PRSJsagD81/pTRABKjI Sbu4WJd22bkndXqTppJ9h99RRo4iqtOPMKI= -----END CERTIFICATE-----Generated at Fri Apr 4 17:49:37 2025 by rpki-client