$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/597057d6-5ef3-3986-8707-2461f46b159b.roa File: 597057d6-5ef3-3986-8707-2461f46b159b.roa (raw, json) Hash identifier: XYxiPpQORjVs9MW0upPDcoSCoPj5Ut5eyzxnLRWetVc= Subject key identifier: 1A:E7:CD:91:50:A1:38:EA:D5:92:5B:30:8F:13:3C:05:2E:A5:4E:9C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848CC8A27CC508EE8224829AA40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/597057d6-5ef3-3986-8707-2461f46b159b.roa Signing time: Fri 07 Feb 2025 02:30:09 +0000 ROA not before: Fri 07 Feb 2025 02:30:09 +0000 ROA not after: Thu 08 May 2025 01:30:09 +0000 asID: 16679 IP address blocks: 2001:470:410::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:8a:27:cc:50:8e:e8:22:48:29:aa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 7 02:30:09 2025 GMT Not After : May 8 01:30:09 2025 GMT Subject: CN=ba09a40a-df35-4204-8f8d-ddf101bcb766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:10:ff:46:98:7b:1e:64:c9:2e:10:bc:f8:bb: 49:b7:d3:ab:b6:1f:a0:49:e7:d4:44:27:db:25:bd: f2:f3:8a:b1:9c:42:ab:fb:d3:ce:9d:3e:d8:1d:03: e1:dc:ce:69:07:ee:9f:bb:c0:08:ff:2c:e4:3b:28: 94:f3:af:75:43:b3:01:3a:0c:ad:96:25:5d:41:53: b0:05:73:7e:71:54:04:ef:e3:ee:62:2f:88:5b:ab: 89:e6:23:3a:b6:4e:ad:44:bb:cd:72:cd:3e:79:08: a9:10:00:ba:71:f0:0e:e1:f7:f8:01:7d:bd:f7:7c: fc:81:99:67:6b:25:a4:91:5a:4c:40:db:eb:46:d3: f5:19:29:43:22:38:64:ae:e0:7e:e1:d4:20:61:5a: 47:be:88:11:1e:db:fa:e5:cd:e9:40:31:a9:ea:d4: e1:4c:5a:de:52:89:6b:06:87:a0:f7:2e:ae:19:b6: b1:51:48:70:39:34:09:1d:59:af:a0:c1:cb:5d:5b: ec:26:4c:bb:89:38:60:b6:5e:0d:f6:e4:fb:ce:d0: 34:3a:f5:d9:39:4f:93:40:48:15:02:97:89:da:24: 86:91:a8:8a:59:1a:d6:17:8f:1f:e2:e8:84:7e:b3: 78:91:d3:d4:74:4d:96:ed:72:24:e7:78:b5:ac:fa: cb:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E7:CD:91:50:A1:38:EA:D5:92:5B:30:8F:13:3C:05:2E:A5:4E:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/597057d6-5ef3-3986-8707-2461f46b159b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:410::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:2b:5e:6c:d3:c1:57:71:e9:b0:c2:12:29:50:92:1c:a7:58: 61:ba:0a:f2:2a:f2:85:60:13:45:37:e6:bf:d2:86:34:70:d7: 48:89:d4:29:4f:31:f6:0f:a8:f5:01:b4:27:bc:9e:30:b1:07: 19:34:10:35:06:3a:b4:19:9e:f8:f1:1f:e9:27:7b:8c:ab:2b: a1:33:02:96:4a:2a:a9:cb:f8:9d:23:b2:db:5d:66:a4:0c:81: 1b:df:31:79:15:1f:84:58:e2:0b:26:ae:47:02:ed:48:71:e7: 1c:30:83:9f:b4:d4:69:0c:f5:e8:c8:e6:4d:ea:6b:32:60:32: 56:26:14:e0:99:c1:4e:cf:57:46:d0:ce:97:2c:72:25:18:13: a6:8e:9a:e4:8c:22:89:75:8a:24:87:be:5d:00:74:b8:83:b8: 58:1e:d2:e6:df:97:86:61:47:60:c5:6a:ea:82:a0:25:4f:f6: ec:30:3a:f7:d1:c3:71:06:22:c6:81:3a:6d:c6:76:da:5e:f4: 8f:c0:9b:da:76:fe:c2:cf:19:77:5e:f5:d0:1a:db:46:b8:ee: e0:9e:3b:9b:72:d4:3e:77:70:0d:71:e4:41:4f:89:1b:10:8d: db:cd:c0:b8:fc:0e:6c:86:4b:b9:d0:21:50:b1:26:52:b7:8b: df:90:50:d7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjMiifMUI7oIkgpqkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIwNzAyMzAwOVoXDTI1MDUwODAxMzAwOVowLzEtMCsGA1UEAxMk YmEwOWE0MGEtZGYzNS00MjA0LThmOGQtZGRmMTAxYmNiNzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxD/Rph7HmTJLhC8+LtJt9Orth+gSefURCfb Jb3y84qxnEKr+9POnT7YHQPh3M5pB+6fu8AI/yzkOyiU8691Q7MBOgytliVdQVOw BXN+cVQE7+PuYi+IW6uJ5iM6tk6tRLvNcs0+eQipEAC6cfAO4ff4AX2993z8gZln ayWkkVpMQNvrRtP1GSlDIjhkruB+4dQgYVpHvogRHtv65c3pQDGp6tThTFreUolr Boeg9y6uGbaxUUhwOTQJHVmvoMHLXVvsJky7iThgtl4N9uT7ztA0OvXZOU+TQEgV ApeJ2iSGkaiKWRrWF48f4uiEfrN4kdPUdE2W7XIk53i1rPrLiQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBrnzZFQoTjq1ZJbMI8TPAUupU6cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTk3MDU3ZDYtNWVmMy0z OTg2LTg3MDctMjQ2MWY0NmIxNTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAMrXmzTwVdx6bDCEilQkhynWGG6CvIq8oVgE0U35r/ShjRw10iJ 1ClPMfYPqPUBtCe8njCxBxk0EDUGOrQZnvjxH+kne4yrK6EzApZKKqnL+J0jsttd ZqQMgRvfMXkVH4RY4gsmrkcC7Uhx5xwwg5+01GkM9ejI5k3qazJgMlYmFOCZwU7P V0bQzpcsciUYE6aOmuSMIol1iiSHvl0AdLiDuFge0ubfl4ZhR2DFauqCoCVP9uww OvfRw3EGIsaBOm3Gdtpe9I/Am9p2/sLPGXde9dAa20a47uCeO5ty1D53cA1x5EFP iRsQjdvNwLj8DmyGS7nQIVCxJlK3i9+QUNc= -----END CERTIFICATE-----Generated at Fri Apr 4 17:57:38 2025 by rpki-client