$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/598aaeed-438c-39a8-9197-95e209b2e433.roa File: 598aaeed-438c-39a8-9197-95e209b2e433.roa (raw, json) Hash identifier: KY8wJMzBny70FLxK/4rkOAvF7ud2ZAwfeEHYWFs1wsQ= Subject key identifier: 72:C6:31:35:88:4C:BC:77:CE:BD:1B:57:66:32:C3:27:8A:1D:A8:B2 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584891E9CF080ED4FC40CEF1E780 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/598aaeed-438c-39a8-9197-95e209b2e433.roa Signing time: Fri 17 Jan 2025 02:30:12 +0000 ROA not before: Fri 17 Jan 2025 02:30:12 +0000 ROA not after: Thu 17 Apr 2025 01:30:12 +0000 asID: 200736 IP address blocks: 2001:470:3f3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:91:e9:cf:08:0e:d4:fc:40:ce:f1:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jan 17 02:30:12 2025 GMT Not After : Apr 17 01:30:12 2025 GMT Subject: CN=b83f539c-21d8-4963-a81f-b801e990ff9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ff:a7:a3:dc:6e:32:87:16:ca:e9:bf:cd:11: 98:fe:c8:03:8c:86:ba:72:b0:ac:8e:b5:01:ac:29: 60:fd:c3:60:98:d5:7e:36:8b:70:e2:f1:ca:5a:9e: 54:85:d2:eb:f3:a2:ce:f0:78:a4:89:ca:78:d5:5d: a6:ab:f1:41:8c:a8:33:b6:80:87:4d:5e:95:ae:d3: e9:f9:1e:69:13:af:47:a8:4f:e9:6c:59:d1:34:f0: 5e:40:cc:4f:bf:b4:bc:04:38:ce:55:c6:72:ea:b0: be:17:94:0e:c1:6e:a8:e6:10:e9:d0:32:f8:92:36: 28:2f:6f:d3:2f:4c:ac:2f:6c:41:fa:ae:de:e0:c7: 7a:5f:06:45:a3:a0:1c:d7:d9:e4:b8:e4:57:38:c8: a8:3c:74:5b:9d:62:e1:1b:69:61:ee:7b:38:17:3d: 05:e8:09:a1:b8:ff:9b:79:5a:49:9d:b0:71:ef:85: 41:c1:f2:e5:87:66:f3:4b:b8:77:7c:ea:d3:78:ca: db:77:3f:2c:98:44:6b:f7:17:c8:87:a7:2a:c7:df: 68:04:ba:10:9b:3b:0c:13:ad:94:38:f6:00:7e:2e: 3f:2e:79:d9:6f:47:00:4e:7c:8e:ab:d5:4e:03:6a: 8b:cf:88:09:7c:bd:70:55:b2:55:e0:40:4c:a1:e2: 7e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C6:31:35:88:4C:BC:77:CE:BD:1B:57:66:32:C3:27:8A:1D:A8:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/598aaeed-438c-39a8-9197-95e209b2e433.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3f3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:c0:c2:b0:98:e6:4a:03:67:0e:30:ff:98:85:f6:27:0f:f8: 11:69:41:ea:43:62:1f:25:c4:de:2e:4a:64:ef:59:90:94:ff: 8f:b5:6e:f5:55:04:45:04:05:3b:50:ed:6a:ce:f4:fe:2f:c1: 43:15:44:35:8e:c6:cf:9c:47:d0:8b:95:76:fd:1a:8e:33:eb: 9e:05:d2:55:82:93:ae:46:0e:6b:8e:81:76:d1:02:03:40:61: 61:af:ce:31:34:26:36:69:d1:71:cf:f0:25:28:83:f3:d7:3e: 48:6e:c0:6e:b0:35:ad:64:19:11:6e:9d:3a:4d:19:d0:c2:5b: eb:80:18:c5:60:36:0a:1c:7e:a4:8b:63:09:5c:7f:69:55:c8: 76:e8:92:82:51:3f:f5:f6:0d:fa:ad:62:2c:02:d0:f7:04:3a: 7e:f6:79:bf:8c:1a:47:86:e1:16:79:1d:0b:78:73:f1:2a:3f: 97:fd:fe:14:c0:45:84:7b:a3:49:cb:a4:e7:dc:36:18:10:91: f4:0f:3e:6b:8e:b9:2e:64:73:89:6c:f8:2c:fd:52:56:5e:2b: 10:3f:bb:43:2b:35:ed:94:3b:20:d0:bb:4e:2e:a5:51:cd:c7: 85:a4:10:b6:0d:a5:02:ec:03:2d:b0:94:05:49:b7:fe:4b:cf: 9a:33:8f:6d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiR6c8IDtT8QM7x54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDExNzAyMzAxMloXDTI1MDQxNzAxMzAxMlowLzEtMCsGA1UEAxMk YjgzZjUzOWMtMjFkOC00OTYzLWE4MWYtYjgwMWU5OTBmZjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhP+no9xuMocWyum/zRGY/sgDjIa6crCsjrUB rClg/cNgmNV+Notw4vHKWp5UhdLr86LO8Hikicp41V2mq/FBjKgztoCHTV6VrtPp +R5pE69HqE/pbFnRNPBeQMxPv7S8BDjOVcZy6rC+F5QOwW6o5hDp0DL4kjYoL2/T L0ysL2xB+q7e4Md6XwZFo6Ac19nkuORXOMioPHRbnWLhG2lh7ns4Fz0F6AmhuP+b eVpJnbBx74VBwfLlh2bzS7h3fOrTeMrbdz8smERr9xfIh6cqx99oBLoQmzsME62U OPYAfi4/LnnZb0cATnyOq9VOA2qLz4gJfL1wVbJV4EBMoeJ+UQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHLGMTWITLx3zr0bV2YywyeKHaiyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTk4YWFlZWQtNDM4Yy0z OWE4LTkxOTctOTVlMjA5YjJlNDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGjAwrCY5koDZw4w/5iF9icP+BFpQepDYh8lxN4uSmTvWZCU/4+1 bvVVBEUEBTtQ7WrO9P4vwUMVRDWOxs+cR9CLlXb9Go4z654F0lWCk65GDmuOgXbR AgNAYWGvzjE0JjZp0XHP8CUog/PXPkhuwG6wNa1kGRFunTpNGdDCW+uAGMVgNgoc fqSLYwlcf2lVyHbokoJRP/X2DfqtYiwC0PcEOn72eb+MGkeG4RZ5HQt4c/EqP5f9 /hTARYR7o0nLpOfcNhgQkfQPPmuOuS5kc4ls+Cz9UlZeKxA/u0MrNe2UOyDQu04u pVHNx4WkELYNpQLsAy2wlAVJt/5Lz5ozj20= -----END CERTIFICATE-----Generated at Wed Feb 5 04:41:38 2025 by rpki-client