$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5dbde5d9-af31-3484-8621-f49cdb06c274.roa File: 5dbde5d9-af31-3484-8621-f49cdb06c274.roa (raw, json) Hash identifier: xuMJTmSPpDWocNu/bITLa4dcdUkfUfwlSSkGQpxp70w= Subject key identifier: 9D:C0:73:2A:35:31:68:A5:5B:58:A9:6C:80:5E:20:84:FE:C0:18:F9 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848424B1552A06598627A761E80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5dbde5d9-af31-3484-8621-f49cdb06c274.roa Signing time: Thu 19 Dec 2024 14:00:52 +0000 ROA not before: Thu 19 Dec 2024 14:00:52 +0000 ROA not after: Wed 19 Mar 2025 13:00:52 +0000 asID: 399282 IP address blocks: 2001:470:336::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Feb 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:42:4b:15:52:a0:65:98:62:7a:76:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Dec 19 14:00:52 2024 GMT Not After : Mar 19 13:00:52 2025 GMT Subject: CN=f1661efd-f144-42aa-af3b-feeea478ffd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:17:a0:52:bb:e3:32:e3:73:7a:41:c1:75:39: 92:53:6d:9a:74:a9:51:a0:e0:e6:bf:72:cb:fa:5d: 2c:bb:40:ce:8b:4d:79:ec:76:0d:98:d4:73:aa:47: 79:93:d6:78:f8:e8:e2:5a:0e:24:91:e1:1a:7d:81: cc:ca:43:fe:fd:c6:9e:6f:55:26:72:09:af:70:86: b9:51:80:d3:04:cc:7a:19:45:e0:40:ed:23:7e:27: d5:29:c8:ae:f0:21:25:0d:ad:f5:e3:81:56:ef:73: 03:16:e3:e9:8b:19:13:68:3a:38:aa:38:f9:f9:02: c9:1b:11:2a:ed:c5:8b:8f:31:2a:17:c4:37:84:00: 5f:2b:5d:fe:c7:d4:22:6b:81:2b:06:8c:dd:e1:78: 60:2e:cb:27:66:2e:3c:78:a6:e8:bf:fa:20:72:c2: 64:bd:b8:fe:48:f9:5b:6e:c0:e5:74:11:31:19:c5: 86:b4:69:5c:84:18:78:d4:4d:62:69:55:9c:2a:cc: 8b:69:a5:b3:ee:08:1d:36:be:33:af:49:1e:0e:ed: 36:b5:e5:dc:74:00:24:ff:b4:c5:ab:e5:df:7a:a2: ec:e8:8b:dd:3f:5c:ae:5a:cf:a7:ac:1d:64:ab:f0: 69:7b:14:79:19:4c:7a:6d:76:47:2f:a7:22:d8:0c: e2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C0:73:2A:35:31:68:A5:5B:58:A9:6C:80:5E:20:84:FE:C0:18:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5dbde5d9-af31-3484-8621-f49cdb06c274.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:336::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:09:8f:85:39:d4:70:e7:f1:3f:fe:60:89:3c:94:d5:f6:f0: 30:7c:18:cb:fc:53:8e:af:bf:96:b2:2f:50:71:85:a2:30:9b: 2b:fe:2a:8f:a3:41:c1:0c:ec:a1:24:8f:52:33:d4:cc:c4:3a: d6:be:b7:6b:99:d5:ad:b5:69:6a:4c:b3:23:35:0d:c9:48:3e: f9:f7:65:c5:cb:4a:12:59:f1:38:5f:a9:0e:28:d7:07:68:17: 1c:c4:35:39:63:b4:78:35:6f:e2:a2:79:f2:66:a3:ad:5b:4a: d8:50:9e:87:25:ea:56:85:5b:1a:e8:ef:c0:e5:2e:71:91:ee: 35:b2:85:7e:45:e1:f0:9c:93:64:bb:4d:60:95:e0:79:a7:e9: 36:e3:44:9a:bd:12:28:8b:62:ee:e3:93:2a:cd:74:ac:21:18: 78:fa:a9:35:75:10:57:8f:88:ac:3c:29:98:08:35:3c:9b:b9: 7b:71:b5:84:7f:cd:f1:6b:a1:bd:05:65:ec:f2:0c:6e:87:a1: 32:6e:2b:cb:d8:45:6e:a9:0a:7a:9b:4e:ea:cd:a9:7d:b1:f2: e7:69:72:2e:15:b2:42:c0:52:80:ef:35:41:4c:c8:b4:df:b5: 50:a0:39:ed:c4:c7:8b:35:9d:b2:8b:e5:81:19:cc:4d:16:5d: c9:60:a2:13 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhCSxVSoGWYYnp2HoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MTIxOTE0MDA1MloXDTI1MDMxOTEzMDA1MlowLzEtMCsGA1UEAxMk ZjE2NjFlZmQtZjE0NC00MmFhLWFmM2ItZmVlZWE0NzhmZmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRegUrvjMuNzekHBdTmSU22adKlRoODmv3LL +l0su0DOi0157HYNmNRzqkd5k9Z4+OjiWg4kkeEafYHMykP+/caeb1UmcgmvcIa5 UYDTBMx6GUXgQO0jfifVKciu8CElDa3144FW73MDFuPpixkTaDo4qjj5+QLJGxEq 7cWLjzEqF8Q3hABfK13+x9Qia4ErBozd4XhgLssnZi48eKbov/ogcsJkvbj+SPlb bsDldBExGcWGtGlchBh41E1iaVWcKsyLaaWz7ggdNr4zr0keDu02teXcdAAk/7TF q+XfeqLs6IvdP1yuWs+nrB1kq/BpexR5GUx6bXZHL6ci2AziNwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ3Acyo1MWilW1ipbIBeIIT+wBj5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNWRiZGU1ZDktYWYzMS0z NDg0LTg2MjEtZjQ5Y2RiMDZjMjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAM2 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGkJj4U51HDn8T/+YIk8lNX28DB8GMv8U46vv5ayL1BxhaIwmyv+ Ko+jQcEM7KEkj1Iz1MzEOta+t2uZ1a21aWpMsyM1DclIPvn3ZcXLShJZ8ThfqQ4o 1wdoFxzENTljtHg1b+KiefJmo61bSthQnocl6laFWxro78DlLnGR7jWyhX5F4fCc k2S7TWCV4Hmn6TbjRJq9EiiLYu7jkyrNdKwhGHj6qTV1EFePiKw8KZgINTybuXtx tYR/zfFrob0FZezyDG6HoTJuK8vYRW6pCnqbTurNqX2x8udpci4VskLAUoDvNUFM yLTftVCgOe3Ex4s1nbKL5YEZzE0WXclgohM= -----END CERTIFICATE-----Generated at Fri Feb 7 10:49:53 2025 by rpki-client