$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5ef70c62-e60f-3e5b-829a-9cbd4b082139.roa File: 5ef70c62-e60f-3e5b-829a-9cbd4b082139.roa (raw, json) Hash identifier: D7b9WVx79pKIyMnHIZdUWVnHtAshBQVToBHGcg4cHIs= Subject key identifier: 2C:E9:45:8A:9B:A5:C1:0F:E5:5B:D3:83:B4:A4:54:F4:AB:31:FE:E6 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926DD4664AB0226CCC1A680 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5ef70c62-e60f-3e5b-829a-9cbd4b082139.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 28757 IP address blocks: 2001:470:163::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:dd:46:64:ab:02:26:cc:c1:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=07ad31fe-085d-4776-be45-33a621df88af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:66:46:f8:e5:ce:af:a7:f6:db:b3:d2:1c:e7: 7d:43:fc:8e:8b:5c:50:81:1c:f2:0e:eb:36:a7:68: 41:bc:6d:b1:b0:4a:40:11:65:ca:7c:3f:fe:1a:8f: 4a:ee:b2:c0:65:cb:18:ac:07:e3:9b:cd:aa:e1:57: c3:7e:5d:15:8a:01:9d:71:bd:97:c2:3e:93:db:35: a4:fb:26:bf:66:1a:1f:28:b4:19:55:26:94:08:ab: 8e:c9:cb:34:ef:d8:10:77:57:91:8a:6c:62:bf:a8: 6d:6c:35:60:a3:c0:e8:12:ce:27:46:93:93:18:27: cb:21:04:7e:ad:61:85:af:5b:47:30:70:cc:6d:b9: ba:92:58:fa:a2:cf:e7:61:18:ea:2d:a7:d8:ea:aa: 60:c3:ad:ac:0a:02:8e:be:9c:b8:29:9f:6b:db:ac: 2a:7b:5b:8c:41:00:44:d6:45:b1:a6:25:76:38:01: 0e:d9:1d:34:de:f3:e9:a6:49:27:2c:25:63:f0:d6: e9:75:90:31:98:cb:d7:b8:db:55:15:38:ad:9b:65: 24:d1:bd:6d:cf:51:06:20:fe:9d:55:fe:fb:f4:ff: 58:ab:26:52:4a:30:b6:51:13:fb:05:8c:79:95:1b: 5e:bf:d5:27:ee:32:64:38:f6:b5:2f:7e:62:11:6f: 21:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E9:45:8A:9B:A5:C1:0F:E5:5B:D3:83:B4:A4:54:F4:AB:31:FE:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5ef70c62-e60f-3e5b-829a-9cbd4b082139.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:163::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:68:74:98:47:36:50:28:e1:f6:be:e3:58:f2:73:92:52:2c: ab:4f:3b:1f:6a:e1:f7:e9:6e:4c:4d:d0:f8:5f:25:6c:b4:f1: d1:08:38:7d:ef:fc:0f:85:1a:80:f5:77:ae:67:e6:91:5e:c6: b3:7a:10:bc:ac:92:74:cb:63:69:48:db:07:79:25:f3:3f:ff: a6:2c:a4:5d:1f:52:f9:0b:d2:2f:85:52:32:3d:12:30:86:3c: 02:6e:c6:a4:ce:0d:0c:8f:8e:85:88:a1:d2:a3:4c:2d:bd:0a: 33:e9:b3:a7:e3:e0:ce:e0:70:d9:16:b9:7e:48:0d:53:72:6d: b5:1b:31:ec:9c:21:b0:bd:4d:cb:01:9a:fb:55:8d:81:26:e4: 68:18:f5:b3:ca:fb:8a:88:60:e3:67:01:3a:ea:0e:ed:be:9f: 70:16:50:10:c8:d0:20:08:36:23:0d:66:0a:16:77:03:d4:31: 42:18:46:f2:54:55:fb:d7:81:f5:b8:b2:ec:e8:21:92:b6:96: 79:a8:40:ab:e7:64:ea:33:4d:23:72:1d:ca:e8:7b:07:8f:0a: e5:1a:35:75:27:95:b7:f2:32:02:dd:5f:c9:20:7d:ed:05:27: 94:b1:e5:10:6d:8d:a2:82:0e:3e:ad:5b:22:9a:a1:73:79:96: 4f:91:09:b9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5Jt1GZKsCJszBpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk MDdhZDMxZmUtMDg1ZC00Nzc2LWJlNDUtMzNhNjIxZGY4OGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2ZG+OXOr6f227PSHOd9Q/yOi1xQgRzyDus2 p2hBvG2xsEpAEWXKfD/+Go9K7rLAZcsYrAfjm82q4VfDfl0VigGdcb2Xwj6T2zWk +ya/ZhofKLQZVSaUCKuOycs079gQd1eRimxiv6htbDVgo8DoEs4nRpOTGCfLIQR+ rWGFr1tHMHDMbbm6klj6os/nYRjqLafY6qpgw62sCgKOvpy4KZ9r26wqe1uMQQBE 1kWxpiV2OAEO2R003vPppkknLCVj8NbpdZAxmMvXuNtVFTitm2Uk0b1tz1EGIP6d Vf779P9YqyZSSjC2URP7BYx5lRtev9Un7jJkOPa1L35iEW8h6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCzpRYqbpcEP5VvTg7SkVPSrMf7mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNWVmNzBjNjItZTYwZi0z ZTViLTgyOWEtOWNiZDRiMDgyMTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAFj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAENodJhHNlAo4fa+41jyc5JSLKtPOx9q4ffpbkxN0PhfJWy08dEI OH3v/A+FGoD1d65n5pFexrN6ELysknTLY2lI2wd5JfM//6YspF0fUvkL0i+FUjI9 EjCGPAJuxqTODQyPjoWIodKjTC29CjPps6fj4M7gcNkWuX5IDVNybbUbMeycIbC9 TcsBmvtVjYEm5GgY9bPK+4qIYONnATrqDu2+n3AWUBDI0CAINiMNZgoWdwPUMUIY RvJUVfvXgfW4suzoIZK2lnmoQKvnZOozTSNyHcroewePCuUaNXUnlbfyMgLdX8kg fe0FJ5Sx5RBtjaKCDj6tWyKaoXN5lk+RCbk= -----END CERTIFICATE-----Generated at Fri Apr 4 17:51:17 2025 by rpki-client