$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/65175a81-c84d-33da-b601-815618a4404e.roa File: 65175a81-c84d-33da-b601-815618a4404e.roa (raw, json) Hash identifier: y656TwH/kj23zr1Odyo/voOAoLcbASnl8Eqm60F/jH0= Subject key identifier: 0C:3A:6B:8B:E5:11:1B:E5:D7:23:E6:22:47:11:A4:25:32:B1:C6:7F Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584909E69520C4344C1B802E9480 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/65175a81-c84d-33da-b601-815618a4404e.roa Signing time: Sat 01 Mar 2025 02:00:39 +0000 ROA not before: Sat 01 Mar 2025 02:00:39 +0000 ROA not after: Fri 30 May 2025 01:00:39 +0000 asID: 7488 IP address blocks: 2001:470:3de::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:e6:95:20:c4:34:4c:1b:80:2e:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 1 02:00:39 2025 GMT Not After : May 30 01:00:39 2025 GMT Subject: CN=d3c3835c-c8c0-4045-98b5-6a3c6793d1f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:fe:3d:37:54:ee:e8:10:ee:70:6b:a4:1d:bb: 39:78:cd:00:65:bd:93:7a:1c:57:a1:44:6b:ce:ff: 5b:67:14:97:cf:bd:66:e6:bb:86:f6:38:1d:19:b8: 7c:9a:db:2b:95:b6:c7:7c:e1:ac:11:42:aa:6c:87: f1:fb:c5:7c:7f:ee:12:68:ac:f7:e8:2e:15:e4:a1: 0f:15:dc:33:ae:6e:f0:30:87:66:e3:49:3a:5d:d6: 98:de:cb:01:38:cd:09:1c:d1:d3:09:71:10:95:3f: 3f:3f:b4:b7:5b:f0:e6:44:ea:33:28:10:1e:0f:d7: 53:ab:7a:18:ee:17:b6:48:ce:ea:88:72:0f:e1:a9: 85:32:35:6f:84:75:a3:04:12:ad:d8:55:5f:e0:09: 02:be:58:90:f0:7d:56:3c:12:80:26:d6:1e:9a:bd: b2:74:26:82:c0:c3:c0:20:0c:54:4b:f5:27:95:52: b0:25:bf:b7:be:c4:9e:ad:02:00:dc:76:5f:e4:ac: d3:63:01:60:80:39:a0:cd:b2:02:ff:c9:c5:d4:37: 7d:a4:7b:af:e8:f8:b2:46:cd:ff:4e:84:f5:4e:f2: 98:3a:fa:24:3b:ad:bb:5a:93:97:e6:77:25:0c:e2: d6:15:95:53:0b:1e:f8:4e:10:27:08:72:9b:93:44: a8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:3A:6B:8B:E5:11:1B:E5:D7:23:E6:22:47:11:A4:25:32:B1:C6:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/65175a81-c84d-33da-b601-815618a4404e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3de::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:3c:d9:2b:fa:c2:2c:db:24:c1:a8:c4:6d:f6:6e:9c:10:0e: dc:3a:f0:3a:ee:df:8d:2a:0b:c1:29:16:89:c7:2c:ab:2b:93: f7:5e:da:f7:e4:48:61:16:c0:2f:19:7b:19:e8:88:fa:5d:80: 51:fd:ff:f5:85:97:c9:d4:ed:c3:ee:04:8a:db:15:50:f5:2d: 3e:2a:28:fe:3f:10:40:2c:41:6a:17:3f:04:2b:df:66:8b:44: 8d:c1:16:77:45:ce:9e:43:df:22:13:b4:d3:ab:0d:e2:f5:5d: e4:c5:01:0e:6f:d1:db:24:1a:79:ab:ce:7f:19:d1:ba:47:c5: ec:8a:69:f7:6b:9d:3a:c5:e3:b8:aa:a2:55:ee:e9:82:b7:fb: e8:f5:98:fd:03:d0:a5:72:4b:2d:95:32:25:ab:ee:e9:8c:90: 0c:31:6d:68:e0:ac:f6:a9:8a:6d:67:4f:8c:52:81:ce:55:b8: cf:10:d1:a9:d6:48:aa:81:fc:c1:be:c8:64:71:0e:c2:e8:06: d8:6c:b3:3f:14:7c:7b:dc:61:c0:91:f2:f4:52:ca:c8:f6:3f: 22:ec:21:d1:c5:ba:a7:30:e0:d5:e2:a0:c7:88:d1:1a:a5:79: 9c:9e:b8:77:8f:d3:3e:2f:72:39:9d:4a:70:63:48:d9:1e:d1: 57:1b:d8:fe -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkJ5pUgxDRMG4AulIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk ZDNjMzgzNWMtYzhjMC00MDQ1LTk4YjUtNmEzYzY3OTNkMWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/49N1Tu6BDucGukHbs5eM0AZb2TehxXoURr zv9bZxSXz71m5ruG9jgdGbh8mtsrlbbHfOGsEUKqbIfx+8V8f+4SaKz36C4V5KEP Fdwzrm7wMIdm40k6XdaY3ssBOM0JHNHTCXEQlT8/P7S3W/DmROozKBAeD9dTq3oY 7he2SM7qiHIP4amFMjVvhHWjBBKt2FVf4AkCvliQ8H1WPBKAJtYemr2ydCaCwMPA IAxUS/UnlVKwJb+3vsSerQIA3HZf5KzTYwFggDmgzbIC/8nF1Dd9pHuv6PiyRs3/ ToT1TvKYOvokO627WpOX5nclDOLWFZVTCx74ThAnCHKbk0SoLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAw6a4vlERvl1yPmIkcRpCUyscZ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNjUxNzVhODEtYzg0ZC0z M2RhLWI2MDEtODE1NjE4YTQ0MDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALI82Sv6wizbJMGoxG32bpwQDtw68Dru340qC8EpFonHLKsrk/de 2vfkSGEWwC8ZexnoiPpdgFH9//WFl8nU7cPuBIrbFVD1LT4qKP4/EEAsQWoXPwQr 32aLRI3BFndFzp5D3yITtNOrDeL1XeTFAQ5v0dskGnmrzn8Z0bpHxeyKafdrnTrF 47iqolXu6YK3++j1mP0D0KVySy2VMiWr7umMkAwxbWjgrPapim1nT4xSgc5VuM8Q 0anWSKqB/MG+yGRxDsLoBthssz8UfHvcYcCR8vRSysj2PyLsIdHFuqcw4NXioMeI 0RqleZyeuHeP0z4vcjmdSnBjSNke0Vcb2P4= -----END CERTIFICATE-----Generated at Thu Apr 17 15:39:09 2025 by rpki-client