$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/683edfc8-bb17-3380-bc14-247e49848b6e.roa File: 683edfc8-bb17-3380-bc14-247e49848b6e.roa (raw, json) Hash identifier: HxbJREDhzvXrJMJuJG4bSLODsIcOSKYsosOHfVeO6kg= Subject key identifier: 0C:67:16:40:43:AC:D5:32:5B:4B:94:75:B1:E7:9E:AD:67:88:97:A3 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848E7011F0FBD644E6560C42A00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/683edfc8-bb17-3380-bc14-247e49848b6e.roa Signing time: Sun 16 Feb 2025 14:00:52 +0000 ROA not before: Sun 16 Feb 2025 14:00:52 +0000 ROA not after: Sat 17 May 2025 13:00:52 +0000 asID: 401530 IP address blocks: 2001:470:3c5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e7:01:1f:0f:bd:64:4e:65:60:c4:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 16 14:00:52 2025 GMT Not After : May 17 13:00:52 2025 GMT Subject: CN=8df34a84-d615-4045-b35f-197a1dfa1d4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:49:89:d2:1d:45:83:ef:13:5d:36:73:e5:b1: 91:e6:89:1c:b0:99:7b:14:65:34:e7:8a:de:56:17: e0:ce:ee:16:d5:34:1b:54:c0:fd:79:24:50:6e:17: 18:79:58:ab:6d:0e:79:64:d5:2c:7f:28:5b:fa:90: 85:12:54:f3:b9:bb:6c:18:36:72:cc:a9:83:f8:a6: 7b:cf:40:43:6e:a9:a1:f1:24:86:75:37:bb:00:1d: 2d:63:95:ac:08:8d:51:3a:fb:d4:2c:ba:9d:cc:85: fa:0b:8e:04:c9:97:98:b9:ad:54:ed:d5:87:cc:70: 21:6f:04:f0:aa:7e:5d:f0:7c:8f:1f:6a:58:73:cf: ff:04:db:0b:56:e8:17:bf:6a:13:e9:b6:7e:54:39: 39:8b:0c:88:ae:6e:e7:9c:d1:56:a0:4c:49:06:be: 9d:28:d9:3c:2f:ca:65:3c:7d:9a:6a:a5:e9:8a:9e: 86:a0:0a:eb:17:8b:94:c6:61:4e:84:b6:a8:c4:4c: 79:6c:75:cd:e4:c1:90:2b:36:ef:dc:eb:1d:c3:fa: 44:4c:65:13:21:ef:52:98:ed:89:f5:75:79:47:c3: 19:ae:03:b1:01:7b:6d:a8:48:b2:de:e9:c5:ae:25: 92:a3:75:c2:af:38:be:6f:af:14:a9:9a:f1:0f:dc: ef:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:67:16:40:43:AC:D5:32:5B:4B:94:75:B1:E7:9E:AD:67:88:97:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/683edfc8-bb17-3380-bc14-247e49848b6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3c5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:e3:38:9a:45:37:85:ec:83:23:ac:45:e3:03:a9:e0:60:23: 90:0f:d7:9f:83:16:b5:bc:7c:03:58:4e:7b:f9:07:54:56:c2: da:f2:e5:c8:d7:62:23:b0:b6:ca:52:04:b5:6d:8c:ce:0a:81: 46:0f:c5:0d:69:a1:ce:03:36:45:2e:92:ef:81:82:7a:d3:99: 6d:d2:0e:95:93:45:28:d7:9c:9d:c1:c4:97:26:33:97:03:98: 40:a5:d4:5b:b2:e4:71:f7:7d:eb:ac:7c:bc:ee:04:54:e1:1d: db:72:bf:94:61:c0:c1:ed:9e:0b:e5:c4:05:86:71:af:47:f2: e6:75:79:84:3e:27:cb:02:35:31:06:32:f3:f9:8a:23:6a:c6: 8a:5f:25:7c:37:32:ef:49:64:0c:6b:a2:0a:72:2e:2a:83:9f: c7:2e:2e:84:ce:f8:bc:0e:4f:fb:85:50:84:c7:f8:8b:a3:d7: 48:6c:5c:b8:9e:60:4b:9b:5c:77:a5:0f:aa:e3:1a:40:d3:2d: 77:29:24:54:2e:ff:bf:1e:94:c0:e3:ce:28:c5:f1:3a:b5:31: f3:ec:56:fe:6e:53:f0:db:d1:91:5d:6f:85:7c:70:dc:60:9f: 5a:1d:b4:c0:f1:dd:03:e7:be:9c:04:ce:80:65:76:39:03:c8: 2a:af:9f:b9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjnAR8PvWROZWDEKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIxNjE0MDA1MloXDTI1MDUxNzEzMDA1MlowLzEtMCsGA1UEAxMk OGRmMzRhODQtZDYxNS00MDQ1LWIzNWYtMTk3YTFkZmExZDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkmJ0h1Fg+8TXTZz5bGR5okcsJl7FGU054re Vhfgzu4W1TQbVMD9eSRQbhcYeVirbQ55ZNUsfyhb+pCFElTzubtsGDZyzKmD+KZ7 z0BDbqmh8SSGdTe7AB0tY5WsCI1ROvvULLqdzIX6C44EyZeYua1U7dWHzHAhbwTw qn5d8HyPH2pYc8//BNsLVugXv2oT6bZ+VDk5iwyIrm7nnNFWoExJBr6dKNk8L8pl PH2aaqXpip6GoArrF4uUxmFOhLaoxEx5bHXN5MGQKzbv3Osdw/pETGUTIe9SmO2J 9XV5R8MZrgOxAXttqEiy3unFriWSo3XCrzi+b68UqZrxD9zvgwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAxnFkBDrNUyW0uUdbHnnq1niJejMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNjgzZWRmYzgtYmIxNy0z MzgwLWJjMTQtMjQ3ZTQ5ODQ4YjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHDjOJpFN4XsgyOsReMDqeBgI5AP15+DFrW8fANYTnv5B1RWwtry 5cjXYiOwtspSBLVtjM4KgUYPxQ1poc4DNkUuku+BgnrTmW3SDpWTRSjXnJ3BxJcm M5cDmECl1Fuy5HH3feusfLzuBFThHdtyv5RhwMHtngvlxAWGca9H8uZ1eYQ+J8sC NTEGMvP5iiNqxopfJXw3Mu9JZAxrogpyLiqDn8cuLoTO+LwOT/uFUITH+Iuj10hs XLieYEubXHelD6rjGkDTLXcpJFQu/78elMDjzijF8Tq1MfPsVv5uU/Db0ZFdb4V8 cNxgn1odtMDx3QPnvpwEzoBldjkDyCqvn7k= -----END CERTIFICATE-----Generated at Thu Apr 17 15:34:29 2025 by rpki-client