$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/686a3bc1-b910-3fad-b45e-507aac425894.roa File: 686a3bc1-b910-3fad-b45e-507aac425894.roa (raw, json) Hash identifier: X18SnhInDJMSObxAfoqBsZPTQKmGmxd7InyG/Z0w77w= Subject key identifier: 0C:E5:4D:EE:C9:7A:1F:F9:7D:D1:82:0B:58:56:E1:02:E2:0D:7B:42 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858487E5F0558A9D4C09799001A80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/686a3bc1-b910-3fad-b45e-507aac425894.roa Signing time: Fri 10 Jan 2025 02:30:12 +0000 ROA not before: Fri 10 Jan 2025 02:30:12 +0000 ROA not after: Thu 10 Apr 2025 01:30:12 +0000 asID: 397376 IP address blocks: 2001:470:254::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7e:5f:05:58:a9:d4:c0:97:99:00:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jan 10 02:30:12 2025 GMT Not After : Apr 10 01:30:12 2025 GMT Subject: CN=b0b1d19d-46a4-49f5-9b68-cb3093c5a05b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:81:62:97:f4:8c:9d:62:44:46:82:95:8c:2f: d5:35:aa:45:0a:ff:2d:3e:59:0e:a6:f4:ba:cd:e7: 88:da:b9:1c:80:f8:92:5f:67:8d:58:32:4b:e1:ca: 32:2d:43:83:a2:af:65:79:0b:b3:02:36:45:8d:7f: e3:c6:01:69:10:14:d9:ab:84:f9:77:aa:66:db:6d: 7c:d7:70:22:cd:bc:e9:96:e3:7b:8e:98:4a:0b:cb: e4:71:b8:27:2d:45:a7:a1:34:77:6a:1e:7a:32:84: 5f:30:02:c4:de:b6:67:e1:76:2d:a1:47:24:a8:9e: 06:5b:5d:bb:8d:f2:fa:c0:b0:30:b4:a0:51:40:cb: f6:13:05:73:89:81:d8:cb:d1:16:e6:ef:8d:ea:d9: 95:74:1d:f3:0f:f2:8b:6b:10:c7:5d:e4:51:c8:b1: 8d:18:c9:f1:9c:e7:49:49:2b:5c:56:77:ab:ae:be: 86:6b:cd:5b:7c:1d:05:40:4f:52:36:51:e9:25:70: 05:1e:65:47:6c:9f:9a:94:1e:e1:38:9d:46:f2:0a: 49:76:ab:fe:03:83:a3:88:1f:9e:d0:cb:01:70:9f: b5:e4:bd:f9:a2:89:1e:34:69:7d:7f:4d:0f:8a:b2: a8:3e:77:1f:a4:88:f0:32:3b:31:54:8a:5b:b3:e3: bf:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E5:4D:EE:C9:7A:1F:F9:7D:D1:82:0B:58:56:E1:02:E2:0D:7B:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/686a3bc1-b910-3fad-b45e-507aac425894.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:254::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:e7:a8:1b:72:ec:2c:98:4e:1a:83:49:55:18:0d:bc:7c:6d: 5b:ac:4d:ba:ea:17:31:2e:aa:ca:39:8b:7f:e5:12:88:63:e2: f1:1b:ae:24:89:14:5e:81:89:06:05:d5:45:5b:c2:61:2f:ad: a3:18:07:de:37:ec:16:75:d2:1f:c0:40:05:32:a8:d4:1d:ae: 86:69:78:fe:6d:96:8d:78:d7:1c:bd:80:18:cb:dc:c5:e4:6a: 3a:47:60:c4:91:46:10:f0:6f:4b:08:57:ea:77:6d:85:f1:d0: 3c:a6:05:5b:b9:cc:fd:e5:de:77:24:f9:c4:81:30:61:eb:9a: 29:68:88:a9:e5:dc:70:d4:6d:5b:1e:b7:7d:3e:68:c5:1b:b1: 08:6d:cc:3d:5e:51:70:46:f1:4d:25:a4:b0:b9:a3:62:39:3b: 9f:13:4e:7f:60:4d:91:55:53:84:31:6d:74:86:20:eb:a2:e7: c6:50:ff:7c:04:16:3c:40:61:5c:d0:0a:b0:9f:79:0d:1a:92: 40:11:0c:49:a7:04:16:84:cb:15:38:31:ce:c8:a0:79:bd:fc: d3:84:83:cb:07:7d:5f:9d:4e:4d:76:f2:00:1d:72:4c:f7:90: 28:be:e7:d2:51:34:20:e4:b9:55:8d:40:46:ea:0b:95:9c:e5: 5a:3c:bd:e8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEh+XwVYqdTAl5kAGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDExMDAyMzAxMloXDTI1MDQxMDAxMzAxMlowLzEtMCsGA1UEAxMk YjBiMWQxOWQtNDZhNC00OWY1LTliNjgtY2IzMDkzYzVhMDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4Fil/SMnWJERoKVjC/VNapFCv8tPlkOpvS6 zeeI2rkcgPiSX2eNWDJL4coyLUODoq9leQuzAjZFjX/jxgFpEBTZq4T5d6pm2218 13AizbzpluN7jphKC8vkcbgnLUWnoTR3ah56MoRfMALE3rZn4XYtoUckqJ4GW127 jfL6wLAwtKBRQMv2EwVziYHYy9EW5u+N6tmVdB3zD/KLaxDHXeRRyLGNGMnxnOdJ SStcVnerrr6Ga81bfB0FQE9SNlHpJXAFHmVHbJ+alB7hOJ1G8gpJdqv+A4OjiB+e 0MsBcJ+15L35ookeNGl9f00PirKoPncfpIjwMjsxVIpbs+O/+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAzlTe7Jeh/5fdGCC1hW4QLiDXtCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNjg2YTNiYzEtYjkxMC0z ZmFkLWI0NWUtNTA3YWFjNDI1ODk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK7nqBty7CyYThqDSVUYDbx8bVusTbrqFzEuqso5i3/lEohj4vEb riSJFF6BiQYF1UVbwmEvraMYB9437BZ10h/AQAUyqNQdroZpeP5tlo141xy9gBjL 3MXkajpHYMSRRhDwb0sIV+p3bYXx0DymBVu5zP3l3nck+cSBMGHrmiloiKnl3HDU bVset30+aMUbsQhtzD1eUXBG8U0lpLC5o2I5O58TTn9gTZFVU4QxbXSGIOui58ZQ /3wEFjxAYVzQCrCfeQ0akkARDEmnBBaEyxU4Mc7IoHm9/NOEg8sHfV+dTk128gAd ckz3kCi+59JRNCDkuVWNQEbqC5Wc5Vo8veg= -----END CERTIFICATE-----Generated at Wed Feb 5 04:49:52 2025 by rpki-client