$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6a12b035-754c-363c-8952-598d2a2692da.roa File: 6a12b035-754c-363c-8952-598d2a2692da.roa (raw, json) Hash identifier: IP6AeMzoH1jPNJLnUdcUymSNvfS/KJGbEkt35grI5oI= Subject key identifier: B5:83:BD:DB:2F:E4:0B:9A:54:1B:79:E0:A7:A9:40:B7:36:B4:A1:F2 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584925C24D021F93F8AD101AC180 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6a12b035-754c-363c-8952-598d2a2692da.roa Signing time: Tue 11 Mar 2025 01:30:14 +0000 ROA not before: Tue 11 Mar 2025 01:30:14 +0000 ROA not after: Mon 09 Jun 2025 01:30:14 +0000 asID: 18248 IP address blocks: 2001:470:422::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Mar 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:25:c2:4d:02:1f:93:f8:ad:10:1a:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 11 01:30:14 2025 GMT Not After : Jun 9 01:30:14 2025 GMT Subject: CN=34cf4d7b-da81-4927-b252-94562d296e05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e8:9c:65:62:52:74:68:0e:de:0d:da:27:e8: af:a1:34:bd:3a:dc:e4:47:3e:bf:1b:be:20:f6:02: cd:71:ae:9e:f0:31:80:87:af:3c:dc:6f:cf:97:f0: c5:87:2d:e4:8a:2f:55:82:ea:ec:5d:6c:d2:fb:a0: 73:33:73:9c:d8:bb:25:4f:01:3a:b4:61:0e:76:9d: c5:d0:d4:fa:70:86:05:39:80:f7:b9:a6:05:6c:02: 0e:7a:4d:61:0c:7b:f9:8e:a5:67:66:9f:22:fe:2b: 94:b6:d2:f3:c3:b9:6b:cb:66:ce:ca:4a:8a:63:9f: 4f:92:41:db:ae:59:f0:2b:40:ba:34:1b:2a:03:10: c3:35:eb:ed:ae:ef:c0:22:09:bc:a7:86:1f:65:0e: 2d:87:cb:3c:0a:51:90:69:44:cf:ff:6a:e2:b3:61: 7e:64:5f:fe:55:cb:e3:dd:38:d5:06:6b:32:60:1f: 27:23:b5:8f:f0:2d:26:0f:0c:bd:e0:bc:d6:e5:64: 12:56:1b:41:73:59:02:c7:84:51:a4:9f:78:1e:83: fb:e6:b1:a8:2e:e0:0b:96:0e:40:db:ec:fd:0f:03: 3e:60:c6:ad:f0:94:46:f0:06:83:68:87:c9:74:d0: 81:b3:2c:c7:cc:06:1b:e4:1a:52:2e:bc:df:57:d0: 9b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:83:BD:DB:2F:E4:0B:9A:54:1B:79:E0:A7:A9:40:B7:36:B4:A1:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6a12b035-754c-363c-8952-598d2a2692da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:422::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:b4:ed:e2:81:f2:94:37:7d:26:e4:2f:9c:b3:32:f6:bb:e1: 2c:b2:aa:2b:af:f9:45:45:8d:77:08:17:40:a9:d9:60:f5:9e: f4:40:7b:2a:8f:e5:27:e8:08:09:27:e5:f0:91:9a:04:b2:1c: a2:43:d2:fb:88:e0:db:53:56:8c:ca:4a:79:1e:1b:e3:09:82: ff:ac:7d:37:b0:18:ca:ad:e6:eb:c4:30:5c:5d:f3:4c:d4:38: 81:21:20:85:51:49:0b:fc:10:8d:ac:ea:48:c5:f0:83:8e:fd: 12:21:01:49:35:d0:08:af:57:c3:ac:da:f5:74:c7:09:24:4f: da:08:bd:25:19:1d:2e:cd:d6:7d:58:b0:96:4b:be:b6:14:db: 67:f4:5a:d6:0f:0d:54:0b:c0:92:87:20:75:12:c1:f8:2c:c1: 0b:66:13:cf:25:23:ae:20:ce:0f:eb:30:c3:6c:71:c1:8d:48: 44:96:37:36:4b:3e:63:f7:c9:93:63:66:1e:2c:ad:19:26:53: cf:c8:ee:84:f6:e9:2f:70:9e:41:4e:2a:16:a2:61:f4:9d:33: 17:e6:c8:c2:cd:1a:7c:31:7f:8f:44:9e:10:f3:a2:71:9f:e3: a7:e6:59:ff:31:7f:38:7b:0e:3e:b7:01:9a:91:36:b6:39:57: f1:b0:27:d6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEklwk0CH5P4rRAawYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMxMTAxMzAxNFoXDTI1MDYwOTAxMzAxNFowLzEtMCsGA1UEAxMk MzRjZjRkN2ItZGE4MS00OTI3LWIyNTItOTQ1NjJkMjk2ZTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOicZWJSdGgO3g3aJ+ivoTS9OtzkRz6/G74g 9gLNca6e8DGAh6883G/Pl/DFhy3kii9VgursXWzS+6BzM3Oc2LslTwE6tGEOdp3F 0NT6cIYFOYD3uaYFbAIOek1hDHv5jqVnZp8i/iuUttLzw7lry2bOykqKY59PkkHb rlnwK0C6NBsqAxDDNevtru/AIgm8p4YfZQ4th8s8ClGQaUTP/2ris2F+ZF/+Vcvj 3TjVBmsyYB8nI7WP8C0mDwy94LzW5WQSVhtBc1kCx4RRpJ94HoP75rGoLuALlg5A 2+z9DwM+YMat8JRG8AaDaIfJdNCBsyzHzAYb5BpSLrzfV9CbgQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLWDvdsv5AuaVBt54KepQLc2tKHyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNmExMmIwMzUtNzU0Yy0z NjNjLTg5NTItNTk4ZDJhMjY5MmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGi07eKB8pQ3fSbkL5yzMva74Syyqiuv+UVFjXcIF0Cp2WD1nvRA eyqP5SfoCAkn5fCRmgSyHKJD0vuI4NtTVozKSnkeG+MJgv+sfTewGMqt5uvEMFxd 80zUOIEhIIVRSQv8EI2s6kjF8IOO/RIhAUk10AivV8Os2vV0xwkkT9oIvSUZHS7N 1n1YsJZLvrYU22f0WtYPDVQLwJKHIHUSwfgswQtmE88lI64gzg/rMMNsccGNSESW NzZLPmP3yZNjZh4srRkmU8/I7oT26S9wnkFOKhaiYfSdMxfmyMLNGnwxf49EnhDz onGf46fmWf8xfzh7Dj63AZqRNrY5V/GwJ9Y= -----END CERTIFICATE-----Generated at Fri Mar 14 21:15:39 2025 by rpki-client