$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6b0b8956-b6d8-3839-b972-20e76b928708.roa File: 6b0b8956-b6d8-3839-b972-20e76b928708.roa (raw, json) Hash identifier: knbu5ZVRHWUvnPoPsmr6/eRPeWLwyrEHcTgBe0QaXWM= Subject key identifier: AF:26:14:C3:82:94:3B:33:2A:B0:D9:77:ED:87:A1:A8:52:DB:2E:4C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926C33632BCF11A352C6FC0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6b0b8956-b6d8-3839-b972-20e76b928708.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 32872 IP address blocks: 2001:470:a6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:c3:36:32:bc:f1:1a:35:2c:6f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=a47614a5-4a92-482c-bde1-ee9e2852d230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a5:ef:f4:fb:2c:85:04:41:f2:b3:43:b0:8c: 26:43:d4:3a:e9:61:58:3b:7d:29:33:cf:f4:e8:3f: d5:46:dc:cf:78:48:ab:b6:3b:9b:76:6d:ec:3f:6f: 87:65:a0:ef:db:73:40:15:9f:a4:ed:43:ad:51:8f: 5b:0c:b9:b3:cd:21:4c:6c:f6:d8:fe:d0:d2:b8:dc: 75:a9:f7:82:51:2e:2c:54:5d:47:6f:98:26:0c:9f: 22:19:d8:2e:de:d8:e7:cb:14:95:14:23:36:17:13: e3:50:21:e3:61:22:d3:43:8e:60:9d:d0:6b:79:8f: f1:27:15:2d:62:9b:94:1e:12:78:02:4b:9c:5c:5d: a5:41:b8:f3:59:e9:87:62:48:a6:2e:e5:8b:80:ef: e5:b6:d4:88:83:f9:9a:ca:90:c8:98:6b:ec:8c:19: 55:67:36:71:27:93:77:ce:7e:46:cf:f7:06:2e:d6: 3e:be:dc:08:24:2b:52:73:57:1d:ec:9d:f0:ff:8d: e3:4d:d1:3f:18:38:00:e7:f8:93:44:16:e5:d6:e6: 1d:85:65:94:a1:17:b0:fc:6d:62:1d:d8:37:1f:63: 13:cc:e6:f5:47:9e:7e:aa:27:b8:43:89:b2:c8:f9: 19:12:9a:4f:39:05:97:1d:e2:c2:c1:f3:b7:d7:9d: a7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:26:14:C3:82:94:3B:33:2A:B0:D9:77:ED:87:A1:A8:52:DB:2E:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6b0b8956-b6d8-3839-b972-20e76b928708.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:a6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:fe:46:4b:25:5f:b1:81:3b:d2:d7:4f:a9:12:19:ee:50:fd: 82:86:3c:0d:47:e3:08:bb:aa:9b:ad:8d:7e:9d:c0:68:4c:79: 7c:e0:27:27:7a:84:01:4d:67:b2:a1:44:38:cd:80:e5:d4:3a: 02:51:94:17:1e:bd:34:88:4a:57:f7:bf:4e:31:77:f5:94:36: ac:64:0f:d8:77:5f:0c:00:54:ab:94:ac:e6:0c:eb:75:68:6d: bc:ce:68:60:4e:cd:dd:d2:94:ed:61:fd:60:6d:52:a3:e3:34: 04:b6:bd:82:8f:b5:d6:38:64:6e:12:38:ff:61:03:a6:ab:ea: a6:6e:54:3b:76:f7:89:68:3e:d3:48:53:e7:f2:00:e0:ca:d4: 5d:cd:17:2f:26:77:23:d9:82:12:4d:f7:09:b0:9c:3f:08:ce: 68:62:68:e1:98:c6:12:34:bb:1d:85:dd:0a:d8:6f:9c:0f:58: 08:b8:83:6a:c3:ee:40:90:22:fe:26:57:de:0c:43:22:32:6a: 7b:2a:30:9e:60:a1:39:0f:22:09:8e:fe:f1:4d:61:8b:4a:5c: d7:af:2d:af:c8:8c:63:64:7b:59:19:64:b1:8a:4d:c9:78:b2: ac:ce:39:c6:84:0e:b9:95:41:95:f1:63:77:13:d9:d7:52:56: 4c:42:22:fc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JsM2MrzxGjUsb8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk YTQ3NjE0YTUtNGE5Mi00ODJjLWJkZTEtZWU5ZTI4NTJkMjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKXv9PsshQRB8rNDsIwmQ9Q66WFYO30pM8/0 6D/VRtzPeEirtjubdm3sP2+HZaDv23NAFZ+k7UOtUY9bDLmzzSFMbPbY/tDSuNx1 qfeCUS4sVF1Hb5gmDJ8iGdgu3tjnyxSVFCM2FxPjUCHjYSLTQ45gndBreY/xJxUt YpuUHhJ4AkucXF2lQbjzWemHYkimLuWLgO/lttSIg/maypDImGvsjBlVZzZxJ5N3 zn5Gz/cGLtY+vtwIJCtSc1cd7J3w/43jTdE/GDgA5/iTRBbl1uYdhWWUoRew/G1i Hdg3H2MTzOb1R55+qie4Q4myyPkZEppPOQWXHeLCwfO3152nywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK8mFMOClDszKrDZd+2HoahS2y5MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNmIwYjg5NTYtYjZkOC0z ODM5LWI5NzItMjBlNzZiOTI4NzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACD+RkslX7GBO9LXT6kSGe5Q/YKGPA1H4wi7qputjX6dwGhMeXzg Jyd6hAFNZ7KhRDjNgOXUOgJRlBcevTSISlf3v04xd/WUNqxkD9h3XwwAVKuUrOYM 63VobbzOaGBOzd3SlO1h/WBtUqPjNAS2vYKPtdY4ZG4SOP9hA6ar6qZuVDt294lo PtNIU+fyAODK1F3NFy8mdyPZghJN9wmwnD8IzmhiaOGYxhI0ux2F3QrYb5wPWAi4 g2rD7kCQIv4mV94MQyIyansqMJ5goTkPIgmO/vFNYYtKXNevLa/IjGNke1kZZLGK Tcl4sqzOOcaEDrmVQZXxY3cT2ddSVkxCIvw= -----END CERTIFICATE-----Generated at Fri Apr 4 17:54:07 2025 by rpki-client