$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6b94daf3-a315-3dbc-9fe0-12d85d5af7a6.roa File: 6b94daf3-a315-3dbc-9fe0-12d85d5af7a6.roa (raw, json) Hash identifier: /ZtNssPhSdj0zjHu2sm0Lj0OqUe2rFKLuThaxFNCpwQ= Subject key identifier: 00:1C:7C:D7:BC:FB:D2:46:9B:8F:3E:28:F2:B2:CA:C2:EF:C3:C0:C1 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858486695C950697F76A3E4B3ADC0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6b94daf3-a315-3dbc-9fe0-12d85d5af7a6.roa Signing time: Wed 01 Jan 2025 14:00:53 +0000 ROA not before: Wed 01 Jan 2025 14:00:53 +0000 ROA not after: Tue 01 Apr 2025 13:00:53 +0000 asID: 200428 IP address blocks: 2001:470:344::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 14 Feb 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:66:95:c9:50:69:7f:76:a3:e4:b3:ad:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jan 1 14:00:53 2025 GMT Not After : Apr 1 13:00:53 2025 GMT Subject: CN=5943c981-c73a-4783-af53-b521063ecdd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cd:7f:09:a0:72:ec:c0:3e:19:e6:ae:c3:8a: e9:f1:f1:4f:db:c3:0d:2e:da:f8:b9:47:b6:64:df: 76:ae:5f:d6:29:2d:13:bb:4e:66:23:ae:9f:a0:96: 2e:fb:9a:ca:a9:a9:3a:db:7b:93:f0:76:b6:3c:92: 91:d6:62:27:ac:ad:b6:1a:d8:21:b6:9e:8d:de:12: 45:df:a2:5d:c3:e3:f2:83:ba:99:b8:f8:8e:85:15: 6e:82:59:eb:d7:1c:74:7e:d4:65:ba:48:c2:ae:d1: 53:39:09:5d:82:28:71:0f:e5:20:e3:fc:dc:72:f4: c0:7f:30:47:cd:41:7d:58:53:3a:ce:3a:fe:e9:f9: 7c:84:91:9d:ae:69:ac:e4:cb:b5:b8:e1:15:25:53: 76:8b:7c:7c:bd:62:5e:95:a7:67:2b:eb:b5:46:51: ee:c3:2d:3e:cd:29:13:10:a2:0f:8a:e2:31:d7:99: 82:da:00:9c:78:84:92:e9:8c:76:3b:77:e9:53:54: 75:f1:5a:c0:08:c3:8a:c2:24:f7:6b:14:bd:8f:a5: c6:36:53:a3:02:d7:c4:82:47:0e:b1:96:44:cc:0e: 36:5f:ee:31:5d:1a:da:f9:34:14:10:b0:8a:ef:77: 78:7b:10:93:b4:16:b2:0e:08:e0:7c:f3:8c:54:4f: 46:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:1C:7C:D7:BC:FB:D2:46:9B:8F:3E:28:F2:B2:CA:C2:EF:C3:C0:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6b94daf3-a315-3dbc-9fe0-12d85d5af7a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:344::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:4a:2f:3c:62:79:6b:fe:7b:61:ec:0f:e9:39:37:c9:02:26: 8c:2b:01:8e:dd:e9:3c:85:5c:d7:a4:3a:5e:2f:97:fc:9c:5c: b7:c7:d3:9c:ca:09:58:e9:4b:10:eb:cd:11:cc:cc:ba:5c:64: 97:eb:5d:65:2e:66:7f:a7:ff:09:25:b4:55:ac:fb:f1:95:90: bb:9a:75:2a:51:6e:44:9e:71:42:bc:07:0a:28:1c:3c:b4:79: 9e:1b:4f:aa:8c:7e:42:a2:6c:fd:c2:f2:e5:45:a2:f6:60:8e: ce:0b:7d:bd:8b:a1:9f:34:b4:6f:c6:93:8d:7a:9c:3d:a2:0d: 16:86:87:27:df:8e:bf:62:7c:2a:22:00:e9:8b:24:f3:16:e1: 7d:75:5c:33:5f:d3:76:11:f7:72:94:4e:e4:e4:e7:ee:5b:79: 74:a4:a6:70:45:eb:c7:47:58:2e:10:92:b1:f9:49:70:bc:75: a5:54:31:e7:12:d4:15:f1:6b:eb:87:e4:e9:f0:cb:09:68:df: 61:dc:a4:59:ba:38:68:61:8a:b5:dc:57:af:5e:c2:61:14:2b: d2:91:4d:4f:f6:c2:29:22:4e:d6:e0:c3:0e:48:4e:7d:f5:f4: 3b:33:0d:49:9d:00:4f:d1:41:99:75:69:98:27:f4:e9:5f:9f: bf:1f:70:73 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhmlclQaX92o+SzrcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk NTk0M2M5ODEtYzczYS00NzgzLWFmNTMtYjUyMTA2M2VjZGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyM1/CaBy7MA+Geauw4rp8fFP28MNLtr4uUe2 ZN92rl/WKS0Tu05mI66foJYu+5rKqak623uT8Ha2PJKR1mInrK22Gtghtp6N3hJF 36Jdw+Pyg7qZuPiOhRVuglnr1xx0ftRlukjCrtFTOQldgihxD+Ug4/zccvTAfzBH zUF9WFM6zjr+6fl8hJGdrmms5Mu1uOEVJVN2i3x8vWJeladnK+u1RlHuwy0+zSkT EKIPiuIx15mC2gCceISS6Yx2O3fpU1R18VrACMOKwiT3axS9j6XGNlOjAtfEgkcO sZZEzA42X+4xXRra+TQUELCK73d4exCTtBayDgjgfPOMVE9GfQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAAcfNe8+9JGm48+KPKyysLvw8DBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNmI5NGRhZjMtYTMxNS0z ZGJjLTlmZTAtMTJkODVkNWFmN2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcANE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIxKLzxieWv+e2HsD+k5N8kCJowrAY7d6TyFXNekOl4vl/ycXLfH 05zKCVjpSxDrzRHMzLpcZJfrXWUuZn+n/wkltFWs+/GVkLuadSpRbkSecUK8Bwoo HDy0eZ4bT6qMfkKibP3C8uVFovZgjs4Lfb2LoZ80tG/Gk416nD2iDRaGhyffjr9i fCoiAOmLJPMW4X11XDNf03YR93KUTuTk5+5beXSkpnBF68dHWC4QkrH5SXC8daVU MecS1BXxa+uH5Onwywlo32HcpFm6OGhhirXcV69ewmEUK9KRTU/2wikiTtbgww5I Tn319DszDUmdAE/RQZl1aZgn9Olfn78fcHM= -----END CERTIFICATE-----Generated at Wed Feb 12 17:44:06 2025 by rpki-client