$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6d8deb70-57fa-3c23-9119-0ae2f6c9c5ff.roa File: 6d8deb70-57fa-3c23-9119-0ae2f6c9c5ff.roa (raw, json) Hash identifier: ShhgiVvkFdIkWFWl5U/q/H8+mRRG5lFX2QfsY0m1F4c= Subject key identifier: FD:08:1A:39:3F:2D:02:22:50:C5:CC:9E:07:08:D6:D9:D6:ED:92:24 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848CC8A26FB99B0537734266640 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6d8deb70-57fa-3c23-9119-0ae2f6c9c5ff.roa Signing time: Fri 07 Feb 2025 02:30:09 +0000 ROA not before: Fri 07 Feb 2025 02:30:09 +0000 ROA not after: Thu 08 May 2025 01:30:09 +0000 asID: 12097 IP address blocks: 2001:470:410::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:8a:26:fb:99:b0:53:77:34:26:66:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 7 02:30:09 2025 GMT Not After : May 8 01:30:09 2025 GMT Subject: CN=28db85cf-2caa-4e55-939d-973918c34978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a4:26:de:dc:88:c1:2b:f6:7e:20:85:4a:bc: cb:31:d2:53:25:a0:32:3f:09:42:53:cd:1f:3b:dd: 12:31:4c:06:a2:06:dc:c3:cc:01:1e:dc:c4:16:4f: 0b:45:b4:5b:8c:b4:f9:b8:7e:fe:91:83:65:ba:4c: 46:3c:de:7f:77:f7:eb:7a:02:72:38:2f:8c:f1:80: 90:b8:55:e7:dc:25:c2:b1:37:a9:75:df:c9:7c:ce: 9b:71:28:5b:ae:c8:7b:4f:14:9b:1b:0c:c7:79:66: 19:5c:53:63:c2:53:eb:b7:31:73:66:e7:d6:61:bb: c1:78:4a:35:05:3e:3d:33:24:d6:a7:ed:81:73:04: 6a:f8:83:56:b3:6b:b2:da:d1:b4:14:da:dd:83:cc: 3b:0f:4f:a1:f7:f3:c3:74:6e:42:b4:04:e0:6c:fa: 35:6b:41:4a:36:61:7c:34:c8:65:62:34:d7:84:ab: c6:32:46:58:b8:05:ad:37:af:8e:34:44:e4:85:73: 37:c1:84:0b:56:92:88:2d:dc:5b:0c:21:84:ca:4b: 0f:17:58:e9:3e:87:c6:fc:db:14:7b:49:29:e1:e2: 26:f0:54:6c:d9:a6:d3:f8:7b:65:86:23:c5:33:8f: 1b:5a:b1:15:d7:3a:1f:f1:9f:d8:96:e6:43:6c:3e: ee:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:08:1A:39:3F:2D:02:22:50:C5:CC:9E:07:08:D6:D9:D6:ED:92:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6d8deb70-57fa-3c23-9119-0ae2f6c9c5ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:410::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:68:0d:0e:70:38:e0:67:55:36:1a:10:a5:1a:94:e8:17:2d: b2:11:2c:00:89:74:56:ac:25:e5:11:a6:ad:e2:c7:7f:3c:45: eb:1c:ec:23:e8:0b:4e:b1:13:ea:1f:15:bd:93:45:ff:ec:45: 0a:1d:3e:8c:80:7d:35:f8:51:62:10:a2:28:a6:d1:5e:0f:81: cb:ec:14:b0:bd:2c:a7:14:7c:15:e1:bd:1d:40:d8:f9:6c:49: 3b:7e:79:c2:23:d1:13:ee:fd:d7:54:83:2e:1a:ce:c3:df:c3: 3f:07:d0:c7:15:75:77:c3:98:03:7b:20:d8:e6:d0:90:e5:1d: f4:e2:62:3a:16:2f:9c:f9:29:6d:f7:25:bf:a6:a6:a9:88:f8: df:bd:5b:76:1d:6a:1f:d8:5a:54:2a:e4:bd:e4:b7:dd:7a:d0: cb:cf:a1:ed:d3:22:ab:ca:6a:11:18:79:9c:40:e9:83:07:f2: f8:30:be:a6:fe:84:cb:e2:88:20:ef:c8:bb:2a:44:29:08:19: fb:bb:31:d0:13:f5:c9:e3:28:e5:28:a2:1d:89:fe:e0:e6:85: 53:13:8f:8c:9e:d4:43:e2:12:03:52:30:3f:6c:b6:91:e0:27: 6a:0b:3b:7b:13:bd:5f:26:26:55:42:36:dd:4a:31:b5:55:31: 4c:9d:dc:a2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjMiib7mbBTdzQmZkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIwNzAyMzAwOVoXDTI1MDUwODAxMzAwOVowLzEtMCsGA1UEAxMk MjhkYjg1Y2YtMmNhYS00ZTU1LTkzOWQtOTczOTE4YzM0OTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaQm3tyIwSv2fiCFSrzLMdJTJaAyPwlCU80f O90SMUwGogbcw8wBHtzEFk8LRbRbjLT5uH7+kYNlukxGPN5/d/fregJyOC+M8YCQ uFXn3CXCsTepdd/JfM6bcShbrsh7TxSbGwzHeWYZXFNjwlPrtzFzZufWYbvBeEo1 BT49MyTWp+2BcwRq+INWs2uy2tG0FNrdg8w7D0+h9/PDdG5CtATgbPo1a0FKNmF8 NMhlYjTXhKvGMkZYuAWtN6+ONETkhXM3wYQLVpKILdxbDCGEyksPF1jpPofG/NsU e0kp4eIm8FRs2abT+HtlhiPFM48bWrEV1zof8Z/YluZDbD7u4QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP0IGjk/LQIiUMXMngcI1tnW7ZIkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNmQ4ZGViNzAtNTdmYS0z YzIzLTkxMTktMGFlMmY2YzljNWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKpoDQ5wOOBnVTYaEKUalOgXLbIRLACJdFasJeURpq3ix388Resc 7CPoC06xE+ofFb2TRf/sRQodPoyAfTX4UWIQoiim0V4PgcvsFLC9LKcUfBXhvR1A 2PlsSTt+ecIj0RPu/ddUgy4azsPfwz8H0McVdXfDmAN7INjm0JDlHfTiYjoWL5z5 KW33Jb+mpqmI+N+9W3Ydah/YWlQq5L3kt9160MvPoe3TIqvKahEYeZxA6YMH8vgw vqb+hMviiCDvyLsqRCkIGfu7MdAT9cnjKOUooh2J/uDmhVMTj4ye1EPiEgNSMD9s tpHgJ2oLO3sTvV8mJlVCNt1KMbVVMUyd3KI= -----END CERTIFICATE-----Generated at Fri Apr 4 17:45:10 2025 by rpki-client