$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/744820c9-8e48-31db-9e61-f4e4e5063b2f.roa File: 744820c9-8e48-31db-9e61-f4e4e5063b2f.roa (raw, json) Hash identifier: 5mLQl3qZn17r05WJWVswxQD/Wr++oCqJ8V2rXdKN2nU= Subject key identifier: 61:92:D5:A9:6C:6D:DC:71:B2:11:72:62:12:53:A8:B7:11:F5:D4:D8 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926D21C68BA35F25809CD50 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/744820c9-8e48-31db-9e61-f4e4e5063b2f.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 399224 IP address blocks: 2001:470:315::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:d2:1c:68:ba:35:f2:58:09:cd:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=4f56d019-bb53-4ad1-a91a-15727008e6ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5c:46:d9:55:73:44:ad:0a:6d:6c:f7:82:16: 4c:6e:70:49:04:4d:5d:44:30:ae:20:5a:8f:a2:eb: ca:6f:84:13:81:5a:d1:07:03:f9:5e:51:57:66:08: 3c:d6:a4:f3:5b:d9:40:0f:69:1b:03:b6:d2:4d:fa: 04:37:f3:e3:ad:b9:38:16:61:3e:92:ff:b4:3f:95: c2:5f:96:0f:19:51:e3:9a:d0:67:87:e6:36:de:1d: db:29:3b:e2:00:56:da:59:47:9e:8f:1b:57:02:50: ab:31:bc:fe:a4:6b:d3:7e:73:1e:a9:64:a7:61:46: 53:ca:dd:27:f8:c9:3b:64:99:11:52:8d:f5:04:4a: 1c:7b:e4:54:af:a2:09:c4:5b:55:cd:cd:6d:59:cc: 47:8c:85:13:3f:da:62:ca:74:3a:14:95:f8:25:f0: 6b:8d:3f:a2:2b:7c:3a:3e:73:84:f9:24:a0:cf:bb: af:43:36:cc:ac:23:69:44:13:dc:df:b7:1b:b0:39: 5e:73:81:16:e2:ed:92:59:f2:a7:c0:c1:26:37:ba: 6d:1c:74:a0:42:9c:93:8a:bf:e2:65:14:b7:91:39: 10:11:7d:46:19:83:83:28:ec:3a:56:7a:18:13:80: 21:68:fe:12:33:58:7d:2b:6b:2a:24:f3:8e:f5:58: 62:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:92:D5:A9:6C:6D:DC:71:B2:11:72:62:12:53:A8:B7:11:F5:D4:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/744820c9-8e48-31db-9e61-f4e4e5063b2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:315::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:b5:8d:41:1e:f7:6b:34:dd:63:e0:97:47:95:ef:ad:8c:06: d9:84:2a:26:d5:7d:d2:55:22:94:dc:0d:34:8b:16:b2:ba:c4: 5f:07:8f:c7:8d:ce:e8:9b:cb:c6:82:60:67:40:1b:2e:8e:1a: 2f:e1:e3:55:98:ec:4f:5d:45:e9:78:ce:98:17:a5:c6:7e:73: 1b:27:e2:67:f1:42:e1:80:e4:49:97:ed:8c:79:e8:cc:97:e7: 19:64:a6:ef:5c:1f:f1:68:8f:8b:cb:bc:9c:f6:17:2c:44:e8: bb:50:f1:4c:fb:e7:9d:03:35:31:18:fe:28:9a:cb:55:ae:8b: 5a:56:ae:ce:57:9c:24:f8:f2:68:95:6f:1b:9b:cc:e9:8c:bc: 60:62:7d:c5:2e:b0:f6:fb:0e:67:48:eb:db:88:80:7b:6f:6f: ef:02:fd:be:96:5c:94:df:8e:db:f1:11:30:da:c6:69:58:18: d3:3d:cd:88:8f:f4:dc:20:78:f3:c9:30:b1:83:0b:28:5d:1c: 59:95:c2:ff:a1:2c:04:ae:ee:8f:d5:ab:7d:c2:9e:b5:60:0c: da:f6:e6:85:dd:21:30:4c:b7:6f:07:28:8c:3e:d6:6d:fe:6e: 81:09:e9:3d:76:ca:a3:d3:82:ab:81:d6:67:7c:8e:3f:97:61: 22:e1:04:31 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JtIcaLo18lgJzVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk NGY1NmQwMTktYmI1My00YWQxLWE5MWEtMTU3MjcwMDhlNmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFxG2VVzRK0KbWz3ghZMbnBJBE1dRDCuIFqP ouvKb4QTgVrRBwP5XlFXZgg81qTzW9lAD2kbA7bSTfoEN/Pjrbk4FmE+kv+0P5XC X5YPGVHjmtBnh+Y23h3bKTviAFbaWUeejxtXAlCrMbz+pGvTfnMeqWSnYUZTyt0n +Mk7ZJkRUo31BEoce+RUr6IJxFtVzc1tWcxHjIUTP9piynQ6FJX4JfBrjT+iK3w6 PnOE+SSgz7uvQzbMrCNpRBPc37cbsDlec4EW4u2SWfKnwMEmN7ptHHSgQpyTir/i ZRS3kTkQEX1GGYODKOw6VnoYE4AhaP4SM1h9K2sqJPOO9VhijwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGGS1alsbdxxshFyYhJTqLcR9dTYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNzQ0ODIwYzktOGU0OC0z MWRiLTllNjEtZjRlNGU1MDYzYjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAMV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH21jUEe92s03WPgl0eV762MBtmEKibVfdJVIpTcDTSLFrK6xF8H j8eNzuiby8aCYGdAGy6OGi/h41WY7E9dRel4zpgXpcZ+cxsn4mfxQuGA5EmX7Yx5 6MyX5xlkpu9cH/Foj4vLvJz2FyxE6LtQ8Uz7550DNTEY/iiay1Wui1pWrs5XnCT4 8miVbxubzOmMvGBifcUusPb7DmdI69uIgHtvb+8C/b6WXJTfjtvxETDaxmlYGNM9 zYiP9NwgePPJMLGDCyhdHFmVwv+hLASu7o/Vq33CnrVgDNr25oXdITBMt28HKIw+ 1m3+boEJ6T12yqPTgquB1md8jj+XYSLhBDE= -----END CERTIFICATE-----Generated at Fri Apr 4 17:48:48 2025 by rpki-client