$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7f60345c-45d6-38da-b4a2-8cb73672ef1e.roa File: 7f60345c-45d6-38da-b4a2-8cb73672ef1e.roa (raw, json) Hash identifier: 8rcV7hcFm9x3Xv7ZB7uBy0cFewuXmdQ5UdmwUGm9GGE= Subject key identifier: A3:27:BF:92:D4:3E:FF:3A:88:C6:A8:3B:DA:5D:FC:88:CD:ED:9A:0C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926D561712A47D067543180 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7f60345c-45d6-38da-b4a2-8cb73672ef1e.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 17117 IP address blocks: 2001:470:c4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:d5:61:71:2a:47:d0:67:54:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=bda3c320-5d75-4180-970e-ce29217dad18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:da:9c:5a:89:66:02:9f:d9:20:93:20:4c:fe: 19:56:6b:bc:b1:13:67:d0:d0:21:0a:03:e8:73:86: 42:f7:0b:38:c0:0c:7c:a2:2f:e0:e4:90:57:66:4f: fc:a0:10:0b:83:9f:f5:f5:f9:d4:ef:74:a4:de:a6: 27:f8:b2:70:c2:6d:be:18:d9:0a:59:0e:59:e5:0e: c5:43:c1:56:4f:b9:59:bc:15:8d:f6:ee:3f:61:b7: ca:b2:21:aa:12:f7:6d:a4:cf:d6:b5:1c:c5:2d:33: 45:d3:a1:b4:4c:a8:32:ae:23:fd:1a:29:0b:77:b5: 03:2a:f3:b1:4b:4f:33:2d:73:1f:26:2c:35:0d:45: 8e:53:f1:e8:be:75:c1:da:5f:a2:7c:97:67:6e:bb: f1:b9:03:1e:3a:72:a6:d0:2d:6b:20:b8:c2:9d:d1: 5a:90:b8:00:63:c8:98:22:4a:b4:59:f2:f9:75:35: ff:4a:10:0d:24:0e:12:3b:63:8b:eb:54:79:e9:ec: 09:2a:af:1b:27:58:70:1b:60:1f:84:9a:f2:9e:31: ae:72:20:4e:6f:d4:1b:90:bb:41:bf:5f:89:06:8c: b1:8e:2f:30:43:4f:fa:d1:af:74:4d:1b:f7:7f:0e: 61:10:c6:da:9b:44:0f:4b:36:23:7a:4d:93:17:ef: 6e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:27:BF:92:D4:3E:FF:3A:88:C6:A8:3B:DA:5D:FC:88:CD:ED:9A:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7f60345c-45d6-38da-b4a2-8cb73672ef1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:c4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:40:db:72:4e:2f:33:e0:ee:30:6d:86:6c:e0:5d:8e:ec:19: ac:b8:3a:53:70:47:d2:33:19:72:5a:9f:73:aa:23:15:4f:32: 05:46:42:d0:4e:9b:82:af:c9:20:56:b4:d1:cf:be:76:a3:38: 3e:40:55:e6:64:b8:17:89:48:35:87:2b:d7:c4:f4:c5:8b:36: f1:f7:3b:69:a7:d9:35:99:22:9f:4d:98:ab:ac:4d:8d:a6:11: 49:01:29:1d:5b:de:37:8c:5b:68:85:2e:9f:39:36:6f:ed:25: 99:de:a9:44:2c:6c:39:89:6e:d2:22:72:61:d4:7e:0a:ef:3a: a0:9a:fc:75:32:f5:9f:dc:81:5c:8f:38:61:35:e7:11:bc:3d: 02:bc:c8:f7:54:9e:a4:6c:ed:8f:28:ca:db:da:07:7b:d8:b7: 9c:ac:c6:26:f4:cd:54:9a:d4:7b:ad:4d:24:4c:7e:be:24:84: 59:d0:5d:ac:2d:74:55:16:3e:eb:09:4e:1a:2b:8f:cf:82:08: 8b:1c:2f:c5:22:b5:87:5b:08:ae:b1:df:78:01:bf:8d:7c:2f: c6:d4:23:c5:2a:92:49:c5:bb:69:11:54:3d:6d:85:4f:58:92: 8b:90:5c:24:91:12:a4:46:2c:e8:65:d6:ea:13:21:e8:44:8e: e9:9a:f2:c8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JtVhcSpH0GdUMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk YmRhM2MzMjAtNWQ3NS00MTgwLTk3MGUtY2UyOTIxN2RhZDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktqcWolmAp/ZIJMgTP4ZVmu8sRNn0NAhCgPo c4ZC9ws4wAx8oi/g5JBXZk/8oBALg5/19fnU73Sk3qYn+LJwwm2+GNkKWQ5Z5Q7F Q8FWT7lZvBWN9u4/YbfKsiGqEvdtpM/WtRzFLTNF06G0TKgyriP9GikLd7UDKvOx S08zLXMfJiw1DUWOU/HovnXB2l+ifJdnbrvxuQMeOnKm0C1rILjCndFakLgAY8iY Ikq0WfL5dTX/ShANJA4SO2OL61R56ewJKq8bJ1hwG2AfhJrynjGuciBOb9QbkLtB v1+JBoyxji8wQ0/60a90TRv3fw5hEMbam0QPSzYjek2TF+9uHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKMnv5LUPv86iMaoO9pd/IjN7ZoMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvN2Y2MDM0NWMtNDVkNi0z OGRhLWI0YTItOGNiNzM2NzJlZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJtA23JOLzPg7jBthmzgXY7sGay4OlNwR9IzGXJan3OqIxVPMgVG QtBOm4KvySBWtNHPvnajOD5AVeZkuBeJSDWHK9fE9MWLNvH3O2mn2TWZIp9NmKus TY2mEUkBKR1b3jeMW2iFLp85Nm/tJZneqUQsbDmJbtIicmHUfgrvOqCa/HUy9Z/c gVyPOGE15xG8PQK8yPdUnqRs7Y8oytvaB3vYt5ysxib0zVSa1HutTSRMfr4khFnQ XawtdFUWPusJThorj8+CCIscL8UitYdbCK6x33gBv418L8bUI8UqkknFu2kRVD1t hU9YkouQXCSREqRGLOhl1uoTIehEjuma8sg= -----END CERTIFICATE-----Generated at Fri Apr 4 17:51:19 2025 by rpki-client