$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/806b15f7-b6cb-3f35-ba57-9ebb86a2f49a.roa File: 806b15f7-b6cb-3f35-ba57-9ebb86a2f49a.roa (raw, json) Hash identifier: pMenTtyHUllYEjXi9DIGVSNcLJwufy6yIYlW8o+IAmg= Subject key identifier: 28:22:11:79:B0:F0:EB:2B:82:2C:75:EA:FC:6D:CC:ED:AB:E6:AA:47 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584921842057065EA8A650E660EC Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/806b15f7-b6cb-3f35-ba57-9ebb86a2f49a.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 998 IP address blocks: 2001:470:335::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:20:57:06:5e:a8:a6:50:e6:60:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=a722da6e-6a92-4b69-93a4-55744a8c9b38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:dd:05:f1:2e:93:ec:e1:0c:5a:94:f2:79:d0: 9d:bd:ae:bc:6d:1a:0a:b1:14:27:dd:ec:e5:f4:5f: a3:50:10:19:ec:a1:57:7d:65:f0:2d:4c:bb:04:cb: df:80:d5:db:8f:e4:a4:83:d5:77:dc:0c:f5:d5:9a: f0:c7:b2:d7:6f:b5:0a:93:dc:a6:9a:d0:f9:1c:98: f3:51:f7:8f:a3:01:3d:b5:a7:88:c7:f8:fc:d6:9e: ec:a0:fa:b4:ad:24:b6:b0:f0:67:b6:b7:4c:a2:c5: 30:d6:9d:27:97:8c:85:99:f9:45:fc:06:8c:74:2d: 28:9c:0b:75:58:bc:00:0e:b5:8e:36:dc:84:b3:5a: 75:05:97:e5:15:69:3d:2a:d7:73:88:63:d1:a6:d0: d2:69:e4:10:96:0e:d4:7c:4e:ea:4f:af:b7:97:f2: ec:7f:6c:7f:68:a4:43:ac:0d:de:5e:a0:b4:7d:1a: 65:54:45:7b:b4:8f:19:60:a9:8b:54:4d:aa:3f:6c: 52:4e:b9:50:a3:11:6a:47:9d:47:f1:24:8f:ee:be: e0:2b:3a:29:d6:66:8a:c4:a6:9a:7b:79:7f:b2:26: 94:58:6d:6b:4c:43:7f:d1:38:2e:d4:b6:cf:db:ff: 0a:fa:46:21:2e:6f:2d:9c:a5:3e:b0:90:08:3f:07: cd:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:22:11:79:B0:F0:EB:2B:82:2C:75:EA:FC:6D:CC:ED:AB:E6:AA:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/806b15f7-b6cb-3f35-ba57-9ebb86a2f49a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:335::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:1c:c3:8d:cb:ee:42:df:eb:86:72:74:47:cd:18:30:73:ea: 73:7a:a6:52:7d:53:fa:a0:b8:0a:ed:b1:31:ab:d5:61:e6:05: 3e:1d:3e:c1:76:8b:2a:2d:6b:28:ad:1a:d2:8a:d5:85:65:0e: 43:22:0b:cb:f9:d2:5c:c0:e9:b3:41:2e:8c:27:76:0d:38:37: 0a:b4:89:54:ec:36:07:1d:a8:59:76:94:f7:3a:bd:38:b4:b6: 75:5f:72:5c:bc:b8:10:b6:5e:c0:ce:07:a0:9d:7b:57:09:84: 79:8b:72:d0:e3:9f:a7:d1:7a:02:3c:1c:e8:20:07:ac:fd:26: b3:17:a6:3d:f8:f4:07:f2:fe:45:56:9d:7e:8a:f4:e5:9c:16: 0c:fb:8e:98:ca:74:67:b4:2e:da:87:59:8e:c5:8a:c6:60:a9: c7:5b:d5:80:3b:7d:76:0d:bb:8e:80:6f:b1:e3:6d:c3:70:a0: 9c:af:4b:e6:c5:02:f6:d2:75:9b:d2:7b:70:7d:c1:49:5f:48: 30:f5:1a:91:b9:e4:11:bc:c2:da:51:f0:ba:52:4e:53:40:1c: e8:99:bf:ee:2b:d9:ae:2c:94:2e:67:c4:46:8f:63:c3:c3:36: 24:65:fe:1a:04:eb:41:f3:40:f2:53:6f:a7:96:93:31:7d:86: fe:fb:c6:70 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkhhCBXBl6oplDmYOwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk YTcyMmRhNmUtNmE5Mi00YjY5LTkzYTQtNTU3NDRhOGM5YjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhd0F8S6T7OEMWpTyedCdva68bRoKsRQn3ezl 9F+jUBAZ7KFXfWXwLUy7BMvfgNXbj+Skg9V33Az11Zrwx7LXb7UKk9ymmtD5HJjz UfePowE9taeIx/j81p7soPq0rSS2sPBntrdMosUw1p0nl4yFmflF/AaMdC0onAt1 WLwADrWONtyEs1p1BZflFWk9KtdziGPRptDSaeQQlg7UfE7qT6+3l/Lsf2x/aKRD rA3eXqC0fRplVEV7tI8ZYKmLVE2qP2xSTrlQoxFqR51H8SSP7r7gKzop1maKxKaa e3l/siaUWG1rTEN/0Tgu1LbP2/8K+kYhLm8tnKU+sJAIPwfNaQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCgiEXmw8Osrgix16vxtzO2r5qpHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODA2YjE1ZjctYjZjYi0z ZjM1LWJhNTctOWViYjg2YTJmNDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAM1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACMcw43L7kLf64ZydEfNGDBz6nN6plJ9U/qguArtsTGr1WHmBT4d PsF2iyotayitGtKK1YVlDkMiC8v50lzA6bNBLowndg04Nwq0iVTsNgcdqFl2lPc6 vTi0tnVfcly8uBC2XsDOB6Cde1cJhHmLctDjn6fRegI8HOggB6z9JrMXpj349Afy /kVWnX6K9OWcFgz7jpjKdGe0LtqHWY7FisZgqcdb1YA7fXYNu46Ab7HjbcNwoJyv S+bFAvbSdZvSe3B9wUlfSDD1GpG55BG8wtpR8LpSTlNAHOiZv+4r2a4slC5nxEaP Y8PDNiRl/hoE60HzQPJTb6eWkzF9hv77xnA= -----END CERTIFICATE-----Generated at Fri Apr 4 17:53:16 2025 by rpki-client