$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/819d07b2-ba52-3b19-9c0a-e58434c1b837.roa File: 819d07b2-ba52-3b19-9c0a-e58434c1b837.roa (raw, json) Hash identifier: qmQciQHH4OLp1w1sEgoFmjzLoq3pnkvSiygUs7V2d7g= Subject key identifier: FD:D4:18:34:60:E7:DB:0D:A4:8C:51:C9:81:90:45:43:FF:69:4A:24 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926CE0D33859B9B62581420 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/819d07b2-ba52-3b19-9c0a-e58434c1b837.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 394352 IP address blocks: 2001:470:2a3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:ce:0d:33:85:9b:9b:62:58:14:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=0eaaec92-4d17-4aab-be96-0ffc6e55e185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:82:ed:66:4b:91:50:65:68:45:ea:9e:21:d7: 2f:a2:cd:de:a3:0d:53:a0:a8:24:2d:3c:f8:c8:e1: 16:3c:5f:ba:50:ca:6a:1a:22:ac:4d:75:89:43:46: 30:fd:4d:61:57:ac:b1:e9:55:35:39:74:e7:76:24: 76:87:e7:59:20:c4:b9:0e:be:9d:eb:95:aa:64:c5: 9b:7c:f8:c7:9a:f5:bd:68:f9:3d:6c:a1:d8:d5:d6: 75:6a:86:90:3a:a5:81:ef:95:25:a9:5e:df:55:4e: 59:e5:0f:d9:39:bb:72:22:80:a6:c5:d5:83:ab:1b: 80:b4:dd:f0:fe:e1:4f:57:4f:09:08:26:fa:67:eb: b2:41:9d:8b:34:21:6c:ce:27:1d:df:38:95:7a:e7: aa:4d:9f:bd:62:e7:10:f8:32:30:50:e9:87:23:3e: 5c:24:46:e6:55:74:fb:d9:5a:d1:bb:0a:47:85:d3: 44:83:1a:7f:95:29:71:04:f0:e4:54:e7:fc:83:bf: 20:49:3f:55:f2:e6:2a:ba:0f:35:a6:df:bc:58:75: 03:c1:a9:5f:50:8a:22:ad:26:d5:e3:95:52:bf:b4: a7:32:b8:b6:f8:7f:4d:7b:bf:a6:6b:f6:1f:b0:08: f4:ac:45:d6:4f:22:8b:79:2d:a1:c9:26:60:49:f0: 37:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D4:18:34:60:E7:DB:0D:A4:8C:51:C9:81:90:45:43:FF:69:4A:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/819d07b2-ba52-3b19-9c0a-e58434c1b837.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:b8:1a:e0:0a:46:12:81:e6:9e:f8:b7:ef:7d:70:c5:01:bc: b0:5d:d8:af:3e:45:f0:21:bd:1f:23:b5:22:6d:b0:ed:28:5f: 6f:6c:5d:cb:4c:aa:bf:ff:06:79:fd:b1:db:62:45:62:c7:62: 6e:e2:86:0d:1b:0e:ab:83:ce:41:f3:4b:80:84:c8:19:cf:b5: 5d:d2:2b:c2:1f:84:b7:13:73:f3:2c:09:1e:f0:c4:b4:9e:d6: 1d:ab:f5:bf:a7:21:4e:3e:be:00:9e:71:c3:60:fa:1d:60:68: 91:f7:fd:ee:03:22:9a:17:ed:9a:21:91:73:7c:a5:b9:96:f3: 45:50:5b:05:49:ce:8d:e0:4e:13:1c:b6:03:3c:54:07:a2:2f: 6d:72:a6:ea:c8:10:9e:c6:a1:49:20:f5:06:78:fa:fa:51:c1: 5b:ad:22:99:ec:54:56:7c:52:f0:a6:7b:1d:c9:73:b9:ff:5d: ab:8a:a0:18:4b:a8:24:70:a3:ea:04:b6:27:1a:5e:f2:fb:5c: 47:42:27:52:09:a9:34:78:6a:92:cb:13:3f:f8:d2:c1:64:7d: 09:e3:27:b1:e3:13:4a:77:90:9e:1e:42:c8:e5:26:72:6b:3f: 25:0f:eb:e1:36:23:d0:ea:79:cf:45:52:21:67:de:ce:bc:f3: ed:3f:9d:d7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5Js4NM4Wbm2JYFCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk MGVhYWVjOTItNGQxNy00YWFiLWJlOTYtMGZmYzZlNTVlMTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoLtZkuRUGVoReqeIdcvos3eow1ToKgkLTz4 yOEWPF+6UMpqGiKsTXWJQ0Yw/U1hV6yx6VU1OXTndiR2h+dZIMS5Dr6d65WqZMWb fPjHmvW9aPk9bKHY1dZ1aoaQOqWB75UlqV7fVU5Z5Q/ZObtyIoCmxdWDqxuAtN3w /uFPV08JCCb6Z+uyQZ2LNCFszicd3ziVeueqTZ+9YucQ+DIwUOmHIz5cJEbmVXT7 2VrRuwpHhdNEgxp/lSlxBPDkVOf8g78gST9V8uYqug81pt+8WHUDwalfUIoirSbV 45VSv7SnMri2+H9Ne7+ma/YfsAj0rEXWTyKLeS2hySZgSfA3jQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP3UGDRg59sNpIxRyYGQRUP/aUokMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODE5ZDA3YjItYmE1Mi0z YjE5LTljMGEtZTU4NDM0YzFiODM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD64GuAKRhKB5p74t+99cMUBvLBd2K8+RfAhvR8jtSJtsO0oX29s XctMqr//Bnn9sdtiRWLHYm7ihg0bDquDzkHzS4CEyBnPtV3SK8IfhLcTc/MsCR7w xLSe1h2r9b+nIU4+vgCeccNg+h1gaJH3/e4DIpoX7ZohkXN8pbmW80VQWwVJzo3g ThMctgM8VAeiL21ypurIEJ7GoUkg9QZ4+vpRwVutIpnsVFZ8UvCmex3Jc7n/XauK oBhLqCRwo+oEticaXvL7XEdCJ1IJqTR4apLLEz/40sFkfQnjJ7HjE0p3kJ4eQsjl JnJrPyUP6+E2I9Dqec9FUiFn3s688+0/ndc= -----END CERTIFICATE-----Generated at Fri Apr 4 17:56:49 2025 by rpki-client