$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8411285b-a42c-345b-84ca-ee7b8d8d9335.roa File: 8411285b-a42c-345b-84ca-ee7b8d8d9335.roa (raw, json) Hash identifier: yJ2Ca+4bNymSHTa4TiFtigKb6rh+7G2DbhrRSpswYfA= Subject key identifier: A9:EB:52:FB:59:EA:E7:6A:4F:0F:3F:24:FF:AB:25:3D:87:99:F3:CA Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584957F40C10D62A8D34684BFCA0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8411285b-a42c-345b-84ca-ee7b8d8d9335.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 28815 IP address blocks: 2001:470:378::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:0c:10:d6:2a:8d:34:68:4b:fc:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=84055a37-7c4e-4834-9089-e7605c85c640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:bf:b3:c6:82:d6:51:cc:e3:04:3f:f4:fe:4f: 70:53:c5:cd:9e:d6:49:46:f0:e9:02:c5:78:a6:19: 64:f2:79:51:e8:47:ac:03:fb:2b:7a:14:c9:6c:90: a5:e2:cd:47:ac:1b:8b:65:a9:0c:13:df:28:9f:4d: d0:c5:ab:74:4b:52:30:03:d8:a0:5b:8d:89:4e:e1: 5e:4e:ce:b9:ec:19:2a:54:7a:89:2d:26:2e:dc:ea: 88:43:0e:14:30:74:ed:02:49:3f:ed:37:55:45:62: 2f:91:1d:8e:5e:2b:96:16:f3:42:47:8e:30:35:e1: df:b5:f6:3a:16:0b:09:a1:d4:2a:f3:b6:f4:a7:e9: 60:6e:bf:bb:fb:b7:82:77:d4:1a:ad:50:3c:eb:2c: 42:37:d6:ae:cf:54:e2:15:83:4d:cc:c9:f0:81:a1: ee:88:6e:63:ea:c3:5c:07:eb:7b:11:21:3c:8c:77: e0:55:e1:35:f1:3f:88:17:ff:e8:c0:71:a1:9f:31: b0:cc:61:d6:17:cb:cc:59:19:d3:2d:59:6c:73:53: b4:18:cb:e7:2d:51:bf:0d:b6:58:4a:e2:37:d4:4a: 18:fa:e8:4d:46:17:04:18:29:f6:c2:87:b8:d5:e3: 11:20:11:a0:e4:7a:75:ec:c1:b1:77:73:49:a4:8a: e6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:EB:52:FB:59:EA:E7:6A:4F:0F:3F:24:FF:AB:25:3D:87:99:F3:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8411285b-a42c-345b-84ca-ee7b8d8d9335.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:378::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:a5:eb:e6:b6:91:00:32:3e:68:c9:4c:c0:49:f9:5e:4b:c5: 33:c6:31:b0:03:df:61:44:7f:e5:46:ec:cb:c8:ce:bc:c4:3f: d4:00:d5:29:cf:8f:28:c0:37:16:29:22:48:9b:78:18:35:5c: 77:fe:82:07:de:52:15:15:4f:39:19:45:9c:f9:a1:8d:8a:d8: 5d:aa:0f:b9:3d:23:49:88:18:c8:a3:a7:db:81:2e:b3:de:3b: f0:33:db:1d:2a:90:ea:b1:ac:88:d1:56:4f:52:b6:5a:c0:82: 73:9c:31:6a:29:18:27:25:ec:db:1e:86:25:8a:ce:22:27:fa: 68:68:6e:83:69:e6:aa:db:96:5e:1d:ef:3a:68:be:55:47:11: 65:88:88:f5:c8:99:0d:aa:6c:0b:14:6f:03:84:17:c9:36:b6: c2:ff:f0:c4:38:8f:26:1d:2b:e7:59:93:f6:b1:08:d9:20:80: 86:66:8e:59:8c:80:16:17:b1:bd:e9:c3:21:72:90:24:a7:a0: 3b:18:04:99:ed:b7:a9:17:44:1f:38:94:e7:a6:2d:45:db:bc: 1e:da:73:39:d6:1e:2a:09:bd:d1:e6:b2:22:97:7d:84:37:af: ea:3c:6e:79:16:2d:be:09:2d:c9:5a:db:4f:b9:64:d2:aa:b8: cf:06:1d:fb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElX9AwQ1iqNNGhL/KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk ODQwNTVhMzctN2M0ZS00ODM0LTkwODktZTc2MDVjODVjNjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgb+zxoLWUczjBD/0/k9wU8XNntZJRvDpAsV4 phlk8nlR6EesA/srehTJbJCl4s1HrBuLZakME98on03Qxat0S1IwA9igW42JTuFe Ts657BkqVHqJLSYu3OqIQw4UMHTtAkk/7TdVRWIvkR2OXiuWFvNCR44wNeHftfY6 FgsJodQq87b0p+lgbr+7+7eCd9QarVA86yxCN9auz1TiFYNNzMnwgaHuiG5j6sNc B+t7ESE8jHfgVeE18T+IF//owHGhnzGwzGHWF8vMWRnTLVlsc1O0GMvnLVG/DbZY SuI31EoY+uhNRhcEGCn2woe41eMRIBGg5Hp17MGxd3NJpIrm7QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKnrUvtZ6udqTw8/JP+rJT2HmfPKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODQxMTI4NWItYTQyYy0z NDViLTg0Y2EtZWU3YjhkOGQ5MzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAN4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE+l6+a2kQAyPmjJTMBJ+V5LxTPGMbAD32FEf+VG7MvIzrzEP9QA 1SnPjyjANxYpIkibeBg1XHf+ggfeUhUVTzkZRZz5oY2K2F2qD7k9I0mIGMijp9uB LrPeO/Az2x0qkOqxrIjRVk9StlrAgnOcMWopGCcl7NsehiWKziIn+mhoboNp5qrb ll4d7zpovlVHEWWIiPXImQ2qbAsUbwOEF8k2tsL/8MQ4jyYdK+dZk/axCNkggIZm jlmMgBYXsb3pwyFykCSnoDsYBJntt6kXRB84lOemLUXbvB7acznWHioJvdHmsiKX fYQ3r+o8bnkWLb4JLcla20+5ZNKquM8GHfs= -----END CERTIFICATE-----Generated at Fri Apr 4 17:49:35 2025 by rpki-client