$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/84e8f051-0908-3912-926f-fb882fd53531.roa File: 84e8f051-0908-3912-926f-fb882fd53531.roa (raw, json) Hash identifier: ZotQBcDP8DtcmMcD3Zkt3Z6IsuFpH5tAauBvTvFlvB8= Subject key identifier: BB:4F:86:F9:85:A5:1B:C2:85:D4:46:E4:AE:94:5E:27:AF:94:AB:13 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926CEA6176D613E5DD00340 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/84e8f051-0908-3912-926f-fb882fd53531.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 150178 IP address blocks: 2001:470:2b7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:ce:a6:17:6d:61:3e:5d:d0:03:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=597e7984-bfe9-4e73-921a-728f61ec2c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:07:91:56:ed:19:e3:b6:92:8f:48:88:68:8c: c6:06:e0:4c:87:a7:b7:01:1d:67:50:e9:1e:4f:8e: ea:94:13:f5:0a:97:7d:63:af:cf:ad:10:e3:a2:22: a9:0d:5a:e5:8e:95:25:0b:bd:69:ec:59:d5:4f:19: 8e:be:97:12:f8:9c:59:b1:8f:56:92:84:ac:14:02: 10:20:72:bd:ef:0f:7f:52:25:0f:15:48:0e:6d:ba: ba:de:bd:7e:e3:00:6c:75:9c:41:16:43:01:31:c2: 5b:4b:6c:dd:e4:86:66:57:35:10:21:73:34:3c:2e: b1:a7:e7:35:44:0b:5f:08:6f:10:62:5d:54:61:3b: 59:fd:8b:72:a8:62:4f:bb:bf:80:67:8f:2f:ac:75: 6f:16:2a:ae:f0:53:37:de:9d:0b:e2:3a:e0:57:87: b8:f7:f3:b2:c8:35:24:e3:2d:78:df:36:a0:99:f2: 0b:47:6a:92:0f:12:53:89:89:3f:c3:fe:b5:82:11: bd:24:3c:df:4b:c3:07:5c:50:91:19:47:d0:64:dc: bb:82:47:c9:40:a6:f1:68:ca:4c:4e:b6:79:12:8e: 59:25:90:52:0a:0c:ed:66:e7:ed:1c:fb:8d:d8:0b: e9:7d:c0:04:02:f1:8a:9b:08:7d:a7:e1:b1:26:10: 98:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:4F:86:F9:85:A5:1B:C2:85:D4:46:E4:AE:94:5E:27:AF:94:AB:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/84e8f051-0908-3912-926f-fb882fd53531.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2b7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:42:0b:fb:9a:d8:19:31:ce:26:bb:ba:f9:ed:94:61:34:b4: 9d:66:94:85:e8:bd:85:7b:79:cb:99:0e:87:eb:c3:1b:91:4b: 20:53:c8:bd:2d:d1:fd:a5:a4:8f:89:71:65:bd:e8:37:26:e7: cd:e0:9b:3c:83:09:95:6a:49:96:20:ed:9a:d7:d5:29:61:56: f4:43:03:fa:51:ef:17:4b:c3:c0:a5:af:d6:79:c8:da:1f:5a: 71:0e:8b:b1:08:cb:56:9a:b7:cc:83:42:47:0e:5c:5a:68:21: c8:b2:dd:34:ff:fa:31:2f:37:12:15:77:c2:b2:4b:51:ef:26: 85:a0:b5:9a:0a:a2:3b:36:a8:42:5d:c1:8e:84:eb:6b:7f:ac: fc:f0:fd:dc:e1:1f:cc:48:4f:15:65:cf:17:1b:f6:6b:7f:b8: f6:a5:7e:5f:68:e2:a5:19:85:c9:26:31:33:c5:79:50:09:f9: 06:61:93:ee:af:c5:50:a4:05:40:7f:29:5f:ef:03:71:ae:d8: e4:8c:f7:20:b2:b5:20:d4:53:86:fd:bc:71:ab:f6:8b:4a:9a: 98:a3:05:d0:1f:1c:71:09:6f:c6:73:a5:92:3b:83:5f:60:de: 32:18:4f:95:f7:71:d1:e1:bb:9c:4d:94:71:a7:20:9d:d7:f1: 9e:96:fc:82 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5Js6mF21hPl3QA0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk NTk3ZTc5ODQtYmZlOS00ZTczLTkyMWEtNzI4ZjYxZWMyYzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQeRVu0Z47aSj0iIaIzGBuBMh6e3AR1nUOke T47qlBP1Cpd9Y6/PrRDjoiKpDVrljpUlC71p7FnVTxmOvpcS+JxZsY9WkoSsFAIQ IHK97w9/UiUPFUgObbq63r1+4wBsdZxBFkMBMcJbS2zd5IZmVzUQIXM0PC6xp+c1 RAtfCG8QYl1UYTtZ/YtyqGJPu7+AZ48vrHVvFiqu8FM33p0L4jrgV4e49/OyyDUk 4y143zagmfILR2qSDxJTiYk/w/61ghG9JDzfS8MHXFCRGUfQZNy7gkfJQKbxaMpM TrZ5Eo5ZJZBSCgztZuftHPuN2AvpfcAEAvGKmwh9p+GxJhCYwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLtPhvmFpRvChdRG5K6UXievlKsTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODRlOGYwNTEtMDkwOC0z OTEyLTkyNmYtZmI4ODJmZDUzNTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAK3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHZCC/ua2Bkxzia7uvntlGE0tJ1mlIXovYV7ecuZDofrwxuRSyBT yL0t0f2lpI+JcWW96Dcm583gmzyDCZVqSZYg7ZrX1SlhVvRDA/pR7xdLw8Clr9Z5 yNofWnEOi7EIy1aat8yDQkcOXFpoIciy3TT/+jEvNxIVd8KyS1HvJoWgtZoKojs2 qEJdwY6E62t/rPzw/dzhH8xITxVlzxcb9mt/uPalfl9o4qUZhckmMTPFeVAJ+QZh k+6vxVCkBUB/KV/vA3Gu2OSM9yCytSDUU4b9vHGr9otKmpijBdAfHHEJb8ZzpZI7 g19g3jIYT5X3cdHhu5xNlHGnIJ3X8Z6W/II= -----END CERTIFICATE-----Generated at Fri Apr 4 17:56:47 2025 by rpki-client