$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85985089-2f5a-32ff-85ee-dc5151c11388.roa File: 85985089-2f5a-32ff-85ee-dc5151c11388.roa (raw, json) Hash identifier: ZWmDZQYYcurb4uDKArGxmaj0AtgxLM8tx30SkQ9eL98= Subject key identifier: C1:03:10:F4:CB:42:2C:BE:6D:0E:33:6C:24:C7:E1:9B:F4:C1:AB:9C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926C7763202727B622CFC40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85985089-2f5a-32ff-85ee-dc5151c11388.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 135069 IP address blocks: 2001:470:1d9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:c7:76:32:02:72:7b:62:2c:fc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=bd00f733-8699-4fd2-9164-60e6d807706c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7d:96:e7:14:0d:92:e5:eb:8a:90:9e:b5:3d: 90:e6:a0:bf:29:b1:d3:77:93:55:e7:4a:7d:4e:bd: f2:91:5a:53:4e:fb:32:14:c8:ae:b8:68:c3:5a:c5: a6:41:8e:2b:f2:52:4f:c4:61:40:96:27:d1:bd:e5: e0:83:f4:46:06:66:f4:d2:5b:8d:5d:43:dd:fa:3b: 99:a7:a1:25:b6:44:f4:f1:ec:f0:0b:e1:13:30:7f: 68:70:8e:fb:70:d4:26:a0:d5:d2:9f:9a:12:31:06: 87:d2:72:4e:ac:50:4d:e8:0c:c4:b3:e2:b4:5f:e7: dc:9f:63:e5:a0:88:21:79:49:d1:d6:92:5f:e6:ba: 6b:2c:43:98:42:a1:e7:e4:a0:3f:0c:da:b7:38:52: a4:d6:97:6d:4b:c3:5a:72:0d:78:86:3d:e5:ec:8e: f8:3b:b0:8d:a2:ca:34:89:ef:3d:c8:2a:20:b3:63: c2:3d:7d:d9:bb:78:1c:13:e4:c1:35:36:d8:bb:a3: 13:e2:15:3a:3d:7d:7e:18:d9:52:12:8a:9e:10:55: c9:f9:ea:7c:1e:22:8d:2d:90:ee:d1:0f:8c:1d:26: 34:d1:fa:60:f8:b7:a8:07:6e:8d:3f:8c:b1:bb:cf: 0c:f2:af:9f:08:c4:a7:1d:35:1d:63:71:e3:18:31: 6b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:03:10:F4:CB:42:2C:BE:6D:0E:33:6C:24:C7:E1:9B:F4:C1:AB:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85985089-2f5a-32ff-85ee-dc5151c11388.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1d9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:19:a1:d8:b3:91:50:d4:bc:b8:8e:dc:d6:ea:88:8e:22:f4: eb:c8:09:89:74:33:51:b5:03:b2:58:21:6c:5b:e8:60:5a:8c: d3:a7:11:74:33:ef:be:ac:68:f8:62:ea:d6:a3:29:4a:5f:90: 49:a1:24:f3:b3:53:09:cf:da:b9:92:75:c0:1b:ae:ca:65:5e: 11:9f:dd:36:34:95:1c:a8:1c:dc:d8:63:ce:b3:17:a7:e1:c4: 38:9f:5d:02:75:98:5e:0c:96:b8:f3:cd:d2:2a:ef:69:1d:8b: 83:fe:13:63:b1:87:63:a3:c3:e8:d6:1e:f2:15:2b:a6:2a:60: 99:ad:11:49:26:50:81:80:63:59:2c:12:81:9e:11:51:f3:84: cd:3d:c1:da:0a:dc:53:ec:22:af:7e:dd:a2:ee:bf:68:b1:9e: c5:64:01:be:81:2d:2c:cb:e6:8c:47:91:ac:3e:fb:f6:57:6d: b2:16:e9:d4:5a:a0:ee:17:b3:f0:da:cb:08:8d:69:64:b4:a8: dc:55:c3:20:fa:7b:13:76:f1:eb:90:f4:e0:8a:f4:cd:f1:36: 8d:b4:52:74:15:5e:64:ce:12:83:0b:5e:35:74:be:b0:12:b4: 77:83:95:b5:7e:2e:48:c5:cf:26:54:fe:92:de:28:79:4e:95: 66:5b:35:f7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5Jsd2MgJye2Is/EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk YmQwMGY3MzMtODY5OS00ZmQyLTkxNjQtNjBlNmQ4MDc3MDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjH2W5xQNkuXripCetT2Q5qC/KbHTd5NV50p9 Tr3ykVpTTvsyFMiuuGjDWsWmQY4r8lJPxGFAlifRveXgg/RGBmb00luNXUPd+juZ p6EltkT08ezwC+ETMH9ocI77cNQmoNXSn5oSMQaH0nJOrFBN6AzEs+K0X+fcn2Pl oIgheUnR1pJf5rprLEOYQqHn5KA/DNq3OFKk1pdtS8Nacg14hj3l7I74O7CNoso0 ie89yCogs2PCPX3Zu3gcE+TBNTbYu6MT4hU6PX1+GNlSEoqeEFXJ+ep8HiKNLZDu 0Q+MHSY00fpg+LeoB26NP4yxu88M8q+fCMSnHTUdY3HjGDFrFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMEDEPTLQiy+bQ4zbCTH4Zv0waucMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODU5ODUwODktMmY1YS0z MmZmLTg1ZWUtZGM1MTUxYzExMzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHZ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABIZodizkVDUvLiO3NbqiI4i9OvICYl0M1G1A7JYIWxb6GBajNOn EXQz776saPhi6tajKUpfkEmhJPOzUwnP2rmSdcAbrsplXhGf3TY0lRyoHNzYY86z F6fhxDifXQJ1mF4MlrjzzdIq72kdi4P+E2Oxh2Ojw+jWHvIVK6YqYJmtEUkmUIGA Y1ksEoGeEVHzhM09wdoK3FPsIq9+3aLuv2ixnsVkAb6BLSzL5oxHkaw++/ZXbbIW 6dRaoO4Xs/DaywiNaWS0qNxVwyD6exN28euQ9OCK9M3xNo20UnQVXmTOEoMLXjV0 vrAStHeDlbV+LkjFzyZU/pLeKHlOlWZbNfc= -----END CERTIFICATE-----Generated at Fri Apr 4 17:59:35 2025 by rpki-client