$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85dc89c0-f24f-3f95-b890-a64d54a07d93.roa File: 85dc89c0-f24f-3f95-b890-a64d54a07d93.roa (raw, json) Hash identifier: MYyNEs9WOsYp9Yafu7M+UP1hMVZq9IJCC5QvArNSKtY= Subject key identifier: A3:FF:E8:7B:A9:2A:24:F4:AD:FC:06:85:0A:5E:22:CC:5B:DE:DD:E8 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926E816593C1505CDE09F00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85dc89c0-f24f-3f95-b890-a64d54a07d93.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 41297 IP address blocks: 2001:470:2e7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:e8:16:59:3c:15:05:cd:e0:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=2f34ab34-05fe-445d-8376-2d34819ef2c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c7:5e:ca:6e:c1:1e:d5:c7:6c:66:72:02:67: a3:91:f3:0b:0e:d8:65:a7:82:c5:0d:c3:06:8b:a1: bb:c0:6e:6e:13:08:7d:5e:83:c4:ed:b1:1d:a6:87: 48:32:be:0e:b1:a0:80:c5:9b:2c:4f:b7:0c:fd:19: bf:4e:43:3b:3c:00:94:6f:33:f0:98:00:d0:3f:27: e9:b0:98:ec:92:6c:0d:76:6d:1c:5f:a9:5a:a4:55: ff:2f:aa:94:74:8e:19:23:51:8b:c7:db:7a:ef:62: 99:0b:28:b6:0d:17:e4:6c:94:67:49:d3:e4:f3:73: b5:17:02:9a:3f:4f:c5:12:a7:c0:04:20:8e:c6:05: 57:1f:19:70:6d:ce:3b:e1:c2:be:84:38:d4:53:43: 49:22:18:c9:cd:bd:b2:c9:1c:f8:26:2c:a6:7a:5c: ed:40:4e:25:db:0c:84:12:bc:61:a6:45:66:00:04: 0c:d7:3a:75:8d:42:11:34:da:0e:10:05:4a:04:bb: c0:35:99:46:a8:d7:5f:ba:7c:b7:6d:f0:8b:cc:6f: 5f:bb:0a:c5:48:1d:94:48:30:a7:4e:83:b6:9c:a1: a7:30:f3:63:c7:30:a1:35:71:f0:df:16:8e:e5:20: 24:7c:17:21:3d:2e:b8:e7:41:36:5c:00:02:7d:1f: 45:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:FF:E8:7B:A9:2A:24:F4:AD:FC:06:85:0A:5E:22:CC:5B:DE:DD:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85dc89c0-f24f-3f95-b890-a64d54a07d93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2e7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:f8:de:c5:17:06:e5:ed:3e:40:12:0a:94:e2:5c:7c:97:7b: 59:4a:1a:ef:a3:03:e6:7b:5c:0b:76:70:1f:06:90:ab:5d:a2: 89:28:55:9f:c5:57:99:78:11:29:ad:24:6d:2a:31:55:52:7b: 27:82:37:18:38:7e:00:3c:41:1c:52:cc:0e:99:65:3f:19:ad: 5d:74:a9:f1:bc:45:94:48:f6:af:0b:18:85:5c:05:29:5d:a1: d2:66:50:77:7c:d7:7f:d4:c2:89:6d:f6:eb:6c:5d:a7:9c:27: 1c:ae:d2:4b:e6:60:1b:41:6c:72:0d:b6:f7:d7:62:a4:43:a0: b7:c4:0b:65:95:aa:58:72:cb:20:a8:a0:79:ac:24:0d:49:1b: 0c:a5:fc:16:17:31:51:fa:9f:21:48:f8:5a:07:e9:ec:c0:b1: 91:4e:78:16:31:57:2c:38:48:04:c9:86:1c:fd:24:d1:c5:c9: dd:9c:c6:77:7f:ce:b2:62:26:39:b8:6a:16:ee:5e:7f:34:39: 34:52:6a:61:64:8e:51:30:9c:a4:c1:b8:28:cd:ec:4a:7e:63: 13:90:9e:cb:f5:c2:b9:1f:a5:19:9c:95:80:dc:4c:40:e4:5b: fc:7c:31:9d:22:fb:95:c8:74:63:d7:0a:0a:41:b0:0a:dc:01: 8a:1e:ed:0b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JugWWTwVBc3gnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk MmYzNGFiMzQtMDVmZS00NDVkLTgzNzYtMmQzNDgxOWVmMmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8deym7BHtXHbGZyAmejkfMLDthlp4LFDcMG i6G7wG5uEwh9XoPE7bEdpodIMr4OsaCAxZssT7cM/Rm/TkM7PACUbzPwmADQPyfp sJjskmwNdm0cX6lapFX/L6qUdI4ZI1GLx9t672KZCyi2DRfkbJRnSdPk83O1FwKa P0/FEqfABCCOxgVXHxlwbc474cK+hDjUU0NJIhjJzb2yyRz4JiymelztQE4l2wyE ErxhpkVmAAQM1zp1jUIRNNoOEAVKBLvANZlGqNdfuny3bfCLzG9fuwrFSB2USDCn ToO2nKGnMPNjxzChNXHw3xaO5SAkfBchPS6450E2XAACfR9FVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKP/6HupKiT0rfwGhQpeIsxb3t3oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODVkYzg5YzAtZjI0Zi0z Zjk1LWI4OTAtYTY0ZDU0YTA3ZDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGf43sUXBuXtPkASCpTiXHyXe1lKGu+jA+Z7XAt2cB8GkKtdooko VZ/FV5l4ESmtJG0qMVVSeyeCNxg4fgA8QRxSzA6ZZT8ZrV10qfG8RZRI9q8LGIVc BSldodJmUHd813/Uwolt9utsXaecJxyu0kvmYBtBbHINtvfXYqRDoLfEC2WVqlhy yyCooHmsJA1JGwyl/BYXMVH6nyFI+FoH6ezAsZFOeBYxVyw4SATJhhz9JNHFyd2c xnd/zrJiJjm4ahbuXn80OTRSamFkjlEwnKTBuCjN7Ep+YxOQnsv1wrkfpRmclYDc TEDkW/x8MZ0i+5XIdGPXCgpBsArcAYoe7Qs= -----END CERTIFICATE-----Generated at Tue Apr 8 17:14:37 2025 by rpki-client