$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85e30730-5d37-3d0d-b82f-934337806577.roa File: 85e30730-5d37-3d0d-b82f-934337806577.roa (raw, json) Hash identifier: Erk24YvcSgJQ3tEyj/b0CRqZk9jpOhtgcH4qm3jbOd0= Subject key identifier: 22:BA:02:1F:60:3F:65:17:5F:03:E0:94:0A:CD:9E:19:FC:89:DB:90 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926E868BC8731482BD934E0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85e30730-5d37-3d0d-b82f-934337806577.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 395260 IP address blocks: 2001:470:2f6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:e8:68:bc:87:31:48:2b:d9:34:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=5f013005-82da-44f4-8f7a-3d5ec271da92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:06:d7:f4:fc:c0:33:93:c4:77:eb:3c:19:7a: d6:f2:55:f4:6b:a8:5c:ae:e6:b9:ff:98:e7:4e:15: 93:07:a0:9e:74:eb:07:c9:66:65:cc:8e:f0:b7:4c: 1a:dc:b6:04:ac:40:ff:59:7a:0a:d8:fc:07:af:6b: 50:33:a1:2e:40:c7:da:08:48:ef:e4:1b:d1:b8:e2: ba:07:4a:49:d5:31:f8:cc:db:c0:c0:70:a4:63:74: 2d:ac:21:94:d6:04:cc:ff:10:f6:00:31:8a:dd:06: 4b:52:1b:fa:b0:60:88:03:5c:be:17:12:71:82:2a: 32:d4:f1:d4:d8:88:d9:40:2c:57:ec:3b:75:3d:5b: 29:b4:58:ea:59:a8:39:5d:05:d6:2d:78:78:b0:b0: 3e:e8:86:56:ed:49:99:9b:60:fb:2b:57:9d:96:d8: e7:7b:03:fe:c2:9a:05:60:66:05:4c:c6:b4:1c:74: 6f:af:42:33:3a:a8:e1:63:74:00:05:9e:75:16:50: a5:78:89:ff:83:98:8d:ad:7d:6c:4b:06:d4:57:79: e0:99:e8:46:08:bd:13:f5:18:e9:9c:ce:fd:02:da: 3c:cd:2a:6d:3c:90:df:85:bf:5b:87:65:9b:5d:15: 92:22:27:c5:cb:d6:e5:67:c0:12:c3:2e:3c:d8:f0: 7b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:BA:02:1F:60:3F:65:17:5F:03:E0:94:0A:CD:9E:19:FC:89:DB:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85e30730-5d37-3d0d-b82f-934337806577.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2f6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:83:6b:98:68:9b:d6:80:1e:92:3d:f7:f3:19:bf:4c:1e:73: 6c:74:ef:c7:e3:02:c7:a9:e8:33:d9:c9:d4:fa:14:f6:93:9b: 27:f7:82:ca:f7:d4:07:1b:90:fe:59:cb:fe:88:cb:0a:2b:c0: 43:70:a8:eb:83:ac:34:57:6f:62:3c:da:86:0b:24:9e:2e:83: cd:db:13:b8:25:5e:da:a8:ff:86:ab:e3:8e:8c:3f:87:f5:04: 17:b7:bc:60:de:ec:cc:a7:a8:f6:90:91:b4:7f:a4:de:c9:89: cb:bf:41:6c:e9:d0:e9:47:0f:86:ed:71:30:2b:bd:0d:99:cd: 06:96:8b:bf:d5:53:9d:6f:30:a5:9d:20:87:d1:3b:46:16:79: 52:b0:47:42:cb:30:b4:f1:5c:c2:e8:fa:8d:a4:e3:b7:85:f3: 85:b3:c2:4f:76:5e:65:bb:a4:be:a4:7e:e7:e8:7d:fa:d4:24: 4d:54:0f:36:6e:1a:32:75:1f:38:02:93:ad:16:36:d2:38:db: cf:6e:fe:52:d3:14:8b:41:de:e4:fe:87:13:a5:96:0d:9e:57: 45:3f:ff:89:9b:26:64:19:2d:37:e0:21:1c:80:ff:f9:90:fb: ef:57:01:07:f8:00:b8:13:4d:67:71:2e:af:63:d5:c4:e8:e8: 9b:1a:dd:ca -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JuhovIcxSCvZNOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk NWYwMTMwMDUtODJkYS00NGY0LThmN2EtM2Q1ZWMyNzFkYTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAbX9PzAM5PEd+s8GXrW8lX0a6hcrua5/5jn ThWTB6CedOsHyWZlzI7wt0wa3LYErED/WXoK2PwHr2tQM6EuQMfaCEjv5BvRuOK6 B0pJ1TH4zNvAwHCkY3QtrCGU1gTM/xD2ADGK3QZLUhv6sGCIA1y+FxJxgioy1PHU 2IjZQCxX7Dt1PVsptFjqWag5XQXWLXh4sLA+6IZW7UmZm2D7K1edltjnewP+wpoF YGYFTMa0HHRvr0IzOqjhY3QABZ51FlCleIn/g5iNrX1sSwbUV3ngmehGCL0T9Rjp nM79Ato8zSptPJDfhb9bh2WbXRWSIifFy9blZ8ASwy482PB78wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCK6Ah9gP2UXXwPglArNnhn8iduQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODVlMzA3MzAtNWQzNy0z ZDBkLWI4MmYtOTM0MzM3ODA2NTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAL2 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACqDa5hom9aAHpI99/MZv0wec2x078fjAsep6DPZydT6FPaTmyf3 gsr31AcbkP5Zy/6IyworwENwqOuDrDRXb2I82oYLJJ4ug83bE7glXtqo/4ar446M P4f1BBe3vGDe7MynqPaQkbR/pN7Jicu/QWzp0OlHD4btcTArvQ2ZzQaWi7/VU51v MKWdIIfRO0YWeVKwR0LLMLTxXMLo+o2k47eF84Wzwk92XmW7pL6kfufoffrUJE1U DzZuGjJ1HzgCk60WNtI4289u/lLTFItB3uT+hxOllg2eV0U//4mbJmQZLTfgIRyA //mQ++9XAQf4ALgTTWdxLq9j1cTo6Jsa3co= -----END CERTIFICATE-----Generated at Fri Apr 4 17:57:40 2025 by rpki-client