$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/86899cb1-c713-32d8-94e9-eaf44a454b29.roa File: 86899cb1-c713-32d8-94e9-eaf44a454b29.roa (raw, json) Hash identifier: Y8g+wfKXg9f7/rDJAPSKavr/ELntA2G5cAjIa5D+fts= Subject key identifier: B7:75:F8:65:05:4C:00:E3:54:8D:36:E1:92:91:E5:24:3E:6C:56:5C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926C584044EF98730CD5EC0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/86899cb1-c713-32d8-94e9-eaf44a454b29.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 15108 IP address blocks: 2001:470:1a4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:c5:84:04:4e:f9:87:30:cd:5e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=d8b78f01-b1f2-42e7-8c25-bbc729f8a288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:31:07:8e:7c:9a:fe:96:63:ee:20:7c:35:00: b9:2e:2c:af:69:1d:28:e8:65:79:b9:e4:9b:15:75: c3:d3:74:39:d8:61:ea:43:19:46:ef:47:fd:76:98: fc:42:9d:42:b1:3f:c5:8e:3c:77:ba:0e:c5:b8:85: 19:cb:ad:0e:dd:cb:eb:b9:3a:13:ea:be:24:e4:7e: 4b:6e:7c:3c:51:2a:e1:4d:62:e3:0a:ae:39:7a:aa: 22:cb:53:75:e9:d2:11:d4:21:6b:22:ea:9a:9d:3f: 27:44:ad:d7:a4:03:fe:0b:f3:5a:41:96:69:65:ab: e2:3e:4e:08:d8:6a:e5:be:da:a9:f3:93:ed:83:b7: a6:c5:b9:18:e7:02:a4:86:59:cd:42:a6:45:27:e4: 62:95:4a:58:83:3e:63:2d:39:b5:15:05:e2:9c:be: f6:d0:27:a9:33:44:2a:8a:55:32:13:bd:fc:7d:00: 42:7f:9a:37:07:91:93:c1:74:c1:c7:68:0b:c0:f7: 73:41:df:69:9f:01:1a:29:ca:8e:57:7d:98:15:1e: 6f:38:53:af:77:75:1a:52:3c:fb:ce:60:16:7e:83: 87:d0:83:ca:17:f0:e8:99:e3:95:cb:21:7a:88:a9: 1d:18:95:5e:7f:9e:91:56:36:69:4a:aa:05:57:bf: b5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:75:F8:65:05:4C:00:E3:54:8D:36:E1:92:91:E5:24:3E:6C:56:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/86899cb1-c713-32d8-94e9-eaf44a454b29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1a4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:35:5d:28:e8:1d:77:f2:56:9a:e2:87:d0:8e:ea:0a:b1:7e: 7f:18:25:f4:34:e0:a9:06:1f:e8:f0:4c:48:62:14:64:2c:87: 77:f3:c2:60:8c:1d:ca:27:f6:43:17:02:73:e5:03:c0:fd:f1: 36:4d:a8:fb:c0:e7:61:e6:9e:f8:c3:a1:d4:50:62:77:1e:a6: cc:aa:5e:39:45:b9:74:cc:fa:c7:7b:56:98:db:f1:ac:0b:8a: 24:59:43:22:19:bc:b6:c9:35:76:49:a8:bf:89:e9:e0:b4:49: a7:33:b0:2c:d6:88:b2:9e:7e:a7:b4:9c:16:bd:c5:bb:b1:58: 38:3c:9c:9b:42:88:c9:ef:a4:39:f3:f5:6b:14:d7:d6:d3:b3: 29:be:99:53:2e:80:ea:c8:8f:87:50:1b:57:9a:e5:63:72:05: c1:81:1e:d1:a0:07:0d:ea:0e:95:54:d0:6b:95:93:35:35:f9: 9f:10:0e:80:66:b3:34:5a:03:fd:49:ef:e8:66:b6:b3:c1:d1: fe:97:75:fb:eb:cf:9c:30:32:3a:bc:85:64:5d:a6:2b:e0:13: 40:94:60:3a:e3:5b:77:b9:62:02:12:06:e2:43:be:76:29:ef: 3e:ba:2b:10:5c:d1:09:98:50:04:d8:fb:55:55:a2:06:b5:5d: f6:e7:56:fc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JsWEBE75hzDNXsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk ZDhiNzhmMDEtYjFmMi00MmU3LThjMjUtYmJjNzI5ZjhhMjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjEHjnya/pZj7iB8NQC5LiyvaR0o6GV5ueSb FXXD03Q52GHqQxlG70f9dpj8Qp1CsT/Fjjx3ug7FuIUZy60O3cvruToT6r4k5H5L bnw8USrhTWLjCq45eqoiy1N16dIR1CFrIuqanT8nRK3XpAP+C/NaQZZpZaviPk4I 2Grlvtqp85Ptg7emxbkY5wKkhlnNQqZFJ+RilUpYgz5jLTm1FQXinL720CepM0Qq ilUyE738fQBCf5o3B5GTwXTBx2gLwPdzQd9pnwEaKcqOV32YFR5vOFOvd3UaUjz7 zmAWfoOH0IPKF/DomeOVyyF6iKkdGJVef56RVjZpSqoFV7+1mQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLd1+GUFTADjVI024ZKR5SQ+bFZcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODY4OTljYjEtYzcxMy0z MmQ4LTk0ZTktZWFmNDRhNDU0YjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAGk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA01XSjoHXfyVprih9CO6gqxfn8YJfQ04KkGH+jwTEhiFGQsh3fz wmCMHcon9kMXAnPlA8D98TZNqPvA52HmnvjDodRQYncepsyqXjlFuXTM+sd7Vpjb 8awLiiRZQyIZvLbJNXZJqL+J6eC0SaczsCzWiLKefqe0nBa9xbuxWDg8nJtCiMnv pDnz9WsU19bTsym+mVMugOrIj4dQG1ea5WNyBcGBHtGgBw3qDpVU0GuVkzU1+Z8Q DoBmszRaA/1J7+hmtrPB0f6Xdfvrz5wwMjq8hWRdpivgE0CUYDrjW3e5YgISBuJD vnYp7z66KxBc0QmYUATY+1VVoga1XfbnVvw= -----END CERTIFICATE-----Generated at Fri Apr 4 17:47:51 2025 by rpki-client