$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/896ae23e-3e6e-365c-ba87-1d5bc51f4a86.roa File: 896ae23e-3e6e-365c-ba87-1d5bc51f4a86.roa (raw, json) Hash identifier: IO7UVkABk2XdvRiegRN8wx5T7QdnSe/FgAIwt4muMwI= Subject key identifier: AA:61:12:3B:65:13:3B:92:43:AC:48:B9:F8:57:25:4E:E6:45:5E:50 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926BB1515C3E66AC94DA480 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/896ae23e-3e6e-365c-ba87-1d5bc51f4a86.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 395127 IP address blocks: 2001:470:e9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:bb:15:15:c3:e6:6a:c9:4d:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=7f2ba3ca-ff27-4ea1-9b79-7d6e6d422e6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8b:31:df:7e:49:16:21:21:6b:c3:18:a3:0e: b3:a3:67:ae:21:b9:75:3d:8b:5f:63:40:d5:d5:99: 5d:e2:3f:b3:0d:08:fc:0b:dc:2a:03:26:d3:52:24: 3d:3d:5b:34:ba:d7:cb:a8:bd:09:80:f8:71:69:4a: 65:74:94:74:2e:b4:a6:35:af:8a:d3:67:7b:4c:ac: b9:eb:61:37:73:ab:19:dc:38:60:19:2e:20:47:55: 2f:95:a4:08:af:80:fa:84:1c:bd:07:13:54:ef:75: 0b:ed:30:66:b8:81:be:b3:a7:81:ff:a3:2f:ec:99: 4c:4f:93:d9:ae:8f:80:92:71:a3:98:89:6b:47:4f: 14:d8:ac:15:dc:d6:70:45:61:28:96:ae:44:b5:5b: 26:a0:8c:54:ed:ae:cd:3a:f0:a2:bd:c8:c5:05:dd: 62:b6:05:70:4d:c3:c7:b5:aa:a7:c6:52:e1:2c:8b: 75:7e:b1:8f:48:f1:0b:ea:76:3b:7c:63:42:98:38: b0:23:a6:55:23:5d:eb:e8:4b:3d:41:d4:77:1f:05: 01:8c:89:23:3c:39:5e:9d:fe:f0:e6:82:08:8f:54: 2c:36:cd:dc:9c:33:00:c6:49:01:39:8e:a7:15:9f: a8:4d:d2:a5:d3:9c:59:19:09:ac:8e:2f:8c:5c:f5: b5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:61:12:3B:65:13:3B:92:43:AC:48:B9:F8:57:25:4E:E6:45:5E:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/896ae23e-3e6e-365c-ba87-1d5bc51f4a86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:e9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:57:98:32:94:76:b0:a9:69:93:ec:02:03:74:b6:01:41:59: db:88:12:d0:ce:c6:a0:b1:e0:47:d2:c5:85:d7:50:db:09:09: 47:bd:6d:7e:9c:66:32:5c:8c:8a:7f:af:cb:ab:f0:80:14:41: ef:33:ae:34:c8:7e:7d:78:da:1a:09:5c:b6:50:34:09:6a:34: 4a:d5:e1:09:5b:ad:9c:03:8c:79:43:c2:9d:ff:d5:39:f3:cc: 42:0b:e2:3b:4d:41:b8:0b:fb:6e:98:63:9b:2e:2b:40:24:7b: 8a:c6:6f:e1:2f:66:7c:ef:57:ee:29:9f:c2:85:20:ed:ff:48: 98:7d:bf:75:bd:72:0b:29:80:d3:ba:89:66:66:4a:aa:10:0e: fd:04:b2:97:78:bc:32:fb:9a:fd:a3:8f:db:e0:5a:26:ea:17: 5e:b6:dd:d2:9c:86:55:87:77:8b:7e:4d:3e:d0:4d:6d:12:d1: 6d:f8:1e:ed:05:d0:47:41:68:c8:fe:9f:9f:45:94:44:8b:bb: 3e:03:a4:e9:5c:1b:a3:a6:26:12:71:a5:55:ca:b4:db:66:89: 29:ad:c7:da:91:7d:b2:a7:02:7d:88:02:e6:c8:7e:6a:b7:f7: 1f:9e:6b:38:c8:6a:6b:fb:c4:95:3b:7c:e9:3e:3b:78:1c:4d: 7f:d0:01:ec -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JrsVFcPmaslNpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk N2YyYmEzY2EtZmYyNy00ZWExLTliNzktN2Q2ZTZkNDIyZTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkosx335JFiEha8MYow6zo2euIbl1PYtfY0DV 1Zld4j+zDQj8C9wqAybTUiQ9PVs0utfLqL0JgPhxaUpldJR0LrSmNa+K02d7TKy5 62E3c6sZ3DhgGS4gR1UvlaQIr4D6hBy9BxNU73UL7TBmuIG+s6eB/6Mv7JlMT5PZ ro+AknGjmIlrR08U2KwV3NZwRWEolq5EtVsmoIxU7a7NOvCivcjFBd1itgVwTcPH taqnxlLhLIt1frGPSPEL6nY7fGNCmDiwI6ZVI13r6Es9QdR3HwUBjIkjPDlenf7w 5oIIj1QsNs3cnDMAxkkBOY6nFZ+oTdKl05xZGQmsji+MXPW1nQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKphEjtlEzuSQ6xIufhXJU7mRV5QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODk2YWUyM2UtM2U2ZS0z NjVjLWJhODctMWQ1YmM1MWY0YTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADp MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEVXmDKUdrCpaZPsAgN0tgFBWduIEtDOxqCx4EfSxYXXUNsJCUe9 bX6cZjJcjIp/r8ur8IAUQe8zrjTIfn142hoJXLZQNAlqNErV4QlbrZwDjHlDwp3/ 1TnzzEIL4jtNQbgL+26YY5suK0Ake4rGb+EvZnzvV+4pn8KFIO3/SJh9v3W9cgsp gNO6iWZmSqoQDv0Espd4vDL7mv2jj9vgWibqF1623dKchlWHd4t+TT7QTW0S0W34 Hu0F0EdBaMj+n59FlESLuz4DpOlcG6OmJhJxpVXKtNtmiSmtx9qRfbKnAn2IAubI fmq39x+eazjIamv7xJU7fOk+O3gcTX/QAew= -----END CERTIFICATE-----Generated at Fri Apr 4 17:49:38 2025 by rpki-client