$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8dda3bec-122f-355f-9f55-5988a45dfb84.roa File: 8dda3bec-122f-355f-9f55-5988a45dfb84.roa (raw, json) Hash identifier: OHlgx+y/IY1H3xlou2z1B3ZOdfKYzQ1Aa9fO6lbU+8Y= Subject key identifier: 8D:33:BE:F5:29:EC:0B:90:2A:F9:30:F5:3C:2A:F1:02:C4:D5:F7:D2 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849195010ADBB1CA12AD86E9B40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8dda3bec-122f-355f-9f55-5988a45dfb84.roa Signing time: Thu 06 Mar 2025 14:30:21 +0000 ROA not before: Thu 06 Mar 2025 14:30:21 +0000 ROA not after: Wed 04 Jun 2025 13:30:21 +0000 asID: 212792 IP address blocks: 2001:470:206::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:50:10:ad:bb:1c:a1:2a:d8:6e:9b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 6 14:30:21 2025 GMT Not After : Jun 4 13:30:21 2025 GMT Subject: CN=ac0d5988-d942-45e4-8759-b235c8d90581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:24:9a:a9:57:0a:ae:05:35:6c:1d:c5:be:dd: ff:21:e7:6f:24:1e:4d:89:ca:b1:92:31:46:fc:61: ae:ad:50:fa:66:c4:78:cb:82:2a:9b:a8:37:16:3d: f6:35:71:04:71:08:85:3a:46:5a:b6:e9:f4:8f:37: f8:cc:02:71:3b:2a:e0:97:84:08:fa:69:d2:e5:05: 44:3f:cf:87:f1:dd:c2:6f:1f:21:48:96:6a:64:4a: 7b:99:3e:24:95:f0:0b:46:30:95:6d:c9:16:a9:cf: 98:7f:54:d7:eb:3b:4f:e1:e4:50:b5:89:8b:e7:b7: c8:ba:d7:5b:ea:52:52:1d:b7:11:53:cb:a0:f6:e3: 38:04:34:14:94:86:de:1d:48:9e:7f:5a:60:c2:f7: f8:1d:6e:1a:c2:71:18:8f:db:39:45:aa:c2:68:c2: ef:e8:1e:d9:cd:70:1e:e9:ee:cb:96:78:1d:5a:fb: ac:f7:38:71:0f:53:6e:e6:52:77:bf:39:4c:49:e6: 55:24:bf:51:16:be:b8:37:4c:f0:2c:27:17:a0:52: c3:6f:21:d4:df:51:bd:54:de:b1:6a:8f:f2:5e:8e: 4e:73:46:a0:64:f4:40:80:be:a2:73:a6:3c:13:25: dc:a1:37:6c:3d:7e:e0:10:e2:03:8f:02:38:3f:7d: ca:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:33:BE:F5:29:EC:0B:90:2A:F9:30:F5:3C:2A:F1:02:C4:D5:F7:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8dda3bec-122f-355f-9f55-5988a45dfb84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:206::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:cd:87:28:2e:54:b9:60:95:08:72:92:0e:8a:c9:da:cc:0b: 4f:51:5f:de:7c:4d:18:9c:8e:fe:8c:1d:e7:e0:7a:8e:2d:0f: fc:c9:a5:2e:be:b3:1c:74:33:c7:32:d9:a8:42:d2:09:40:91: cd:4f:a9:a1:8f:13:71:e3:5b:6e:d4:14:38:2c:4b:d4:d6:63: bf:1f:45:87:73:67:d5:57:8a:25:d9:99:7f:d1:40:40:c3:95: 82:7f:02:4c:9e:ba:56:21:33:97:79:26:4e:05:5b:11:d9:f7: de:19:ad:25:e7:5d:bb:99:c0:d6:29:03:0a:36:e5:18:39:59: 71:86:0a:a6:ab:74:22:45:03:7d:2d:79:e6:90:09:cf:fe:1a: 85:31:44:ac:41:53:ee:d1:4e:49:9c:fe:48:8d:6e:07:f1:87: 1b:75:30:da:03:60:fd:a1:5f:77:f6:b7:6f:98:aa:59:30:d9: 91:08:6d:6c:1a:71:df:11:4c:b4:9d:7e:5d:f7:c0:98:c4:26: a9:78:a8:38:91:a5:6e:22:f0:2a:2e:45:ee:2a:78:d8:2e:ed: 2d:03:01:aa:c2:0a:36:b0:73:cf:d2:99:4b:8e:a7:c8:5e:51: 9b:45:b0:42:a6:7f:b0:76:c9:9e:b1:81:7c:5a:93:fd:9d:6b: b6:45:86:da -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkZUBCtuxyhKthum0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMwNjE0MzAyMVoXDTI1MDYwNDEzMzAyMVowLzEtMCsGA1UEAxMk YWMwZDU5ODgtZDk0Mi00NWU0LTg3NTktYjIzNWM4ZDkwNTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhySaqVcKrgU1bB3Fvt3/IedvJB5NicqxkjFG /GGurVD6ZsR4y4Iqm6g3Fj32NXEEcQiFOkZatun0jzf4zAJxOyrgl4QI+mnS5QVE P8+H8d3Cbx8hSJZqZEp7mT4klfALRjCVbckWqc+Yf1TX6ztP4eRQtYmL57fIutdb 6lJSHbcRU8ug9uM4BDQUlIbeHUief1pgwvf4HW4awnEYj9s5RarCaMLv6B7ZzXAe 6e7LlngdWvus9zhxD1Nu5lJ3vzlMSeZVJL9RFr64N0zwLCcXoFLDbyHU31G9VN6x ao/yXo5Oc0agZPRAgL6ic6Y8EyXcoTdsPX7gEOIDjwI4P33KEwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI0zvvUp7AuQKvkw9Twq8QLE1ffSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOGRkYTNiZWMtMTIyZi0z NTVmLTlmNTUtNTk4OGE0NWRmYjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAIG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABnNhyguVLlglQhykg6KydrMC09RX958TRicjv6MHefgeo4tD/zJ pS6+sxx0M8cy2ahC0glAkc1PqaGPE3HjW27UFDgsS9TWY78fRYdzZ9VXiiXZmX/R QEDDlYJ/AkyeulYhM5d5Jk4FWxHZ994ZrSXnXbuZwNYpAwo25Rg5WXGGCqardCJF A30teeaQCc/+GoUxRKxBU+7RTkmc/kiNbgfxhxt1MNoDYP2hX3f2t2+Yqlkw2ZEI bWwacd8RTLSdfl33wJjEJql4qDiRpW4i8CouRe4qeNgu7S0DAarCCjawc8/SmUuO p8heUZtFsEKmf7B2yZ6xgXxak/2da7ZFhto= -----END CERTIFICATE-----Generated at Tue Apr 8 23:43:56 2025 by rpki-client