$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8e6b500b-d1d9-33eb-9afe-32f2bf6a2ee7.roa File: 8e6b500b-d1d9-33eb-9afe-32f2bf6a2ee7.roa (raw, json) Hash identifier: euvMAxKLnWOcT9UgPWhWQkHL3s4PmGJhMeNbZd+sdOI= Subject key identifier: F8:C6:DC:75:90:DD:B7:41:B3:CE:13:46:5D:8E:62:3D:09:3F:99:9F Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858494733F1B023E783B4E3DFC0C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8e6b500b-d1d9-33eb-9afe-32f2bf6a2ee7.roa Signing time: Sun 23 Mar 2025 01:00:39 +0000 ROA not before: Sun 23 Mar 2025 01:00:39 +0000 ROA not after: Sat 21 Jun 2025 01:00:39 +0000 asID: 14371 IP address blocks: 2001:470:345::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:33:f1:b0:23:e7:83:b4:e3:df:c0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 23 01:00:39 2025 GMT Not After : Jun 21 01:00:39 2025 GMT Subject: CN=336e5284-0721-4ef3-b616-903ac50d1afe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fe:ce:61:54:93:e5:fc:f8:49:44:b0:5b:29: 19:6c:ba:30:38:15:b9:5b:ea:5d:11:d2:f5:dd:4b: 02:90:65:51:e9:97:8b:f1:d5:a4:9f:f2:8b:df:ce: 28:7e:27:12:e8:27:c5:8b:73:a3:b1:55:06:29:1f: b5:b2:d0:7d:58:ed:29:44:22:6a:2a:53:5f:f8:d5: ea:12:60:a3:74:c4:ef:8c:24:03:02:f3:f5:74:82: 64:ae:38:a3:42:25:e4:d6:17:44:a6:b8:41:d6:d3: 6a:f6:79:be:b1:d4:a0:41:ed:99:b7:64:f3:30:48: 2f:1b:d3:70:f6:30:ae:7b:66:94:ce:62:b1:d6:c1: 02:04:02:29:dd:2a:69:31:e4:15:4d:90:ce:03:2d: d5:bf:28:57:5d:4d:51:8b:fa:73:f3:a7:6d:d9:97: db:c4:73:d5:52:dd:a6:66:2a:73:7d:f1:f6:19:03: 8c:c4:92:91:09:d4:0c:55:d3:1b:30:74:6f:7b:31: df:2e:3b:15:1c:49:e1:c5:9e:45:53:b2:1b:17:f6: ce:84:1d:e7:fc:eb:50:f5:28:7e:27:d5:5a:a7:ce: 65:ed:da:aa:1b:b3:3f:ae:69:8b:a2:ba:15:4c:18: c1:f5:08:fe:74:47:6e:d1:35:74:14:a1:91:bc:e9: 24:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C6:DC:75:90:DD:B7:41:B3:CE:13:46:5D:8E:62:3D:09:3F:99:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8e6b500b-d1d9-33eb-9afe-32f2bf6a2ee7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:345::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:5c:6a:0b:bd:82:b1:0c:41:77:ef:ba:86:29:4e:20:f6:33: ee:90:f0:80:3e:3a:bf:e6:55:72:46:86:99:0c:f9:25:4f:b1: b6:32:f1:8e:be:8b:6e:d6:74:e6:51:29:cd:ff:bf:57:10:24: 1d:d3:42:ad:16:78:e4:28:a8:61:80:b7:32:d4:ac:ed:ee:cc: 6f:5f:93:e5:54:85:70:a6:f2:86:e7:0d:55:e3:92:01:25:95: 1c:78:96:a1:fc:3f:c9:f3:24:56:7f:f0:c9:45:5e:a1:08:4f: fb:ff:26:bd:f2:76:b8:1e:4a:6d:36:6c:65:49:c9:be:65:64: a6:63:4f:b2:1e:80:61:0d:bc:8d:b7:7a:70:e2:62:d3:bd:09: 7d:c2:22:4d:84:f7:68:b0:b1:09:c3:05:d0:dc:ea:e6:06:aa: 6e:a4:d3:da:65:6b:a6:58:0b:a7:0b:34:10:3b:5f:b2:29:3e: 8c:9e:89:ea:d5:f3:5c:17:3e:20:d0:0b:8b:03:9f:e8:7e:e9: 57:47:b5:59:2e:2a:00:2f:5a:17:5f:6f:66:9b:9b:8f:d7:5a: e6:28:f8:e9:02:7e:a5:83:8b:d9:15:ce:7c:5c:91:f6:06:89: b8:48:d2:b6:c4:4a:1a:93:f4:2d:9b:9c:ab:fc:ad:84:d6:d3: cf:c1:43:0f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElHM/GwI+eDtOPfwMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk MzM2ZTUyODQtMDcyMS00ZWYzLWI2MTYtOTAzYWM1MGQxYWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwP7OYVST5fz4SUSwWykZbLowOBW5W+pdEdL1 3UsCkGVR6ZeL8dWkn/KL384oficS6CfFi3OjsVUGKR+1stB9WO0pRCJqKlNf+NXq EmCjdMTvjCQDAvP1dIJkrjijQiXk1hdEprhB1tNq9nm+sdSgQe2Zt2TzMEgvG9Nw 9jCue2aUzmKx1sECBAIp3SppMeQVTZDOAy3VvyhXXU1Ri/pz86dt2ZfbxHPVUt2m ZipzffH2GQOMxJKRCdQMVdMbMHRvezHfLjsVHEnhxZ5FU7IbF/bOhB3n/OtQ9Sh+ J9Vap85l7dqqG7M/rmmLoroVTBjB9Qj+dEdu0TV0FKGRvOkkBwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPjG3HWQ3bdBs84TRl2OYj0JP5mfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOGU2YjUwMGItZDFkOS0z M2ViLTlhZmUtMzJmMmJmNmEyZWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcANF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ5cagu9grEMQXfvuoYpTiD2M+6Q8IA+Or/mVXJGhpkM+SVPsbYy 8Y6+i27WdOZRKc3/v1cQJB3TQq0WeOQoqGGAtzLUrO3uzG9fk+VUhXCm8obnDVXj kgEllRx4lqH8P8nzJFZ/8MlFXqEIT/v/Jr3ydrgeSm02bGVJyb5lZKZjT7IegGEN vI23enDiYtO9CX3CIk2E92iwsQnDBdDc6uYGqm6k09pla6ZYC6cLNBA7X7IpPoye ierV81wXPiDQC4sDn+h+6VdHtVkuKgAvWhdfb2abm4/XWuYo+OkCfqWDi9kVznxc kfYGibhI0rbEShqT9C2bnKv8rYTW08/BQw8= -----END CERTIFICATE-----Generated at Fri Apr 4 17:45:08 2025 by rpki-client