$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8e89b7d9-dcdf-3370-b6f3-28657d8d16ca.roa File: 8e89b7d9-dcdf-3370-b6f3-28657d8d16ca.roa (raw, json) Hash identifier: 8s5w0B9G2ydtr6+9YzITtozFv4FXHjJTdaxNfPcVcWQ= Subject key identifier: B4:7B:8F:0F:D5:F6:7F:20:AB:CC:7D:FB:19:2B:99:0A:42:28:41:45 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926C73F75C3BD42F5E06D00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8e89b7d9-dcdf-3370-b6f3-28657d8d16ca.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 393397 IP address blocks: 2001:470:1bc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:c7:3f:75:c3:bd:42:f5:e0:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=4bd769e5-1bd7-49e9-86f7-5cacef8529be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c2:dd:94:fc:37:7e:c7:3f:db:09:e7:c9:76: 63:91:a4:96:56:fb:2d:69:fc:ea:ad:47:9c:25:89: 50:32:f9:03:47:2a:9c:d6:c1:2d:de:94:b5:7d:b2: a3:06:3d:d2:31:4f:ba:66:5f:b7:89:08:b2:40:70: 11:c7:08:ae:e9:d7:a3:58:d1:41:12:9b:b0:ba:74: 28:c6:e6:ae:a5:e9:70:c8:fd:ca:47:7b:08:82:77: ae:9f:3a:1a:7e:a8:22:92:33:18:59:31:a5:0d:66: c3:93:35:de:24:e9:67:5d:04:9d:57:c2:42:ac:90: 89:3a:6d:83:c1:cb:69:06:b2:ac:91:2c:76:df:c3: 68:d5:11:b3:78:b8:f3:ac:5d:b4:a9:77:99:c7:aa: 4a:85:c2:0a:b5:de:0e:93:8b:fd:99:ff:9c:ad:b2: e5:ab:72:d6:1c:c5:06:38:c9:0b:8a:d6:de:b7:48: ea:e3:5b:da:7b:60:2d:f0:a0:27:30:02:76:ea:84: 63:35:01:2c:a1:8e:05:82:7e:b0:eb:76:34:13:59: 75:d5:72:ad:d3:6c:aa:e0:0f:36:e0:a8:c6:ab:25: e7:1d:c3:9f:a5:6d:b1:58:38:b6:d1:c8:12:14:02: 42:e9:10:ba:7f:f8:66:db:2d:67:09:ce:d2:b3:a2: 61:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:7B:8F:0F:D5:F6:7F:20:AB:CC:7D:FB:19:2B:99:0A:42:28:41:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8e89b7d9-dcdf-3370-b6f3-28657d8d16ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1bc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:a8:c3:57:d3:59:0a:d9:af:46:ab:e7:ea:87:6a:be:ba:6a: 75:ce:77:1b:02:c7:f0:01:3a:11:26:b5:79:01:64:15:4f:66: 8e:0d:34:87:fb:28:31:f0:c1:18:64:10:e1:ff:98:93:06:c8: 7c:ab:ac:1e:eb:ea:13:f3:31:50:cb:ef:a3:63:21:bd:b0:13: 4c:e6:46:28:c0:67:89:ba:66:08:e7:88:c8:ea:11:ad:06:6c: 30:5a:ca:5e:ec:71:7a:63:41:cc:2c:22:17:7f:ca:57:82:f5: b9:9d:a8:37:e1:11:25:f6:7a:90:ab:94:9c:5a:c8:11:6c:e1: 6d:5e:b3:df:15:39:16:1f:8c:1b:3c:4e:2c:3d:21:64:a2:c6: 82:1e:0b:0f:96:92:a1:cf:8a:e6:65:08:70:54:73:a1:42:29: 09:6b:3c:cf:ce:c7:54:cf:a5:99:37:1e:22:aa:d7:d4:3a:fd: cf:97:c4:76:d1:a0:a4:b6:b3:ad:e8:4b:10:b5:e6:37:a0:4f: 9d:b9:2a:8c:99:00:c5:28:e8:77:b1:95:84:2c:d5:3c:8a:d7: 31:63:1f:2e:19:3a:17:4a:53:c7:48:33:c7:d4:50:82:b7:85: 38:05:51:07:e4:a9:a0:9d:11:7e:26:b3:cc:82:be:c2:cf:22: 10:52:18:cd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5Jsc/dcO9QvXgbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk NGJkNzY5ZTUtMWJkNy00OWU5LTg2ZjctNWNhY2VmODUyOWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8LdlPw3fsc/2wnnyXZjkaSWVvstafzqrUec JYlQMvkDRyqc1sEt3pS1fbKjBj3SMU+6Zl+3iQiyQHARxwiu6dejWNFBEpuwunQo xuaupelwyP3KR3sIgneunzoafqgikjMYWTGlDWbDkzXeJOlnXQSdV8JCrJCJOm2D wctpBrKskSx238No1RGzeLjzrF20qXeZx6pKhcIKtd4Ok4v9mf+crbLlq3LWHMUG OMkLitbet0jq41vae2At8KAnMAJ26oRjNQEsoY4Fgn6w63Y0E1l11XKt02yq4A82 4KjGqyXnHcOfpW2xWDi20cgSFAJC6RC6f/hm2y1nCc7Ss6JhbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLR7jw/V9n8gq8x9+xkrmQpCKEFFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOGU4OWI3ZDktZGNkZi0z MzcwLWI2ZjMtMjg2NTdkOGQxNmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAG8 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIWow1fTWQrZr0ar5+qHar66anXOdxsCx/ABOhEmtXkBZBVPZo4N NIf7KDHwwRhkEOH/mJMGyHyrrB7r6hPzMVDL76NjIb2wE0zmRijAZ4m6ZgjniMjq Ea0GbDBayl7scXpjQcwsIhd/yleC9bmdqDfhESX2epCrlJxayBFs4W1es98VORYf jBs8Tiw9IWSixoIeCw+WkqHPiuZlCHBUc6FCKQlrPM/Ox1TPpZk3HiKq19Q6/c+X xHbRoKS2s63oSxC15jegT525KoyZAMUo6HexlYQs1TyK1zFjHy4ZOhdKU8dIM8fU UIK3hTgFUQfkqaCdEX4ms8yCvsLPIhBSGM0= -----END CERTIFICATE-----Generated at Fri Apr 4 17:53:13 2025 by rpki-client