$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/92b6e178-3b1f-337a-a501-650a3e371e03.roa File: 92b6e178-3b1f-337a-a501-650a3e371e03.roa (raw, json) Hash identifier: McToI4RebyPYzIbC+on3tlE1qFTwsxOy1hORHueMR0w= Subject key identifier: D1:F6:41:8D:55:D5:5D:F3:99:49:1B:1C:C7:AB:42:C2:B4:7F:6E:0A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858495537EB67B1C27954A91493C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/92b6e178-3b1f-337a-a501-650a3e371e03.roa Signing time: Fri 28 Mar 2025 01:30:12 +0000 ROA not before: Fri 28 Mar 2025 01:30:12 +0000 ROA not after: Thu 26 Jun 2025 01:30:12 +0000 asID: 125 IP address blocks: 2001:470:42e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:55:37:eb:67:b1:c2:79:54:a9:14:93:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 28 01:30:12 2025 GMT Not After : Jun 26 01:30:12 2025 GMT Subject: CN=8743e646-e833-455e-97b8-47059eca3381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1b:c9:77:ae:49:64:a2:0c:8c:fc:78:87:cf: c9:ad:cc:d7:96:8d:29:d5:6e:75:c7:11:c5:e4:28: 0b:97:5e:b4:cb:3c:b0:53:c8:ad:cd:a9:d9:f5:c9: 62:df:23:6d:b6:c8:41:c7:87:82:dc:84:d0:80:2e: 8f:ab:7b:c8:24:a1:0f:bd:ae:43:8a:4e:fe:e6:36: 57:42:f4:85:8c:2e:20:df:1d:56:c6:33:63:19:ba: df:e5:0c:c0:dd:f1:3b:a5:21:a2:92:ec:2d:d1:6f: 6a:7a:c8:ee:df:d3:f4:b0:16:6b:4f:60:9f:b4:6d: 82:be:39:1f:62:b0:45:b1:7e:5a:26:f3:20:d5:a6: 3c:4d:98:c6:ad:71:83:e1:59:06:a8:17:ce:3e:4e: 87:c1:40:a0:45:fb:ac:68:fc:e6:f4:74:35:47:3a: 73:96:eb:b8:90:34:6d:31:74:4f:95:02:58:9a:46: b0:2c:5a:c4:32:32:de:93:72:47:a3:9d:80:ed:ab: e8:66:5c:11:6c:6a:4a:59:99:ac:84:7f:ce:63:88: f1:4d:c4:b6:dd:21:e1:d3:be:2a:96:74:ca:d6:a0: dd:c8:5c:d1:d0:07:98:c5:1e:a5:a9:af:f8:38:4b: b7:ee:97:8f:a3:8f:25:73:04:db:9a:fe:65:47:bf: 1e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F6:41:8D:55:D5:5D:F3:99:49:1B:1C:C7:AB:42:C2:B4:7F:6E:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/92b6e178-3b1f-337a-a501-650a3e371e03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:42e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:67:52:89:6c:7d:74:7c:5b:ab:da:84:89:75:15:f5:5a:0f: 38:af:de:4d:37:f1:6e:3f:ca:15:e3:12:63:44:34:eb:60:ed: 21:61:7d:89:31:bc:c2:7b:22:8f:38:2d:80:40:21:f5:1a:b1: 28:9e:2e:f1:25:2d:52:f6:93:0d:e6:3a:60:e1:fc:10:10:69: 2b:9b:4c:b8:39:8f:e0:7d:03:c9:cd:13:ed:3b:7f:74:b7:bd: 81:fd:b9:1e:a3:a9:4c:49:36:98:ce:c3:34:1a:a1:35:0d:4e: 1b:f7:ae:38:75:ce:c7:54:c9:9d:c6:69:ac:12:16:2d:1f:2c: c1:0c:c2:87:d4:96:44:42:f1:98:19:19:c8:95:0a:ed:a5:6d: 9d:27:3b:0d:94:58:30:4a:64:44:37:10:b5:e6:af:be:d4:aa: 99:e0:9b:63:d7:36:90:67:7a:76:51:68:5d:a9:ca:e2:c3:89: 04:42:64:2b:3a:18:47:99:8f:c6:9f:1c:d1:ef:b2:f4:80:18: 49:d1:14:10:67:0d:0e:49:47:11:03:5f:4d:61:65:d7:78:9a: 46:30:8e:8d:72:28:c6:5e:0a:1e:14:16:46:73:b9:85:f8:b1: 03:e2:d6:f3:24:00:84:18:ba:cc:68:9e:be:4f:d0:72:09:f4: cc:9e:68:d0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElVN+tnscJ5VKkUk8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMyODAxMzAxMloXDTI1MDYyNjAxMzAxMlowLzEtMCsGA1UEAxMk ODc0M2U2NDYtZTgzMy00NTVlLTk3YjgtNDcwNTllY2EzMzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRvJd65JZKIMjPx4h8/JrczXlo0p1W51xxHF 5CgLl160yzywU8itzanZ9cli3yNttshBx4eC3ITQgC6Pq3vIJKEPva5Dik7+5jZX QvSFjC4g3x1WxjNjGbrf5QzA3fE7pSGikuwt0W9qesju39P0sBZrT2CftG2Cvjkf YrBFsX5aJvMg1aY8TZjGrXGD4VkGqBfOPk6HwUCgRfusaPzm9HQ1Rzpzluu4kDRt MXRPlQJYmkawLFrEMjLek3JHo52A7avoZlwRbGpKWZmshH/OY4jxTcS23SHh074q lnTK1qDdyFzR0AeYxR6lqa/4OEu37pePo48lcwTbmv5lR78e1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNH2QY1V1V3zmUkbHMerQsK0f24KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTJiNmUxNzgtM2IxZi0z MzdhLWE1MDEtNjUwYTNlMzcxZTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABhnUolsfXR8W6vahIl1FfVaDziv3k038W4/yhXjEmNENOtg7SFh fYkxvMJ7Io84LYBAIfUasSieLvElLVL2kw3mOmDh/BAQaSubTLg5j+B9A8nNE+07 f3S3vYH9uR6jqUxJNpjOwzQaoTUNThv3rjh1zsdUyZ3GaawSFi0fLMEMwofUlkRC 8ZgZGciVCu2lbZ0nOw2UWDBKZEQ3ELXmr77Uqpngm2PXNpBnenZRaF2pyuLDiQRC ZCs6GEeZj8afHNHvsvSAGEnRFBBnDQ5JRxEDX01hZdd4mkYwjo1yKMZeCh4UFkZz uYX4sQPi1vMkAIQYusxonr5P0HIJ9MyeaNA= -----END CERTIFICATE-----Generated at Fri Apr 4 17:50:25 2025 by rpki-client