$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/963de827-0eb3-39c8-8bee-3f01a20ec876.roa File: 963de827-0eb3-39c8-8bee-3f01a20ec876.roa (raw, json) Hash identifier: r19XUA5TQ8u3YFvkxnx7B0q7G1d0XnrKDXrIiHgfwIc= Subject key identifier: 05:C4:C9:A2:15:6B:78:A6:F2:D2:8F:49:15:8C:02:BD:FF:43:8F:6F Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926E531D3F8DECA54234DA0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/963de827-0eb3-39c8-8bee-3f01a20ec876.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 212955 IP address blocks: 2001:470:2a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:e5:31:d3:f8:de:ca:54:23:4d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=a2e1c94b-1080-4797-9878-e769efaaef09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d2:b4:fc:0d:0d:a0:4b:17:92:95:e4:a0:e3: b9:93:a0:a8:b8:c8:f3:1a:e6:72:f1:52:da:cf:1e: aa:42:c4:5a:6a:3a:da:51:33:d9:c3:a2:92:e2:f9: 29:e5:c4:0d:fb:ac:d9:2a:d9:67:a7:be:ce:db:d9: d7:f2:28:a8:93:60:76:2e:ac:23:9c:db:9d:d8:2b: 29:72:27:e8:54:8e:b8:71:39:60:4e:df:44:22:ab: 03:48:bd:ea:9d:d7:e1:8d:ba:5b:7a:5e:a6:93:cf: df:81:5c:0b:2b:d8:36:81:57:eb:50:f2:2d:a4:e5: fc:47:ba:35:b0:49:fd:10:9a:ad:ea:c2:2f:ac:30: 82:db:2a:6c:8a:41:62:6f:cf:80:96:87:06:39:8a: e6:c2:2a:ac:8f:db:21:f9:b0:6d:d6:e2:46:f6:30: 68:f1:3a:87:b0:05:b9:21:3c:b0:d8:46:1f:62:22: 2e:40:d5:d0:6a:46:05:0e:39:dc:41:74:07:95:15: e1:62:f1:5b:89:51:42:1a:86:ab:0d:70:b6:52:de: e0:54:02:91:dd:29:fa:86:80:63:68:75:1b:63:4c: 54:f9:9a:d7:36:36:1f:fe:a4:be:d6:62:8c:a3:fc: 37:9a:be:0d:67:52:69:85:d8:85:02:3e:ea:b6:c5: 3b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C4:C9:A2:15:6B:78:A6:F2:D2:8F:49:15:8C:02:BD:FF:43:8F:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/963de827-0eb3-39c8-8bee-3f01a20ec876.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:d2:41:a6:84:be:fc:ad:dc:5a:77:4a:c7:0e:31:fd:7f:f8: 45:1e:6f:3d:d6:00:38:f3:c5:f4:da:1f:58:83:23:27:87:1d: 3e:54:27:81:97:34:e1:c8:3f:53:2e:af:ef:c2:2a:90:2f:e1: 5b:fa:b4:1b:f7:08:9d:b4:9c:bb:91:10:8e:87:15:5d:10:c4: e2:9b:00:0d:31:34:7b:be:c9:b1:51:70:3e:4d:70:0b:e2:1f: f6:c7:d6:36:13:92:d3:19:12:ab:96:a5:3b:bd:f4:4a:f9:9e: 05:0e:87:6f:89:2d:bb:4b:84:eb:93:e3:77:31:37:c2:6d:d2: b8:50:bd:9a:df:9c:b7:11:8b:36:db:05:f7:5b:77:0c:70:2c: ff:92:19:85:c3:38:ad:f7:f0:3d:bb:6e:3a:09:cf:ef:24:31: f8:2a:a9:ff:26:d6:57:87:45:ef:7d:0c:c5:a0:57:f0:57:83: 4c:ee:b9:29:db:ca:29:00:16:48:fb:a8:75:59:a2:1b:e5:ee: 22:89:ce:01:b3:10:78:79:c7:cc:03:e0:26:ff:88:60:86:41: a9:e6:6d:ca:21:5e:10:75:1f:f9:58:ad:c7:24:dd:ef:3a:86: f4:69:d6:be:66:b0:ef:56:e6:4f:93:be:31:0f:6c:ef:c6:10: 46:26:e5:e3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JuUx0/jeylQjTaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk YTJlMWM5NGItMTA4MC00Nzk3LTk4NzgtZTc2OWVmYWFlZjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdK0/A0NoEsXkpXkoOO5k6CouMjzGuZy8VLa zx6qQsRaajraUTPZw6KS4vkp5cQN+6zZKtlnp77O29nX8iiok2B2LqwjnNud2Csp cifoVI64cTlgTt9EIqsDSL3qndfhjbpbel6mk8/fgVwLK9g2gVfrUPItpOX8R7o1 sEn9EJqt6sIvrDCC2ypsikFib8+AlocGOYrmwiqsj9sh+bBt1uJG9jBo8TqHsAW5 ITyw2EYfYiIuQNXQakYFDjncQXQHlRXhYvFbiVFCGoarDXC2Ut7gVAKR3Sn6hoBj aHUbY0xU+ZrXNjYf/qS+1mKMo/w3mr4NZ1JphdiFAj7qtsU7kwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAXEyaIVa3im8tKPSRWMAr3/Q49vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTYzZGU4MjctMGViMy0z OWM4LThiZWUtM2YwMWEyMGVjODc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE7SQaaEvvyt3Fp3SscOMf1/+EUebz3WADjzxfTaH1iDIyeHHT5U J4GXNOHIP1Mur+/CKpAv4Vv6tBv3CJ20nLuREI6HFV0QxOKbAA0xNHu+ybFRcD5N cAviH/bH1jYTktMZEquWpTu99Er5ngUOh2+JLbtLhOuT43cxN8Jt0rhQvZrfnLcR izbbBfdbdwxwLP+SGYXDOK338D27bjoJz+8kMfgqqf8m1leHRe99DMWgV/BXg0zu uSnbyikAFkj7qHVZohvl7iKJzgGzEHh5x8wD4Cb/iGCGQanmbcohXhB1H/lYrcck 3e86hvRp1r5msO9W5k+TvjEPbO/GEEYm5eM= -----END CERTIFICATE-----Generated at Fri Apr 4 17:47:49 2025 by rpki-client