$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/975e740a-4f9a-3a26-9fe9-3e9cf7a9d60d.roa File: 975e740a-4f9a-3a26-9fe9-3e9cf7a9d60d.roa (raw, json) Hash identifier: B4eHJ8vM54dBrxGPExfosKToygshrhlUA8NzWb3lssI= Subject key identifier: DA:65:FA:BD:C3:EB:B7:56:68:F2:F7:71:04:6C:1E:C6:48:77:75:B5 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858496A198F561E5053947EB32B60 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/975e740a-4f9a-3a26-9fe9-3e9cf7a9d60d.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 29802 IP address blocks: 2001:470:3f0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:8f:56:1e:50:53:94:7e:b3:2b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=51a7a345-b8f4-4535-a2b0-5fe1f5d6e0f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:cd:7a:53:1a:47:d1:9d:87:65:8f:61:ba:0c: 69:76:c8:8b:b6:74:c8:59:6b:cb:57:a1:54:7f:cc: 83:4d:ca:9c:eb:01:75:9e:1e:47:79:ac:81:cc:1b: 16:5c:24:f5:13:2a:30:84:a0:e0:48:c8:0f:7f:0b: 0c:c3:f1:71:31:81:2d:50:07:7e:da:bc:8a:e8:6c: f6:51:a4:d9:bc:2f:4c:d5:c9:5c:92:76:7c:aa:53: fd:c6:a1:23:e5:50:da:70:d8:52:06:71:2b:30:c6: 24:2a:b9:84:eb:5a:82:06:30:7d:8e:d4:e6:6e:44: c5:f8:61:66:0b:b6:82:ed:77:74:56:89:53:be:d1: 9c:3f:7f:38:99:bb:f5:28:3f:d4:f1:9f:10:63:20: 5f:b5:a4:06:ae:6e:3d:da:b0:98:02:e7:76:12:00: 38:9c:12:80:32:10:c0:ac:92:96:c1:d1:1b:59:71: 26:59:a6:18:6a:95:29:89:7e:9f:a1:2f:3c:d0:4c: 0f:d3:6a:c1:2d:cf:32:64:65:73:a9:b2:d9:80:ad: 86:fe:f1:49:44:c8:f2:48:64:5b:2a:79:1b:1a:db: fa:f3:fd:fc:59:e4:c9:28:ea:90:f6:71:69:31:9d: 72:94:5e:30:0f:85:c7:c2:72:68:26:66:fe:a5:bb: dc:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:65:FA:BD:C3:EB:B7:56:68:F2:F7:71:04:6C:1E:C6:48:77:75:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/975e740a-4f9a-3a26-9fe9-3e9cf7a9d60d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3f0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:84:a7:68:4c:5b:ee:f6:2c:58:dd:eb:34:a2:4c:dd:00:af: bc:68:f0:b3:1b:bf:5d:ac:84:31:20:70:10:38:11:51:87:7c: 3f:bc:10:39:74:4d:9e:b0:8e:ee:31:65:2e:95:65:91:1a:ef: da:56:93:13:62:cd:4a:0e:1e:92:32:c7:c3:55:b9:d6:7d:b1: a5:f8:9b:61:0b:73:b3:b6:88:90:c2:4a:3e:59:78:ed:a1:94: 91:3c:23:6a:c9:e1:69:e2:8f:4d:bb:a2:38:62:ec:8d:2b:cb: 4b:51:e2:47:46:ae:66:af:01:cc:ff:b5:fe:db:45:6f:93:0a: 60:6d:6b:98:d5:fe:5a:9e:eb:d9:46:38:46:7f:9f:73:9f:fd: 8e:80:5c:28:c6:af:67:7b:72:f7:b6:8c:22:2c:81:f6:2c:1c: 5f:10:99:e2:7a:09:a9:6c:7a:6d:7f:ac:3b:55:83:ca:f1:53: 10:5d:9a:cc:c9:72:61:ac:f1:2e:51:9a:24:f9:90:c1:87:18: ab:df:9b:75:3c:44:5b:f0:b7:13:c3:48:ef:b8:30:03:5a:25: 46:48:52:94:b6:70:d8:c0:f5:d8:d3:ea:a2:16:46:ef:f7:20: a5:59:02:14:b1:a3:19:d7:bd:e3:69:c0:2d:54:59:9c:9b:1d: 84:39:5c:46 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElqGY9WHlBTlH6zK2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk NTFhN2EzNDUtYjhmNC00NTM1LWEyYjAtNWZlMWY1ZDZlMGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9816UxpH0Z2HZY9hugxpdsiLtnTIWWvLV6FU f8yDTcqc6wF1nh5HeayBzBsWXCT1EyowhKDgSMgPfwsMw/FxMYEtUAd+2ryK6Gz2 UaTZvC9M1clcknZ8qlP9xqEj5VDacNhSBnErMMYkKrmE61qCBjB9jtTmbkTF+GFm C7aC7Xd0VolTvtGcP384mbv1KD/U8Z8QYyBftaQGrm492rCYAud2EgA4nBKAMhDA rJKWwdEbWXEmWaYYapUpiX6foS880EwP02rBLc8yZGVzqbLZgK2G/vFJRMjySGRb KnkbGtv68/38WeTJKOqQ9nFpMZ1ylF4wD4XHwnJoJmb+pbvcaQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNpl+r3D67dWaPL3cQRsHsZId3W1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTc1ZTc0MGEtNGY5YS0z YTI2LTlmZTktM2U5Y2Y3YTlkNjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACWEp2hMW+72LFjd6zSiTN0Ar7xo8LMbv12shDEgcBA4EVGHfD+8 EDl0TZ6wju4xZS6VZZEa79pWkxNizUoOHpIyx8NVudZ9saX4m2ELc7O2iJDCSj5Z eO2hlJE8I2rJ4Wnij027ojhi7I0ry0tR4kdGrmavAcz/tf7bRW+TCmBta5jV/lqe 69lGOEZ/n3Of/Y6AXCjGr2d7cve2jCIsgfYsHF8QmeJ6Calsem1/rDtVg8rxUxBd mszJcmGs8S5RmiT5kMGHGKvfm3U8RFvwtxPDSO+4MANaJUZIUpS2cNjA9djT6qIW Ru/3IKVZAhSxoxnXveNpwC1UWZybHYQ5XEY= -----END CERTIFICATE-----Generated at Thu Apr 17 15:28:17 2025 by rpki-client