$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/975e740a-4f9a-3a26-9fe9-3e9cf7a9d60d.roa File: 975e740a-4f9a-3a26-9fe9-3e9cf7a9d60d.roa (raw, json) Hash identifier: +4wLpAwBDLOnQTAEnpuHlMRdP8Z31v2+bDUPCV7gsPo= Subject key identifier: 04:D1:22:F7:62:75:99:F0:89:CD:BC:51:57:2B:82:C8:FD:ED:EC:9B Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858488989C151403249FA22C47180 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/975e740a-4f9a-3a26-9fe9-3e9cf7a9d60d.roa Signing time: Tue 14 Jan 2025 02:30:11 +0000 ROA not before: Tue 14 Jan 2025 02:30:11 +0000 ROA not after: Mon 14 Apr 2025 01:30:11 +0000 asID: 29802 IP address blocks: 2001:470:3f0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:89:89:c1:51:40:32:49:fa:22:c4:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jan 14 02:30:11 2025 GMT Not After : Apr 14 01:30:11 2025 GMT Subject: CN=527c2808-962c-4752-abce-c693c9f08665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:47:0d:47:9e:89:08:5e:7a:59:43:85:3b:cc: 4f:2f:26:7d:7c:9d:b4:9e:fe:5d:5f:9b:c1:32:75: e0:90:a1:77:48:ed:d2:5d:5f:4c:83:85:7d:7e:d3: 17:71:5f:17:76:94:83:43:5b:15:ff:e3:37:59:55: fa:90:c4:ad:60:fa:64:5f:9d:94:4f:e5:20:f8:fc: a0:47:f8:9a:99:fd:41:ee:77:9c:3d:d3:59:db:20: 44:46:a5:83:22:f4:66:a8:c9:9d:b2:cb:a1:bf:15: d8:a8:c5:f4:56:6e:f1:35:dd:e1:67:ef:30:30:0f: 89:30:a8:54:af:d6:35:a2:61:0b:5e:e9:48:09:b5: 8e:e3:e3:e7:b2:4e:6e:54:ea:80:e9:3d:c3:ad:f3: 6e:ef:49:5c:f8:5e:e8:0b:3c:9b:fa:73:11:96:6f: bf:ed:ae:fc:a7:24:f9:77:c2:05:19:82:57:5f:9d: 83:90:62:e2:61:42:24:e0:ea:7b:9f:73:9b:26:b2: 3a:62:f3:7b:0a:c6:fc:c7:4e:7b:b0:71:ea:d9:b8: e3:b8:e8:54:99:e9:a2:c6:0a:c8:61:d7:50:b6:12: bc:63:7c:b9:2e:c4:f0:8c:2b:59:dd:9a:b0:42:65: 52:71:1b:af:86:f7:3a:a9:c8:29:b6:9f:b6:76:e5: 97:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D1:22:F7:62:75:99:F0:89:CD:BC:51:57:2B:82:C8:FD:ED:EC:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/975e740a-4f9a-3a26-9fe9-3e9cf7a9d60d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3f0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:f6:8e:a0:27:de:78:6f:d4:9c:5d:4c:b1:7b:a2:15:a2:fe: 9d:f7:6e:ed:53:7a:63:27:73:50:ed:52:8d:7c:5d:7d:74:fa: 09:5e:fe:56:46:b1:4e:71:43:d5:f2:91:48:ef:11:23:84:6b: 7e:29:e3:da:3f:fe:f0:2f:1a:e7:a6:a7:72:4c:44:fc:36:3a: 0b:3b:75:ce:b0:04:4c:d1:eb:ff:56:8e:51:8f:18:d7:74:3d: 43:5f:29:a0:f7:23:1b:7b:99:b5:58:59:1a:94:c3:58:1a:9b: e3:5d:0e:7b:c0:08:ab:b8:86:a5:cd:02:c3:b5:e0:19:bb:aa: dd:f4:09:57:78:02:20:2c:e6:49:16:7a:07:bd:f7:50:40:60: e4:eb:86:bc:fe:e3:3c:39:a0:c9:10:ab:74:62:b7:4a:71:99: d3:32:c7:f1:36:09:57:b9:a1:a3:cd:9f:db:1a:09:88:62:28: fd:75:93:67:f8:f4:f2:9e:22:e8:23:2c:f0:f1:cb:c9:96:8a: 11:6b:76:95:1e:b7:89:47:cd:2f:b7:55:31:9d:c1:20:dd:5f: 46:f9:2e:3f:ef:db:6e:bc:c3:d6:41:b7:03:bb:cb:06:3d:70: 5e:3b:12:57:f4:32:58:87:ee:e6:e9:4f:94:35:48:09:9e:30: fe:09:be:0d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiJicFRQDJJ+iLEcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDExNDAyMzAxMVoXDTI1MDQxNDAxMzAxMVowLzEtMCsGA1UEAxMk NTI3YzI4MDgtOTYyYy00NzUyLWFiY2UtYzY5M2M5ZjA4NjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEcNR56JCF56WUOFO8xPLyZ9fJ20nv5dX5vB MnXgkKF3SO3SXV9Mg4V9ftMXcV8XdpSDQ1sV/+M3WVX6kMStYPpkX52UT+Ug+Pyg R/iamf1B7necPdNZ2yBERqWDIvRmqMmdssuhvxXYqMX0Vm7xNd3hZ+8wMA+JMKhU r9Y1omELXulICbWO4+Pnsk5uVOqA6T3DrfNu70lc+F7oCzyb+nMRlm+/7a78pyT5 d8IFGYJXX52DkGLiYUIk4Op7n3ObJrI6YvN7Csb8x057sHHq2bjjuOhUmemixgrI YddQthK8Y3y5LsTwjCtZ3ZqwQmVScRuvhvc6qcgptp+2duWXtQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFATRIvdidZnwic28UVcrgsj97eybMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTc1ZTc0MGEtNGY5YS0z YTI2LTlmZTktM2U5Y2Y3YTlkNjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFH2jqAn3nhv1JxdTLF7ohWi/p33bu1TemMnc1DtUo18XX10+gle /lZGsU5xQ9XykUjvESOEa34p49o//vAvGuemp3JMRPw2Ogs7dc6wBEzR6/9WjlGP GNd0PUNfKaD3Ixt7mbVYWRqUw1gam+NdDnvACKu4hqXNAsO14Bm7qt30CVd4AiAs 5kkWege991BAYOTrhrz+4zw5oMkQq3Rit0pxmdMyx/E2CVe5oaPNn9saCYhiKP11 k2f49PKeIugjLPDxy8mWihFrdpUet4lHzS+3VTGdwSDdX0b5Lj/v2268w9ZBtwO7 ywY9cF47Elf0MliH7ubpT5Q1SAmeMP4Jvg0= -----END CERTIFICATE-----Generated at Wed Feb 5 04:37:23 2025 by rpki-client