$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9a4e0954-4e54-387a-8d80-0054623a5fca.roa File: 9a4e0954-4e54-387a-8d80-0054623a5fca.roa (raw, json) Hash identifier: qFy4svCwFIvFnZhFJyHRbThq8Oe19nVVMHcLfz3i9gw= Subject key identifier: 87:5F:3C:EA:0B:9E:C3:A5:D5:09:3E:42:EE:AB:0D:0F:2F:B7:F6:40 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926C17F178FF877FBA69240 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9a4e0954-4e54-387a-8d80-0054623a5fca.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 11399 IP address blocks: 2001:470:ed::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:c1:7f:17:8f:f8:77:fb:a6:92:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=03b1aa33-f01b-409e-a0df-f354c5288fb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:81:c0:21:9c:d5:de:2d:10:b9:8f:0c:a0:cd: bf:a4:3f:b4:9b:6d:ef:d4:43:b1:05:63:89:92:99: 28:e4:b2:cd:a1:41:ed:d8:36:b1:1a:69:d4:6e:2d: 60:91:95:84:22:d2:61:2f:cf:5c:96:70:7f:35:45: a3:60:c9:e3:61:62:b5:e1:71:5c:28:e0:62:f0:63: 59:d6:3b:01:72:5f:3a:af:d4:49:fa:29:2a:a8:22: d0:7d:32:7b:95:34:64:66:1e:5f:58:b5:45:d2:1b: a1:63:78:00:80:a2:5e:76:56:60:bf:88:aa:b4:fc: e6:41:2c:64:ed:f2:a5:1b:f3:05:8e:e4:da:40:a2: 37:61:4a:aa:81:b2:e1:f2:ed:3a:bf:81:4d:8c:be: f2:e8:84:d9:78:08:05:a1:0b:e0:ed:9c:4f:ba:38: 4b:2a:f4:48:ec:4c:ca:92:d5:ed:3a:ae:df:03:e7: 58:be:b6:4b:54:f7:92:f4:91:31:1b:ee:f3:c0:5b: 7c:5e:5b:fa:b0:d3:ab:5d:fc:ce:60:f4:6b:22:46: 41:d5:fd:6b:07:ec:38:94:97:0d:67:bd:df:56:62: 84:51:be:3b:3b:50:e7:67:da:ab:b5:58:7a:78:7e: 1a:99:f0:64:5f:15:74:5a:42:eb:84:35:ec:2c:53: 68:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:5F:3C:EA:0B:9E:C3:A5:D5:09:3E:42:EE:AB:0D:0F:2F:B7:F6:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9a4e0954-4e54-387a-8d80-0054623a5fca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:ed::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:be:e0:a9:c5:47:5c:42:80:51:c6:91:1a:18:21:ff:fd:ce: 46:8f:2c:8f:0d:de:c5:4f:57:f4:65:08:79:2f:14:ec:09:7d: 1c:f8:64:3d:9f:c6:a2:ff:9d:c4:fe:5e:46:c9:58:2c:8b:5a: 2e:bc:b8:ed:e3:ae:dd:e1:8f:08:af:d0:f6:e8:d4:5c:50:70: f5:1d:82:2a:4e:4c:b7:44:50:1f:7a:79:27:88:9d:38:dc:60: 58:45:45:77:20:cf:dd:3a:03:1d:e7:81:37:4d:64:d1:21:37: 45:50:dd:42:0e:22:c8:bb:dd:85:2c:d5:a2:c7:7a:64:0b:64: b3:45:3b:1e:a9:31:10:81:1b:23:6b:33:6f:d5:b6:db:5a:37: c8:e6:ec:d9:d9:f0:41:f2:fe:52:1c:e7:1d:cc:82:e5:42:0c: a1:26:40:37:dc:ea:24:f9:d8:05:84:8d:c8:cf:eb:d2:f8:25: 88:4d:c2:a8:b3:84:88:60:a1:10:f3:6d:b0:46:1c:ae:d3:96: 0e:d7:14:06:e7:de:cd:be:5c:81:ac:eb:6b:a6:12:24:6a:8a: 18:6d:95:94:35:9f:88:19:0f:35:8c:74:90:30:56:8f:83:34: 72:56:de:8d:41:f5:71:d3:c3:c2:e7:55:65:63:b6:bb:7e:7e: b6:1a:67:69 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JsF/F4/4d/umkkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk MDNiMWFhMzMtZjAxYi00MDllLWEwZGYtZjM1NGM1Mjg4ZmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIHAIZzV3i0QuY8MoM2/pD+0m23v1EOxBWOJ kpko5LLNoUHt2DaxGmnUbi1gkZWEItJhL89clnB/NUWjYMnjYWK14XFcKOBi8GNZ 1jsBcl86r9RJ+ikqqCLQfTJ7lTRkZh5fWLVF0huhY3gAgKJedlZgv4iqtPzmQSxk 7fKlG/MFjuTaQKI3YUqqgbLh8u06v4FNjL7y6ITZeAgFoQvg7ZxPujhLKvRI7EzK ktXtOq7fA+dYvrZLVPeS9JExG+7zwFt8Xlv6sNOrXfzOYPRrIkZB1f1rB+w4lJcN Z73fVmKEUb47O1DnZ9qrtVh6eH4amfBkXxV0WkLrhDXsLFNo9QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIdfPOoLnsOl1Qk+Qu6rDQ8vt/ZAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOWE0ZTA5NTQtNGU1NC0z ODdhLThkODAtMDA1NDYyM2E1ZmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADt MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADS+4KnFR1xCgFHGkRoYIf/9zkaPLI8N3sVPV/RlCHkvFOwJfRz4 ZD2fxqL/ncT+XkbJWCyLWi68uO3jrt3hjwiv0Pbo1FxQcPUdgipOTLdEUB96eSeI nTjcYFhFRXcgz906Ax3ngTdNZNEhN0VQ3UIOIsi73YUs1aLHemQLZLNFOx6pMRCB GyNrM2/VtttaN8jm7NnZ8EHy/lIc5x3MguVCDKEmQDfc6iT52AWEjcjP69L4JYhN wqizhIhgoRDzbbBGHK7Tlg7XFAbn3s2+XIGs62umEiRqihhtlZQ1n4gZDzWMdJAw Vo+DNHJW3o1B9XHTw8LnVWVjtrt+frYaZ2k= -----END CERTIFICATE-----Generated at Fri Apr 4 17:58:33 2025 by rpki-client