$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a12aa547-4497-3b0c-af32-d1bc6a713e3e.roa File: a12aa547-4497-3b0c-af32-d1bc6a713e3e.roa (raw, json) Hash identifier: 2xEX+cVApNNrwbnq/iBDz/2Qp9Y1ZPrp9opw8LbK9AU= Subject key identifier: 3B:B9:92:3C:86:1B:8E:52:6A:12:3A:00:40:FB:19:0E:84:FD:4A:B7 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926CD74E7528F2AC6948180 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a12aa547-4497-3b0c-af32-d1bc6a713e3e.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 44209 IP address blocks: 2001:470:2a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:cd:74:e7:52:8f:2a:c6:94:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=1c87d8d1-6997-4925-b575-0fde77c30ff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:68:36:77:db:50:84:12:46:ba:0d:3d:cf:a9: d3:b8:d9:b1:c0:7b:e3:1f:4f:17:83:2c:42:d4:01: f8:d7:c3:dd:73:60:56:ec:34:e0:55:d7:1d:3d:a7: db:34:f4:94:4a:60:66:47:fe:99:e3:f1:d2:22:bc: fb:b6:43:4e:ee:2a:e6:1b:05:be:16:28:f4:89:bc: 69:8d:47:fd:47:ab:69:dc:9e:37:fd:50:cd:98:e6: f7:a1:5b:61:f7:a9:e7:15:f1:96:4d:86:3e:f7:d7: 89:e4:86:a6:eb:aa:86:79:09:27:95:66:93:2c:7d: 04:65:13:5c:07:60:47:8e:d8:bf:3c:9d:ce:a4:33: 53:5e:11:fe:f2:da:5d:63:0b:e4:1c:1b:12:97:10: ed:1d:65:3c:23:23:94:8b:2e:dd:70:5f:01:b5:99: 50:93:15:41:74:56:e5:84:7b:06:6c:6c:a8:a0:ed: 4a:03:71:75:11:3c:c3:a6:2c:5e:58:c4:c2:95:e3: 72:35:3d:ec:63:ae:dc:29:30:6d:ac:b4:98:b9:3c: ff:20:97:5b:14:f2:f9:18:6c:78:d8:b1:d3:69:6f: 8b:ba:1b:ab:12:11:f3:1c:3c:e5:2e:c4:dd:df:e2: 01:bd:3d:a6:12:f2:87:b5:95:05:8e:01:15:5d:c5: 31:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B9:92:3C:86:1B:8E:52:6A:12:3A:00:40:FB:19:0E:84:FD:4A:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a12aa547-4497-3b0c-af32-d1bc6a713e3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:d7:35:ef:f0:5d:8b:4d:21:a3:40:51:d6:2b:5f:ea:15:7b: 9b:34:95:fc:e2:5b:e4:97:21:2c:34:0b:03:d6:88:1d:0c:9d: 9e:78:c3:69:5f:33:f0:9c:9a:4d:1b:c5:ce:57:79:d2:9c:81: f5:35:24:68:65:9f:de:c9:dc:fe:24:52:66:78:b5:b6:dd:ad: 35:b0:d0:70:40:0b:28:86:46:32:48:28:94:1e:ec:d9:bd:20: 74:ed:0f:0e:5a:07:71:5b:9b:d3:70:ff:b8:64:86:40:17:d7: c8:9a:df:8a:bc:a5:2e:47:2d:12:38:e5:a6:e2:df:78:bc:2d: cf:8c:92:f5:7e:7d:39:5d:9c:4b:6c:72:c4:74:14:6d:69:8f: 11:6c:1e:ea:a5:3e:4e:b9:b7:4d:1e:3c:99:71:a1:dc:f7:59: ed:c2:6a:1f:70:6e:11:12:1e:32:bf:43:8c:b9:f1:71:a8:35: 28:a4:87:13:8d:2a:00:c4:a9:08:49:96:e2:73:5a:27:a0:f2: c1:c5:4f:5a:dd:9a:57:75:c5:b1:f8:cf:52:40:4d:f1:57:5e: 04:71:61:1d:fc:7a:2b:20:60:c3:a7:16:22:ed:67:0c:a3:5b: bc:af:5f:99:8b:8a:a4:c0:88:64:81:03:65:26:61:9d:bc:ef: ad:e3:0c:f0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5Js1051KPKsaUgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk MWM4N2Q4ZDEtNjk5Ny00OTI1LWI1NzUtMGZkZTc3YzMwZmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmg2d9tQhBJGug09z6nTuNmxwHvjH08XgyxC 1AH418Pdc2BW7DTgVdcdPafbNPSUSmBmR/6Z4/HSIrz7tkNO7irmGwW+Fij0ibxp jUf9R6tp3J43/VDNmOb3oVth96nnFfGWTYY+99eJ5Iam66qGeQknlWaTLH0EZRNc B2BHjti/PJ3OpDNTXhH+8tpdYwvkHBsSlxDtHWU8IyOUiy7dcF8BtZlQkxVBdFbl hHsGbGyooO1KA3F1ETzDpixeWMTCleNyNT3sY67cKTBtrLSYuTz/IJdbFPL5GGx4 2LHTaW+LuhurEhHzHDzlLsTd3+IBvT2mEvKHtZUFjgEVXcUx6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDu5kjyGG45SahI6AED7GQ6E/Uq3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTEyYWE1NDctNDQ5Ny0z YjBjLWFmMzItZDFiYzZhNzEzZTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMXXNe/wXYtNIaNAUdYrX+oVe5s0lfziW+SXISw0CwPWiB0MnZ54 w2lfM/Ccmk0bxc5XedKcgfU1JGhln97J3P4kUmZ4tbbdrTWw0HBACyiGRjJIKJQe 7Nm9IHTtDw5aB3Fbm9Nw/7hkhkAX18ia34q8pS5HLRI45abi33i8Lc+MkvV+fTld nEtscsR0FG1pjxFsHuqlPk65t00ePJlxodz3We3Cah9wbhESHjK/Q4y58XGoNSik hxONKgDEqQhJluJzWieg8sHFT1rdmld1xbH4z1JATfFXXgRxYR38eisgYMOnFiLt ZwyjW7yvX5mLiqTAiGSBA2UmYZ28763jDPA= -----END CERTIFICATE-----Generated at Fri Apr 4 17:45:15 2025 by rpki-client