$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a22ed408-e150-33b4-b505-4848a028277a.roa File: a22ed408-e150-33b4-b505-4848a028277a.roa (raw, json) Hash identifier: G+WCzaoZRsjjW7veFNHNN4yyp87uzfp4TQrx+xI1FGE= Subject key identifier: B1:00:50:8A:67:F5:34:99:E1:9E:9B:29:66:96:0E:8A:DB:46:C6:5B Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584941AD239A424A8CB2C7245FA0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a22ed408-e150-33b4-b505-4848a028277a.roa Signing time: Fri 21 Mar 2025 01:30:13 +0000 ROA not before: Fri 21 Mar 2025 01:30:13 +0000 ROA not after: Thu 19 Jun 2025 01:30:13 +0000 asID: 25780 IP address blocks: 2001:470:429::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:41:ad:23:9a:42:4a:8c:b2:c7:24:5f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 21 01:30:13 2025 GMT Not After : Jun 19 01:30:13 2025 GMT Subject: CN=3276d981-4846-47c5-9ae1-72b522f42169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:6a:fc:85:26:37:d4:f0:44:6b:3d:a6:b7:b9: 5f:01:5e:6e:c6:23:1e:1d:a7:0b:22:1f:5a:31:c7: 28:e6:de:e0:da:6d:6e:a4:37:3d:32:dc:ae:28:11: 3a:2d:a7:f3:c8:de:39:e5:57:e1:bf:ab:a0:b6:65: 5e:ba:47:26:45:ae:39:14:27:cb:f7:b0:6c:ab:5c: c0:e1:f6:bd:2c:d9:de:33:9f:9f:35:b5:10:9d:b5: 74:bd:60:79:1e:38:62:80:5f:bb:df:d7:1b:0f:1d: 5b:66:3d:12:55:3c:50:ae:28:23:de:f9:ad:9b:c3: b6:62:20:3e:d1:85:3b:30:fb:ba:eb:13:b7:5f:aa: 81:ed:5e:e6:4a:12:c0:38:8b:57:b8:c0:5a:28:29: 93:7a:52:e3:9d:3a:92:ec:9d:7a:ab:f1:c8:c7:9e: 84:f0:e0:16:e8:5f:9a:45:b0:dc:eb:f9:7f:ea:97: ee:09:5d:bf:ff:b0:82:fd:37:9e:56:00:fe:55:e9: c9:a6:e5:6a:ed:bb:74:32:5b:c9:a3:38:34:da:15: 2a:c5:31:12:b6:cf:0e:a9:b7:dd:a3:44:c7:d8:07: 64:d7:f9:77:3a:16:d8:d0:e4:ff:26:c7:b5:6c:10: ba:65:17:69:75:e9:6a:c6:2f:b4:a0:ac:5b:cd:65: ef:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:00:50:8A:67:F5:34:99:E1:9E:9B:29:66:96:0E:8A:DB:46:C6:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a22ed408-e150-33b4-b505-4848a028277a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:429::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:03:27:a6:87:d1:88:39:89:4d:1f:d8:bf:87:bb:a5:3a:52: ed:18:a1:43:14:4c:ea:1e:c2:0e:68:4d:8a:cd:cf:b9:be:10: 8b:38:ae:4d:d8:19:c7:97:23:b3:f6:cf:1a:8c:72:75:da:66: 54:ad:7e:43:64:e1:a4:f2:47:1c:75:63:b9:f1:f5:52:5f:ae: 6e:42:c0:c3:85:f6:85:f7:f5:da:7e:6d:5b:5c:08:d2:06:c1: 02:13:64:5e:fb:23:b0:42:00:6e:28:18:95:dd:06:b7:5f:85: f9:6e:c0:3c:93:31:09:de:2e:c5:e2:c8:18:df:12:3d:75:4a: b0:26:5e:fc:92:a2:bd:df:1c:89:d1:26:00:20:81:4b:89:89: e5:f4:86:4c:7f:48:3e:c4:74:52:f4:13:52:d9:16:8c:44:67: 18:a5:47:d5:24:6f:db:d8:c1:86:95:74:0d:da:e9:35:52:ca: 18:f6:0d:7b:a7:2e:23:0e:2f:f2:4a:69:1e:e7:28:4a:6c:aa: aa:b6:d4:ab:5c:fb:bc:80:8e:fd:d4:79:8f:b5:a0:48:5a:ee: b3:a9:f3:d9:7f:71:bd:41:a7:6e:21:70:b3:00:97:e6:2a:39: b3:90:13:d3:bd:0f:06:03:c5:19:23:10:ae:31:2c:c8:35:fc: 48:f3:94:a7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElBrSOaQkqMssckX6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMyMTAxMzAxM1oXDTI1MDYxOTAxMzAxM1owLzEtMCsGA1UEAxMk MzI3NmQ5ODEtNDg0Ni00N2M1LTlhZTEtNzJiNTIyZjQyMTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2r8hSY31PBEaz2mt7lfAV5uxiMeHacLIh9a Mcco5t7g2m1upDc9MtyuKBE6LafzyN455Vfhv6ugtmVeukcmRa45FCfL97Bsq1zA 4fa9LNneM5+fNbUQnbV0vWB5HjhigF+739cbDx1bZj0SVTxQrigj3vmtm8O2YiA+ 0YU7MPu66xO3X6qB7V7mShLAOItXuMBaKCmTelLjnTqS7J16q/HIx56E8OAW6F+a RbDc6/l/6pfuCV2//7CC/TeeVgD+VenJpuVq7bt0MlvJozg02hUqxTESts8Oqbfd o0TH2Adk1/l3OhbY0OT/Jse1bBC6ZRdpdelqxi+0oKxbzWXvpwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLEAUIpn9TSZ4Z6bKWaWDorbRsZbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTIyZWQ0MDgtZTE1MC0z M2I0LWI1MDUtNDg0OGEwMjgyNzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQp MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC0DJ6aH0Yg5iU0f2L+Hu6U6Uu0YoUMUTOoewg5oTYrNz7m+EIs4 rk3YGceXI7P2zxqMcnXaZlStfkNk4aTyRxx1Y7nx9VJfrm5CwMOF9oX39dp+bVtc CNIGwQITZF77I7BCAG4oGJXdBrdfhfluwDyTMQneLsXiyBjfEj11SrAmXvySor3f HInRJgAggUuJieX0hkx/SD7EdFL0E1LZFoxEZxilR9Ukb9vYwYaVdA3a6TVSyhj2 DXunLiMOL/JKaR7nKEpsqqq21Ktc+7yAjv3UeY+1oEha7rOp89l/cb1Bp24hcLMA l+YqObOQE9O9DwYDxRkjEK4xLMg1/EjzlKc= -----END CERTIFICATE-----Generated at Fri Apr 4 17:57:34 2025 by rpki-client