$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a26e48e8-7c50-3766-ab83-0ce71ad52b64.roa File: a26e48e8-7c50-3766-ab83-0ce71ad52b64.roa (raw, json) Hash identifier: LiLDZNohycmU34nnAjZGUkqljXJOzXA6bCDVitPvFoU= Subject key identifier: 1C:2A:4A:4A:51:3D:BB:37:75:C7:58:13:6C:54:E6:5A:FC:F9:A7:72 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858489E6CD987BAAD0C4BC3DAACF5 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a26e48e8-7c50-3766-ab83-0ce71ad52b64.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 398668 IP address blocks: 2001:470:363::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:d9:87:ba:ad:0c:4b:c3:da:ac:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=0b29f7fb-f513-4c23-a65c-1eb5b60b0a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:3e:01:9c:a5:f7:9d:18:84:77:5d:77:07:03: 14:06:bc:b1:88:e6:91:56:b6:c8:92:ed:08:12:c5: ee:83:4f:c6:34:f5:f9:51:30:8d:19:e2:19:00:d0: 09:ef:64:62:a8:46:f9:73:2c:b0:ac:ad:df:d4:7c: a4:29:67:ad:90:6b:29:3c:d0:c1:f6:07:4e:7f:c4: fe:d2:0d:16:cd:07:e1:d2:3f:8e:3e:c4:68:4a:65: 3f:65:97:68:37:5d:e3:52:df:67:9e:dd:09:e6:c7: a2:9c:36:d7:a1:c1:ee:6b:69:18:56:ea:58:8b:71: d9:0b:32:c4:3c:51:47:f5:db:98:8e:e0:b9:9d:6e: 0e:99:d9:03:b9:4a:48:e4:a5:60:52:7f:a5:b8:72: 8a:69:ad:a5:fa:ab:b5:b4:4b:2e:e8:ca:a4:6b:af: 35:d4:1f:84:8e:50:6f:31:bc:2e:28:bb:c7:97:db: 26:69:a8:04:c0:9d:aa:d1:41:b8:47:8f:9e:6f:17: a5:ce:60:79:28:ec:5d:20:f4:ff:51:c7:13:fa:83: 9b:29:2a:8d:a6:c2:ee:60:9f:22:4c:e5:77:fd:d5: 7c:57:39:d6:42:57:ea:74:1c:da:f0:c3:33:76:d0: 07:1b:33:aa:38:4d:b8:02:e2:83:78:78:08:7e:53: df:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:2A:4A:4A:51:3D:BB:37:75:C7:58:13:6C:54:E6:5A:FC:F9:A7:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a26e48e8-7c50-3766-ab83-0ce71ad52b64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:363::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:01:4b:65:ca:92:4c:c6:03:59:80:f6:9f:84:21:11:18:6c: 3f:6a:ae:1a:10:bf:55:32:e1:47:ac:e0:2d:f4:c9:ba:76:bd: 26:ea:79:11:63:d0:3c:68:ca:61:2d:86:af:48:8f:92:c0:56: dd:16:d3:36:0a:f7:31:f6:ff:b8:ab:37:cf:02:46:8f:01:c1: 8c:12:d5:54:c1:8c:0e:a1:63:1f:ee:88:0f:bc:d3:ea:76:cd: a2:76:81:6b:c9:43:d4:77:03:2f:ec:41:0d:10:50:b4:5d:50: 95:0f:3d:49:fe:04:fd:31:9c:6b:84:35:a2:0f:6a:5a:d0:ed: 51:d8:d2:4a:84:fd:d4:20:db:8f:b1:08:3b:d1:cd:01:f3:bd: 47:10:cf:a5:11:8a:96:ae:cb:cd:00:2c:5e:29:61:9b:cf:d8: 80:f3:56:59:85:e0:36:ed:ba:70:bd:cb:a9:04:9a:bf:dd:0c: ad:1d:b4:8a:02:5b:66:2f:d2:df:6e:3d:22:57:ed:0e:5c:e2: b5:20:dc:ff:99:5e:9f:2b:7a:19:cb:04:f9:f6:20:76:da:b8: c8:70:61:64:8b:87:87:a3:27:19:b0:24:68:c7:0a:8d:ca:20: e6:eb:64:88:cb:4d:9c:8d:d0:83:2e:c0:7f:e1:44:cc:4d:a9: 3e:6f:bc:b3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebNmHuq0MS8ParPUwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk MGIyOWY3ZmItZjUxMy00YzIzLWE2NWMtMWViNWI2MGIwYTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8D4BnKX3nRiEd113BwMUBryxiOaRVrbIku0I EsXug0/GNPX5UTCNGeIZANAJ72RiqEb5cyywrK3f1HykKWetkGspPNDB9gdOf8T+ 0g0WzQfh0j+OPsRoSmU/ZZdoN13jUt9nnt0J5seinDbXocHua2kYVupYi3HZCzLE PFFH9duYjuC5nW4OmdkDuUpI5KVgUn+luHKKaa2l+qu1tEsu6Mqka6811B+EjlBv MbwuKLvHl9smaagEwJ2q0UG4R4+ebxelzmB5KOxdIPT/UccT+oObKSqNpsLuYJ8i TOV3/dV8VznWQlfqdBza8MMzdtAHGzOqOE24AuKDeHgIflPfAQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBwqSkpRPbs3dcdYE2xU5lr8+adyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTI2ZTQ4ZTgtN2M1MC0z NzY2LWFiODMtMGNlNzFhZDUyYjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcANj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALQBS2XKkkzGA1mA9p+EIREYbD9qrhoQv1Uy4Ues4C30ybp2vSbq eRFj0DxoymEthq9Ij5LAVt0W0zYK9zH2/7irN88CRo8BwYwS1VTBjA6hYx/uiA+8 0+p2zaJ2gWvJQ9R3Ay/sQQ0QULRdUJUPPUn+BP0xnGuENaIPalrQ7VHY0kqE/dQg 24+xCDvRzQHzvUcQz6URipauy80ALF4pYZvP2IDzVlmF4DbtunC9y6kEmr/dDK0d tIoCW2Yv0t9uPSJX7Q5c4rUg3P+ZXp8rehnLBPn2IHbauMhwYWSLh4ejJxmwJGjH Co3KIObrZIjLTZyN0IMuwH/hRMxNqT5vvLM= -----END CERTIFICATE-----Generated at Fri Apr 4 17:43:20 2025 by rpki-client