$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a2c4f45f-0794-3016-b08d-1a60c4ca5384.roa File: a2c4f45f-0794-3016-b08d-1a60c4ca5384.roa (raw, json) Hash identifier: objEdQ5MT4udLmNasZB4MVjOhMZezUZx5yJSf6F+LGs= Subject key identifier: DE:70:B0:FD:1F:DE:95:B2:7D:89:90:15:50:13:4C:B6:D7:71:0B:B5 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926CBCAD0A2D016128A3580 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a2c4f45f-0794-3016-b08d-1a60c4ca5384.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 15081 IP address blocks: 2001:470:287::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:cb:ca:d0:a2:d0:16:12:8a:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=80f5b990-3f78-45cb-b01c-fa1dbcd6c888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b0:99:a7:ec:53:fd:69:f5:9a:aa:c6:29:a4: 28:f6:2f:f3:3f:56:bb:c1:90:20:ad:c3:66:13:76: e4:d2:97:5d:7e:91:05:6e:2c:e9:1c:ab:80:91:53: 39:4a:94:f1:72:61:c1:c4:f3:42:b6:e9:c2:cb:12: 6c:9c:01:24:1b:3c:ab:35:5e:6e:3b:00:73:4b:30: f4:99:0b:d5:cb:f4:31:44:aa:e8:e8:81:37:f0:2a: ea:60:34:96:89:bc:f9:7a:3c:0b:89:0f:e9:d9:d4: 34:b7:1f:84:b0:f5:82:76:4f:40:6c:b2:10:e5:63: 47:c1:93:fa:a9:23:c2:8c:01:73:0c:41:ff:ac:bd: e9:0a:d3:07:1a:c8:fc:a2:99:fc:c9:39:08:9b:fa: 8b:43:ac:95:72:c8:b3:2a:d0:6c:5a:98:f7:fc:7f: 1b:1e:d3:46:d8:1f:d1:d6:05:7b:9f:ea:2b:77:38: 3e:c0:bb:f6:c0:ef:b9:38:9b:26:72:9e:b7:96:6c: 09:c5:e7:8c:1e:e0:c3:34:5d:ec:e8:a8:23:0f:e6: 51:21:4b:ae:53:17:a4:99:fe:1f:e0:a4:e4:71:c3: 2d:75:f9:31:d6:c4:9c:1d:17:b6:fc:37:21:45:5f: 3a:f6:bb:f5:60:a1:69:eb:18:45:39:12:94:12:86: 7a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:70:B0:FD:1F:DE:95:B2:7D:89:90:15:50:13:4C:B6:D7:71:0B:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a2c4f45f-0794-3016-b08d-1a60c4ca5384.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:287::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:6f:50:04:11:55:6a:da:c8:ff:45:ad:bf:5b:ac:ba:77:e9: b3:6c:d7:23:0c:7e:3a:d3:df:60:08:16:a1:b7:cd:bb:ef:6c: 7f:4d:6a:2e:20:27:fe:3d:36:de:53:84:8e:11:9e:ad:0b:b9: 70:62:f2:36:55:dd:2c:34:99:b9:a4:61:25:32:21:fd:69:f9: e7:41:b5:23:e7:20:cf:79:2d:dc:d5:19:99:f9:a3:7c:5f:aa: 17:19:88:63:59:3a:ac:ca:e3:f3:f4:a0:c6:14:31:68:e8:97: 4c:55:45:19:8a:3a:5f:17:36:c7:7c:d4:5a:ff:26:b4:6d:29: a7:22:58:c8:15:03:58:9d:5c:e6:28:15:4b:11:aa:7f:77:04: e5:cb:fc:55:98:d1:4f:79:ec:e4:e6:af:22:21:ba:78:94:34: a6:00:25:90:7f:a0:a7:b5:a6:d6:51:02:c9:34:53:70:7b:b2: cb:4e:1c:2b:24:e1:f9:45:5b:88:eb:26:fd:91:4c:df:82:66: 69:59:81:58:fe:09:ce:1c:8c:2a:52:45:5d:c7:95:bf:46:42: a3:54:fd:68:f2:83:e1:07:b5:7b:52:47:80:ba:8e:74:d7:81: 25:42:4b:48:c7:27:a0:94:11:c5:dd:9b:4f:66:2f:38:40:93: ce:3e:ed:31 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JsvK0KLQFhKKNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk ODBmNWI5OTAtM2Y3OC00NWNiLWIwMWMtZmExZGJjZDZjODg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLCZp+xT/Wn1mqrGKaQo9i/zP1a7wZAgrcNm E3bk0pddfpEFbizpHKuAkVM5SpTxcmHBxPNCtunCyxJsnAEkGzyrNV5uOwBzSzD0 mQvVy/QxRKro6IE38CrqYDSWibz5ejwLiQ/p2dQ0tx+EsPWCdk9AbLIQ5WNHwZP6 qSPCjAFzDEH/rL3pCtMHGsj8opn8yTkIm/qLQ6yVcsizKtBsWpj3/H8bHtNG2B/R 1gV7n+ordzg+wLv2wO+5OJsmcp63lmwJxeeMHuDDNF3s6KgjD+ZRIUuuUxekmf4f 4KTkccMtdfkx1sScHRe2/DchRV869rv1YKFp6xhFORKUEoZ6ZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN5wsP0f3pWyfYmQFVATTLbXcQu1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTJjNGY0NWYtMDc5NC0z MDE2LWIwOGQtMWE2MGM0Y2E1Mzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADBvUAQRVWrayP9Frb9brLp36bNs1yMMfjrT32AIFqG3zbvvbH9N ai4gJ/49Nt5ThI4Rnq0LuXBi8jZV3Sw0mbmkYSUyIf1p+edBtSPnIM95LdzVGZn5 o3xfqhcZiGNZOqzK4/P0oMYUMWjol0xVRRmKOl8XNsd81Fr/JrRtKaciWMgVA1id XOYoFUsRqn93BOXL/FWY0U957OTmryIhuniUNKYAJZB/oKe1ptZRAsk0U3B7sstO HCsk4flFW4jrJv2RTN+CZmlZgVj+Cc4cjCpSRV3Hlb9GQqNU/Wjyg+EHtXtSR4C6 jnTXgSVCS0jHJ6CUEcXdm09mLzhAk84+7TE= -----END CERTIFICATE-----Generated at Tue Apr 8 23:36:29 2025 by rpki-client