$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a7da6d9b-e286-3654-8f45-bcfc78a9fee5.roa File: a7da6d9b-e286-3654-8f45-bcfc78a9fee5.roa (raw, json) Hash identifier: esaT34yGT1EiRMBGKfPxT3UPDx5I2Tw/d3g9f1f5AJ8= Subject key identifier: E3:2B:39:79:24:98:7F:4B:0A:B6:76:DA:FB:9F:B2:59:E6:58:00:01 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926E5D69E10C40617D17B0E Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a7da6d9b-e286-3654-8f45-bcfc78a9fee5.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 62081 IP address blocks: 2001:470:2a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:e5:d6:9e:10:c4:06:17:d1:7b:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=dd6d6968-67b7-4e85-8c8d-dd1edd9e9783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:1a:5b:03:31:90:b8:15:f4:8f:5d:e7:3b:2d: 0d:92:ce:50:d4:ef:a4:34:43:fa:00:b3:87:cf:bc: 65:1d:33:58:58:99:de:11:cc:cb:5b:9d:07:16:b5: ad:a1:c7:26:16:b0:26:55:0d:67:66:e7:46:e0:98: 86:b1:83:60:79:e8:e4:4f:6f:6d:9d:99:4b:8a:6e: 9a:9f:69:4f:12:f2:4a:17:14:34:0b:b6:01:f2:bb: 75:2d:50:35:21:9a:58:ac:2e:4a:4a:d5:5e:5f:5c: e0:64:51:74:4b:6f:d9:cb:c2:68:92:03:05:6c:0d: 1e:96:21:d9:8b:b9:5e:00:0c:f8:21:5a:f9:2e:36: 04:d9:3a:db:13:77:8f:40:28:3a:3c:09:9d:73:ce: 09:df:41:11:0d:8e:9a:95:7c:0e:cd:d8:1f:86:d3: 5a:84:21:ce:b1:29:8b:e1:d7:2e:89:27:87:54:55: fd:7b:cb:39:1f:75:8e:25:3f:f4:dd:b8:a4:34:30: ce:d6:6b:f0:a2:36:33:2a:bd:ac:ce:f8:b3:90:85: 30:11:25:dc:89:3f:91:69:2d:4a:4d:83:88:b4:af: c0:3e:f4:e6:75:d9:55:ec:5c:f0:39:32:b4:d6:73: dc:ca:41:a5:06:6e:31:16:b8:6c:12:26:ef:9b:63: 00:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:2B:39:79:24:98:7F:4B:0A:B6:76:DA:FB:9F:B2:59:E6:58:00:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a7da6d9b-e286-3654-8f45-bcfc78a9fee5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:d6:43:91:6c:ef:bc:24:54:aa:5e:02:fa:af:ba:2a:dc:a6: 8c:30:79:0f:42:1a:12:4c:e8:45:df:e6:ea:ef:d4:22:00:26: 1e:47:f0:9a:e2:e5:84:df:44:6a:08:2d:83:56:8c:48:71:e5: 24:57:96:38:79:40:a7:1c:5d:84:47:35:c2:e1:18:d8:13:5b: a0:62:11:71:f9:d5:ef:1b:0a:52:14:78:1e:4b:b9:0e:b4:93: 00:4f:c3:68:a6:97:61:82:0d:e4:a6:eb:b7:3d:19:08:81:64: 4a:81:7d:b0:d8:c8:f7:a1:88:dc:1d:9e:13:f2:5d:f2:43:7a: 33:74:27:0f:4f:e9:0f:43:01:97:f6:b2:43:12:bc:7a:4f:62: 9d:86:e3:ef:5d:1f:2b:6b:90:21:2d:d7:c1:47:65:a6:83:ac: a4:89:2f:45:89:db:57:7e:26:c1:a2:42:30:57:50:2e:f5:64: d4:32:b2:01:e8:4e:11:fa:9f:0e:47:52:f6:2e:5f:eb:c7:a4: 75:3e:fe:fb:cc:01:30:3a:6b:2c:ad:71:27:27:8b:5d:aa:a3: 63:78:da:d7:fc:17:17:48:c9:dd:4a:ef:f7:2b:3d:36:52:79: ae:49:7b:81:78:c4:5e:94:16:86:df:8b:ab:a6:f0:0a:2f:ee: f8:80:85:f8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JuXWnhDEBhfRew4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk ZGQ2ZDY5NjgtNjdiNy00ZTg1LThjOGQtZGQxZWRkOWU5NzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRpbAzGQuBX0j13nOy0Nks5Q1O+kNEP6ALOH z7xlHTNYWJneEczLW50HFrWtoccmFrAmVQ1nZudG4JiGsYNgeejkT29tnZlLim6a n2lPEvJKFxQ0C7YB8rt1LVA1IZpYrC5KStVeX1zgZFF0S2/Zy8JokgMFbA0eliHZ i7leAAz4IVr5LjYE2TrbE3ePQCg6PAmdc84J30ERDY6alXwOzdgfhtNahCHOsSmL 4dcuiSeHVFX9e8s5H3WOJT/03bikNDDO1mvwojYzKr2szvizkIUwESXciT+RaS1K TYOItK/APvTmddlV7FzwOTK01nPcykGlBm4xFrhsEibvm2MAwQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOMrOXkkmH9LCrZ22vufslnmWAABMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTdkYTZkOWItZTI4Ni0z NjU0LThmNDUtYmNmYzc4YTlmZWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD7WQ5Fs77wkVKpeAvqvuircpowweQ9CGhJM6EXf5urv1CIAJh5H 8Jri5YTfRGoILYNWjEhx5SRXljh5QKccXYRHNcLhGNgTW6BiEXH51e8bClIUeB5L uQ60kwBPw2iml2GCDeSm67c9GQiBZEqBfbDYyPehiNwdnhPyXfJDejN0Jw9P6Q9D AZf2skMSvHpPYp2G4+9dHytrkCEt18FHZaaDrKSJL0WJ21d+JsGiQjBXUC71ZNQy sgHoThH6nw5HUvYuX+vHpHU+/vvMATA6ayytcScni12qo2N42tf8FxdIyd1K7/cr PTZSea5Je4F4xF6UFobfi6um8Aov7viAhfg= -----END CERTIFICATE-----Generated at Fri Apr 4 17:49:36 2025 by rpki-client