$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a91ca0b2-1292-32f5-b167-dc9a75614b82.roa File: a91ca0b2-1292-32f5-b167-dc9a75614b82.roa (raw, json) Hash identifier: i0wM23q/2MBjk8aTGX11tmgGk6xcfzq94jMmPGjWI64= Subject key identifier: F8:58:A3:8D:51:A9:AD:E3:E3:DB:89:65:A1:09:E2:5B:62:0E:6B:94 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584819D005A448D48D74A0DF1880 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a91ca0b2-1292-32f5-b167-dc9a75614b82.roa Signing time: Thu 05 Dec 2024 02:00:39 +0000 ROA not before: Thu 05 Dec 2024 02:00:39 +0000 ROA not after: Wed 05 Mar 2025 02:00:39 +0000 asID: 55184 IP address blocks: 2001:470:fa::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Feb 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:19:d0:05:a4:48:d4:8d:74:a0:df:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Dec 5 02:00:39 2024 GMT Not After : Mar 5 02:00:39 2025 GMT Subject: CN=d0cec42a-321e-4036-9b04-dbf797fde025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:eb:3c:56:37:f1:3a:09:d1:54:94:47:5a:e3: 23:d7:3d:80:ce:96:4e:13:cf:e4:4b:c4:e2:49:33: 48:60:07:d4:7a:04:f2:8f:79:d9:80:59:42:bf:9e: 6c:89:2c:97:92:a7:8d:d4:b7:2b:75:0f:d6:83:6d: ad:f7:43:5f:2b:93:c2:06:9e:72:39:dc:55:54:73: ed:05:e5:95:a8:4f:36:24:55:a7:93:d2:58:7b:e7: 70:d2:64:43:83:dd:61:af:2e:66:bf:e7:c8:f6:9f: 90:fc:65:e3:98:c8:2c:f2:e4:ff:a9:a0:27:78:25: 83:90:2e:70:80:c9:96:b4:ba:e2:68:ce:8a:96:35: 65:2b:fb:74:77:56:b5:a2:cc:e0:69:1e:7f:9c:22: 41:1d:4c:7f:56:48:82:c1:f0:e0:0b:5a:51:5a:ec: 74:51:7b:56:e6:29:de:b5:54:30:de:73:bc:0f:81: ba:fe:d6:32:06:a2:2b:47:43:5c:28:02:91:8e:d0: 99:b2:58:08:86:22:51:a5:15:9a:fe:30:76:b6:48: 8a:1d:26:a4:6e:13:84:54:ae:1d:05:98:04:96:37: a9:92:3c:1b:ed:04:53:a6:a1:13:c6:f3:ca:d3:53: 15:87:2e:b0:04:6f:c8:15:56:62:76:c7:6d:f7:dc: b6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:58:A3:8D:51:A9:AD:E3:E3:DB:89:65:A1:09:E2:5B:62:0E:6B:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a91ca0b2-1292-32f5-b167-dc9a75614b82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:fa::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:6a:e3:25:d0:b5:1c:7c:1f:1e:74:91:8c:39:c9:f1:b4:2c: 9f:da:71:1f:e8:90:50:6b:46:84:4c:7b:bd:7b:ef:e0:4c:29: 92:45:90:32:10:6e:1f:c3:fa:30:28:6b:7f:00:b7:76:0c:53: e3:de:2d:b7:c5:18:55:e3:84:a4:22:c6:9c:ee:63:16:15:d6: f3:fa:01:1e:e5:bf:a7:f5:88:14:20:72:1e:39:c0:72:49:b1: 45:0a:64:28:c9:04:e8:78:4e:00:e9:9e:ea:06:62:98:eb:33: e6:f7:ba:10:d4:92:0f:31:c3:06:fc:12:98:f4:f2:95:78:b4: f4:63:9c:cb:10:24:0e:99:28:93:0f:14:88:a0:09:0b:d0:82: fb:7f:4d:1e:93:bb:da:e1:76:ad:e1:44:d9:d3:bd:a1:41:f0: 0f:62:d0:09:75:22:88:a2:db:93:37:dd:9a:5d:4b:e7:d7:0d: 4d:e6:87:0f:2b:3b:d4:94:b4:ad:bf:7e:7e:cd:27:24:23:5d: ce:4d:49:ca:69:db:f3:b4:a5:05:95:e3:7d:7b:bd:b5:65:75: 32:55:67:80:0c:33:26:c7:2e:13:07:c0:bd:44:32:03:bc:d7: 07:b1:a4:c2:5e:8f:42:ac:03:f0:8c:7d:ea:5b:7f:51:97:1d: 0d:9d:63:7e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgZ0AWkSNSNdKDfGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk ZDBjZWM0MmEtMzIxZS00MDM2LTliMDQtZGJmNzk3ZmRlMDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOs8VjfxOgnRVJRHWuMj1z2AzpZOE8/kS8Ti STNIYAfUegTyj3nZgFlCv55siSyXkqeN1LcrdQ/Wg22t90NfK5PCBp5yOdxVVHPt BeWVqE82JFWnk9JYe+dw0mRDg91hry5mv+fI9p+Q/GXjmMgs8uT/qaAneCWDkC5w gMmWtLriaM6KljVlK/t0d1a1oszgaR5/nCJBHUx/VkiCwfDgC1pRWux0UXtW5ine tVQw3nO8D4G6/tYyBqIrR0NcKAKRjtCZslgIhiJRpRWa/jB2tkiKHSakbhOEVK4d BZgEljepkjwb7QRTpqETxvPK01MVhy6wBG/IFVZidsdt99y2xQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPhYo41Rqa3j49uJZaEJ4ltiDmuUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTkxY2EwYjItMTI5Mi0z MmY1LWIxNjctZGM5YTc1NjE0YjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAD6 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALtq4yXQtRx8Hx50kYw5yfG0LJ/acR/okFBrRoRMe7177+BMKZJF kDIQbh/D+jAoa38At3YMU+PeLbfFGFXjhKQixpzuYxYV1vP6AR7lv6f1iBQgch45 wHJJsUUKZCjJBOh4TgDpnuoGYpjrM+b3uhDUkg8xwwb8Epj08pV4tPRjnMsQJA6Z KJMPFIigCQvQgvt/TR6Tu9rhdq3hRNnTvaFB8A9i0Al1Ioii25M33ZpdS+fXDU3m hw8rO9SUtK2/fn7NJyQjXc5NScpp2/O0pQWV4317vbVldTJVZ4AMMybHLhMHwL1E MgO81wexpMJej0KsA/CMfepbf1GXHQ2dY34= -----END CERTIFICATE-----Generated at Fri Feb 7 10:57:12 2025 by rpki-client