$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a9e802ec-913c-3469-9c8a-e761c3349df2.roa File: a9e802ec-913c-3469-9c8a-e761c3349df2.roa (raw, json) Hash identifier: 9ehiToFrzHMMGuMbyyIZkFiOL3tKYpkSytiXvi1fktc= Subject key identifier: A0:DA:C9:C1:22:D7:3E:08:4E:9B:E3:D2:F6:3D:94:C9:A7:D5:10:5F Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926CCC65044251ECF8AA7C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a9e802ec-913c-3469-9c8a-e761c3349df2.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 15577 IP address blocks: 2001:470:2a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:cc:c6:50:44:25:1e:cf:8a:a7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=52f74465-8861-46df-8a1a-3273a1b9c90d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ae:4e:19:cc:d8:20:3c:1b:9e:e6:e9:87:f4: e1:10:d4:68:4c:9d:e9:4d:22:d4:c6:65:3c:76:73: a5:12:39:a5:5f:9b:89:c6:27:4c:b9:08:3a:e1:0b: 48:79:ef:79:f3:e9:21:41:09:c3:39:c7:d4:b8:b9: b2:64:bb:8e:68:1e:e5:36:97:15:f0:55:ad:19:62: 6c:48:74:d8:4b:6f:c4:b4:71:60:26:69:48:52:62: 44:4e:77:d6:8e:b2:eb:9e:af:e7:0a:a6:d8:be:e3: 4a:91:9a:73:69:af:0a:7c:91:89:2e:0a:ef:e7:70: 37:42:82:eb:0c:87:b5:66:46:74:fd:68:50:3e:f0: de:02:74:de:a4:8b:a5:ee:95:c1:b7:68:3a:6f:56: c2:f5:9c:4b:bc:7c:6d:1c:66:e9:a1:c5:4e:fc:28: bc:f9:c8:6f:42:78:52:73:3a:c9:a7:6b:f7:cb:41: 09:09:33:63:df:18:ca:f1:c9:49:81:7d:d7:db:c7: 06:2a:fb:3f:24:39:2a:5e:ce:23:88:40:53:5f:4f: db:75:7c:1f:e0:12:75:4e:8e:c3:8e:a9:3d:9d:15: 3a:13:cd:32:da:d9:81:d6:27:c4:23:3b:44:27:56: eb:47:3c:34:c2:9d:04:46:cd:18:b9:93:9c:2c:1e: 7d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:DA:C9:C1:22:D7:3E:08:4E:9B:E3:D2:F6:3D:94:C9:A7:D5:10:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a9e802ec-913c-3469-9c8a-e761c3349df2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:bf:82:56:6a:b2:96:4b:12:42:a0:3e:22:bc:a5:25:1d:e4: 6f:71:2e:de:b6:c1:c2:27:30:fe:3b:d4:d9:42:55:a7:c1:75: 38:be:e0:06:6f:8f:eb:d5:8e:ec:e0:a1:13:c3:6a:85:e5:2a: ae:3e:78:c1:81:b7:1c:14:94:14:a0:d0:bb:66:76:50:34:3d: 82:16:f7:f3:a8:cc:6c:29:4a:1e:28:1f:84:24:08:d1:c4:03: 5a:67:fe:31:a4:a9:cc:c8:eb:ca:44:18:68:71:ac:b1:b0:a2: a7:c2:9b:31:09:50:c1:24:ff:4a:10:38:3f:95:f6:9a:bc:71: f4:f4:61:4f:d9:73:23:77:c2:21:f7:94:75:d5:93:f5:13:50: ed:a3:3c:30:eb:25:3e:a6:6c:99:93:37:b0:9d:e5:2a:cd:af: 91:b2:f3:b6:d7:57:56:f6:97:8e:72:3b:86:ac:32:ac:42:cc: de:24:32:d2:f6:60:b0:d6:46:bb:58:44:8f:1a:4d:b2:72:95: ba:83:6c:af:b1:24:af:dc:11:37:f2:ef:c1:68:29:fe:8a:40: b7:70:78:5f:be:02:f8:9c:6a:c0:f1:31:69:4d:c2:a2:25:fa: 8f:7d:62:47:0a:0f:b0:38:5f:75:53:86:3f:40:60:0a:3f:49: 53:0a:db:8b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JszGUEQlHs+Kp8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk NTJmNzQ0NjUtODg2MS00NmRmLThhMWEtMzI3M2ExYjljOTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvq5OGczYIDwbnubph/ThENRoTJ3pTSLUxmU8 dnOlEjmlX5uJxidMuQg64QtIee958+khQQnDOcfUuLmyZLuOaB7lNpcV8FWtGWJs SHTYS2/EtHFgJmlIUmJETnfWjrLrnq/nCqbYvuNKkZpzaa8KfJGJLgrv53A3QoLr DIe1ZkZ0/WhQPvDeAnTepIul7pXBt2g6b1bC9ZxLvHxtHGbpocVO/Ci8+chvQnhS czrJp2v3y0EJCTNj3xjK8clJgX3X28cGKvs/JDkqXs4jiEBTX0/bdXwf4BJ1To7D jqk9nRU6E80y2tmB1ifEIztEJ1brRzw0wp0ERs0YuZOcLB59LQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKDaycEi1z4ITpvj0vY9lMmn1RBfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTllODAyZWMtOTEzYy0z NDY5LTljOGEtZTc2MWMzMzQ5ZGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMK/glZqspZLEkKgPiK8pSUd5G9xLt62wcInMP471NlCVafBdTi+ 4AZvj+vVjuzgoRPDaoXlKq4+eMGBtxwUlBSg0LtmdlA0PYIW9/OozGwpSh4oH4Qk CNHEA1pn/jGkqczI68pEGGhxrLGwoqfCmzEJUMEk/0oQOD+V9pq8cfT0YU/ZcyN3 wiH3lHXVk/UTUO2jPDDrJT6mbJmTN7Cd5SrNr5Gy87bXV1b2l45yO4asMqxCzN4k MtL2YLDWRrtYRI8aTbJylbqDbK+xJK/cETfy78FoKf6KQLdweF++AvicasDxMWlN wqIl+o99YkcKD7A4X3VThj9AYAo/SVMK24s= -----END CERTIFICATE-----Generated at Fri Apr 4 17:45:08 2025 by rpki-client