$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aa0031bd-6cf6-3e89-aa8b-0e7011034360.roa File: aa0031bd-6cf6-3e89-aa8b-0e7011034360.roa (raw, json) Hash identifier: JW4f0J5LlJ3S8RMzXQFiMxoDyJocQ9sgVozfmyUQCuc= Subject key identifier: B9:3A:11:54:EE:26:8F:3B:DB:D5:2B:C4:6D:B9:E8:79:38:65:E7:AB Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584941AD211391A95F9F99F7C180 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aa0031bd-6cf6-3e89-aa8b-0e7011034360.roa Signing time: Fri 21 Mar 2025 01:30:12 +0000 ROA not before: Fri 21 Mar 2025 01:30:12 +0000 ROA not after: Thu 19 Jun 2025 01:30:12 +0000 asID: 329510 IP address blocks: 2001:470:3d8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:41:ad:21:13:91:a9:5f:9f:99:f7:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 21 01:30:12 2025 GMT Not After : Jun 19 01:30:12 2025 GMT Subject: CN=ba6f185e-2c62-4465-be17-792f22d627ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e0:82:6f:28:c9:96:14:e0:7e:61:c1:1c:47: 56:c4:67:fa:9a:9a:ad:bc:3a:d0:e4:1b:1d:3d:db: 6f:dc:2f:7d:93:a1:f8:8d:8a:c6:b9:f6:b3:b8:86: ff:5e:f0:7e:95:87:89:0f:b1:60:60:31:cc:03:07: f6:e9:c5:ab:d2:bb:67:df:cb:3c:fe:47:f6:f7:20: 78:d9:33:22:5e:59:dc:74:43:35:03:1f:52:6f:3d: 35:69:a6:75:bb:42:81:6e:87:08:6c:f2:b2:7f:4a: 01:1c:69:59:4a:25:78:34:08:8b:1a:c5:64:9b:57: 05:a7:08:6e:ed:76:3f:cc:49:70:5b:20:59:2b:d8: 23:e9:9d:e5:2a:96:e4:0e:31:cf:76:d2:d5:1f:31: 29:85:3f:3f:4b:b5:a6:10:61:3c:22:31:58:fb:ed: 6c:10:68:61:f6:09:e8:90:c8:6f:44:9f:91:09:59: ed:a8:77:8a:03:52:c9:12:91:49:fc:41:fb:67:b1: 06:5e:fc:bd:2f:f1:5e:a6:cf:ab:a0:62:c5:09:d3: 77:1c:81:1f:6d:3f:4e:fb:2a:c0:93:62:e7:ba:33: 56:71:7c:10:48:39:8e:e7:f5:a5:2a:8e:48:08:45: 3e:9c:a2:15:b9:a6:97:c0:8d:6b:cb:a6:36:a3:1c: 64:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:3A:11:54:EE:26:8F:3B:DB:D5:2B:C4:6D:B9:E8:79:38:65:E7:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aa0031bd-6cf6-3e89-aa8b-0e7011034360.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3d8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:9c:8e:f7:60:0a:96:5f:31:9f:bd:13:79:d3:b8:9e:ec:ad: d0:1f:d8:85:15:c0:f1:30:ea:b0:4a:23:8e:25:b1:52:9b:4f: b8:4e:4f:14:34:7c:96:4e:b1:be:82:34:c7:86:5b:36:5f:21: e6:b4:50:ab:dc:19:95:53:ad:f6:bf:30:e9:19:c6:b2:89:16: 03:0d:e4:09:42:99:2c:6e:81:95:b3:36:e6:00:15:0d:90:05: 5f:5e:7e:80:64:dc:27:18:27:97:85:e7:b6:d3:ef:ea:28:32: 90:0b:8e:6e:f9:28:53:32:11:12:8c:84:16:3a:2d:70:0b:99: 2d:16:21:8f:2b:2a:0f:1b:4b:8c:c1:48:9e:d2:66:cb:72:67: 5a:7b:9c:81:27:e1:f3:00:d6:68:78:0a:37:da:b6:59:6b:09: 43:45:47:b3:7d:32:0c:18:55:c9:3f:20:8f:ca:ca:8d:fe:4e: 5e:37:e4:6c:84:88:f6:3d:f0:06:89:33:07:f6:ce:a0:0e:ac: d4:15:73:ec:4f:bf:39:7b:7f:55:c3:d6:87:2b:82:9d:8a:55: 02:99:17:25:20:ba:9a:69:3f:ec:97:c1:af:78:e8:1c:c6:e6: 40:d9:46:1e:85:8e:9c:6c:8d:08:7b:28:04:c3:5e:18:17:27: 17:95:c3:24 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElBrSETkalfn5n3wYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMyMTAxMzAxMloXDTI1MDYxOTAxMzAxMlowLzEtMCsGA1UEAxMk YmE2ZjE4NWUtMmM2Mi00NDY1LWJlMTctNzkyZjIyZDYyN2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+CCbyjJlhTgfmHBHEdWxGf6mpqtvDrQ5Bsd Pdtv3C99k6H4jYrGufazuIb/XvB+lYeJD7FgYDHMAwf26cWr0rtn38s8/kf29yB4 2TMiXlncdEM1Ax9Sbz01aaZ1u0KBbocIbPKyf0oBHGlZSiV4NAiLGsVkm1cFpwhu 7XY/zElwWyBZK9gj6Z3lKpbkDjHPdtLVHzEphT8/S7WmEGE8IjFY++1sEGhh9gno kMhvRJ+RCVntqHeKA1LJEpFJ/EH7Z7EGXvy9L/Feps+roGLFCdN3HIEfbT9O+yrA k2LnujNWcXwQSDmO5/WlKo5ICEU+nKIVuaaXwI1ry6Y2oxxkBQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLk6EVTuJo8729UrxG256Hk4ZeerMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYWEwMDMxYmQtNmNmNi0z ZTg5LWFhOGItMGU3MDExMDM0MzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB+cjvdgCpZfMZ+9E3nTuJ7srdAf2IUVwPEw6rBKI44lsVKbT7hO TxQ0fJZOsb6CNMeGWzZfIea0UKvcGZVTrfa/MOkZxrKJFgMN5AlCmSxugZWzNuYA FQ2QBV9efoBk3CcYJ5eF57bT7+ooMpALjm75KFMyERKMhBY6LXALmS0WIY8rKg8b S4zBSJ7SZstyZ1p7nIEn4fMA1mh4CjfatllrCUNFR7N9MgwYVck/II/Kyo3+Tl43 5GyEiPY98AaJMwf2zqAOrNQVc+xPvzl7f1XD1ocrgp2KVQKZFyUgupppP+yXwa94 6BzG5kDZRh6FjpxsjQh7KATDXhgXJxeVwyQ= -----END CERTIFICATE-----Generated at Fri Apr 4 17:54:52 2025 by rpki-client