$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/afe4b7b2-223b-38b1-8752-565def625b63.roa File: afe4b7b2-223b-38b1-8752-565def625b63.roa (raw, json) Hash identifier: b5N2mpEKL414RAjDcPyBUrFNj1hw571snmUsg4vDbYE= Subject key identifier: 06:E9:B1:8F:9E:5B:21:F6:28:56:81:79:04:AA:8C:04:EE:D9:A9:08 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584819CFFDC90CDE1D93F527FB50 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/afe4b7b2-223b-38b1-8752-565def625b63.roa Signing time: Thu 05 Dec 2024 02:00:39 +0000 ROA not before: Thu 05 Dec 2024 02:00:39 +0000 ROA not after: Wed 05 Mar 2025 02:00:39 +0000 asID: 132046 IP address blocks: 2001:470:25e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Feb 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:19:cf:fd:c9:0c:de:1d:93:f5:27:fb:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Dec 5 02:00:39 2024 GMT Not After : Mar 5 02:00:39 2025 GMT Subject: CN=99b9244b-e0f9-40a0-b1b2-a8e9e06a86b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b3:13:11:d7:9b:7c:fc:95:40:7f:8c:19:0a: 43:80:4d:e6:ef:74:ce:88:e8:b6:0f:98:e7:4b:6f: 8d:1a:26:21:07:b3:5a:51:e0:9a:18:00:9c:b6:58: 2e:8c:38:31:ad:18:ee:4f:07:27:02:b7:f9:b6:8c: e5:93:35:c3:43:dd:8f:a9:fb:b9:f3:6c:cb:56:e6: 03:76:3a:e1:a9:02:23:00:5c:46:35:ed:2d:d7:27: b1:01:9f:45:b4:21:49:fc:a2:e6:d7:13:fa:37:6c: a4:5e:28:25:8a:61:1a:e7:bb:6f:1b:08:e3:c9:70: 6f:0e:46:50:e1:8f:eb:63:64:56:57:77:70:e7:12: 63:3a:b7:ce:44:f9:da:1b:98:67:ec:3a:1c:ef:92: 82:a0:39:df:85:85:60:39:e3:e6:7c:a7:53:78:b3: 6a:7b:6a:31:ea:d6:8b:eb:cf:43:51:06:95:fc:58: 44:27:65:f6:49:08:74:dc:ed:ab:86:d0:fa:38:a8: 34:a4:3e:c8:e6:ab:e5:f3:f5:2a:34:74:fa:bc:45: 70:a0:cf:f6:88:58:c8:43:ed:73:52:24:b1:75:e8: 95:24:af:68:32:f1:72:a3:27:cb:40:cf:4b:85:4d: 61:d7:8b:f7:5f:7d:fa:ad:a2:a3:e3:f0:20:97:b5: 96:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E9:B1:8F:9E:5B:21:F6:28:56:81:79:04:AA:8C:04:EE:D9:A9:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/afe4b7b2-223b-38b1-8752-565def625b63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:25e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:24:d9:a8:e6:2a:cd:39:fb:f7:ca:1b:64:8e:3b:07:53:fe: 9b:3e:b2:0a:e5:b8:d0:f8:9a:c0:8d:2e:bc:11:52:a7:d3:24: fd:95:50:11:7c:60:61:04:23:cf:ab:af:4e:68:6f:29:a2:50: 9f:4d:5e:98:c0:5b:be:7a:3e:8b:10:e8:af:5b:03:49:ab:54: 30:2d:84:ea:d9:b3:32:60:d1:79:55:b0:1d:bb:88:eb:68:2f: 27:61:5c:c7:07:a4:a8:3e:3a:86:d0:5b:7d:dc:12:06:a8:9a: bd:4f:b0:b0:70:f0:68:71:83:e1:f3:d6:b7:c7:86:eb:e8:b4: 33:f9:99:eb:9f:ce:a0:5a:b2:b9:2f:10:f0:d8:68:e5:6d:8b: 05:fe:a1:ab:85:67:15:31:2a:01:7c:2a:55:c7:64:94:5e:79: 18:e0:84:09:07:73:df:14:66:46:36:2d:62:7e:f0:be:ff:c1: d6:79:eb:b8:76:69:b2:de:19:fb:27:f8:85:ef:54:00:ce:e8: d6:26:13:c7:80:65:19:b7:04:e2:fb:b4:d3:a9:8d:2b:9c:67: ca:b7:97:c5:22:8e:c5:35:a1:d3:cc:f7:33:ea:cd:92:86:2b: 2b:1c:8e:75:d6:c3:30:96:b1:0a:5c:d0:3a:22:6c:4e:bb:52: ba:95:20:63 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgZz/3JDN4dk/Un+1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk OTliOTI0NGItZTBmOS00MGEwLWIxYjItYThlOWUwNmE4NmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybMTEdebfPyVQH+MGQpDgE3m73TOiOi2D5jn S2+NGiYhB7NaUeCaGACctlgujDgxrRjuTwcnArf5tozlkzXDQ92Pqfu582zLVuYD djrhqQIjAFxGNe0t1yexAZ9FtCFJ/KLm1xP6N2ykXiglimEa57tvGwjjyXBvDkZQ 4Y/rY2RWV3dw5xJjOrfORPnaG5hn7Doc75KCoDnfhYVgOePmfKdTeLNqe2ox6taL 689DUQaV/FhEJ2X2SQh03O2rhtD6OKg0pD7I5qvl8/UqNHT6vEVwoM/2iFjIQ+1z UiSxdeiVJK9oMvFyoyfLQM9LhU1h14v3X336raKj4/Agl7WWCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAbpsY+eWyH2KFaBeQSqjATu2akIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYWZlNGI3YjItMjIzYi0z OGIxLTg3NTItNTY1ZGVmNjI1YjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAkk2ajmKs05+/fKG2SOOwdT/ps+sgrluND4msCNLrwRUqfTJP2V UBF8YGEEI8+rr05obymiUJ9NXpjAW756PosQ6K9bA0mrVDAthOrZszJg0XlVsB27 iOtoLydhXMcHpKg+OobQW33cEgaomr1PsLBw8Ghxg+Hz1rfHhuvotDP5meufzqBa srkvEPDYaOVtiwX+oauFZxUxKgF8KlXHZJReeRjghAkHc98UZkY2LWJ+8L7/wdZ5 67h2abLeGfsn+IXvVADO6NYmE8eAZRm3BOL7tNOpjSucZ8q3l8UijsU1odPM9zPq zZKGKyscjnXWwzCWsQpc0DoibE67UrqVIGM= -----END CERTIFICATE-----Generated at Fri Feb 7 17:06:44 2025 by rpki-client