$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2a5fcfc-e933-301b-8f12-3086e28ddad9.roa File: b2a5fcfc-e933-301b-8f12-3086e28ddad9.roa (raw, json) Hash identifier: Mu0TMwPTnHs+GDJb+koCJlqgwUZ5lDQdNDTgkMMK1IA= Subject key identifier: 78:3C:DB:AD:38:99:D3:DC:51:D0:14:AC:CA:81:A5:61:85:83:7C:61 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926E325157D08BB1DAF0200 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2a5fcfc-e933-301b-8f12-3086e28ddad9.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 47702 IP address blocks: 2001:470:23d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:e3:25:15:7d:08:bb:1d:af:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=b840cb7c-be41-4fd5-9f87-9d77a53400f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:62:cd:2d:83:28:8c:4e:c1:9f:b3:69:20:5b: c1:28:88:c6:68:1c:2a:b0:fb:f6:aa:cc:39:38:4e: 2c:b5:e4:2b:f6:c9:ed:c6:fb:24:0a:81:90:2c:58: ac:bd:66:0f:86:dd:c8:ff:00:d4:aa:76:57:5c:5b: b5:6e:61:fc:45:c4:d2:ef:03:b3:aa:59:91:54:99: 29:47:fd:84:24:ac:8b:1d:61:43:3d:1e:be:ec:ce: 19:58:f9:47:ea:8a:98:cf:3e:c2:04:43:44:4a:73: 3f:46:78:bf:81:3f:2f:3c:aa:c5:f0:b3:07:81:c3: 85:cf:71:62:dd:d7:47:77:c4:ae:e5:5c:e4:90:de: 54:c6:16:f9:dd:f1:a2:a1:95:94:03:1a:36:c4:0c: fc:56:3d:2a:09:c7:38:ae:de:0e:56:d1:66:19:30: 15:3f:a8:51:9a:24:65:f5:fe:80:9a:5e:06:42:7f: b2:41:4a:e7:49:e4:66:33:3f:7f:cb:78:c0:61:55: b9:4a:fe:bc:9d:14:0e:d3:0b:49:e7:64:ab:6c:05: 7c:8e:54:d4:53:74:bf:65:8a:41:57:c8:0c:0d:94: b3:33:73:6c:d1:87:75:0d:16:26:1b:c9:50:0a:24: a8:1f:26:71:f2:8c:3a:c3:97:54:3b:f0:fa:c0:d4: 6a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:3C:DB:AD:38:99:D3:DC:51:D0:14:AC:CA:81:A5:61:85:83:7C:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2a5fcfc-e933-301b-8f12-3086e28ddad9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:23d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:8d:6e:d8:2d:0f:c5:6e:a8:cf:82:27:5b:be:3f:e2:84:10: c4:f2:77:76:39:bd:cd:11:3b:af:ed:2e:a9:76:41:04:9f:de: 88:3d:6c:f9:98:16:ba:97:c6:a4:88:0f:be:58:40:61:64:44: da:d9:26:76:c8:3d:e4:af:c8:24:7b:6b:e6:db:65:c9:ee:9f: 12:62:ce:38:cd:80:cb:fe:d4:dd:4c:50:14:ca:b9:0b:3e:cd: 1e:1f:e9:b5:e6:15:db:6f:ed:fb:77:d3:d0:97:83:4a:80:5c: e2:cf:af:62:04:1a:8d:20:20:90:08:97:fb:47:8c:21:54:fa: 25:b6:61:1c:39:e0:d5:ad:a7:62:df:7e:3f:54:01:8f:7e:4b: af:65:ce:60:53:19:4a:60:78:11:85:2b:c6:63:2c:89:15:d2: 75:04:c3:8e:4d:55:0a:a5:dc:ea:8c:bf:e0:98:19:2f:f2:be: da:7d:85:1c:7e:d4:b7:22:87:7d:00:23:f6:6c:57:1a:44:fe: cb:ed:7c:23:d9:ab:1e:fc:c6:94:31:ff:ba:98:ab:23:25:2e: 0d:4c:df:68:ba:b8:b7:a4:85:3e:ee:46:22:35:31:c0:19:26: df:5d:85:f8:69:06:fb:21:78:44:bb:5e:21:f0:06:51:81:86: 68:cc:5b:fe -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JuMlFX0Iux2vAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk Yjg0MGNiN2MtYmU0MS00ZmQ1LTlmODctOWQ3N2E1MzQwMGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2LNLYMojE7Bn7NpIFvBKIjGaBwqsPv2qsw5 OE4steQr9sntxvskCoGQLFisvWYPht3I/wDUqnZXXFu1bmH8RcTS7wOzqlmRVJkp R/2EJKyLHWFDPR6+7M4ZWPlH6oqYzz7CBENESnM/Rni/gT8vPKrF8LMHgcOFz3Fi 3ddHd8Su5VzkkN5Uxhb53fGioZWUAxo2xAz8Vj0qCcc4rt4OVtFmGTAVP6hRmiRl 9f6Aml4GQn+yQUrnSeRmMz9/y3jAYVW5Sv68nRQO0wtJ52SrbAV8jlTUU3S/ZYpB V8gMDZSzM3Ns0Yd1DRYmG8lQCiSoHyZx8ow6w5dUO/D6wNRqHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHg82604mdPcUdAUrMqBpWGFg3xhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjJhNWZjZmMtZTkzMy0z MDFiLThmMTItMzA4NmUyOGRkYWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABiNbtgtD8VuqM+CJ1u+P+KEEMTyd3Y5vc0RO6/tLql2QQSf3og9 bPmYFrqXxqSID75YQGFkRNrZJnbIPeSvyCR7a+bbZcnunxJizjjNgMv+1N1MUBTK uQs+zR4f6bXmFdtv7ft309CXg0qAXOLPr2IEGo0gIJAIl/tHjCFU+iW2YRw54NWt p2Lffj9UAY9+S69lzmBTGUpgeBGFK8ZjLIkV0nUEw45NVQql3OqMv+CYGS/yvtp9 hRx+1Lcih30AI/ZsVxpE/svtfCPZqx78xpQx/7qYqyMlLg1M32i6uLekhT7uRiI1 McAZJt9dhfhpBvsheES7XiHwBlGBhmjMW/4= -----END CERTIFICATE-----Generated at Fri Apr 4 17:51:21 2025 by rpki-client