$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b5ef32ef-6469-3e41-83a8-75d15375be1b.roa File: b5ef32ef-6469-3e41-83a8-75d15375be1b.roa (raw, json) Hash identifier: YcFjm37KjUOgF0W+dBloikLzwNfuvWy35oKT/brdVe0= Subject key identifier: 50:18:98:DB:8B:41:DD:21:02:E3:C2:E6:03:7A:35:FD:23:06:15:26 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926C9B197DB47AC8B234800 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b5ef32ef-6469-3e41-83a8-75d15375be1b.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 11255 IP address blocks: 2001:470:2f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:c9:b1:97:db:47:ac:8b:23:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=d59314e7-1692-42ed-bd7f-b37878b59cf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:03:33:94:e8:e1:fb:91:e2:bd:f8:c7:bd:8a: 85:74:7d:cb:b3:b1:b9:8e:68:9e:20:8c:8f:6e:84: d6:71:41:d7:1f:3e:15:67:ef:36:d4:a1:23:23:8c: 4f:07:83:86:d3:31:14:d5:63:ac:06:6e:e3:4b:07: 64:c4:0b:b0:92:f2:75:55:69:0b:21:7a:60:97:62: 46:d6:01:79:c5:95:4d:e9:9e:0d:f4:b4:dd:41:1b: cb:6d:56:eb:3f:76:d3:29:52:d0:cc:6c:f9:4b:73: 82:3b:8f:b1:f4:7e:19:bd:e8:d4:8d:94:dd:bb:17: f5:3d:e1:32:97:b5:83:40:f0:b2:11:5e:08:73:e0: 9b:b0:ab:4a:d0:3e:67:f1:b4:51:f1:7e:0a:9f:69: f0:6b:27:69:2d:74:2c:f3:3a:98:45:29:49:83:da: a2:af:13:10:e3:31:a9:29:c7:39:cc:c5:28:c3:da: f3:c2:c4:b8:31:b8:80:e7:94:73:3c:85:ce:3a:ed: 67:a6:39:f7:fd:fe:05:71:78:b1:53:28:4b:fe:ec: 5d:92:33:9b:35:5b:91:e0:eb:9f:75:cc:a3:e2:6c: dd:64:96:40:b0:e3:18:5e:54:d3:d8:23:74:5b:a1: 13:d7:df:34:82:cf:14:55:19:20:3f:b9:a2:5c:79: 9f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:18:98:DB:8B:41:DD:21:02:E3:C2:E6:03:7A:35:FD:23:06:15:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b5ef32ef-6469-3e41-83a8-75d15375be1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:4f:1b:e3:e6:99:be:28:a8:0b:84:53:ea:8d:dd:d0:6a:ec: b5:f9:67:3f:2f:45:0b:fa:44:77:c1:5e:3c:d5:71:8f:9e:83: 92:12:d7:f9:5d:37:e7:29:cf:79:fd:28:68:41:47:b6:0f:52: 42:05:a9:52:d7:8c:e7:50:8e:5d:0c:c3:91:97:db:4b:72:b3: 81:90:f2:62:b2:a1:f9:06:0b:0a:f4:0b:54:22:97:35:c4:d6: b1:cc:a1:9d:1e:e9:41:73:f5:de:a3:84:2a:20:b6:b7:b3:f3: 0d:75:03:5a:25:6c:60:18:48:3e:a9:8c:dc:45:49:b9:b6:fa: cc:53:e5:99:ff:25:7f:d9:5e:03:63:9f:d6:be:89:89:68:28: 61:40:a0:6d:0a:21:3f:a9:64:d9:00:40:f5:98:02:04:54:45: c8:a7:d1:13:b5:6d:6c:86:ba:15:db:93:75:aa:e6:f2:91:88: d8:9e:ca:2d:1a:8e:11:16:26:96:dc:6f:1a:d4:3a:a5:e5:39: c7:02:ef:77:ac:11:b3:e1:6b:45:3c:05:ca:22:f7:a9:0b:a3: 6c:1a:d4:af:d4:2e:77:9a:5a:c4:45:d2:8d:2a:a2:a0:63:24: 72:12:30:89:eb:77:b5:54:6c:80:bd:c4:d1:fd:24:25:96:fa: 79:1a:cc:fe -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5Jsmxl9tHrIsjSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk ZDU5MzE0ZTctMTY5Mi00MmVkLWJkN2YtYjM3ODc4YjU5Y2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQMzlOjh+5HivfjHvYqFdH3Ls7G5jmieIIyP boTWcUHXHz4VZ+821KEjI4xPB4OG0zEU1WOsBm7jSwdkxAuwkvJ1VWkLIXpgl2JG 1gF5xZVN6Z4N9LTdQRvLbVbrP3bTKVLQzGz5S3OCO4+x9H4ZvejUjZTduxf1PeEy l7WDQPCyEV4Ic+CbsKtK0D5n8bRR8X4Kn2nwaydpLXQs8zqYRSlJg9qirxMQ4zGp Kcc5zMUow9rzwsS4MbiA55RzPIXOOu1npjn3/f4FcXixUyhL/uxdkjObNVuR4Ouf dcyj4mzdZJZAsOMYXlTT2CN0W6ET1980gs8UVRkgP7miXHmf2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFAYmNuLQd0hAuPC5gN6Nf0jBhUmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjVlZjMyZWYtNjQ2OS0z ZTQxLTgzYTgtNzVkMTUzNzViZTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAAv MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAFPG+Pmmb4oqAuEU+qN3dBq7LX5Zz8vRQv6RHfBXjzVcY+eg5IS 1/ldN+cpz3n9KGhBR7YPUkIFqVLXjOdQjl0Mw5GX20tys4GQ8mKyofkGCwr0C1Qi lzXE1rHMoZ0e6UFz9d6jhCogtrez8w11A1olbGAYSD6pjNxFSbm2+sxT5Zn/JX/Z XgNjn9a+iYloKGFAoG0KIT+pZNkAQPWYAgRURcin0RO1bWyGuhXbk3Wq5vKRiNie yi0ajhEWJpbcbxrUOqXlOccC73esEbPha0U8Bcoi96kLo2wa1K/ULneaWsRF0o0q oqBjJHISMInrd7VUbIC9xNH9JCWW+nkazP4= -----END CERTIFICATE-----Generated at Wed Apr 9 01:02:36 2025 by rpki-client