$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bd0b562d-963b-3005-9a83-1a14e6529986.roa File: bd0b562d-963b-3005-9a83-1a14e6529986.roa (raw, json) Hash identifier: iS+2R540dVIY7ZCvZorPFZ2P5a4i1VDRjx8S7emmuMk= Subject key identifier: 3B:31:8B:6D:0C:C1:0F:31:93:AA:5F:D5:09:A8:E4:82:01:41:DF:29 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849674EFAF4DFEB22FFB0F3A700 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bd0b562d-963b-3005-9a83-1a14e6529986.roa Signing time: Thu 03 Apr 2025 13:01:02 +0000 ROA not before: Thu 03 Apr 2025 13:01:02 +0000 ROA not after: Wed 02 Jul 2025 13:01:02 +0000 asID: 54798 IP address blocks: 2001:470:3b2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:4e:fa:f4:df:eb:22:ff:b0:f3:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 3 13:01:02 2025 GMT Not After : Jul 2 13:01:02 2025 GMT Subject: CN=abad7ec5-822e-418a-9280-496350062e14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:92:f5:75:cc:17:6b:d4:db:cb:54:92:aa:c5: f9:a7:7f:da:af:83:e5:fb:c4:8f:bb:73:bd:76:4c: e0:6a:e5:21:a7:e7:05:d7:0e:91:61:71:aa:75:7d: 34:86:32:7c:23:c8:be:1f:5b:29:31:28:70:eb:be: f6:7b:ed:b9:e6:59:d3:08:d1:32:4b:85:42:92:24: 62:63:e3:c1:2c:6c:3b:fb:88:c1:23:26:d2:df:6a: 08:5d:55:5f:e8:c1:47:9d:08:ea:f5:85:14:70:fa: 2a:88:d8:7d:dc:48:05:e0:8b:c1:f3:55:e7:23:4e: 43:b7:3a:bf:ba:2e:7c:6f:6d:32:3d:1c:5e:68:74: 58:e0:0f:c7:08:15:4f:da:5c:4f:12:2e:c2:d9:f7: ad:98:f4:8c:06:a2:73:fc:40:71:8b:0f:f5:2d:b3: 24:06:00:ea:aa:ed:0b:af:b1:2f:7f:6a:61:bb:2d: fb:12:33:d6:50:54:a9:c3:c9:cf:79:a1:3a:b2:45: 7a:3b:86:ff:5a:d1:b5:65:84:8f:c5:92:1d:cb:a6: d5:80:a2:72:ed:12:c2:72:fe:f5:21:39:fc:18:d6: 17:db:92:2f:be:fd:aa:d5:6a:39:eb:ff:54:66:46: 3c:f6:b5:3a:69:0d:e9:fb:6f:4b:19:c9:b3:75:e5: c0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:31:8B:6D:0C:C1:0F:31:93:AA:5F:D5:09:A8:E4:82:01:41:DF:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bd0b562d-963b-3005-9a83-1a14e6529986.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3b2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:03:58:a3:6e:b6:5b:59:f9:cb:d5:05:91:20:79:56:47:df: b2:2a:2a:31:ba:d5:6c:a1:59:d6:dd:8d:92:8d:db:23:04:c7: df:a2:0d:14:73:b5:ac:0c:19:5e:e8:b4:03:0e:67:77:26:bc: be:b5:9e:48:3b:0c:18:a3:1a:94:cc:2e:f7:8e:8c:75:cd:92: e3:28:91:be:24:fe:70:99:65:64:87:af:dd:1c:6d:a6:5e:88: 9a:59:17:fa:26:03:96:c8:5a:97:84:0e:b1:65:75:16:47:be: d2:a8:68:fd:9b:1f:0c:ad:a3:19:e2:f8:19:0b:c9:62:33:b7: b8:df:88:b7:b3:43:0c:c1:ed:8d:a2:22:90:3e:5e:49:ed:47: 54:93:7a:ae:a0:72:a2:c8:e8:aa:a1:07:da:da:47:a3:50:24: d1:3c:7c:6f:7b:65:d5:68:b2:9e:74:da:cc:c8:75:68:08:64: 6e:ed:c4:bd:82:17:ed:85:80:f8:4c:a6:8a:ec:ce:6c:6f:cb: 93:53:30:aa:99:30:ae:bf:94:dd:c1:7c:02:ad:90:06:5d:f3: 6a:5e:5f:ca:1c:4a:32:27:68:76:d4:ca:e3:93:28:85:8d:ed: fe:9d:d4:86:be:05:5d:27:85:0d:f4:f1:f7:2b:2c:88:3f:bc: a0:b3:ad:6a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElnTvr03+si/7DzpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDQwMzEzMDEwMloXDTI1MDcwMjEzMDEwMlowLzEtMCsGA1UEAxMk YWJhZDdlYzUtODIyZS00MThhLTkyODAtNDk2MzUwMDYyZTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZL1dcwXa9Tby1SSqsX5p3/ar4Pl+8SPu3O9 dkzgauUhp+cF1w6RYXGqdX00hjJ8I8i+H1spMShw6772e+255lnTCNEyS4VCkiRi Y+PBLGw7+4jBIybS32oIXVVf6MFHnQjq9YUUcPoqiNh93EgF4IvB81XnI05Dtzq/ ui58b20yPRxeaHRY4A/HCBVP2lxPEi7C2fetmPSMBqJz/EBxiw/1LbMkBgDqqu0L r7Evf2phuy37EjPWUFSpw8nPeaE6skV6O4b/WtG1ZYSPxZIdy6bVgKJy7RLCcv71 ITn8GNYX25Ivvv2q1Wo56/9UZkY89rU6aQ3p+29LGcmzdeXARwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDsxi20MwQ8xk6pf1Qmo5IIBQd8pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmQwYjU2MmQtOTYzYi0z MDA1LTlhODMtMWExNGU2NTI5OTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOy MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAcDWKNutltZ+cvVBZEgeVZH37IqKjG61WyhWdbdjZKN2yMEx9+i DRRztawMGV7otAMOZ3cmvL61nkg7DBijGpTMLveOjHXNkuMokb4k/nCZZWSHr90c baZeiJpZF/omA5bIWpeEDrFldRZHvtKoaP2bHwytoxni+BkLyWIzt7jfiLezQwzB 7Y2iIpA+XkntR1STeq6gcqLI6KqhB9raR6NQJNE8fG97ZdVosp502szIdWgIZG7t xL2CF+2FgPhMporszmxvy5NTMKqZMK6/lN3BfAKtkAZd82peX8ocSjInaHbUyuOT KIWN7f6d1Ia+BV0nhQ308fcrLIg/vKCzrWo= -----END CERTIFICATE-----Generated at Fri Apr 4 17:55:44 2025 by rpki-client