$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bfd1b4ad-1486-3092-bbe5-9453ad3d3192.roa File: bfd1b4ad-1486-3092-bbe5-9453ad3d3192.roa (raw, json) Hash identifier: SPKqTjMh5maTtCgyFuhpUCt/VU91PZyZMjpahPXMQ2U= Subject key identifier: AA:66:49:44:8F:E6:B4:A7:B4:FD:8D:A7:43:FF:E5:76:1F:BE:52:5A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926B833D0825B62D9731E00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bfd1b4ad-1486-3092-bbe5-9453ad3d3192.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 18779 IP address blocks: 2001:470:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:b8:33:d0:82:5b:62:d9:73:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=baa517bc-ecc5-45bb-9088-ce3d1c38d27f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:04:71:56:d8:a5:02:60:3a:b5:93:0d:a1:94: a1:f8:e8:47:c6:85:0b:0c:53:7b:01:b8:fc:aa:cd: e4:d4:61:1c:35:a6:d5:3b:fd:c0:c3:74:8a:f5:96: 8f:63:ae:cf:39:bc:0c:ba:44:ef:19:a1:f4:c8:49: c3:f5:97:99:33:61:ea:87:65:ad:93:f7:0a:b7:17: 63:03:5a:43:db:25:57:c4:36:3d:5f:c9:db:d4:89: f5:a3:9c:6d:96:0a:e7:6b:0d:63:de:e1:40:1a:d4: fe:45:10:73:f7:a9:fb:ca:fd:e4:2d:4d:9f:21:53: ef:bb:be:36:c6:57:28:24:9c:f0:2c:06:cf:13:31: fa:dc:6b:7a:cc:0c:7e:26:f2:af:76:91:16:86:b7: 01:de:e0:c1:5d:db:b0:6d:02:e7:60:e0:65:60:2e: 9d:e2:08:6b:45:ea:02:96:9b:de:7f:5c:e4:e8:bf: 4b:c3:c8:19:66:2e:78:d1:8b:0f:db:0e:d4:81:a5: 74:71:c8:2d:f9:e3:ce:5f:76:28:57:12:63:35:b5: 08:ae:bb:cc:91:e4:db:41:12:79:1c:d4:1e:7b:10: 13:f8:94:ec:36:ee:0d:c8:16:e3:a9:23:53:e7:f3: df:1d:d6:93:e1:b0:50:13:1b:ee:28:e3:3c:1f:aa: ae:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:66:49:44:8F:E6:B4:A7:B4:FD:8D:A7:43:FF:E5:76:1F:BE:52:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bfd1b4ad-1486-3092-bbe5-9453ad3d3192.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:ee:14:85:0e:04:13:22:8c:7b:9f:4c:6d:33:78:d9:e2:36: aa:5c:e6:4a:d9:99:e3:96:24:6e:aa:81:b2:8f:14:d7:87:55: 71:c3:98:3c:03:f3:38:65:d8:cb:9a:22:fd:15:17:cf:97:06: 59:d6:18:ec:fc:60:63:41:e4:da:c0:2a:d9:81:e0:af:7d:db: 69:f9:96:6f:46:d4:75:5c:07:a7:ce:e6:38:9c:30:44:fa:9d: c3:eb:6c:09:e9:42:b6:22:3f:70:aa:2f:ec:64:52:90:74:ad: 2a:4d:7d:18:6b:40:6e:92:b6:e4:09:dd:67:f3:34:fd:93:49: 57:e7:06:6b:ad:89:ee:0f:0b:ef:e6:19:b5:bc:a3:26:21:56: 1c:24:0e:04:2a:f5:ae:54:58:79:72:c0:92:ed:a5:f0:7d:a2: 6f:0b:ca:fc:00:e7:c0:bb:ca:ee:70:c7:52:66:7d:a0:5d:5d: 44:a3:7b:41:69:6d:c3:7f:a0:58:90:4e:ac:70:93:d9:41:27: c3:e3:23:fb:85:4d:75:82:0b:46:23:b3:0a:67:19:1f:d8:6c: f9:a4:bb:4e:b1:f2:33:83:a4:09:27:19:ee:f7:20:e5:39:0d: 3f:cb:43:28:8c:ff:2c:76:8c:a9:1f:bd:1a:ca:62:2c:66:bc: 74:88:c7:52 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5Jrgz0IJbYtlzHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk YmFhNTE3YmMtZWNjNS00NWJiLTkwODgtY2UzZDFjMzhkMjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgRxVtilAmA6tZMNoZSh+OhHxoULDFN7Abj8 qs3k1GEcNabVO/3Aw3SK9ZaPY67PObwMukTvGaH0yEnD9ZeZM2Hqh2Wtk/cKtxdj A1pD2yVXxDY9X8nb1In1o5xtlgrnaw1j3uFAGtT+RRBz96n7yv3kLU2fIVPvu742 xlcoJJzwLAbPEzH63Gt6zAx+JvKvdpEWhrcB3uDBXduwbQLnYOBlYC6d4ghrReoC lpvef1zk6L9Lw8gZZi540YsP2w7UgaV0ccgt+ePOX3YoVxJjNbUIrrvMkeTbQRJ5 HNQeexAT+JTsNu4NyBbjqSNT5/PfHdaT4bBQExvuKOM8H6quzQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKpmSUSP5rSntP2Np0P/5XYfvlJaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmZkMWI0YWQtMTQ4Ni0z MDkyLWJiZTUtOTQ1M2FkM2QzMTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEjuFIUOBBMijHufTG0zeNniNqpc5krZmeOWJG6qgbKPFNeHVXHD mDwD8zhl2MuaIv0VF8+XBlnWGOz8YGNB5NrAKtmB4K9922n5lm9G1HVcB6fO5jic MET6ncPrbAnpQrYiP3CqL+xkUpB0rSpNfRhrQG6StuQJ3WfzNP2TSVfnBmutie4P C+/mGbW8oyYhVhwkDgQq9a5UWHlywJLtpfB9om8LyvwA58C7yu5wx1JmfaBdXUSj e0FpbcN/oFiQTqxwk9lBJ8PjI/uFTXWCC0YjswpnGR/YbPmku06x8jODpAknGe73 IOU5DT/LQyiM/yx2jKkfvRrKYixmvHSIx1I= -----END CERTIFICATE-----Generated at Fri Apr 4 17:55:50 2025 by rpki-client