$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c68e37e3-fe3e-31cc-bb1f-aa94dde4cedb.roa File: c68e37e3-fe3e-31cc-bb1f-aa94dde4cedb.roa (raw, json) Hash identifier: HOFFB7hzpVamOp8TY5KvJnqfzN97grfYzvlNuO7cORw= Subject key identifier: 50:27:9D:9E:E8:55:95:9A:52:FD:2D:6D:4D:21:7A:BD:F8:3F:01:A3 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584843BEAC9FC5F471552CB4ED80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c68e37e3-fe3e-31cc-bb1f-aa94dde4cedb.roa Signing time: Fri 20 Dec 2024 02:30:14 +0000 ROA not before: Fri 20 Dec 2024 02:30:14 +0000 ROA not after: Thu 20 Mar 2025 01:30:14 +0000 asID: 35075 IP address blocks: 2001:470:21f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:43:be:ac:9f:c5:f4:71:55:2c:b4:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Dec 20 02:30:14 2024 GMT Not After : Mar 20 01:30:14 2025 GMT Subject: CN=030e50f1-2e1d-416b-a9e4-8cde65130e0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:46:59:39:aa:14:04:cb:f1:9d:3a:b2:6c:22: 90:8e:ed:dc:50:87:c7:19:bd:61:3b:c2:4e:67:de: ba:0d:a5:8b:39:95:2d:5a:35:18:02:d5:01:71:33: 33:e7:0c:4b:ff:66:ed:01:38:55:a6:17:fa:f7:46: d1:b2:bb:e3:5e:2c:1b:97:f3:c7:e9:cb:a1:ce:56: 5d:68:21:8f:72:c3:bc:34:62:2c:a9:be:b8:04:d8: 5d:a2:e9:8a:91:41:c5:19:1d:2e:b7:db:13:33:b4: 14:89:4e:c7:ac:b9:cf:37:1b:5b:bc:4c:29:07:95: 90:f0:22:c8:7b:c3:6e:3e:bd:95:81:77:f0:ea:c8: ea:69:d4:fb:cc:2f:66:98:b6:aa:cc:00:f0:d8:86: b5:b5:84:d5:64:de:99:bf:ba:57:7a:e2:46:e8:2b: 1c:1e:c8:36:5c:f1:7c:92:fb:2b:77:93:c2:08:57: 57:50:44:d3:d3:18:15:b2:28:c8:17:5c:ba:d1:60: 3b:82:d9:8f:01:82:44:4a:ed:0d:00:eb:d5:20:96: 69:f2:78:61:03:54:22:ba:0f:b0:26:c0:95:f7:68: 19:e4:e4:e0:8b:55:91:12:6e:51:07:23:02:e4:0c: b9:3a:82:08:34:8f:47:6e:91:e7:40:63:7b:55:bb: 4f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:27:9D:9E:E8:55:95:9A:52:FD:2D:6D:4D:21:7A:BD:F8:3F:01:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c68e37e3-fe3e-31cc-bb1f-aa94dde4cedb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:21f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:74:05:66:56:16:ee:51:b5:d6:9a:9d:bc:ed:46:c9:40:09: d4:52:4c:b6:3e:57:ab:c5:0a:6e:80:ef:d6:f4:cc:81:4f:f0: e4:60:1e:8a:d6:f7:9b:91:d4:bf:15:a8:d0:dd:d6:f0:72:3d: 5e:51:02:d0:ce:d3:1e:9f:7b:95:11:c2:94:99:11:4e:01:00: 7d:ac:7e:62:3b:26:99:1d:d1:dd:8a:d4:7e:17:64:55:75:52: db:d1:b9:d6:f7:cc:c5:9b:ee:e9:e4:ee:ea:d5:a6:08:b3:06: cd:a9:55:4f:aa:4c:33:87:78:de:43:fb:de:2f:7a:86:86:93: 22:0e:0a:02:3c:d6:5a:98:21:a6:45:4b:b7:d4:30:c2:d8:7f: 97:8c:ad:1e:dd:ad:ba:49:77:fd:cc:d4:0f:bc:11:1b:09:80: ac:4a:02:06:29:69:58:56:d4:a6:76:e6:b0:38:bc:71:df:39: 9f:0c:74:ba:df:5c:5e:94:48:11:ba:6c:2b:be:ac:47:ab:95: 5d:95:53:ba:ab:0c:d4:72:77:26:26:e8:13:3b:d0:87:6e:9a: 87:3d:e0:d8:0c:0e:74:b0:3c:57:94:77:a9:60:26:bd:98:86: 52:59:00:aa:6f:55:7a:19:5d:e2:4a:1c:d8:43:81:f3:d8:25: 09:0e:9f:ed -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhDvqyfxfRxVSy07YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MTIyMDAyMzAxNFoXDTI1MDMyMDAxMzAxNFowLzEtMCsGA1UEAxMk MDMwZTUwZjEtMmUxZC00MTZiLWE5ZTQtOGNkZTY1MTMwZTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkZZOaoUBMvxnTqybCKQju3cUIfHGb1hO8JO Z966DaWLOZUtWjUYAtUBcTMz5wxL/2btAThVphf690bRsrvjXiwbl/PH6cuhzlZd aCGPcsO8NGIsqb64BNhdoumKkUHFGR0ut9sTM7QUiU7HrLnPNxtbvEwpB5WQ8CLI e8NuPr2VgXfw6sjqadT7zC9mmLaqzADw2Ia1tYTVZN6Zv7pXeuJG6CscHsg2XPF8 kvsrd5PCCFdXUETT0xgVsijIF1y60WA7gtmPAYJESu0NAOvVIJZp8nhhA1Qiug+w JsCV92gZ5OTgi1WREm5RByMC5Ay5OoIINI9HbpHnQGN7VbtPawIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFAnnZ7oVZWaUv0tbU0her34PwGjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzY4ZTM3ZTMtZmUzZS0z MWNjLWJiMWYtYWE5NGRkZTRjZWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAIf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJF0BWZWFu5RtdaanbztRslACdRSTLY+V6vFCm6A79b0zIFP8ORg HorW95uR1L8VqNDd1vByPV5RAtDO0x6fe5URwpSZEU4BAH2sfmI7Jpkd0d2K1H4X ZFV1UtvRudb3zMWb7unk7urVpgizBs2pVU+qTDOHeN5D+94veoaGkyIOCgI81lqY IaZFS7fUMMLYf5eMrR7drbpJd/3M1A+8ERsJgKxKAgYpaVhW1KZ25rA4vHHfOZ8M dLrfXF6USBG6bCu+rEerlV2VU7qrDNRydyYm6BM70Idumoc94NgMDnSwPFeUd6lg Jr2YhlJZAKpvVXoZXeJKHNhDgfPYJQkOn+0= -----END CERTIFICATE-----Generated at Sun Feb 2 14:30:40 2025 by rpki-client