$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c74fc652-fd95-3005-b592-72e86e691813.roa File: c74fc652-fd95-3005-b592-72e86e691813.roa (raw, json) Hash identifier: cie9KNbf0xaFZpPxnqBx19VafrFbbw7zjHA9ycgMGaU= Subject key identifier: 47:89:A9:F4:37:D2:B9:76:27:EA:D5:A9:C7:38:66:BF:83:16:2D:E6 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584949FEA2EECE732AB1A3600600 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c74fc652-fd95-3005-b592-72e86e691813.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 29097 IP address blocks: 2001:470:347::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:a2:ee:ce:73:2a:b1:a3:60:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=2d4517c3-95a8-4d75-a79b-03985d5398ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:5f:a1:70:a1:4c:48:63:f1:19:de:d9:4f:a4: 47:03:fe:6a:e3:37:f8:51:53:4f:58:fc:af:10:fb: 77:90:36:b3:85:1b:7f:e0:48:c1:90:34:db:ab:97: 68:69:5e:80:91:65:87:40:ea:39:b6:84:b7:e2:2f: 0b:77:5a:b7:1c:5e:e8:00:93:0c:42:c5:1a:9f:b2: 22:31:8c:92:7d:65:0c:6a:03:5c:b4:2b:8c:91:60: 16:f8:05:67:02:b6:0b:82:dd:55:03:02:1e:c0:3c: a4:18:02:56:07:bf:e4:a1:55:0e:3a:fc:a3:83:95: 9e:ae:dd:d1:d4:af:2f:b1:8f:cc:79:eb:8e:44:3d: 6d:5e:e3:54:56:d0:4c:7b:33:f7:27:79:15:49:0a: df:a2:e9:7c:3f:fa:bb:e8:bb:b7:e0:49:71:3c:81: 00:90:d4:ae:fd:27:97:e1:5b:65:c8:82:41:6d:49: aa:08:6a:b2:9e:56:b9:ee:31:19:1f:cc:b0:ef:5a: 50:24:a2:ff:d8:c7:38:32:d5:36:ed:0f:c6:c1:16: 64:ed:8d:a1:35:12:d8:26:dc:c1:bf:80:9b:92:12: 77:cd:6f:c9:a5:96:cc:13:16:a1:20:01:54:d9:1c: f0:33:67:99:62:4b:26:e4:f1:64:08:4f:4b:20:d9: ee:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:89:A9:F4:37:D2:B9:76:27:EA:D5:A9:C7:38:66:BF:83:16:2D:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c74fc652-fd95-3005-b592-72e86e691813.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:347::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:40:e0:59:15:b9:c9:3e:80:a0:a0:22:d8:34:72:08:a3:d8: da:ab:6a:85:7d:c8:1f:55:37:b1:44:91:d8:77:68:12:34:ee: e4:da:7e:22:ba:66:13:8f:7c:1a:8e:0c:78:75:7e:b6:e2:80: f1:03:db:76:59:83:e5:10:26:d2:fd:7a:d0:32:9b:2b:20:27: 6a:76:c6:cc:da:4d:4b:02:4b:6d:ed:ac:99:b3:1e:97:44:6e: 24:0e:67:7f:72:b7:23:ea:9f:89:08:1c:02:97:1c:ca:61:5f: 4d:ed:44:1e:7e:1e:d9:b3:ef:75:42:ea:b5:c9:4d:a2:14:88: 4e:26:4d:e4:49:bc:19:80:31:8e:b9:d1:f4:cb:9b:c6:1d:20: d4:3e:25:34:35:75:dc:6c:d8:38:d7:64:1f:36:ed:86:8d:67: 6a:b5:71:dd:45:fa:ef:8d:86:9b:53:ca:6d:61:fc:6d:80:0f: 4a:f5:83:4a:65:b0:76:6f:81:95:f4:0c:b2:52:26:47:57:c4: ad:0e:b9:d1:98:ef:af:1e:bc:f2:f9:50:2e:d8:44:1e:17:28: 13:54:36:92:bf:35:7d:03:69:f5:97:19:dc:33:41:8f:09:cd: 5f:c7:f2:a8:0b:19:6e:f3:37:76:af:e9:df:c6:9c:1b:c4:cc: 15:49:6b:e3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElJ/qLuznMqsaNgBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk MmQ0NTE3YzMtOTVhOC00ZDc1LWE3OWItMDM5ODVkNTM5OGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjl+hcKFMSGPxGd7ZT6RHA/5q4zf4UVNPWPyv EPt3kDazhRt/4EjBkDTbq5doaV6AkWWHQOo5toS34i8Ld1q3HF7oAJMMQsUan7Ii MYySfWUMagNctCuMkWAW+AVnArYLgt1VAwIewDykGAJWB7/koVUOOvyjg5Wert3R 1K8vsY/MeeuORD1tXuNUVtBMezP3J3kVSQrfoul8P/q76Lu34ElxPIEAkNSu/SeX 4VtlyIJBbUmqCGqynla57jEZH8yw71pQJKL/2Mc4MtU27Q/GwRZk7Y2hNRLYJtzB v4CbkhJ3zW/JpZbMExahIAFU2RzwM2eZYksm5PFkCE9LINnuuQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEeJqfQ30rl2J+rVqcc4Zr+DFi3mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzc0ZmM2NTItZmQ5NS0z MDA1LWI1OTItNzJlODZlNjkxODEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcANH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALpA4FkVuck+gKCgItg0cgij2NqraoV9yB9VN7FEkdh3aBI07uTa fiK6ZhOPfBqODHh1frbigPED23ZZg+UQJtL9etAymysgJ2p2xszaTUsCS23trJmz HpdEbiQOZ39ytyPqn4kIHAKXHMphX03tRB5+Htmz73VC6rXJTaIUiE4mTeRJvBmA MY650fTLm8YdINQ+JTQ1ddxs2DjXZB827YaNZ2q1cd1F+u+NhptTym1h/G2AD0r1 g0plsHZvgZX0DLJSJkdXxK0OudGY768evPL5UC7YRB4XKBNUNpK/NX0DafWXGdwz QY8JzV/H8qgLGW7zN3av6d/GnBvEzBVJa+M= -----END CERTIFICATE-----Generated at Fri Apr 4 17:54:58 2025 by rpki-client