$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c778d23d-fb40-3a1e-8ca7-2aacd757b9ef.roa File: c778d23d-fb40-3a1e-8ca7-2aacd757b9ef.roa (raw, json) Hash identifier: ivd4rraWZoshsZ5MSRjqggZhYF/62tXQnkONZUBhkck= Subject key identifier: C6:88:2E:C1:79:09:03:22:1E:33:41:7B:0A:61:29:42:46:59:31:04 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848A2A9F1E2C48DE811C235D080 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c778d23d-fb40-3a1e-8ca7-2aacd757b9ef.roa Signing time: Thu 23 Jan 2025 02:30:15 +0000 ROA not before: Thu 23 Jan 2025 02:30:15 +0000 ROA not after: Wed 23 Apr 2025 01:30:15 +0000 asID: 35075 IP address blocks: 2001:470:3f7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:a9:f1:e2:c4:8d:e8:11:c2:35:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jan 23 02:30:15 2025 GMT Not After : Apr 23 01:30:15 2025 GMT Subject: CN=ed383528-87a0-4a5d-b0b4-02d8c083ee52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:56:72:8b:6e:ea:c0:12:11:3e:4a:19:6b:30: c6:c9:30:ef:1d:d2:34:ca:a9:eb:68:3f:ff:ed:36: 80:56:11:48:c0:ef:c6:16:ff:b2:ce:a5:8f:b0:f2: 23:34:71:1b:2d:e8:7f:e9:0f:31:d4:db:6e:49:43: 65:33:29:be:c4:a9:a3:0e:ab:6d:84:9e:e4:36:9e: 53:bf:a8:ac:ba:58:8d:7d:c1:f9:5b:50:2a:81:4e: 35:65:ba:df:c5:cb:c9:b3:55:f0:44:b5:d1:a9:8d: 80:3c:08:84:3d:e2:e5:13:7d:cb:ff:22:c1:5a:10: 65:6a:df:f5:65:ed:23:6a:b6:72:6f:00:0a:34:5e: f8:e5:df:e4:f4:2f:6c:f9:a1:03:9f:29:5d:05:f1: ab:bf:da:d1:fa:de:a3:30:7d:93:80:69:c2:46:9e: 25:8a:e0:0d:9b:2f:2e:71:71:d8:57:ad:a1:12:71: 94:13:d8:23:78:e4:d4:00:15:bb:11:59:f9:e5:f5: 40:7d:b6:58:a1:25:00:5f:78:f9:bd:b1:a1:4c:e1: 1d:e7:79:7e:31:10:66:65:0b:80:b3:d2:60:34:7f: 47:7f:67:b9:8e:4e:9e:4c:56:88:07:9a:ef:04:68: 9c:de:f5:e0:3a:aa:bf:32:5d:dd:89:a3:21:86:f1: a7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:88:2E:C1:79:09:03:22:1E:33:41:7B:0A:61:29:42:46:59:31:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c778d23d-fb40-3a1e-8ca7-2aacd757b9ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3f7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:0b:04:65:5c:88:17:d9:72:d8:0e:f4:2f:7b:3e:52:c2:1b: fc:94:70:71:86:34:ed:27:9f:6a:dd:f8:af:ba:90:b3:c7:16: 23:b1:3a:83:1d:3e:37:5d:6a:54:99:79:91:67:89:97:f2:9a: 29:c8:b1:79:f1:bb:31:71:fb:8c:b3:77:bf:4b:59:e2:ce:b1: ca:a8:a0:d3:6e:59:73:0e:89:d1:7a:b7:89:6a:8b:f9:80:c5: 52:21:3d:9f:82:0a:3d:c3:ab:a4:49:fa:0a:e1:cf:84:4b:a4: 8b:56:84:99:7b:f5:ac:c2:a8:29:70:76:63:c3:3a:77:ef:f4: bc:b5:35:78:9d:86:d4:9d:5b:71:11:f5:11:07:7f:5b:98:4d: a8:16:b8:d7:69:18:d7:45:dd:f1:7d:9a:61:09:1f:b8:d1:7d: d9:5e:b5:97:c5:ec:53:80:70:11:ed:ba:6b:3b:73:25:ec:63: d9:a3:3d:72:2f:08:ae:d1:76:96:49:bd:9a:2e:67:21:09:66: d0:e5:d9:7d:9f:12:88:60:2a:0a:f8:8e:e1:0f:36:99:6d:e4: 27:63:55:8b:73:1c:23:a8:2e:11:e6:f2:0d:0a:24:fb:36:39: 5a:e2:7b:aa:02:c4:12:e1:69:37:ed:ee:31:78:8e:e9:8e:1b: a7:54:13:79 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiiqfHixI3oEcI10IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDEyMzAyMzAxNVoXDTI1MDQyMzAxMzAxNVowLzEtMCsGA1UEAxMk ZWQzODM1MjgtODdhMC00YTVkLWIwYjQtMDJkOGMwODNlZTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1Zyi27qwBIRPkoZazDGyTDvHdI0yqnraD// 7TaAVhFIwO/GFv+yzqWPsPIjNHEbLeh/6Q8x1NtuSUNlMym+xKmjDqtthJ7kNp5T v6isuliNfcH5W1AqgU41ZbrfxcvJs1XwRLXRqY2APAiEPeLlE33L/yLBWhBlat/1 Ze0jarZybwAKNF745d/k9C9s+aEDnyldBfGrv9rR+t6jMH2TgGnCRp4liuANmy8u cXHYV62hEnGUE9gjeOTUABW7EVn55fVAfbZYoSUAX3j5vbGhTOEd53l+MRBmZQuA s9JgNH9Hf2e5jk6eTFaIB5rvBGic3vXgOqq/Ml3diaMhhvGn1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMaILsF5CQMiHjNBewphKUJGWTEEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzc3OGQyM2QtZmI0MC0z YTFlLThjYTctMmFhY2Q3NTdiOWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAP3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAcLBGVciBfZctgO9C97PlLCG/yUcHGGNO0nn2rd+K+6kLPHFiOx OoMdPjddalSZeZFniZfyminIsXnxuzFx+4yzd79LWeLOscqooNNuWXMOidF6t4lq i/mAxVIhPZ+CCj3Dq6RJ+grhz4RLpItWhJl79azCqClwdmPDOnfv9Ly1NXidhtSd W3ER9REHf1uYTagWuNdpGNdF3fF9mmEJH7jRfdletZfF7FOAcBHtums7cyXsY9mj PXIvCK7RdpZJvZouZyEJZtDl2X2fEohgKgr4juEPNplt5CdjVYtzHCOoLhHm8g0K JPs2OVrie6oCxBLhaTft7jF4jumOG6dUE3k= -----END CERTIFICATE-----Generated at Sun Feb 2 14:47:28 2025 by rpki-client