$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c7971e68-22f1-36a5-bbad-e5595b78d79b.roa File: c7971e68-22f1-36a5-bbad-e5595b78d79b.roa (raw, json) Hash identifier: 9oaRlLtfT3BaagPSJwCKVQLAGPAsTBH3Gd9iu/oA6nY= Subject key identifier: 0B:35:D9:83:35:79:1A:E6:7B:08:12:C7:9F:4E:D1:02:9E:B2:A0:0B Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858482A9E7C3F91B8EC0F0D03BB80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c7971e68-22f1-36a5-bbad-e5595b78d79b.roa Signing time: Wed 11 Dec 2024 02:30:10 +0000 ROA not before: Wed 11 Dec 2024 02:30:10 +0000 ROA not after: Tue 11 Mar 2025 01:30:10 +0000 asID: 63129 IP address blocks: 2001:470:3e1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2a:9e:7c:3f:91:b8:ec:0f:0d:03:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Dec 11 02:30:10 2024 GMT Not After : Mar 11 01:30:10 2025 GMT Subject: CN=6beb7e7b-0750-4920-88dc-3fa6d7333c2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ad:f7:80:d5:70:d1:42:3b:ac:ee:73:f2:ff: 3d:65:98:6e:42:48:3f:2a:05:47:f5:54:22:82:57: d1:c8:37:a4:23:d0:5f:43:65:60:b4:dd:d4:a0:59: 73:02:60:f2:20:84:f3:61:bf:eb:5c:7d:e0:c6:db: 0b:56:08:38:42:52:5b:65:0e:3b:8c:61:d3:4f:f5: 55:2c:d6:81:a1:03:c0:dd:49:ee:b0:4e:8a:fa:5c: fe:9a:8a:7c:d8:d0:2a:34:29:c6:bf:f4:b2:ad:05: f3:16:c4:6c:5c:c9:3f:8f:45:17:88:16:8b:c1:49: 90:b1:7b:09:f4:29:4c:68:4f:0a:bc:28:b0:fe:ee: 5c:65:1d:e6:da:54:4e:a2:1b:e2:ae:da:d7:b4:ad: 53:2e:7f:0f:cd:9e:d6:d3:31:8d:88:98:30:41:42: 2d:52:b5:26:6c:0b:a3:b0:13:34:fb:bd:e0:a5:20: 8d:f2:a3:a7:94:67:70:e8:6b:48:a9:61:5a:28:04: 99:a7:0e:54:53:a3:a6:3c:64:ad:c6:9c:c8:1a:87: 64:f9:3b:ed:1e:aa:cf:81:9a:75:c7:d4:d3:13:2a: e9:ea:6c:7a:02:96:42:87:95:85:a4:0f:7b:56:e0: 71:92:82:06:aa:eb:ba:03:83:a5:2f:8b:f7:91:71: 08:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:35:D9:83:35:79:1A:E6:7B:08:12:C7:9F:4E:D1:02:9E:B2:A0:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c7971e68-22f1-36a5-bbad-e5595b78d79b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3e1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:86:9e:63:00:e6:00:9e:d7:45:61:9b:5b:ba:01:df:ef:42: a5:c4:2f:8e:1e:20:e2:82:38:2f:17:01:28:d4:98:88:7f:95: a2:40:b5:b4:91:be:57:31:f1:ff:43:48:b5:a0:5a:1d:f7:2a: e4:61:76:8d:ab:40:81:bc:82:d1:ea:eb:d1:d3:54:78:d1:cb: 6a:bd:05:c7:93:4a:a8:02:5e:ff:59:90:c9:31:76:dd:cd:96: 94:0e:7a:43:5e:b6:54:f7:c9:0d:94:50:e8:8f:24:33:5c:b6: 2b:19:ce:8c:60:13:2e:ac:28:d0:f3:65:cd:ab:f2:c0:0e:ba: 3e:52:cd:70:29:29:c5:b8:62:ea:eb:36:bf:ed:8f:a0:8c:b4: 61:41:d9:a3:57:67:46:5a:c8:3b:67:8a:5b:96:97:8d:27:71: d3:72:d9:0f:cc:cd:16:fb:29:d2:3a:8e:31:3f:b9:c1:71:14: b5:a1:12:a3:fc:3f:a3:c1:02:48:b1:38:c4:00:94:33:84:c4: a2:f2:3d:40:ba:08:7f:47:d6:79:cd:67:61:61:69:ef:9c:80: 9b:01:73:a5:88:63:1c:06:fe:9c:76:2d:59:96:a1:e4:0b:73: 09:7f:86:99:09:e7:45:4e:f6:be:09:53:1c:30:b0:d9:13:4e: 7c:3a:13:20 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgqnnw/kbjsDw0Du4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MTIxMTAyMzAxMFoXDTI1MDMxMTAxMzAxMFowLzEtMCsGA1UEAxMk NmJlYjdlN2ItMDc1MC00OTIwLTg4ZGMtM2ZhNmQ3MzMzYzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh633gNVw0UI7rO5z8v89ZZhuQkg/KgVH9VQi glfRyDekI9BfQ2VgtN3UoFlzAmDyIITzYb/rXH3gxtsLVgg4QlJbZQ47jGHTT/VV LNaBoQPA3UnusE6K+lz+mop82NAqNCnGv/SyrQXzFsRsXMk/j0UXiBaLwUmQsXsJ 9ClMaE8KvCiw/u5cZR3m2lROohvirtrXtK1TLn8PzZ7W0zGNiJgwQUItUrUmbAuj sBM0+73gpSCN8qOnlGdw6GtIqWFaKASZpw5UU6OmPGStxpzIGodk+TvtHqrPgZp1 x9TTEyrp6mx6ApZCh5WFpA97VuBxkoIGquu6A4OlL4v3kXEI7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAs12YM1eRrmewgSx59O0QKesqALMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzc5NzFlNjgtMjJmMS0z NmE1LWJiYWQtZTU1OTViNzhkNzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAACGnmMA5gCe10Vhm1u6Ad/vQqXEL44eIOKCOC8XASjUmIh/laJA tbSRvlcx8f9DSLWgWh33KuRhdo2rQIG8gtHq69HTVHjRy2q9BceTSqgCXv9ZkMkx dt3NlpQOekNetlT3yQ2UUOiPJDNctisZzoxgEy6sKNDzZc2r8sAOuj5SzXApKcW4 YurrNr/tj6CMtGFB2aNXZ0ZayDtniluWl40ncdNy2Q/MzRb7KdI6jjE/ucFxFLWh EqP8P6PBAkixOMQAlDOExKLyPUC6CH9H1nnNZ2Fhae+cgJsBc6WIYxwG/px2LVmW oeQLcwl/hpkJ50VO9r4JUxwwsNkTTnw6EyA= -----END CERTIFICATE-----Generated at Wed Feb 5 04:51:25 2025 by rpki-client