$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c934e88f-0de8-38ab-823a-63300183a4ee.roa File: c934e88f-0de8-38ab-823a-63300183a4ee.roa (raw, json) Hash identifier: 7M4W0E2Ng1ZUoxo6bQtClsepEEUrzLraopQY9ydeZjk= Subject key identifier: C7:21:2E:C5:27:84:9C:61:EC:31:AE:37:19:B8:59:0D:1C:E2:AB:D1 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584819D01D2483DE527AF0EF6300 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c934e88f-0de8-38ab-823a-63300183a4ee.roa Signing time: Thu 05 Dec 2024 02:00:39 +0000 ROA not before: Thu 05 Dec 2024 02:00:39 +0000 ROA not after: Wed 05 Mar 2025 02:00:39 +0000 asID: 267784 IP address blocks: 2001:470:288::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:19:d0:1d:24:83:de:52:7a:f0:ef:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Dec 5 02:00:39 2024 GMT Not After : Mar 5 02:00:39 2025 GMT Subject: CN=f3823c65-079e-4e33-beae-76d9399d8352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:6d:2f:93:e7:5a:0c:b3:fd:ce:09:e3:7a:a6: b0:ad:3b:61:3b:5b:e2:c2:0c:c7:e6:15:ea:c5:21: bc:43:b5:95:59:b9:0a:22:c1:93:95:e6:2c:49:1e: 97:04:11:23:98:aa:9b:9a:bc:6d:aa:61:09:18:88: 79:ed:1e:48:cf:79:e9:51:09:bf:68:8f:45:5f:04: da:12:be:00:1c:d7:60:9a:d5:dc:5a:5c:ac:e2:be: c3:9d:85:bf:51:3d:87:11:13:3b:2c:b3:c8:76:5c: 4e:5a:5f:2d:b1:bd:73:e0:03:e4:b6:1d:f2:e1:ea: 7c:37:f5:31:4d:ad:0d:35:9b:a3:22:d9:e8:3d:29: d9:ba:14:fe:51:f4:06:52:46:0a:18:d6:4e:f2:03: f0:d0:78:3f:c7:01:d8:5d:2a:93:b0:d2:8b:9f:53: 31:26:03:71:92:03:c1:8b:e4:89:a2:1b:97:11:56: ac:70:a4:37:ba:2c:64:d0:e3:af:d3:2f:83:c0:b2: 22:58:f3:95:e1:d1:87:40:a5:6d:f4:c8:73:16:1a: 1a:1b:c7:8d:38:eb:1d:8a:e7:11:95:63:26:7a:26: 11:3e:bd:03:8b:7b:73:ce:8e:52:68:74:1f:e9:5a: 14:72:92:58:d7:86:66:e1:ae:f3:0e:99:bf:1e:0f: 38:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:21:2E:C5:27:84:9C:61:EC:31:AE:37:19:B8:59:0D:1C:E2:AB:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c934e88f-0de8-38ab-823a-63300183a4ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:288::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:28:d7:e9:9e:81:ef:80:23:a7:99:df:42:be:4d:4f:a5:b5: 19:1b:51:04:66:60:ee:57:d5:de:b2:ab:bc:8c:82:5f:8b:41: e6:e9:fb:0b:59:93:43:28:87:59:a3:78:c6:f8:c0:d5:9f:c8: f7:98:86:18:65:cc:01:ce:ef:f8:6d:5d:2b:45:c8:0a:7d:55: 38:10:e1:86:d8:10:c8:a9:7a:e6:3e:77:7c:43:e3:c6:13:99: 64:f5:62:a2:a8:93:30:fd:24:fc:98:ad:33:f3:2e:6a:7a:15: c0:a6:cd:84:44:a0:d3:aa:2f:ea:a0:e7:0e:12:13:c5:b4:0d: c3:e6:ac:4f:7c:ec:46:e8:d5:24:09:1f:cc:84:3d:a1:ee:49: 82:76:1b:31:9e:82:9b:e3:d3:c2:3d:cb:8e:d0:ee:b6:d4:7e: 78:16:0e:0c:00:b5:d7:d4:0b:14:81:3d:7c:f4:c3:98:ad:19: 17:f6:cf:af:57:38:e0:62:fb:e1:67:ab:33:52:06:cb:49:ce: b8:1b:fb:84:21:92:f9:18:0b:62:98:1a:68:c3:9e:aa:06:7e: b4:9d:28:53:9a:39:65:e7:45:9f:92:de:2d:97:d8:66:c9:ab: 11:72:a0:5f:6b:32:f0:9e:ad:22:d3:53:0d:c4:27:5f:1d:ad: 08:f7:24:da -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgZ0B0kg95SevDvYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk ZjM4MjNjNjUtMDc5ZS00ZTMzLWJlYWUtNzZkOTM5OWQ4MzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjG0vk+daDLP9zgnjeqawrTthO1viwgzH5hXq xSG8Q7WVWbkKIsGTleYsSR6XBBEjmKqbmrxtqmEJGIh57R5Iz3npUQm/aI9FXwTa Er4AHNdgmtXcWlys4r7DnYW/UT2HERM7LLPIdlxOWl8tsb1z4APkth3y4ep8N/Ux Ta0NNZujItnoPSnZuhT+UfQGUkYKGNZO8gPw0Hg/xwHYXSqTsNKLn1MxJgNxkgPB i+SJohuXEVascKQ3uixk0OOv0y+DwLIiWPOV4dGHQKVt9MhzFhoaG8eNOOsdiucR lWMmeiYRPr0Di3tzzo5SaHQf6VoUcpJY14Zm4a7zDpm/Hg84AwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMchLsUnhJxh7DGuNxm4WQ0c4qvRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzkzNGU4OGYtMGRlOC0z OGFiLTgyM2EtNjMzMDAxODNhNGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFYo1+mege+AI6eZ30K+TU+ltRkbUQRmYO5X1d6yq7yMgl+LQebp +wtZk0Moh1mjeMb4wNWfyPeYhhhlzAHO7/htXStFyAp9VTgQ4YbYEMipeuY+d3xD 48YTmWT1YqKokzD9JPyYrTPzLmp6FcCmzYREoNOqL+qg5w4SE8W0DcPmrE987Ebo 1SQJH8yEPaHuSYJ2GzGegpvj08I9y47Q7rbUfngWDgwAtdfUCxSBPXz0w5itGRf2 z69XOOBi++FnqzNSBstJzrgb+4QhkvkYC2KYGmjDnqoGfrSdKFOaOWXnRZ+S3i2X 2GbJqxFyoF9rMvCerSLTUw3EJ18drQj3JNo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:05:03 2025 by rpki-client