$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c934e88f-0de8-38ab-823a-63300183a4ee.roa File: c934e88f-0de8-38ab-823a-63300183a4ee.roa (raw, json) Hash identifier: sJBvsd8UG7+hJk2PDJ0MBz3vYzuY4QfYV26/AV0GyKA= Subject key identifier: DC:A3:BB:93:3B:F2:D3:D2:A0:7C:6B:92:2D:BA:42:9B:EB:81:63:ED Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926E4A7A258696D0FFBD480 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c934e88f-0de8-38ab-823a-63300183a4ee.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 267784 IP address blocks: 2001:470:288::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:e4:a7:a2:58:69:6d:0f:fb:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=db7654de-cd6a-44b2-b089-e610293c2aa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a7:db:61:d7:3a:76:2f:0c:1c:78:9e:f0:ed: 00:6f:01:8d:fe:26:21:23:a9:be:5a:26:cb:98:80: 0f:ac:20:14:b4:78:9d:ed:d7:4d:e4:14:0a:48:94: 7e:d8:c8:aa:d8:35:b1:74:2a:57:8f:cc:da:32:8c: 82:d8:e1:37:ae:cc:b5:48:08:7e:00:a2:3a:18:a3: 25:b6:a1:92:2a:e1:1a:95:e4:d7:36:31:e3:59:33: 7b:5a:9d:04:14:cb:e8:a4:7e:32:c4:ba:ff:bb:56: a4:52:3c:ab:b9:70:13:94:f5:16:56:19:40:da:34: 85:6d:83:f0:44:9d:33:c9:3b:cc:e5:93:29:36:17: 15:18:87:c6:e8:51:e0:f0:8e:b2:d1:5d:db:fc:3d: be:c8:c8:5b:19:ee:a4:fd:b2:b4:d1:21:f3:54:a3: 68:b1:0f:68:29:d2:32:53:94:a9:a6:a2:04:a4:81: 39:1d:11:9a:a5:e8:5b:e1:89:06:61:f3:81:9f:ab: a9:44:55:de:75:5a:c8:67:9e:2d:49:05:6c:44:45: ee:8f:1b:0c:7e:54:61:a7:49:47:49:c7:41:9f:24: 6a:86:b4:08:90:93:9d:62:2d:4d:89:ed:85:d4:ad: aa:d3:af:5e:6d:51:75:94:3c:73:a3:1e:d3:02:62: 50:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A3:BB:93:3B:F2:D3:D2:A0:7C:6B:92:2D:BA:42:9B:EB:81:63:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c934e88f-0de8-38ab-823a-63300183a4ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:288::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:05:f8:06:4a:c2:19:7c:11:ae:c5:f6:dc:cb:f1:dc:09:ef: 9b:d4:ab:1a:00:52:ee:e6:70:93:5c:85:72:a9:da:89:ca:75: 5a:ee:2e:6a:34:b6:dd:d7:1b:a5:09:71:4a:e0:1d:15:a4:c2: 5c:ae:e7:85:c2:88:eb:29:13:e9:f8:e8:be:c6:72:9b:8d:be: 03:95:88:3d:c3:46:a0:e4:9d:b4:84:9d:c5:f0:61:3b:bb:13: 30:6f:64:9c:f7:7f:16:63:6e:55:a2:b3:3d:98:df:10:46:d0: 55:9f:50:be:4b:d4:bb:d9:cb:38:b2:da:ed:72:99:a7:a7:38: 3d:bb:dd:9f:f0:61:8f:31:b8:90:ee:10:07:1c:5a:78:5a:57: 0e:43:c0:7e:73:f5:2d:ff:23:7c:f7:66:01:14:f0:7b:8c:fd: 6c:1d:29:c4:1f:99:87:a4:cf:a0:28:a1:a9:7a:88:9a:b0:28: db:d4:35:51:e1:d2:e4:0f:f0:f7:05:66:6f:49:fe:b6:3c:49: c7:13:56:13:14:7c:bc:02:5a:16:8b:c9:69:9c:b9:e4:b7:e2: 18:e2:1f:45:b8:4a:1a:bf:85:22:d5:f8:16:98:f8:62:33:f6: b4:f4:2e:7c:dc:59:ef:8e:0b:dc:d3:e7:3b:62:e0:4d:03:ff: 9e:6f:63:39 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JuSnolhpbQ/71IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk ZGI3NjU0ZGUtY2Q2YS00NGIyLWIwODktZTYxMDI5M2MyYWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmafbYdc6di8MHHie8O0AbwGN/iYhI6m+WibL mIAPrCAUtHid7ddN5BQKSJR+2Miq2DWxdCpXj8zaMoyC2OE3rsy1SAh+AKI6GKMl tqGSKuEaleTXNjHjWTN7Wp0EFMvopH4yxLr/u1akUjyruXATlPUWVhlA2jSFbYPw RJ0zyTvM5ZMpNhcVGIfG6FHg8I6y0V3b/D2+yMhbGe6k/bK00SHzVKNosQ9oKdIy U5SppqIEpIE5HRGapehb4YkGYfOBn6upRFXedVrIZ54tSQVsREXujxsMflRhp0lH ScdBnyRqhrQIkJOdYi1Nie2F1K2q069ebVF1lDxzox7TAmJQxQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNyju5M78tPSoHxrki26QpvrgWPtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzkzNGU4OGYtMGRlOC0z OGFiLTgyM2EtNjMzMDAxODNhNGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFQF+AZKwhl8Ea7F9tzL8dwJ75vUqxoAUu7mcJNchXKp2onKdVru Lmo0tt3XG6UJcUrgHRWkwlyu54XCiOspE+n46L7GcpuNvgOViD3DRqDknbSEncXw YTu7EzBvZJz3fxZjblWisz2Y3xBG0FWfUL5L1LvZyziy2u1ymaenOD273Z/wYY8x uJDuEAccWnhaVw5DwH5z9S3/I3z3ZgEU8HuM/WwdKcQfmYekz6Aooal6iJqwKNvU NVHh0uQP8PcFZm9J/rY8SccTVhMUfLwCWhaLyWmcueS34hjiH0W4Shq/hSLV+BaY +GIz9rT0LnzcWe+OC9zT5zti4E0D/55vYzk= -----END CERTIFICATE-----Generated at Fri Mar 14 11:19:53 2025 by rpki-client