$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ca0fe8cb-43ca-3017-8fc1-68fd9c829c0a.roa File: ca0fe8cb-43ca-3017-8fc1-68fd9c829c0a.roa (raw, json) Hash identifier: E6l/NnKjORmOsYJBjmU8z5q1H8jKKw40QDPOXngPsHQ= Subject key identifier: C1:39:27:51:C4:18:70:1D:0D:06:E0:D1:48:65:4F:F8:C1:9A:39:E8 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858492F87B0C18905F1F8ADDCD040 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ca0fe8cb-43ca-3017-8fc1-68fd9c829c0a.roa Signing time: Fri 14 Mar 2025 13:30:13 +0000 ROA not before: Fri 14 Mar 2025 13:30:13 +0000 ROA not after: Thu 12 Jun 2025 13:30:13 +0000 asID: 13188 IP address blocks: 2001:470:427::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2f:87:b0:c1:89:05:f1:f8:ad:dc:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 14 13:30:13 2025 GMT Not After : Jun 12 13:30:13 2025 GMT Subject: CN=b9fc26de-eb78-4046-a0e0-d33c8b8a83e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3e:f9:cc:b2:04:62:09:97:c1:99:49:e0:47: e0:b5:96:b8:5f:ff:d7:db:a6:10:10:28:d4:c1:f5: 4d:fc:4c:57:1b:82:8c:af:48:8d:62:ba:2d:e9:74: a7:9e:f1:49:a3:b4:7a:04:f7:e0:97:a3:14:81:c7: f6:90:3c:b1:20:78:8f:41:e4:23:89:9c:01:af:e1: 5b:bf:cd:41:b7:80:ac:18:5c:68:38:68:cf:bb:93: c7:15:7f:7a:7c:89:dd:41:b5:de:73:b5:8d:4f:0d: f9:85:8b:ff:e0:4e:d8:38:20:b7:43:2e:fa:0b:bf: 33:c3:91:e4:af:a3:c4:23:54:d7:3c:c3:0e:8c:45: 10:eb:69:41:8e:9f:53:b5:ed:7b:91:d1:2e:bc:d8: 55:2f:73:4a:47:0c:25:51:f7:fd:05:8b:27:fc:4d: 2d:7b:06:5c:1e:39:67:90:1a:57:9f:bc:66:ac:66: 43:2f:96:b1:ed:a8:7a:ff:75:f1:ae:36:74:52:4d: a8:47:f6:24:85:e5:22:f8:51:7d:f7:96:be:44:90: 47:e7:9f:d2:20:57:32:fa:ae:81:60:ba:f1:bb:d6: ec:e6:fd:9d:9d:f0:c5:a5:8f:c1:37:e4:0a:e0:ab: 5f:47:cd:c0:68:3f:b1:d1:81:4c:a2:d0:6c:01:b0: 44:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:39:27:51:C4:18:70:1D:0D:06:E0:D1:48:65:4F:F8:C1:9A:39:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ca0fe8cb-43ca-3017-8fc1-68fd9c829c0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:427::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:c1:03:35:28:69:73:0a:85:ed:9f:18:dc:ca:78:6c:de:5c: e0:06:70:ad:c4:cb:71:ed:ba:f0:22:ae:60:8e:9f:f5:51:9e: d6:a9:c7:27:7b:c4:51:1d:a8:34:19:d5:bb:6a:f1:4b:22:8f: ed:11:9f:72:c4:c3:4a:c8:30:7f:fa:94:fd:3f:56:92:f0:a1: 72:21:72:7e:98:62:ad:a5:59:65:92:47:06:c0:45:34:94:52: d6:e1:75:06:d9:b7:d9:77:90:a7:42:d7:bc:76:77:70:3d:14: 41:f1:4c:3e:7d:a5:b2:93:5e:2f:35:8f:27:86:fb:66:2a:e1: d1:29:57:27:cd:dc:c5:f9:ec:90:8a:ee:ed:59:24:2f:48:97: 76:48:79:63:57:ab:40:3c:71:d4:02:d7:68:ca:a2:48:79:b1: f7:d1:11:60:a0:aa:58:bb:81:63:a7:62:88:19:0c:f1:d8:1b: fd:03:7f:91:12:65:31:86:2b:24:66:25:3d:43:2a:40:a0:38: a3:96:b4:13:e0:9d:8b:a2:f2:14:cc:11:e5:9d:99:2d:d4:a1: c7:3e:f9:31:27:7b:93:da:bc:90:98:0a:e6:39:71:d8:d3:cc: 7f:33:a3:ce:78:c4:bf:42:a6:69:06:3d:02:36:2e:00:2e:03: fe:5e:28:f8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkvh7DBiQXx+K3c0EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMxNDEzMzAxM1oXDTI1MDYxMjEzMzAxM1owLzEtMCsGA1UEAxMk YjlmYzI2ZGUtZWI3OC00MDQ2LWEwZTAtZDMzYzhiOGE4M2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjz75zLIEYgmXwZlJ4EfgtZa4X//X26YQECjU wfVN/ExXG4KMr0iNYrot6XSnnvFJo7R6BPfgl6MUgcf2kDyxIHiPQeQjiZwBr+Fb v81Bt4CsGFxoOGjPu5PHFX96fIndQbXec7WNTw35hYv/4E7YOCC3Qy76C78zw5Hk r6PEI1TXPMMOjEUQ62lBjp9Tte17kdEuvNhVL3NKRwwlUff9BYsn/E0tewZcHjln kBpXn7xmrGZDL5ax7ah6/3XxrjZ0Uk2oR/YkheUi+FF995a+RJBH55/SIFcy+q6B YLrxu9bs5v2dnfDFpY/BN+QK4KtfR83AaD+x0YFMotBsAbBEZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFME5J1HEGHAdDQbg0UhlT/jBmjnoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvY2EwZmU4Y2ItNDNjYS0z MDE3LThmYzEtNjhmZDljODI5YzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA/BAzUoaXMKhe2fGNzKeGzeXOAGcK3Ey3HtuvAirmCOn/VRntap xyd7xFEdqDQZ1btq8Usij+0Rn3LEw0rIMH/6lP0/VpLwoXIhcn6YYq2lWWWSRwbA RTSUUtbhdQbZt9l3kKdC17x2d3A9FEHxTD59pbKTXi81jyeG+2Yq4dEpVyfN3MX5 7JCK7u1ZJC9Il3ZIeWNXq0A8cdQC12jKokh5sffREWCgqli7gWOnYogZDPHYG/0D f5ESZTGGKyRmJT1DKkCgOKOWtBPgnYui8hTMEeWdmS3Uocc++TEne5PavJCYCuY5 cdjTzH8zo854xL9CpmkGPQI2LgAuA/5eKPg= -----END CERTIFICATE-----Generated at Fri Apr 4 17:54:05 2025 by rpki-client