$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cb9c6794-43ac-335b-8cf5-234be57cf61a.roa File: cb9c6794-43ac-335b-8cf5-234be57cf61a.roa (raw, json) Hash identifier: h9JXHKGdrIXELswuUhpxzS1JUm0BxE1SxRJth/ginqY= Subject key identifier: 2B:32:1C:B3:B7:C8:F5:C5:78:62:AC:80:51:28:6A:71:F1:85:5E:F1 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926CCB8C380BFA472031100 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cb9c6794-43ac-335b-8cf5-234be57cf61a.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 13188 IP address blocks: 2001:470:2a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:cc:b8:c3:80:bf:a4:72:03:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=a4cf6d88-1f44-4dea-9afa-9f05842fd21c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b0:ee:7c:b0:9b:b6:b5:14:61:18:58:4b:3b: 80:62:2f:ec:d3:c8:a4:b7:21:f2:8b:77:5f:65:fe: 96:c8:1f:84:1d:48:be:50:a4:80:14:be:da:fe:18: 0b:76:9c:4b:d6:ed:bb:42:c7:ff:fb:34:1a:c3:88: 62:fe:11:d8:4a:06:51:fb:eb:70:98:26:c1:59:df: 84:9e:ed:3f:cf:06:32:aa:5c:2d:d3:08:13:c3:21: 88:04:82:5d:9a:87:e1:d8:b2:d6:4b:9f:c3:6c:d5: 6e:d7:78:14:c4:12:92:a5:e9:1d:57:3a:b6:70:ae: 1f:1e:3b:33:89:98:ec:6e:41:e6:31:39:14:9c:62: e5:e2:69:1d:ab:5c:af:d2:bb:fb:e2:f1:89:82:41: 17:43:84:98:87:6e:0e:42:29:a7:a6:85:20:ae:41: 5c:25:46:7b:17:d3:a5:b1:fb:c3:31:95:27:a9:a8: c0:99:eb:da:cf:eb:ab:b5:98:bb:4d:7a:ea:51:5d: 9c:c8:5e:a1:c5:ff:1d:20:48:84:eb:4a:d2:b6:bb: 1e:4c:88:56:bc:3b:0f:81:4d:ae:1f:83:ea:55:d2: f3:f1:5f:59:5b:cb:37:e4:ed:44:94:8d:b6:5c:6b: c5:9f:7f:8f:83:73:db:43:ae:2e:9e:a7:50:76:10: c8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:32:1C:B3:B7:C8:F5:C5:78:62:AC:80:51:28:6A:71:F1:85:5E:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cb9c6794-43ac-335b-8cf5-234be57cf61a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:69:8e:5a:02:8c:32:04:5f:68:7d:52:2a:c8:0e:cf:60:8b: e9:22:de:00:9e:f4:57:92:24:34:5a:ab:b7:91:86:9f:e9:d6: 2f:0c:c4:2b:e4:bf:58:3f:6e:77:93:c7:68:9f:fd:f4:34:b8: 2c:1e:bf:94:ba:0a:35:c3:69:a1:b8:35:a4:fb:16:d3:ec:93: 5d:16:43:01:76:d3:52:6e:9c:fa:50:d0:2b:58:33:5a:c4:5c: f6:22:bd:1a:b0:fb:1e:74:3a:e0:bd:df:d1:0b:cc:86:d2:29: a7:0e:58:cb:80:ce:ed:0f:93:a9:f8:cc:0e:39:ae:49:b7:54: 9b:39:82:d7:dc:c1:d0:e9:3e:53:5f:6b:bf:ce:62:4e:0e:a4: 45:09:06:3e:e8:8a:07:e5:12:9d:04:ed:45:ac:c0:46:99:9b: 7c:24:57:e6:34:f9:cc:ff:af:a7:9f:93:41:10:85:b6:ef:fc: 87:2e:9f:b5:a1:41:5e:ba:f3:0d:80:75:a7:a5:c4:a5:fe:ca: 74:08:ca:fb:c4:e1:93:19:78:0b:b2:ba:bc:ca:23:68:6a:5e: 84:08:4e:1f:6b:39:13:14:a1:84:50:cf:7b:4b:84:42:49:51: e7:5f:2e:04:9e:31:27:17:46:9b:5e:3a:ac:88:ca:33:80:45: e5:06:44:d6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5Jsy4w4C/pHIDEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk YTRjZjZkODgtMWY0NC00ZGVhLTlhZmEtOWYwNTg0MmZkMjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7DufLCbtrUUYRhYSzuAYi/s08iktyHyi3df Zf6WyB+EHUi+UKSAFL7a/hgLdpxL1u27Qsf/+zQaw4hi/hHYSgZR++twmCbBWd+E nu0/zwYyqlwt0wgTwyGIBIJdmofh2LLWS5/DbNVu13gUxBKSpekdVzq2cK4fHjsz iZjsbkHmMTkUnGLl4mkdq1yv0rv74vGJgkEXQ4SYh24OQimnpoUgrkFcJUZ7F9Ol sfvDMZUnqajAmevaz+urtZi7TXrqUV2cyF6hxf8dIEiE60rStrseTIhWvDsPgU2u H4PqVdLz8V9ZW8s35O1ElI22XGvFn3+Pg3PbQ64unqdQdhDIQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCsyHLO3yPXFeGKsgFEoanHxhV7xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvY2I5YzY3OTQtNDNhYy0z MzViLThjZjUtMjM0YmU1N2NmNjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADVpjloCjDIEX2h9UirIDs9gi+ki3gCe9FeSJDRaq7eRhp/p1i8M xCvkv1g/bneTx2if/fQ0uCwev5S6CjXDaaG4NaT7FtPsk10WQwF201JunPpQ0CtY M1rEXPYivRqw+x50OuC939ELzIbSKacOWMuAzu0Pk6n4zA45rkm3VJs5gtfcwdDp PlNfa7/OYk4OpEUJBj7oigflEp0E7UWswEaZm3wkV+Y0+cz/r6efk0EQhbbv/Icu n7WhQV668w2AdaelxKX+ynQIyvvE4ZMZeAuyurzKI2hqXoQITh9rORMUoYRQz3tL hEJJUedfLgSeMScXRpteOqyIyjOAReUGRNY= -----END CERTIFICATE-----Generated at Fri Apr 4 17:55:45 2025 by rpki-client