$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cfc2b88e-3d03-39be-b01b-59809c7a6902.roa File: cfc2b88e-3d03-39be-b01b-59809c7a6902.roa (raw, json) Hash identifier: tcV10v8d7/t08dp6JFUZrYurOBdn0vufeWiCp5ricJg= Subject key identifier: 0A:85:9C:A1:FE:F8:F4:04:55:4C:5B:95:7F:9E:F5:F8:A6:A5:EB:B1 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926C6AAE7FACD1C404F63C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cfc2b88e-3d03-39be-b01b-59809c7a6902.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 36666 IP address blocks: 2001:470:1c7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:c6:aa:e7:fa:cd:1c:40:4f:63:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=d6e23231-55b1-4cc6-9673-32bc3a151634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ca:70:ca:73:55:80:d1:08:5f:df:79:31:bc: 2d:a8:9c:5d:13:cf:8e:74:8c:52:cf:9c:2a:be:cc: 45:8f:42:35:59:9f:59:9f:89:e0:27:86:44:6d:a2: 7c:61:49:2b:0d:af:4a:50:1a:0d:c2:8b:ec:6e:92: 49:cb:97:24:99:cf:87:1f:80:ec:22:15:49:09:ee: 1f:37:0c:f1:1e:9b:95:e6:a2:7e:6e:e7:d3:c6:8b: 30:72:00:07:c4:27:cc:ed:eb:5f:93:fc:74:12:25: 83:bf:e9:3d:34:78:6a:70:8b:14:bb:3b:44:cb:d6: d0:8c:0e:b5:ec:eb:d0:d9:e0:cf:31:d9:6a:81:02: d3:c9:0d:00:63:74:eb:e3:df:7d:b3:13:b8:fc:50: 6e:f6:db:e8:f0:5e:8c:93:9a:96:67:0e:2f:ea:0b: 77:e7:24:c6:af:c2:8c:7d:04:2f:29:41:95:dc:f9: c3:f6:fa:c9:18:d8:3a:bc:db:12:c2:c2:c6:cf:89: 93:79:f8:19:7f:6f:98:29:e1:cf:61:ec:5e:10:05: 34:7c:af:17:e8:a8:10:76:08:2a:10:2d:b5:ab:79: e8:48:e1:66:27:ab:96:01:1e:33:16:4c:15:a1:00: ab:9b:6b:bb:d9:94:1f:3a:c2:05:07:90:17:6a:da: 83:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:85:9C:A1:FE:F8:F4:04:55:4C:5B:95:7F:9E:F5:F8:A6:A5:EB:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cfc2b88e-3d03-39be-b01b-59809c7a6902.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1c7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:e6:f2:6c:67:4e:2d:77:4b:7b:b9:ca:6f:80:c8:e9:25:57: 74:d4:c5:cf:75:72:c5:40:da:d4:9f:d0:51:9d:a8:2f:a1:15: 7c:3f:5b:64:b1:da:c5:0a:82:93:48:9a:f0:ed:47:d7:98:5a: b8:22:2c:c4:49:a3:4b:ca:af:52:1d:d6:38:e8:ad:26:bf:41: 8b:24:85:bb:89:bd:f0:e2:78:84:8a:9a:35:68:35:e4:ce:47: ab:1b:1c:b6:07:88:4e:1d:58:4d:68:a0:e8:93:77:a6:43:5a: bb:46:8f:09:7e:3b:0e:cf:08:84:da:7d:f7:73:ea:d3:20:c4: ce:72:04:6c:26:d0:4f:22:02:d7:f4:38:1e:4e:3f:2c:34:7b: b2:30:ab:89:0a:be:9b:1f:1b:e6:71:b8:fe:33:11:03:8e:2a: 76:bf:73:6e:3f:95:d8:99:6a:7d:d0:19:8a:e3:c2:41:be:d4: 10:cf:67:51:33:a6:27:27:7e:32:e1:24:4e:a5:40:c2:41:aa: c6:56:a6:5f:37:e1:59:18:a5:e7:32:bf:1b:f0:26:70:b7:fa: 01:f0:1a:d7:dc:1e:d2:8d:f9:42:a2:cc:f2:41:a9:ec:b6:df: 45:99:6a:ef:00:3e:f7:d2:8d:00:ee:5b:c1:c1:b8:ba:18:a6: 6d:5c:40:b8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5Jsaq5/rNHEBPY8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk ZDZlMjMyMzEtNTViMS00Y2M2LTk2NzMtMzJiYzNhMTUxNjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucpwynNVgNEIX995MbwtqJxdE8+OdIxSz5wq vsxFj0I1WZ9Zn4ngJ4ZEbaJ8YUkrDa9KUBoNwovsbpJJy5ckmc+HH4DsIhVJCe4f NwzxHpuV5qJ+bufTxoswcgAHxCfM7etfk/x0EiWDv+k9NHhqcIsUuztEy9bQjA61 7OvQ2eDPMdlqgQLTyQ0AY3Tr4999sxO4/FBu9tvo8F6Mk5qWZw4v6gt35yTGr8KM fQQvKUGV3PnD9vrJGNg6vNsSwsLGz4mTefgZf2+YKeHPYexeEAU0fK8X6KgQdggq EC21q3noSOFmJ6uWAR4zFkwVoQCrm2u72ZQfOsIFB5AXatqDSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAqFnKH++PQEVUxblX+e9fimpeuxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvY2ZjMmI4OGUtM2QwMy0z OWJlLWIwMWItNTk4MDljN2E2OTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADPm8mxnTi13S3u5ym+AyOklV3TUxc91csVA2tSf0FGdqC+hFXw/ W2Sx2sUKgpNImvDtR9eYWrgiLMRJo0vKr1Id1jjorSa/QYskhbuJvfDieISKmjVo NeTOR6sbHLYHiE4dWE1ooOiTd6ZDWrtGjwl+Ow7PCITaffdz6tMgxM5yBGwm0E8i Atf0OB5OPyw0e7Iwq4kKvpsfG+ZxuP4zEQOOKna/c24/ldiZan3QGYrjwkG+1BDP Z1EzpicnfjLhJE6lQMJBqsZWpl834VkYpecyvxvwJnC3+gHwGtfcHtKN+UKizPJB qey230WZau8APvfSjQDuW8HBuLoYpm1cQLg= -----END CERTIFICATE-----Generated at Fri Apr 4 17:47:04 2025 by rpki-client