$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d20e5194-1e49-35af-9248-92bde05f0419.roa File: d20e5194-1e49-35af-9248-92bde05f0419.roa (raw, json) Hash identifier: 0Q5F2Jf4OC15OmNZw2MSWuJMgWU0Eosf3rcP070UOe4= Subject key identifier: AC:90:68:E3:61:59:C9:92:D2:7F:26:F2:8F:CF:C1:2A:FF:52:76:9A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926D9B6062290D83673DF00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d20e5194-1e49-35af-9248-92bde05f0419.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 64238 IP address blocks: 2001:470:f8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:d9:b6:06:22:90:d8:36:73:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=2ba0c47f-4597-4715-976b-bb2667bbae17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:70:e2:b6:fa:bf:70:0c:d8:0e:8a:b3:8b:28: 47:69:13:97:60:92:45:dc:fa:60:28:48:f5:f2:bf: 23:2c:87:8d:d0:31:43:56:9c:eb:e9:9e:b0:7e:89: 80:2f:67:dc:b1:e9:22:8a:14:e8:61:ee:3d:ec:8e: a6:63:57:db:a6:5f:b7:07:1f:81:b1:a7:eb:a1:5f: 7f:a8:5d:4e:dc:83:43:72:62:50:6c:54:3a:d7:8f: 99:ad:be:be:00:22:57:ac:5c:3e:8c:68:2c:ae:28: a6:6d:41:9a:a8:de:b9:b3:9d:ab:79:80:5c:86:df: da:d1:a5:52:71:3a:07:7c:64:e7:bb:5b:5e:68:af: 49:d6:9f:dc:60:5a:b7:df:e7:b0:98:af:f2:73:23: 63:1a:32:a3:0f:24:8c:7f:9e:0e:66:e4:8d:c4:a8: 50:53:b0:fc:df:9a:03:b8:46:76:2c:a1:bc:67:57: 72:76:9c:ea:ba:4e:46:3f:b9:19:5f:68:ab:d2:d1: f1:29:84:08:9a:49:64:de:fe:5f:cb:34:76:1e:79: ee:e8:5c:e7:04:51:e9:da:fe:8e:e3:a8:4f:ae:be: a5:92:b5:02:87:18:8f:fd:bd:d4:67:0b:c1:f9:3b: bb:13:1f:1f:2a:0b:36:7d:b8:89:1e:c3:97:82:9a: 05:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:90:68:E3:61:59:C9:92:D2:7F:26:F2:8F:CF:C1:2A:FF:52:76:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d20e5194-1e49-35af-9248-92bde05f0419.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:f8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:3e:ae:d5:b3:97:f1:0e:ba:cd:4b:fb:15:f8:e7:84:5f:88: 54:21:43:48:4e:e0:9e:25:c6:d2:d6:6b:8e:21:4c:50:0c:6f: 64:80:87:99:dd:1d:00:06:3c:01:1c:4d:88:92:41:ce:67:aa: 58:5d:a5:7f:07:3d:b9:be:ae:70:62:52:c9:7e:5f:96:b4:88: a6:22:de:46:05:66:f1:02:d4:9c:2b:ef:cb:94:7a:de:3c:06: d6:3f:72:1b:47:b8:bd:c8:7e:3c:25:66:5c:b5:10:87:cf:a6: 75:e9:e6:8b:8c:56:d3:25:e6:b4:14:a7:09:57:72:54:43:ec: a3:fd:4d:69:0e:e8:36:08:e1:7d:7b:6a:9a:dd:69:a8:58:f2: c7:d6:98:5a:6f:01:1e:1d:ba:e3:3f:ad:fd:64:f5:fb:d0:d8: c7:13:ed:4b:06:c5:b7:e4:22:12:3e:61:e2:08:fc:de:38:61: ae:ab:29:ae:a2:8a:45:62:c8:e3:e0:47:5b:48:27:7e:e0:7b: 23:08:b3:b6:66:09:03:96:1e:e6:10:74:76:b8:89:b6:e7:77: b0:cf:f9:0f:63:24:fe:81:ee:fc:ac:e6:22:70:03:7b:80:df: 45:a5:7b:da:c7:66:97:08:34:4a:40:60:e7:47:b2:d3:fd:d8: 29:19:1d:34 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5Jtm2BiKQ2DZz3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk MmJhMGM0N2YtNDU5Ny00NzE1LTk3NmItYmIyNjY3YmJhZTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXDitvq/cAzYDoqziyhHaROXYJJF3PpgKEj1 8r8jLIeN0DFDVpzr6Z6wfomAL2fcsekiihToYe497I6mY1fbpl+3Bx+BsafroV9/ qF1O3INDcmJQbFQ614+Zrb6+ACJXrFw+jGgsriimbUGaqN65s52reYBcht/a0aVS cToHfGTnu1teaK9J1p/cYFq33+ewmK/ycyNjGjKjDySMf54OZuSNxKhQU7D835oD uEZ2LKG8Z1dydpzquk5GP7kZX2ir0tHxKYQImklk3v5fyzR2Hnnu6FznBFHp2v6O 46hPrr6lkrUChxiP/b3UZwvB+Tu7Ex8fKgs2fbiJHsOXgpoFhQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKyQaONhWcmS0n8m8o/PwSr/UnaaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDIwZTUxOTQtMWU0OS0z NWFmLTkyNDgtOTJiZGUwNWYwNDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAD4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGc+rtWzl/EOus1L+xX454RfiFQhQ0hO4J4lxtLWa44hTFAMb2SA h5ndHQAGPAEcTYiSQc5nqlhdpX8HPbm+rnBiUsl+X5a0iKYi3kYFZvEC1Jwr78uU et48BtY/chtHuL3IfjwlZly1EIfPpnXp5ouMVtMl5rQUpwlXclRD7KP9TWkO6DYI 4X17aprdaahY8sfWmFpvAR4duuM/rf1k9fvQ2McT7UsGxbfkIhI+YeII/N44Ya6r Ka6iikViyOPgR1tIJ37geyMIs7ZmCQOWHuYQdHa4ibbnd7DP+Q9jJP6B7vys5iJw A3uA30Wle9rHZpcINEpAYOdHstP92CkZHTQ= -----END CERTIFICATE-----Generated at Fri Apr 4 17:57:36 2025 by rpki-client