$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d43cab2e-3213-312a-980c-8a458d4360c2.roa File: d43cab2e-3213-312a-980c-8a458d4360c2.roa (raw, json) Hash identifier: CM1SYyPYV2KD8qi4OEme+mw19DGx0wVrrXuW/Udvj3M= Subject key identifier: 2B:A0:E2:6E:21:A4:EA:E2:CA:9D:B7:0D:DF:81:5B:9B:90:80:B6:A9 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848A2A9F29639191372097D8400 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d43cab2e-3213-312a-980c-8a458d4360c2.roa Signing time: Thu 23 Jan 2025 02:30:16 +0000 ROA not before: Thu 23 Jan 2025 02:30:16 +0000 ROA not after: Wed 23 Apr 2025 01:30:16 +0000 asID: 36902 IP address blocks: 2001:470:3f7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:a9:f2:96:39:19:13:72:09:7d:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jan 23 02:30:16 2025 GMT Not After : Apr 23 01:30:16 2025 GMT Subject: CN=211fcb8c-801d-489f-b532-7f782c0e4e23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c3:33:ad:6a:c9:7e:87:c7:95:28:9e:4c:59: 04:70:0b:30:3f:5e:34:4a:bc:e3:0a:2e:db:66:4e: c4:fd:9f:38:3c:ea:67:db:8e:0e:b6:f6:f0:d5:33: 38:88:38:ec:7b:49:b6:ed:24:a0:a7:16:63:e0:f1: 97:d1:d3:8b:fc:ee:00:9c:64:3d:83:73:b0:ce:ea: 41:b4:82:05:33:75:91:6f:90:70:6d:2f:1f:c3:e1: b6:b9:92:dc:d6:88:1f:79:53:ca:ab:bd:dd:67:51: de:3e:eb:19:78:07:70:a2:ae:d1:6c:20:da:9c:46: f6:6e:77:95:98:4c:73:47:79:76:5b:2d:bd:ea:2e: bf:95:6d:a9:6e:04:db:37:e6:e7:8e:5d:df:11:25: f1:f8:85:c3:a3:6d:f3:99:91:bc:8e:2c:8d:a7:a6: e6:d6:4c:de:f1:3f:e2:98:a7:01:32:b1:27:9d:cc: 45:1e:ef:04:aa:c6:03:1a:55:17:4d:dd:62:57:e3: 55:b6:b3:c9:02:ae:a2:ad:d7:bd:2c:a2:33:47:ed: 22:3f:3a:a3:4f:62:53:23:ac:d8:4e:0d:44:b5:9a: 6b:ef:06:22:25:bc:d5:64:71:60:9b:b2:ae:a4:f7: 27:2d:b9:cf:93:dc:e2:3b:5c:d1:d4:c4:74:fc:44: 0e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:A0:E2:6E:21:A4:EA:E2:CA:9D:B7:0D:DF:81:5B:9B:90:80:B6:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d43cab2e-3213-312a-980c-8a458d4360c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3f7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:79:51:2c:53:7f:c3:19:6d:36:2f:bd:12:32:f8:e2:c3:c8: c8:cc:cc:0c:1d:d7:72:af:94:14:21:c4:2e:b9:cd:f2:2e:ca: bb:a7:06:9d:42:56:23:cd:7e:1b:27:d8:e6:02:f7:ca:af:75: aa:cb:fd:05:e1:b3:00:7f:f1:b3:63:aa:3d:9a:32:14:99:74: ca:ec:f3:c0:7b:7a:5c:f7:66:14:25:fd:91:11:d0:09:43:02: 45:18:56:d8:fc:4a:23:37:c8:f3:16:24:71:67:15:66:6c:ae: 97:85:e6:28:55:04:f6:c6:d2:f9:c5:84:33:89:32:f8:7d:83: f6:1a:aa:d9:be:60:25:da:97:cb:0e:dc:6e:72:a4:4f:28:c4: be:a9:74:a5:35:35:1b:b5:ec:d2:92:0b:03:2e:1a:4a:69:d5: b2:40:12:99:fa:bf:19:84:69:89:19:f9:e2:8d:1a:16:a6:39: 63:0c:df:4b:24:82:77:06:80:d2:67:2b:12:b1:df:52:c3:46: df:d3:32:fe:d3:1c:19:9d:30:01:2c:42:62:33:43:78:a3:e5: 38:d5:65:3b:36:b1:cf:66:f3:a8:91:0a:95:05:ee:5d:5a:9a: 6e:af:30:b0:a5:b8:ed:6d:5a:e9:35:e4:e7:3e:16:a7:33:06: 28:de:e7:05 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiiqfKWORkTcgl9hAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDEyMzAyMzAxNloXDTI1MDQyMzAxMzAxNlowLzEtMCsGA1UEAxMk MjExZmNiOGMtODAxZC00ODlmLWI1MzItN2Y3ODJjMGU0ZTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8MzrWrJfofHlSieTFkEcAswP140SrzjCi7b Zk7E/Z84POpn244Otvbw1TM4iDjse0m27SSgpxZj4PGX0dOL/O4AnGQ9g3OwzupB tIIFM3WRb5BwbS8fw+G2uZLc1ogfeVPKq73dZ1HePusZeAdwoq7RbCDanEb2bneV mExzR3l2Wy296i6/lW2pbgTbN+bnjl3fESXx+IXDo23zmZG8jiyNp6bm1kze8T/i mKcBMrEnncxFHu8EqsYDGlUXTd1iV+NVtrPJAq6irde9LKIzR+0iPzqjT2JTI6zY Tg1EtZpr7wYiJbzVZHFgm7KupPcnLbnPk9ziO1zR1MR0/EQOYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCug4m4hpOriyp23Dd+BW5uQgLapMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDQzY2FiMmUtMzIxMy0z MTJhLTk4MGMtOGE0NThkNDM2MGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAP3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADx5USxTf8MZbTYvvRIy+OLDyMjMzAwd13KvlBQhxC65zfIuyrun Bp1CViPNfhsn2OYC98qvdarL/QXhswB/8bNjqj2aMhSZdMrs88B7elz3ZhQl/ZER 0AlDAkUYVtj8SiM3yPMWJHFnFWZsrpeF5ihVBPbG0vnFhDOJMvh9g/Yaqtm+YCXa l8sO3G5ypE8oxL6pdKU1NRu17NKSCwMuGkpp1bJAEpn6vxmEaYkZ+eKNGhamOWMM 30skgncGgNJnKxKx31LDRt/TMv7THBmdMAEsQmIzQ3ij5TjVZTs2sc9m86iRCpUF 7l1amm6vMLCluO1tWuk15Oc+FqczBije5wU= -----END CERTIFICATE-----Generated at Fri Mar 14 12:40:10 2025 by rpki-client