$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d4a72d12-07e6-3ae6-97d5-c09435a5c0b7.roa File: d4a72d12-07e6-3ae6-97d5-c09435a5c0b7.roa (raw, json) Hash identifier: Fq4JIdaN9syRCF/nJcAPGPOtbT1vt15RP2se/NCAmTA= Subject key identifier: 74:50:A5:D5:1B:F9:53:E9:4B:A0:9D:6C:16:37:6D:23:3D:F4:76:02 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584819D005B0BBE979C8FDCCFB00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d4a72d12-07e6-3ae6-97d5-c09435a5c0b7.roa Signing time: Thu 05 Dec 2024 02:00:39 +0000 ROA not before: Thu 05 Dec 2024 02:00:39 +0000 ROA not after: Wed 05 Mar 2025 02:00:39 +0000 asID: 212341 IP address blocks: 2001:470:a7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 14 Feb 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:19:d0:05:b0:bb:e9:79:c8:fd:cc:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Dec 5 02:00:39 2024 GMT Not After : Mar 5 02:00:39 2025 GMT Subject: CN=d086d4b0-b99c-4fd5-ac00-b3b8764468f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2f:e6:7d:ea:cf:bd:de:51:cd:38:88:ca:b7: 4e:77:a1:88:b5:19:90:6e:af:2c:a1:80:f9:8f:c7: 20:14:8c:43:9f:59:e2:58:67:a0:28:ec:a2:c1:1c: cc:b7:2b:b7:b6:7c:04:4f:5d:f6:61:98:0e:fb:e8: 0a:48:c8:0d:44:bb:ff:20:47:11:a7:ae:ea:36:bc: af:03:06:bc:88:3d:c1:d5:aa:39:ef:75:3f:2b:a9: 13:eb:ff:a9:65:21:db:a2:7c:a9:44:65:88:19:74: 57:a7:7a:59:cc:03:fe:f0:e4:07:63:e3:9c:f8:36: 7a:fb:27:c6:f2:ae:41:98:ad:65:46:66:19:05:15: 5f:4e:5a:03:bf:75:7a:5e:ad:e3:c6:58:3c:65:cd: 08:4e:84:77:f4:72:75:5c:90:96:c7:f3:35:50:fe: e8:73:9e:51:10:ab:30:69:cd:81:29:db:85:61:e9: 8c:fa:fc:e3:be:5c:64:c3:bb:bd:1a:b8:d7:2f:a2: 10:36:bd:67:64:c3:cb:5a:e5:a7:bf:e2:98:d6:be: fd:47:5d:a2:94:e5:6b:c0:f6:87:7f:34:81:6d:98: 6b:c1:7b:0b:eb:08:a1:e6:89:3f:a0:9c:54:95:ee: 78:cf:33:21:93:98:53:b3:a4:74:6f:d7:77:f0:5e: 46:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:50:A5:D5:1B:F9:53:E9:4B:A0:9D:6C:16:37:6D:23:3D:F4:76:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d4a72d12-07e6-3ae6-97d5-c09435a5c0b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:a7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:6d:e4:a4:3f:a4:d4:ba:af:e7:9b:ae:f6:cc:43:35:13:7f: 0a:4c:b9:3c:7f:9d:db:af:65:27:43:a9:98:ea:43:fa:66:be: ad:1b:32:d3:f8:fc:12:dd:d1:9a:6d:09:4a:b4:8b:84:d8:8c: 16:32:17:37:91:13:be:6a:ed:19:2c:d0:5e:a4:79:7f:ac:56: 28:33:44:83:44:8f:bf:b2:37:77:63:7c:7f:f0:da:b7:ed:ad: da:9c:b9:d0:bd:0a:71:56:02:7a:f4:a6:4c:77:11:06:9e:45: 5b:89:9d:e0:32:0f:2d:ca:25:5d:08:e0:4a:11:27:ff:ae:67: 2f:b6:5a:a9:ab:50:61:1c:1a:3d:83:b3:cf:86:57:9e:c9:87: ca:dc:88:2c:0a:94:52:50:1a:00:1c:41:c0:bb:fd:6b:6e:72: c0:53:63:1e:5d:df:0e:1a:7c:0b:02:d9:ea:b2:bb:b4:25:b0: cf:6e:da:da:ad:c8:5e:fd:d8:b8:02:18:d1:91:ea:04:fb:63: 4e:44:a1:77:14:bd:c1:bd:66:2a:a9:0a:ff:e0:51:2a:d1:3e: e4:ff:da:b2:7f:97:4e:fe:fc:6a:1f:91:03:66:6c:c5:c1:a2: ef:2b:d6:23:8a:fd:3e:4e:56:ad:d4:2c:0a:02:7c:6a:01:20: 13:92:9c:21 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgZ0AWwu+l5yP3M+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk ZDA4NmQ0YjAtYjk5Yy00ZmQ1LWFjMDAtYjNiODc2NDQ2OGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjy/mferPvd5RzTiIyrdOd6GItRmQbq8soYD5 j8cgFIxDn1niWGegKOyiwRzMtyu3tnwET132YZgO++gKSMgNRLv/IEcRp67qNryv Awa8iD3B1ao573U/K6kT6/+pZSHbonypRGWIGXRXp3pZzAP+8OQHY+Oc+DZ6+yfG 8q5BmK1lRmYZBRVfTloDv3V6Xq3jxlg8Zc0IToR39HJ1XJCWx/M1UP7oc55REKsw ac2BKduFYemM+vzjvlxkw7u9GrjXL6IQNr1nZMPLWuWnv+KY1r79R12ilOVrwPaH fzSBbZhrwXsL6wih5ok/oJxUle54zzMhk5hTs6R0b9d38F5GbQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHRQpdUb+VPpS6CdbBY3bSM99HYCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDRhNzJkMTItMDdlNi0z YWU2LTk3ZDUtYzA5NDM1YTVjMGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGpt5KQ/pNS6r+ebrvbMQzUTfwpMuTx/nduvZSdDqZjqQ/pmvq0b MtP4/BLd0ZptCUq0i4TYjBYyFzeRE75q7Rks0F6keX+sVigzRINEj7+yN3djfH/w 2rftrdqcudC9CnFWAnr0pkx3EQaeRVuJneAyDy3KJV0I4EoRJ/+uZy+2WqmrUGEc Gj2Ds8+GV57Jh8rciCwKlFJQGgAcQcC7/WtucsBTYx5d3w4afAsC2eqyu7QlsM9u 2tqtyF792LgCGNGR6gT7Y05EoXcUvcG9ZiqpCv/gUSrRPuT/2rJ/l07+/GofkQNm bMXBou8r1iOK/T5OVq3ULAoCfGoBIBOSnCE= -----END CERTIFICATE-----Generated at Wed Feb 12 17:21:38 2025 by rpki-client