$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d59d504d-c28c-3f8d-9858-c1f3f4a30c46.roa File: d59d504d-c28c-3f8d-9858-c1f3f4a30c46.roa (raw, json) Hash identifier: qePss9mi6gWKOv38VO8neTrT3ck625QhFE7KS3NvvS8= Subject key identifier: 32:6A:BB:C4:0F:7B:F2:A4:47:3D:79:66:58:27:C8:2C:5C:79:60:F5 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858488989C05641629A9606DAB580 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d59d504d-c28c-3f8d-9858-c1f3f4a30c46.roa Signing time: Tue 14 Jan 2025 02:30:11 +0000 ROA not before: Tue 14 Jan 2025 02:30:11 +0000 ROA not after: Mon 14 Apr 2025 01:30:11 +0000 asID: 46440 IP address blocks: 2001:470:3f0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:89:89:c0:56:41:62:9a:96:06:da:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jan 14 02:30:11 2025 GMT Not After : Apr 14 01:30:11 2025 GMT Subject: CN=b9d37738-1dd3-4087-bb0c-f16b2fa628a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:8a:6e:6d:c8:db:9d:0c:e1:25:78:1f:7f:9f: 81:d3:98:01:23:f2:fd:1b:dd:49:a9:7d:7b:f9:6b: 5a:40:19:3e:a4:50:88:83:5f:11:f3:dc:6d:35:fe: 40:a2:9b:86:ce:96:5f:54:86:32:2f:bb:24:60:fd: f3:c7:bd:c5:9d:f4:91:74:f3:9c:c1:50:c3:31:72: d5:33:42:11:2b:50:bf:07:dc:55:b8:7d:3b:9d:77: 48:e1:70:97:c8:54:3e:a4:8a:13:30:1f:77:79:ac: 04:d4:ef:a8:cb:84:7d:ee:c8:47:7a:ce:fe:e9:66: ad:74:68:14:f1:a7:f3:e1:de:3d:18:ad:6e:7b:c5: b6:05:aa:6e:9b:54:1f:a6:93:ca:7a:6a:2c:94:fc: 53:1b:a1:a7:58:4c:08:fa:1c:23:4b:53:f9:d8:c6: 2f:a6:75:f1:c9:91:1f:0b:de:1c:43:15:db:42:3a: de:da:9d:06:40:5a:00:2a:1a:3d:01:43:73:f1:08: 57:73:38:59:a4:dd:b9:cb:e7:0b:80:2f:67:4a:06: 92:70:c3:3e:c6:9d:c2:a7:2a:ae:a8:b8:2c:77:23: 7b:51:0b:b6:be:71:cb:fb:f1:99:66:44:6d:bb:56: b0:d7:7d:23:10:80:e9:ad:0a:a3:fb:dc:e5:c3:95: 0b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:6A:BB:C4:0F:7B:F2:A4:47:3D:79:66:58:27:C8:2C:5C:79:60:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d59d504d-c28c-3f8d-9858-c1f3f4a30c46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3f0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:21:94:59:5e:e6:b4:1c:31:78:3c:1b:5d:66:5e:07:77:71: 75:c3:ad:d9:c6:db:80:86:68:e5:ad:96:e1:b4:96:ae:da:49: 1e:d8:7c:7c:cf:5b:a4:e9:6d:75:ce:8e:5e:9f:60:08:ca:ca: 39:e6:7d:57:79:a4:cc:64:f0:e7:be:c0:63:97:23:a6:41:24: 46:57:62:92:8d:f1:43:14:e7:d5:b5:c4:5d:00:ba:fd:77:4b: 62:4e:f0:ba:23:de:d0:22:7a:1d:c2:ee:d1:76:b9:ea:71:6e: 13:ed:4d:c9:97:f7:65:5e:e7:bb:34:50:66:f1:29:aa:b5:36: 47:58:98:d3:a5:2b:fb:db:5c:8e:74:82:ee:ad:6e:6f:46:a4: b4:0b:af:e8:ce:79:a0:28:94:7e:76:d2:8a:ad:e6:7f:da:6d: 88:6a:14:5f:74:9b:27:9b:9a:61:46:0a:03:a1:41:39:e9:e8: 86:f2:e7:8b:a8:ef:c5:f9:6e:97:dc:e5:25:10:e7:38:12:77: d1:f1:29:98:48:9d:bb:41:24:27:79:18:61:ae:f0:45:bc:7b: ba:2b:fc:9e:11:f0:21:50:37:7a:3d:4f:62:f6:64:dd:b3:f5: 86:dd:de:79:b6:26:73:b7:4b:e2:8e:d2:a8:c4:ae:78:19:c0: 1c:21:07:aa -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiJicBWQWKalgbatYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDExNDAyMzAxMVoXDTI1MDQxNDAxMzAxMVowLzEtMCsGA1UEAxMk YjlkMzc3MzgtMWRkMy00MDg3LWJiMGMtZjE2YjJmYTYyOGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4pubcjbnQzhJXgff5+B05gBI/L9G91JqX17 +WtaQBk+pFCIg18R89xtNf5AopuGzpZfVIYyL7skYP3zx73FnfSRdPOcwVDDMXLV M0IRK1C/B9xVuH07nXdI4XCXyFQ+pIoTMB93eawE1O+oy4R97shHes7+6WatdGgU 8afz4d49GK1ue8W2Bapum1QfppPKemoslPxTG6GnWEwI+hwjS1P52MYvpnXxyZEf C94cQxXbQjre2p0GQFoAKho9AUNz8QhXczhZpN25y+cLgC9nSgaScMM+xp3Cpyqu qLgsdyN7UQu2vnHL+/GZZkRtu1aw130jEIDprQqj+9zlw5ULaQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDJqu8QPe/KkRz15ZlgnyCxceWD1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDU5ZDUwNGQtYzI4Yy0z ZjhkLTk4NTgtYzFmM2Y0YTMwYzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADYhlFle5rQcMXg8G11mXgd3cXXDrdnG24CGaOWtluG0lq7aSR7Y fHzPW6TpbXXOjl6fYAjKyjnmfVd5pMxk8Oe+wGOXI6ZBJEZXYpKN8UMU59W1xF0A uv13S2JO8Loj3tAieh3C7tF2uepxbhPtTcmX92Ve57s0UGbxKaq1NkdYmNOlK/vb XI50gu6tbm9GpLQLr+jOeaAolH520oqt5n/abYhqFF90myebmmFGCgOhQTnp6Iby 54uo78X5bpfc5SUQ5zgSd9HxKZhInbtBJCd5GGGu8EW8e7or/J4R8CFQN3o9T2L2 ZN2z9Ybd3nm2JnO3S+KO0qjErngZwBwhB6o= -----END CERTIFICATE-----Generated at Wed Feb 5 04:44:32 2025 by rpki-client