$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d59d504d-c28c-3f8d-9858-c1f3f4a30c46.roa File: d59d504d-c28c-3f8d-9858-c1f3f4a30c46.roa (raw, json) Hash identifier: JaX5KQ5yj7w38RIBVZ3KsyAcvBOC/Bmj4pAocZWo3ww= Subject key identifier: 8A:D8:C0:1E:A0:44:3A:2D:25:11:FA:E1:6B:90:8D:25:27:97:30:1A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858496A198F1DBB1AD43841D4BE00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d59d504d-c28c-3f8d-9858-c1f3f4a30c46.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 46440 IP address blocks: 2001:470:3f0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:8f:1d:bb:1a:d4:38:41:d4:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=bca08f33-2bf7-4840-b669-c2d35bac73b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:07:a9:7f:11:b6:60:b8:96:d5:9a:79:d9:73: d9:77:28:29:55:87:9e:95:4a:a8:9b:b8:4a:38:5f: 82:8b:8b:d3:a0:72:1b:1a:02:24:a5:1a:56:1e:da: a5:b5:14:ae:95:e8:d3:05:fd:fa:fa:6c:b1:bc:c4: d3:f4:90:ab:ec:15:9f:f0:50:f5:de:68:7b:54:fc: b3:5f:46:e9:9b:43:07:17:75:75:29:07:ff:28:76: bf:48:67:b4:1b:68:dd:b6:e2:68:62:d5:90:a0:fd: c6:22:29:ed:bb:a7:71:7c:db:4f:71:ce:6a:88:96: 64:cf:3a:e9:f4:8f:45:21:19:91:41:c2:6b:51:51: b1:17:19:ed:70:71:f6:ee:d9:43:42:1b:1b:a3:af: dc:35:76:16:1f:fa:16:ce:03:c4:33:10:7f:fa:94: c6:5c:a5:3d:96:4f:68:f6:12:4e:c5:4f:e8:06:42: a0:4e:d6:78:0a:58:dd:77:ae:e0:ce:c3:75:e2:54: fe:20:b7:82:19:9b:9a:8f:e7:0d:6f:2c:b9:99:eb: 2e:f0:a6:ac:68:21:8c:f8:f9:b8:64:c3:73:bc:38: a7:f0:16:0c:63:ec:8f:68:62:df:d2:c4:6f:26:56: da:eb:5f:8f:3b:5c:95:ae:99:78:ce:c6:9b:f2:89: e6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D8:C0:1E:A0:44:3A:2D:25:11:FA:E1:6B:90:8D:25:27:97:30:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d59d504d-c28c-3f8d-9858-c1f3f4a30c46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3f0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:9a:8c:e1:37:31:9f:bd:dd:75:ef:99:7e:f7:59:5e:58:6c: 4d:ac:c1:21:51:a1:11:19:27:82:86:f1:f5:e1:de:9a:ba:51: 8e:10:66:c3:7c:eb:c2:1d:7a:11:51:1e:2b:3c:a4:8a:7f:d1: fb:de:1e:90:d1:40:91:84:c4:50:65:f4:70:97:b6:3f:f7:c1: c4:82:a1:ef:52:1b:a5:d5:20:94:45:3d:ab:32:5e:88:54:e2: c4:4f:01:e8:74:ad:d6:73:52:9f:14:36:f4:1a:7a:72:51:af: ee:33:30:09:84:72:76:48:e5:34:d3:6b:bb:a6:42:97:67:6f: 6c:55:e5:0b:6c:8c:fa:26:e1:98:a1:0a:8e:a5:be:37:5a:51: 79:19:c1:89:3b:92:e4:d1:23:f1:8b:78:81:28:27:93:70:b1: 08:b6:06:49:f2:31:0c:c2:bc:ca:04:a6:51:77:4b:16:ae:a7: ae:b0:c9:47:f8:9b:8e:06:dc:06:ad:2a:18:1e:53:43:8b:2f: 8c:c8:f4:dd:49:c3:83:56:b2:80:73:15:d9:fe:7e:9f:84:32: bb:8e:25:84:e7:58:00:8d:2e:5f:bc:c8:aa:de:44:36:fb:b5: a8:15:32:c4:8f:10:74:80:a6:2d:4d:5a:f7:b0:f8:f3:47:8d: d8:02:2a:1f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElqGY8duxrUOEHUvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk YmNhMDhmMzMtMmJmNy00ODQwLWI2NjktYzJkMzViYWM3M2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwepfxG2YLiW1Zp52XPZdygpVYeelUqom7hK OF+Ci4vToHIbGgIkpRpWHtqltRSulejTBf36+myxvMTT9JCr7BWf8FD13mh7VPyz X0bpm0MHF3V1KQf/KHa/SGe0G2jdtuJoYtWQoP3GIintu6dxfNtPcc5qiJZkzzrp 9I9FIRmRQcJrUVGxFxntcHH27tlDQhsbo6/cNXYWH/oWzgPEMxB/+pTGXKU9lk9o 9hJOxU/oBkKgTtZ4Cljdd67gzsN14lT+ILeCGZuaj+cNbyy5mesu8KasaCGM+Pm4 ZMNzvDin8BYMY+yPaGLf0sRvJlba61+PO1yVrpl4zsab8onmEwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIrYwB6gRDotJRH64WuQjSUnlzAaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDU5ZDUwNGQtYzI4Yy0z ZjhkLTk4NTgtYzFmM2Y0YTMwYzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG2ajOE3MZ+93XXvmX73WV5YbE2swSFRoREZJ4KG8fXh3pq6UY4Q ZsN868IdehFRHis8pIp/0fveHpDRQJGExFBl9HCXtj/3wcSCoe9SG6XVIJRFPasy XohU4sRPAeh0rdZzUp8UNvQaenJRr+4zMAmEcnZI5TTTa7umQpdnb2xV5QtsjPom 4ZihCo6lvjdaUXkZwYk7kuTRI/GLeIEoJ5NwsQi2BknyMQzCvMoEplF3Sxaup66w yUf4m44G3AatKhgeU0OLL4zI9N1Jw4NWsoBzFdn+fp+EMruOJYTnWACNLl+8yKre RDb7tagVMsSPEHSApi1NWvew+PNHjdgCKh8= -----END CERTIFICATE-----Generated at Thu Apr 17 15:17:25 2025 by rpki-client