$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d5d32de2-9673-351a-9756-5db535ff0fd6.roa File: d5d32de2-9673-351a-9756-5db535ff0fd6.roa (raw, json) Hash identifier: 9Sv9dStUmlI4KqePhVdg75S7IqQeFF/CZDbMnpXdaLg= Subject key identifier: 05:E6:E4:1F:E0:F1:74:54:27:66:6E:FE:F0:40:19:AB:DD:2E:0C:32 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848CC8A2A2F4C0B8F4D8874AE80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d5d32de2-9673-351a-9756-5db535ff0fd6.roa Signing time: Fri 07 Feb 2025 02:30:11 +0000 ROA not before: Fri 07 Feb 2025 02:30:11 +0000 ROA not after: Thu 08 May 2025 01:30:11 +0000 asID: 54934 IP address blocks: 2001:470:410::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:8a:2a:2f:4c:0b:8f:4d:88:74:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 7 02:30:11 2025 GMT Not After : May 8 01:30:11 2025 GMT Subject: CN=31aa1a25-7c77-4768-9dd4-c341fbacbac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:bc:e2:97:7b:ee:1b:fa:bb:29:89:10:13:39: 6d:79:96:a8:2a:ce:41:b0:98:35:88:cb:9e:b6:94: d3:dd:d9:6b:00:0b:16:8e:06:27:20:dd:41:80:d7: 50:ab:84:37:9c:0e:62:8c:22:f8:4d:08:ce:50:3e: 6b:18:11:6f:a8:dc:9f:8c:92:9c:6d:81:17:26:92: 2c:30:79:da:02:88:e9:12:87:41:99:4b:35:31:30: 7b:5f:98:35:76:8f:c5:12:a3:c7:30:3a:44:8e:fb: e7:dd:b6:33:76:d0:a9:09:8e:f0:18:23:38:d2:3b: 8d:95:b7:21:5e:82:84:40:e3:a1:8a:6b:9b:fd:2c: 1c:9a:e9:db:fc:bc:29:3d:ab:de:a7:43:49:e6:4d: ef:c0:51:e8:14:02:79:bd:c2:7f:c1:46:d0:8f:60: 74:a1:4f:ad:2a:4a:ad:21:d1:01:4a:d4:87:95:bd: ae:5a:ff:31:92:0c:f0:61:3e:b2:12:60:7c:25:bb: c7:4e:fb:02:f9:cd:81:53:1d:4f:16:18:d4:cf:e5: b1:5e:03:2d:65:38:8c:58:b9:4b:a9:41:24:55:41: 9d:76:8d:f0:29:bf:5d:f5:95:e3:b5:4a:cd:e0:17: ca:d3:c0:5a:24:a6:86:39:63:f6:2a:aa:e8:8d:7d: 5e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E6:E4:1F:E0:F1:74:54:27:66:6E:FE:F0:40:19:AB:DD:2E:0C:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d5d32de2-9673-351a-9756-5db535ff0fd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:410::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:8b:2e:bd:50:35:8e:f4:88:88:14:dd:0d:8a:33:7c:55:28: d3:54:e2:d0:e6:86:cc:05:43:f9:a1:bc:87:a0:1b:be:3b:be: 8c:44:5f:80:38:44:7b:f4:36:f7:91:e6:3f:23:fc:75:71:eb: 70:4e:e9:14:6f:cf:be:17:c7:41:7e:1f:95:42:d6:29:48:80: 70:88:03:b6:fd:98:03:be:41:cd:c9:b9:18:b3:0b:54:60:31: 82:71:f3:d0:45:57:2e:97:96:fe:25:64:f4:55:89:16:00:d2: 3c:d8:da:83:ba:dc:92:d5:0f:98:78:15:5d:a0:f0:97:51:6c: c3:89:bf:5b:02:c3:a7:9b:79:2b:8e:b2:ea:e3:b3:10:8a:a1: ab:ee:9f:9e:60:35:80:a4:05:76:0c:ab:c0:1e:64:6f:cc:f0: 69:95:7d:04:38:83:84:96:f9:d4:4d:3b:b4:bc:97:aa:5a:57: 81:24:7d:10:f9:c5:d2:f2:7c:a5:d6:b4:fb:2e:00:cf:87:d7: a3:fe:6d:85:4f:6b:a6:f2:f1:78:56:ab:ef:a3:98:c2:26:4f: 63:8c:36:ff:51:f1:9f:96:cd:1d:fa:89:c2:35:7c:8a:f9:b0: 90:ad:02:ff:87:b5:70:82:7e:22:0a:e6:de:ec:e3:37:17:8d: 0f:0e:3c:eb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjMiiovTAuPTYh0roAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIwNzAyMzAxMVoXDTI1MDUwODAxMzAxMVowLzEtMCsGA1UEAxMk MzFhYTFhMjUtN2M3Ny00NzY4LTlkZDQtYzM0MWZiYWNiYWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbzil3vuG/q7KYkQEzlteZaoKs5BsJg1iMue tpTT3dlrAAsWjgYnIN1BgNdQq4Q3nA5ijCL4TQjOUD5rGBFvqNyfjJKcbYEXJpIs MHnaAojpEodBmUs1MTB7X5g1do/FEqPHMDpEjvvn3bYzdtCpCY7wGCM40juNlbch XoKEQOOhimub/Swcmunb/LwpPavep0NJ5k3vwFHoFAJ5vcJ/wUbQj2B0oU+tKkqt IdEBStSHlb2uWv8xkgzwYT6yEmB8JbvHTvsC+c2BUx1PFhjUz+WxXgMtZTiMWLlL qUEkVUGddo3wKb9d9ZXjtUrN4BfK08BaJKaGOWP2KqrojX1eCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAXm5B/g8XRUJ2Zu/vBAGavdLgwyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDVkMzJkZTItOTY3My0z NTFhLTk3NTYtNWRiNTM1ZmYwZmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABeLLr1QNY70iIgU3Q2KM3xVKNNU4tDmhswFQ/mhvIegG747voxE X4A4RHv0NveR5j8j/HVx63BO6RRvz74Xx0F+H5VC1ilIgHCIA7b9mAO+Qc3JuRiz C1RgMYJx89BFVy6Xlv4lZPRViRYA0jzY2oO63JLVD5h4FV2g8JdRbMOJv1sCw6eb eSuOsurjsxCKoavun55gNYCkBXYMq8AeZG/M8GmVfQQ4g4SW+dRNO7S8l6paV4Ek fRD5xdLyfKXWtPsuAM+H16P+bYVPa6by8XhWq++jmMImT2OMNv9R8Z+WzR36icI1 fIr5sJCtAv+HtXCCfiIK5t7s4zcXjQ8OPOs= -----END CERTIFICATE-----Generated at Wed Feb 19 22:34:16 2025 by rpki-client