$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d8109e33-250d-3d73-8e2b-1ff6022e49e6.roa File: d8109e33-250d-3d73-8e2b-1ff6022e49e6.roa (raw, json) Hash identifier: 5Al1KNUCM9Og7XyxQzJ7fOnzQOz0DBYScfmXVXMDr6U= Subject key identifier: 73:A5:52:A4:26:5E:56:A9:EC:B0:9B:0F:55:F1:B8:4A:EC:B2:75:D9 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584870699AA716C12334EAFA9E00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d8109e33-250d-3d73-8e2b-1ff6022e49e6.roa Signing time: Sun 05 Jan 2025 02:30:12 +0000 ROA not before: Sun 05 Jan 2025 02:30:12 +0000 ROA not after: Sat 05 Apr 2025 01:30:12 +0000 asID: 400992 IP address blocks: 2001:470:3eb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:70:69:9a:a7:16:c1:23:34:ea:fa:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jan 5 02:30:12 2025 GMT Not After : Apr 5 01:30:12 2025 GMT Subject: CN=245f6c3c-5204-4356-81fd-bc2d09066b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:94:74:15:6a:cd:d8:ce:15:75:3f:5c:6d:2f: 5a:09:a6:47:c8:d1:89:2d:32:30:29:f6:50:13:aa: 79:80:10:a0:27:1d:95:80:d2:1f:3e:33:97:83:24: 80:1b:1a:09:2b:17:36:1e:4e:af:e6:b9:ff:46:cc: 5c:42:f9:6a:23:ce:c4:39:04:bf:30:2b:b1:5d:e6: 59:b9:7c:a6:d3:86:47:a3:3d:4e:ec:67:f1:87:5f: 08:48:9b:98:5f:2e:c9:c4:09:83:3f:1d:2d:21:32: c2:3f:bd:89:ed:f2:e7:a0:65:a3:2f:b7:02:23:ff: 9b:cc:03:02:31:f9:be:7d:21:e6:87:f6:1d:62:0c: f8:2f:89:b0:7f:30:4d:0c:53:c0:fe:b6:77:05:d6: 82:2e:48:10:dc:eb:9b:7c:39:c5:7e:e2:23:23:5d: 49:62:03:ae:69:c0:03:01:f0:47:6f:5b:06:d4:7e: 22:59:2c:e1:05:2c:ca:d2:05:4c:4d:37:74:13:7a: c2:9d:de:ee:a3:c1:e1:89:08:96:b5:c2:be:9a:ef: 45:54:68:14:bb:dc:bd:e8:01:f3:2d:6b:a2:3c:b0: 37:ff:dd:5c:8d:0f:37:b2:62:52:1b:a8:53:a2:e8: bf:6a:41:da:f2:f9:dc:ba:41:09:de:b3:7b:8e:95: 28:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A5:52:A4:26:5E:56:A9:EC:B0:9B:0F:55:F1:B8:4A:EC:B2:75:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d8109e33-250d-3d73-8e2b-1ff6022e49e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3eb::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:9c:1b:5f:80:cc:b3:0d:de:1e:3c:c1:ad:53:30:5b:47:51: ea:12:44:41:a6:26:23:3e:ed:80:e6:48:fd:6e:b5:9a:1e:86: d2:e5:5d:16:9b:15:92:64:3a:75:a6:21:0d:70:96:9c:45:5f: e5:46:ff:ad:de:57:dd:7d:03:67:69:dc:c7:46:6e:7c:6a:23: fe:5b:9c:f9:5b:cf:1d:7d:21:c3:b1:16:2b:bb:f1:ed:df:0d: da:a7:a5:bc:c9:43:54:52:68:97:3f:f6:72:8b:f0:fa:ce:78: 6f:fe:9b:75:20:f4:47:36:cb:b2:59:38:8d:fd:3e:a2:0c:4f: 31:91:07:0e:46:2e:6f:01:be:ce:cd:80:39:a1:b8:5b:40:f6: 34:27:b7:a0:9d:fe:c1:c6:cc:bf:0c:58:d9:91:d7:c4:bb:34: 99:3b:4f:6f:f9:27:c0:f5:24:2c:0d:6d:fb:64:a3:82:1f:b2: ab:72:63:4f:e3:f0:48:a6:0d:a2:6f:0f:bd:2c:63:42:70:31: 6d:9d:5b:23:ba:73:67:78:6e:0d:91:54:4f:6d:52:27:c9:8f: 34:e7:ef:9b:7e:05:b9:bd:c4:4b:56:98:52:f8:d9:8f:bd:2d: e1:a3:ad:ce:4b:42:38:da:1b:47:21:69:b4:42:4d:7c:8b:50: 58:ee:54:95 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhwaZqnFsEjNOr6ngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDEwNTAyMzAxMloXDTI1MDQwNTAxMzAxMlowLzEtMCsGA1UEAxMk MjQ1ZjZjM2MtNTIwNC00MzU2LTgxZmQtYmMyZDA5MDY2YjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5R0FWrN2M4VdT9cbS9aCaZHyNGJLTIwKfZQ E6p5gBCgJx2VgNIfPjOXgySAGxoJKxc2Hk6v5rn/RsxcQvlqI87EOQS/MCuxXeZZ uXym04ZHoz1O7Gfxh18ISJuYXy7JxAmDPx0tITLCP72J7fLnoGWjL7cCI/+bzAMC Mfm+fSHmh/YdYgz4L4mwfzBNDFPA/rZ3BdaCLkgQ3OubfDnFfuIjI11JYgOuacAD AfBHb1sG1H4iWSzhBSzK0gVMTTd0E3rCnd7uo8HhiQiWtcK+mu9FVGgUu9y96AHz LWuiPLA3/91cjQ83smJSG6hToui/akHa8vncukEJ3rN7jpUoGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHOlUqQmXlap7LCbD1XxuErssnXZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDgxMDllMzMtMjUwZC0z ZDczLThlMmItMWZmNjAyMmU0OWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB+cG1+AzLMN3h48wa1TMFtHUeoSREGmJiM+7YDmSP1utZoehtLl XRabFZJkOnWmIQ1wlpxFX+VG/63eV919A2dp3MdGbnxqI/5bnPlbzx19IcOxFiu7 8e3fDdqnpbzJQ1RSaJc/9nKL8PrOeG/+m3Ug9Ec2y7JZOI39PqIMTzGRBw5GLm8B vs7NgDmhuFtA9jQnt6Cd/sHGzL8MWNmR18S7NJk7T2/5J8D1JCwNbftko4Ifsqty Y0/j8EimDaJvD70sY0JwMW2dWyO6c2d4bg2RVE9tUifJjzTn75t+Bbm9xEtWmFL4 2Y+9LeGjrc5LQjjaG0chabRCTXyLUFjuVJU= -----END CERTIFICATE-----Generated at Wed Feb 5 04:35:31 2025 by rpki-client