$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d904d990-fb1b-387d-aed0-223f5240308c.roa File: d904d990-fb1b-387d-aed0-223f5240308c.roa (raw, json) Hash identifier: FQfHbhxJkbzPnp+4V/MvNt2EStH1gJ/pEN62phRuMUc= Subject key identifier: 9B:FE:E6:34:12:D0:DB:3A:70:09:A4:69:10:64:DA:03:B3:FF:B0:57 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858494E2EA690936CF424AB8AF640 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d904d990-fb1b-387d-aed0-223f5240308c.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 20205 IP address blocks: 2001:470:3ea::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:a6:90:93:6c:f4:24:ab:8a:f6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=46fa3f2a-7d71-4e81-bf27-f36b1e4c5434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f0:c1:e2:84:1a:4f:43:48:c5:c0:8d:e7:8f: e1:93:12:0b:ea:55:ea:0a:93:84:50:da:40:fb:3f: 39:01:58:94:c3:f6:17:93:36:00:2b:d0:21:9c:f0: fa:2c:c0:8d:c9:ac:b0:1c:e5:5e:05:ff:9c:f8:41: 00:e9:33:00:5c:24:82:4f:4d:66:5a:6d:d2:b5:1a: 2d:9d:8d:22:dc:14:48:f2:78:47:67:4c:ac:cc:96: b1:a9:c1:05:e0:60:4f:4f:00:26:bd:42:ec:f9:ba: 95:64:68:6f:5b:66:c7:79:4c:44:ba:27:b6:1d:db: a1:2a:80:a2:4e:7f:65:e5:f4:7b:ca:e6:9e:35:15: 1b:19:b6:dc:56:55:a0:d0:58:e2:9f:f4:35:e7:70: 6c:dd:88:c6:21:24:81:47:5d:f5:5c:d8:08:87:f1: cd:e6:eb:b3:e5:f9:24:be:01:c1:c5:42:30:a1:0e: c7:d0:8f:79:10:14:8b:d6:ee:f3:bc:53:ae:c1:e0: 0d:ed:19:76:6a:0b:b4:55:62:d4:bb:a1:73:dc:11: 60:d6:99:0d:e8:a1:0c:90:f0:c8:41:52:0a:39:f7: 98:44:a8:01:c3:6c:d5:31:72:df:fc:f9:2c:63:ca: 75:66:86:b5:af:e4:b8:c7:35:e8:d0:3b:40:e5:a4: 25:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:FE:E6:34:12:D0:DB:3A:70:09:A4:69:10:64:DA:03:B3:FF:B0:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d904d990-fb1b-387d-aed0-223f5240308c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3ea::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:f0:1a:94:32:a3:41:f8:a8:e0:0a:00:5c:f4:89:4e:43:9d: 29:07:f2:a9:79:f5:42:cf:48:5b:c9:a7:92:09:3b:da:1a:3d: 53:a6:fb:b1:cf:e7:97:61:71:ef:c1:74:a9:56:0d:4f:bd:ff: 60:d4:3a:f7:04:b0:38:85:c1:04:d3:10:6c:57:2e:1f:c7:a4: 3e:32:b2:a2:13:18:b5:d9:4c:93:0a:92:a6:6e:be:47:25:c1: 8b:e5:41:cc:29:ef:3f:e2:8b:7c:00:6a:3e:0e:d9:61:c6:e8: 93:8a:9a:69:7c:40:de:52:4b:c3:82:15:89:d0:94:04:80:f1: ce:30:5c:a0:1a:2b:7c:cb:79:6f:d3:cd:87:d5:db:e3:fd:9f: f4:df:d5:2c:15:6e:e9:97:47:77:53:9f:04:40:a6:18:3e:3c: 04:0c:d0:5b:ca:7e:56:f5:63:e8:65:02:4f:e4:9c:73:46:a4: 29:d5:4b:70:98:68:e7:64:38:26:6e:5b:43:a5:c6:66:d4:31: 00:73:88:bf:a0:bd:a5:40:da:c5:e9:f7:a4:14:34:11:3f:c2: d7:1b:2d:e2:15:34:25:c7:da:b2:26:f7:a6:4a:2d:3e:92:54: 52:da:29:71:17:e8:af:cf:70:87:23:50:78:4a:25:0d:3f:43: 42:bf:98:c1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElOLqaQk2z0JKuK9kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk NDZmYTNmMmEtN2Q3MS00ZTgxLWJmMjctZjM2YjFlNGM1NDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/DB4oQaT0NIxcCN54/hkxIL6lXqCpOEUNpA +z85AViUw/YXkzYAK9AhnPD6LMCNyaywHOVeBf+c+EEA6TMAXCSCT01mWm3StRot nY0i3BRI8nhHZ0yszJaxqcEF4GBPTwAmvULs+bqVZGhvW2bHeUxEuie2HduhKoCi Tn9l5fR7yuaeNRUbGbbcVlWg0Fjin/Q153Bs3YjGISSBR131XNgIh/HN5uuz5fkk vgHBxUIwoQ7H0I95EBSL1u7zvFOuweAN7Rl2agu0VWLUu6Fz3BFg1pkN6KEMkPDI QVIKOfeYRKgBw2zVMXLf/PksY8p1Zoa1r+S4xzXo0DtA5aQlQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJv+5jQS0Ns6cAmkaRBk2gOz/7BXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDkwNGQ5OTAtZmIxYi0z ODdkLWFlZDAtMjIzZjUyNDAzMDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA3wGpQyo0H4qOAKAFz0iU5DnSkH8ql59ULPSFvJp5IJO9oaPVOm +7HP55dhce/BdKlWDU+9/2DUOvcEsDiFwQTTEGxXLh/HpD4ysqITGLXZTJMKkqZu vkclwYvlQcwp7z/ii3wAaj4O2WHG6JOKmml8QN5SS8OCFYnQlASA8c4wXKAaK3zL eW/TzYfV2+P9n/Tf1SwVbumXR3dTnwRAphg+PAQM0FvKflb1Y+hlAk/knHNGpCnV S3CYaOdkOCZuW0OlxmbUMQBziL+gvaVA2sXp96QUNBE/wtcbLeIVNCXH2rIm96ZK LT6SVFLaKXEX6K/PcIcjUHhKJQ0/Q0K/mME= -----END CERTIFICATE-----Generated at Sun Apr 13 03:56:49 2025 by rpki-client