$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d904d990-fb1b-387d-aed0-223f5240308c.roa File: d904d990-fb1b-387d-aed0-223f5240308c.roa (raw, json) Hash identifier: w9LecUoI4qs/G1NBpA3oKa7HfR0rcOQR+1cAxwDIshE= Subject key identifier: 87:E3:21:F0:9B:D4:44:6F:F8:B1:1C:6F:30:25:E5:D7:82:48:71:E6 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858486D9EE63D79FA135940FF2B00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d904d990-fb1b-387d-aed0-223f5240308c.roa Signing time: Sat 04 Jan 2025 02:30:10 +0000 ROA not before: Sat 04 Jan 2025 02:30:10 +0000 ROA not after: Fri 04 Apr 2025 01:30:10 +0000 asID: 20205 IP address blocks: 2001:470:3ea::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6d:9e:e6:3d:79:fa:13:59:40:ff:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jan 4 02:30:10 2025 GMT Not After : Apr 4 01:30:10 2025 GMT Subject: CN=69bdc913-7e96-487c-8804-f6a3c64fc65b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ac:26:10:ec:d0:f1:1a:2a:74:6c:24:4c:af: 59:00:39:38:4e:07:c5:41:97:3f:1a:f3:2f:84:aa: 26:fd:8e:60:a5:45:7a:6d:32:f8:e8:b6:66:25:61: 14:2b:71:76:77:72:d1:25:fb:2b:39:fd:e7:38:fe: 1e:f9:9a:91:b6:dd:fc:cc:7f:36:1f:72:c5:55:b1: c3:f9:e0:84:e2:9a:f7:c8:21:26:31:96:af:77:cc: 4c:c9:65:84:24:d8:04:4d:82:d3:94:37:58:04:72: 0a:3d:93:1c:af:54:ef:03:ff:71:31:75:6d:fe:33: a8:90:8c:6b:a9:ae:89:57:e3:14:28:7b:e2:b1:e2: fd:4f:ad:f9:42:c4:0b:a1:fc:03:05:49:bd:19:c3: 1b:61:7e:a0:6c:9e:ae:26:cb:03:43:00:cb:35:9e: bf:86:8c:c3:7b:e9:a2:13:65:50:b8:f5:9e:c9:89: a9:e0:ab:8e:45:29:fd:4b:20:1a:d8:19:7e:2b:51: e0:62:34:83:da:28:d7:22:c6:7e:f7:4a:c4:46:a9: 12:c1:96:ff:d2:dd:29:5e:7a:ac:d2:7a:d8:20:08: 9f:fb:d4:c8:0a:7a:bd:ce:ab:7b:23:90:63:be:bf: 43:14:ce:8a:84:f8:3b:a4:1a:be:17:45:3b:3b:95: 5d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E3:21:F0:9B:D4:44:6F:F8:B1:1C:6F:30:25:E5:D7:82:48:71:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d904d990-fb1b-387d-aed0-223f5240308c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3ea::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:0d:f0:ba:97:92:9c:8b:72:23:df:d6:90:bf:c8:fe:5f:5c: ba:b1:d9:05:33:c0:9a:f6:4a:31:dc:8b:1f:e4:7f:58:d7:86: c8:3f:c0:4e:fe:f6:ff:7c:15:25:4a:dd:c7:18:88:03:36:eb: c0:e8:62:96:83:13:95:11:2c:0f:5c:19:86:4d:87:d2:f3:86: 83:15:4f:f7:44:d3:21:3b:7a:92:62:0a:f1:33:50:27:4e:9b: 32:ee:71:e0:86:21:2d:d9:14:94:3e:dd:5f:57:02:60:16:f5: 9f:05:f3:d9:f5:2b:fa:13:2d:91:b6:1e:1c:0c:77:31:1a:b4: 6b:d9:b7:df:25:e5:6d:57:4e:bf:af:bb:70:ef:0b:60:30:00: 8d:e9:98:6f:92:0f:06:33:c1:c5:64:e9:da:dd:fe:bb:f9:87: 21:c6:44:5d:fa:92:7d:3b:40:65:db:0c:d7:b4:9e:ca:95:65: 84:e2:3d:f1:fe:9f:c7:dc:fd:11:bb:96:eb:89:60:eb:80:44: c7:bd:8d:44:d7:7f:35:b1:02:c7:34:d5:35:90:58:f0:82:8b: c9:52:0b:12:aa:85:1e:05:8b:17:2b:6e:e6:de:02:d0:59:35: 07:6e:57:f4:11:59:12:7a:44:b7:95:5c:64:10:e7:d5:3d:04: f8:bc:c6:34 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhtnuY9efoTWUD/KwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDEwNDAyMzAxMFoXDTI1MDQwNDAxMzAxMFowLzEtMCsGA1UEAxMk NjliZGM5MTMtN2U5Ni00ODdjLTg4MDQtZjZhM2M2NGZjNjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKwmEOzQ8RoqdGwkTK9ZADk4TgfFQZc/GvMv hKom/Y5gpUV6bTL46LZmJWEUK3F2d3LRJfsrOf3nOP4e+ZqRtt38zH82H3LFVbHD +eCE4pr3yCEmMZavd8xMyWWEJNgETYLTlDdYBHIKPZMcr1TvA/9xMXVt/jOokIxr qa6JV+MUKHviseL9T635QsQLofwDBUm9GcMbYX6gbJ6uJssDQwDLNZ6/hozDe+mi E2VQuPWeyYmp4KuORSn9SyAa2Bl+K1HgYjSD2ijXIsZ+90rERqkSwZb/0t0pXnqs 0nrYIAif+9TICnq9zqt7I5Bjvr9DFM6KhPg7pBq+F0U7O5VdSQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIfjIfCb1ERv+LEcbzAl5deCSHHmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDkwNGQ5OTAtZmIxYi0z ODdkLWFlZDAtMjIzZjUyNDAzMDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADUN8LqXkpyLciPf1pC/yP5fXLqx2QUzwJr2SjHcix/kf1jXhsg/ wE7+9v98FSVK3ccYiAM268DoYpaDE5URLA9cGYZNh9LzhoMVT/dE0yE7epJiCvEz UCdOmzLuceCGIS3ZFJQ+3V9XAmAW9Z8F89n1K/oTLZG2HhwMdzEatGvZt98l5W1X Tr+vu3DvC2AwAI3pmG+SDwYzwcVk6drd/rv5hyHGRF36kn07QGXbDNe0nsqVZYTi PfH+n8fc/RG7luuJYOuARMe9jUTXfzWxAsc01TWQWPCCi8lSCxKqhR4Fixcrbube AtBZNQduV/QRWRJ6RLeVXGQQ59U9BPi8xjQ= -----END CERTIFICATE-----Generated at Wed Feb 5 04:55:55 2025 by rpki-client