$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/db681bf0-14bc-3274-90fd-ce1836da92ed.roa File: db681bf0-14bc-3274-90fd-ce1836da92ed.roa (raw, json) Hash identifier: eaSSk+hIVzuHiWBD9lu32mEeMrzsP0zLrPv4qInQruY= Subject key identifier: 70:D1:67:B4:75:5A:50:1E:84:D5:70:54:23:F3:61:AE:03:14:F5:9D Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926E1E17BDEF49A6FA08B00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/db681bf0-14bc-3274-90fd-ce1836da92ed.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 397945 IP address blocks: 2001:470:235::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:e1:e1:7b:de:f4:9a:6f:a0:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=a2b504e7-8fd5-4233-94ee-6200b2f6bfdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4a:2b:56:e1:7e:7a:13:50:a1:7d:85:83:37: 2f:39:d8:d6:32:f6:36:86:54:93:0e:34:ea:55:a9: 7a:51:02:f3:ec:e2:a1:2c:6e:dd:73:32:db:1d:bd: d0:cc:81:9f:02:b9:0d:b1:35:83:fc:9e:7f:4a:a0: c1:85:5b:4b:50:d4:8a:7c:f8:06:92:ec:26:ab:3c: ac:92:ec:a7:f5:f3:bc:c2:9f:96:fc:90:36:26:ea: 81:31:8a:55:1d:b2:1e:95:6b:04:09:fd:cc:1f:a3: 5b:cd:e9:07:fe:d2:2e:9f:40:ab:5e:a9:14:b5:68: cc:26:94:70:24:89:4a:ac:88:42:b2:f7:a3:06:f3: eb:1d:16:67:ca:1c:db:a5:e6:96:60:ea:1d:1c:46: 41:93:5d:b5:a9:7d:c7:ef:98:3e:75:6f:c5:ed:b3: 00:0b:86:f5:05:78:69:78:b7:80:9a:70:3b:6a:1e: 43:a4:3f:57:06:01:1a:e3:91:7f:55:65:09:61:f3: c5:b6:b0:95:78:1e:d8:bd:1c:3d:34:4c:78:ae:86: 98:ae:cf:d6:a2:7f:f9:61:55:08:ca:7e:e7:dc:30: 70:c6:0a:de:66:a8:73:e9:6b:79:22:65:79:e4:2f: cd:3b:ed:dc:60:18:0d:29:75:ac:6a:1b:6d:50:2f: 6c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D1:67:B4:75:5A:50:1E:84:D5:70:54:23:F3:61:AE:03:14:F5:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/db681bf0-14bc-3274-90fd-ce1836da92ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:235::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:29:e8:69:a8:84:99:b1:d3:99:bc:fd:46:ff:78:2b:d9:65: 0c:be:bd:d0:f1:23:a6:bd:87:9c:39:1e:6e:65:c7:f0:7c:4f: ad:33:b4:08:69:ae:59:3d:2e:2a:43:5e:86:a0:bf:c7:f2:65: 8d:ca:75:de:19:32:f5:54:d2:e9:85:fe:95:1f:a3:b1:a8:58: 7a:6c:ce:d3:5e:5e:86:19:b3:e9:d4:4c:d9:a2:94:84:4e:39: 48:59:6a:7a:fa:a8:dd:62:a6:08:55:26:5b:1f:57:a9:cc:87: 31:08:32:d7:6c:24:f9:b2:06:0a:00:4c:d4:8a:37:29:53:38: 1a:b3:b5:f0:22:74:02:c6:6a:8f:bb:05:41:89:bd:45:82:07: 93:64:f2:5b:db:86:3f:86:74:e2:7e:9c:65:37:67:b0:45:4a: 22:2a:b2:69:87:a2:e6:28:dc:9b:8a:55:35:13:e3:05:c0:84: 63:6d:05:fe:1a:3f:0e:46:3d:e7:29:34:80:79:d8:96:23:7b: 9e:19:13:0a:e6:08:c8:12:f1:7a:37:c1:30:ed:e8:dd:55:13: 23:03:18:81:46:4b:27:02:9c:f5:44:70:92:a5:eb:02:3f:0a: 49:70:07:56:88:d5:00:2e:57:9d:39:17:76:08:48:84:84:b1: b6:5c:51:14 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JuHhe970mm+giwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk YTJiNTA0ZTctOGZkNS00MjMzLTk0ZWUtNjIwMGIyZjZiZmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4korVuF+ehNQoX2FgzcvOdjWMvY2hlSTDjTq Val6UQLz7OKhLG7dczLbHb3QzIGfArkNsTWD/J5/SqDBhVtLUNSKfPgGkuwmqzys kuyn9fO8wp+W/JA2JuqBMYpVHbIelWsECf3MH6NbzekH/tIun0CrXqkUtWjMJpRw JIlKrIhCsvejBvPrHRZnyhzbpeaWYOodHEZBk121qX3H75g+dW/F7bMAC4b1BXhp eLeAmnA7ah5DpD9XBgEa45F/VWUJYfPFtrCVeB7YvRw9NEx4roaYrs/Won/5YVUI yn7n3DBwxgreZqhz6Wt5ImV55C/NO+3cYBgNKXWsahttUC9swwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHDRZ7R1WlAehNVwVCPzYa4DFPWdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZGI2ODFiZjAtMTRiYy0z Mjc0LTkwZmQtY2UxODM2ZGE5MmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMAp6GmohJmx05m8/Ub/eCvZZQy+vdDxI6a9h5w5Hm5lx/B8T60z tAhprlk9LipDXoagv8fyZY3Kdd4ZMvVU0umF/pUfo7GoWHpsztNeXoYZs+nUTNmi lIROOUhZanr6qN1ipghVJlsfV6nMhzEIMtdsJPmyBgoATNSKNylTOBqztfAidALG ao+7BUGJvUWCB5Nk8lvbhj+GdOJ+nGU3Z7BFSiIqsmmHouYo3JuKVTUT4wXAhGNt Bf4aPw5GPecpNIB52JYje54ZEwrmCMgS8Xo3wTDt6N1VEyMDGIFGSycCnPVEcJKl 6wI/CklwB1aI1QAuV505F3YISISEsbZcURQ= -----END CERTIFICATE-----Generated at Fri Apr 4 18:00:41 2025 by rpki-client