$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dbace5a4-f27b-30c4-a08b-ccb34599dfcd.roa File: dbace5a4-f27b-30c4-a08b-ccb34599dfcd.roa (raw, json) Hash identifier: LACPfqPIBQv3mvoSPO0LzI3rOoKSIMmljrrYd/DO1Us= Subject key identifier: E7:4D:29:42:57:48:F5:FB:D8:22:4E:5B:5B:6D:8F:F4:F0:34:A3:86 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584925C25111DBA73812CF0121A0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dbace5a4-f27b-30c4-a08b-ccb34599dfcd.roa Signing time: Tue 11 Mar 2025 01:30:15 +0000 ROA not before: Tue 11 Mar 2025 01:30:15 +0000 ROA not after: Mon 09 Jun 2025 01:30:15 +0000 asID: 36591 IP address blocks: 2001:470:422::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:25:c2:51:11:db:a7:38:12:cf:01:21:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 11 01:30:15 2025 GMT Not After : Jun 9 01:30:15 2025 GMT Subject: CN=70ec712c-bb90-4cc7-a87f-08de0e9ab52b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7f:c1:58:a5:5a:16:24:a5:07:e5:ed:10:a8: b6:19:ab:ab:85:16:f5:02:96:a9:92:ab:07:d8:78: 04:d9:0e:e0:a1:aa:dd:4a:1c:21:e1:3b:15:a8:fd: 06:b3:ae:ec:6f:0c:9f:73:0a:84:08:dc:2e:d5:00: 5c:69:76:52:7c:fa:99:68:91:2e:35:ed:f7:aa:16: ac:36:ab:cd:e1:4f:c5:81:72:37:d9:b4:98:1c:36: 91:ad:dc:11:1e:7f:04:5e:cd:3c:eb:2d:b1:d4:25: 9e:51:60:f9:07:b0:25:56:e5:7d:58:9e:19:91:3d: a4:7f:91:81:ee:b5:33:0d:61:08:e4:fe:1a:47:13: b4:c5:5c:4b:9b:54:bb:7b:de:8e:14:62:d6:f4:67: 71:ea:40:72:86:85:2b:60:3d:ac:c4:a6:41:bc:bc: 0c:9a:07:73:df:bd:eb:b3:23:b1:64:b8:e4:46:57: 4d:0b:8d:78:49:7d:ea:ad:4e:9b:97:87:19:91:69: e4:f0:4d:26:ff:35:35:5b:ba:32:03:35:dd:a6:06: 7a:68:1c:84:36:2e:f1:43:0d:22:c0:c6:b9:9f:ba: 37:f1:a9:d6:9e:27:37:21:c0:96:88:f1:25:4e:4c: c9:a1:33:8d:43:42:33:42:5b:cf:88:63:34:b7:07: d3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:4D:29:42:57:48:F5:FB:D8:22:4E:5B:5B:6D:8F:F4:F0:34:A3:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dbace5a4-f27b-30c4-a08b-ccb34599dfcd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:422::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:79:51:c9:da:b8:a3:72:b2:a4:7d:f3:b5:29:b2:49:e2:e2: ca:d5:86:92:47:d5:df:57:35:19:eb:b4:0a:fa:ea:95:71:d9: 67:ad:53:55:ae:54:1c:27:44:77:8a:25:e7:c9:52:28:26:fc: 4a:c5:4b:6b:6e:16:5f:53:18:4b:3c:5a:63:93:c0:83:8c:85: 1a:da:e2:e0:d5:06:cd:39:1e:3b:3a:64:03:55:e3:48:1d:09: e1:85:d5:18:cb:ce:21:fb:ff:0c:21:de:22:1f:bc:1f:68:d8: 34:6e:2d:6e:16:34:a7:6d:10:22:e5:be:94:b1:b4:1e:06:64: 89:50:d4:e3:18:00:73:b0:23:1c:31:f1:e1:37:6d:84:85:56: e8:d9:da:30:37:a0:81:d3:a0:21:a3:86:7f:da:16:70:40:e6: 59:95:7a:38:bf:4f:ee:18:32:7a:c5:db:5a:f9:1e:16:21:d8: d5:46:0a:20:37:17:61:e7:57:ab:64:ca:21:c4:7c:b7:99:dc: 78:7d:e6:87:f9:54:8e:8e:64:01:ea:d1:e2:d0:78:d0:be:11: 3d:4f:44:57:98:26:56:4d:1f:27:7e:bf:d5:36:03:15:02:ab: 8a:f6:37:39:60:fd:db:f6:33:2d:6e:98:ef:4a:ad:72:97:27: 9f:8f:4c:c3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEklwlER26c4Es8BIaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMxMTAxMzAxNVoXDTI1MDYwOTAxMzAxNVowLzEtMCsGA1UEAxMk NzBlYzcxMmMtYmI5MC00Y2M3LWE4N2YtMDhkZTBlOWFiNTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3/BWKVaFiSlB+XtEKi2GaurhRb1ApapkqsH 2HgE2Q7goardShwh4TsVqP0Gs67sbwyfcwqECNwu1QBcaXZSfPqZaJEuNe33qhas NqvN4U/FgXI32bSYHDaRrdwRHn8EXs086y2x1CWeUWD5B7AlVuV9WJ4ZkT2kf5GB 7rUzDWEI5P4aRxO0xVxLm1S7e96OFGLW9Gdx6kByhoUrYD2sxKZBvLwMmgdz373r syOxZLjkRldNC414SX3qrU6bl4cZkWnk8E0m/zU1W7oyAzXdpgZ6aByENi7xQw0i wMa5n7o38anWnic3IcCWiPElTkzJoTONQ0IzQlvPiGM0twfTjQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOdNKUJXSPX72CJOW1ttj/TwNKOGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZGJhY2U1YTQtZjI3Yi0z MGM0LWEwOGItY2NiMzQ1OTlkZmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD95UcnauKNysqR987Upskni4srVhpJH1d9XNRnrtAr66pVx2Wet U1WuVBwnRHeKJefJUigm/ErFS2tuFl9TGEs8WmOTwIOMhRra4uDVBs05Hjs6ZANV 40gdCeGF1RjLziH7/wwh3iIfvB9o2DRuLW4WNKdtECLlvpSxtB4GZIlQ1OMYAHOw Ixwx8eE3bYSFVujZ2jA3oIHToCGjhn/aFnBA5lmVeji/T+4YMnrF21r5HhYh2NVG CiA3F2HnV6tkyiHEfLeZ3Hh95of5VI6OZAHq0eLQeNC+ET1PRFeYJlZNHyd+v9U2 AxUCq4r2Nzlg/dv2My1umO9KrXKXJ5+PTMM= -----END CERTIFICATE-----Generated at Fri Apr 4 17:45:12 2025 by rpki-client