$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/de7c404d-ae1a-3484-991c-6d6c61ba02a5.roa File: de7c404d-ae1a-3484-991c-6d6c61ba02a5.roa (raw, json) Hash identifier: mDj+rrq1HNnwXky98UcilFn5RKpT1ULxMJisTJ7VOUw= Subject key identifier: 01:EF:FE:19:94:F9:A0:6F:56:09:02:D7:84:84:FF:35:0A:ED:20:38 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926CAC4F1D954CA6DA79B90 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/de7c404d-ae1a-3484-991c-6d6c61ba02a5.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 32575 IP address blocks: 2001:470:26f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:ca:c4:f1:d9:54:ca:6d:a7:9b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=100500cf-b26e-4d74-bfad-74979e2fa914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:04:d1:94:aa:e4:bd:91:14:92:78:03:c5:ef: e2:81:bd:e3:ac:b4:d2:67:ab:c9:48:29:7d:06:82: 8f:8a:d6:e5:84:67:04:97:3c:a7:e8:0b:15:d0:85: 7d:52:75:22:47:ed:fc:dd:da:01:e2:1a:39:5e:0d: 95:28:b5:44:55:98:f2:6e:c3:a0:21:fe:ec:9e:ff: cd:09:d9:bf:8f:1f:99:0b:57:85:2b:7d:0c:f1:8d: eb:1b:eb:6c:ad:97:cd:d5:71:86:18:71:20:2f:dd: 50:3c:08:4b:94:2e:88:0f:6b:1c:f6:8c:d2:eb:2f: f1:fe:66:15:41:7b:8f:64:da:50:d5:02:1e:1d:4c: c1:65:d1:03:03:0b:67:fe:3d:74:bb:31:df:dc:cf: 69:b5:ea:3c:cc:ef:bc:20:d4:ca:38:b0:7b:5d:8c: b8:6e:87:44:2c:06:5d:a9:74:e3:6b:25:2b:28:fb: de:ee:06:20:ad:c8:5b:7c:38:7d:cf:e3:8a:66:6c: aa:2d:99:4f:61:28:2e:84:3e:5d:a4:de:11:78:50: 42:c0:52:d3:e5:ac:34:cd:20:ef:60:cb:8b:0a:e3: 70:ad:e5:cd:36:1a:1c:82:cd:c7:43:78:3b:ed:4a: 08:60:5a:c5:57:89:8e:0b:13:b2:82:fe:92:a5:18: 44:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:EF:FE:19:94:F9:A0:6F:56:09:02:D7:84:84:FF:35:0A:ED:20:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/de7c404d-ae1a-3484-991c-6d6c61ba02a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:26f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:b5:83:d2:f8:8a:87:aa:36:ad:1a:4b:07:11:00:6c:f1:45: 6e:de:e1:c7:4f:78:70:a7:08:01:10:bc:85:08:0a:90:d0:0c: b2:44:c5:5e:4b:d2:7b:13:97:ef:1a:6c:b2:83:5e:0c:c2:4c: cb:de:2f:e2:5d:53:22:b8:59:f0:c0:3b:0a:6e:b7:ed:9f:1c: e6:55:7f:8d:1a:63:18:11:16:62:f7:6d:66:34:13:7e:df:c7: 72:c8:80:27:c2:48:83:2a:a8:f7:b6:8f:91:00:c6:68:ed:db: 55:a3:29:7a:8a:28:a3:0e:ad:54:eb:30:b4:be:ba:12:8b:5e: 89:19:83:90:0e:7c:7d:64:28:ed:e9:63:1f:35:bd:28:d3:92: 95:3d:a7:47:4d:4f:1a:95:2c:e5:3d:b6:d3:05:77:8e:46:28: df:22:a2:7a:62:fa:98:b4:36:30:5c:9b:d2:04:bd:fd:a3:23: f5:5e:f6:3e:06:cb:47:57:10:91:39:51:51:20:80:50:dc:d3: 4e:4b:a5:d3:db:aa:3e:fb:8d:d0:9d:e8:40:d9:eb:bd:cf:2b: 8b:b2:60:d6:a4:ff:f5:58:e0:5a:68:1a:4f:ae:77:ad:c3:d2: 5d:2b:d1:aa:d8:55:06:19:f5:5a:f4:d3:b7:07:15:37:2a:61: ed:39:6d:6c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JsrE8dlUym2nm5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk MTAwNTAwY2YtYjI2ZS00ZDc0LWJmYWQtNzQ5NzllMmZhOTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgTRlKrkvZEUkngDxe/igb3jrLTSZ6vJSCl9 BoKPitblhGcElzyn6AsV0IV9UnUiR+383doB4ho5Xg2VKLVEVZjybsOgIf7snv/N Cdm/jx+ZC1eFK30M8Y3rG+tsrZfN1XGGGHEgL91QPAhLlC6ID2sc9ozS6y/x/mYV QXuPZNpQ1QIeHUzBZdEDAwtn/j10uzHf3M9pteo8zO+8INTKOLB7XYy4bodELAZd qXTjayUrKPve7gYgrchbfDh9z+OKZmyqLZlPYSguhD5dpN4ReFBCwFLT5aw0zSDv YMuLCuNwreXNNhocgs3HQ3g77UoIYFrFV4mOCxOygv6SpRhEjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAHv/hmU+aBvVgkC14SE/zUK7SA4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZGU3YzQwNGQtYWUxYS0z NDg0LTk5MWMtNmQ2YzYxYmEwMmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJv MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHC1g9L4ioeqNq0aSwcRAGzxRW7e4cdPeHCnCAEQvIUICpDQDLJE xV5L0nsTl+8abLKDXgzCTMveL+JdUyK4WfDAOwput+2fHOZVf40aYxgRFmL3bWY0 E37fx3LIgCfCSIMqqPe2j5EAxmjt21WjKXqKKKMOrVTrMLS+uhKLXokZg5AOfH1k KO3pYx81vSjTkpU9p0dNTxqVLOU9ttMFd45GKN8ionpi+pi0NjBcm9IEvf2jI/Ve 9j4Gy0dXEJE5UVEggFDc005LpdPbqj77jdCd6EDZ673PK4uyYNak//VY4FpoGk+u d63D0l0r0arYVQYZ9Vr007cHFTcqYe05bWw= -----END CERTIFICATE-----Generated at Fri Apr 4 17:54:03 2025 by rpki-client