$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/de9bacbb-f8be-3977-8fb6-d9d7ba3ad85c.roa File: de9bacbb-f8be-3977-8fb6-d9d7ba3ad85c.roa (raw, json) Hash identifier: tI7/WGVnUr76dWFQuktd5ADvBW8V2yodVGZl84ZlcFA= Subject key identifier: 75:6D:76:91:BE:82:16:DD:D4:DD:E7:17:C0:68:6B:13:55:F9:DB:10 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926C19DFB8AAB52F0260AB0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/de9bacbb-f8be-3977-8fb6-d9d7ba3ad85c.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 394230 IP address blocks: 2001:470:ca::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:c1:9d:fb:8a:ab:52:f0:26:0a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=08fa6386-39e2-4a90-aae5-76e44877062e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f3:ae:2c:81:23:1b:64:31:4c:54:c3:3e:e2: 97:d3:ba:51:c9:10:c6:55:5e:ea:97:58:86:ab:ff: 46:3c:97:96:c5:14:d8:58:d8:e4:0a:85:eb:a6:06: b4:db:40:69:11:35:31:08:fd:8c:bb:27:dd:0f:35: 72:40:44:22:39:96:d3:58:e4:72:e8:cf:cf:1b:62: f7:3b:0b:ce:5d:9c:3d:3c:95:3f:1a:0a:a8:25:f3: 5b:fc:37:fe:bd:30:b7:bd:9d:cd:04:aa:60:92:e0: 85:31:47:22:4c:6b:21:1e:16:8f:f4:c6:9c:73:3c: 28:62:29:28:4a:52:9c:1d:0e:bc:b4:ae:4d:99:cc: 99:0b:06:30:26:e1:36:63:a3:80:65:7d:40:b2:62: 8f:3b:cf:02:ce:c1:11:78:80:09:db:6e:be:38:d1: 4f:01:05:ea:c0:12:dd:9f:38:32:b1:a9:bf:c9:3b: 8c:16:c4:4c:42:8b:33:cb:b4:e8:95:38:2e:11:dc: 5b:01:82:10:ab:7e:60:f9:78:32:00:1b:21:4d:a0: 27:97:21:a0:b8:98:f4:4f:85:a8:fc:0e:95:8e:2b: 3b:37:c7:a4:be:3e:fc:b8:a9:03:aa:e5:76:50:95: 18:d2:eb:78:72:73:43:a5:c2:1f:cd:17:4c:75:17: 5c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:6D:76:91:BE:82:16:DD:D4:DD:E7:17:C0:68:6B:13:55:F9:DB:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/de9bacbb-f8be-3977-8fb6-d9d7ba3ad85c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:ca::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:e6:54:17:fc:44:6a:55:f4:77:c6:a2:07:5b:3e:4f:1b:e1: 7c:d0:01:a8:a0:64:27:78:ab:d2:cd:d0:2f:dc:23:60:b3:1c: b7:0b:fc:47:ff:40:bd:18:47:be:59:14:70:ee:a4:3c:ca:2b: 6f:87:cd:d3:f2:07:89:e3:2f:66:91:2f:07:bc:f1:08:5d:d4: a8:6e:93:55:ed:d4:7c:26:c6:52:ce:d6:fb:90:b4:de:ee:e3: f6:36:bd:22:9f:f8:bf:16:29:cf:a2:13:4f:f2:40:a2:d8:8e: 67:58:ec:10:38:3a:1a:31:7e:51:e1:32:08:7d:70:ac:36:e1: 31:04:7b:14:99:f4:f0:d6:a1:08:68:57:2f:79:3e:e9:18:75: cb:84:15:a0:99:75:2d:e9:84:61:c8:bc:30:8e:8b:97:17:3e: 83:a0:cc:c5:e4:c9:ae:18:42:bf:ce:76:9e:07:92:97:8a:09: 82:a9:ab:e7:3f:42:cf:a3:ff:4e:ed:b1:8b:ff:b0:25:00:d7: ce:25:b2:db:09:a3:2f:62:c2:f5:9c:de:03:00:50:89:cd:6e: 9b:0b:59:66:82:ef:6c:04:29:48:03:79:29:81:04:28:ca:1f: 13:3e:b9:03:1e:1c:cd:ec:b4:a6:5e:1f:18:67:4e:22:fc:1f: fc:56:0e:9a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JsGd+4qrUvAmCrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk MDhmYTYzODYtMzllMi00YTkwLWFhZTUtNzZlNDQ4NzcwNjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/OuLIEjG2QxTFTDPuKX07pRyRDGVV7ql1iG q/9GPJeWxRTYWNjkCoXrpga020BpETUxCP2MuyfdDzVyQEQiOZbTWORy6M/PG2L3 OwvOXZw9PJU/GgqoJfNb/Df+vTC3vZ3NBKpgkuCFMUciTGshHhaP9MacczwoYiko SlKcHQ68tK5NmcyZCwYwJuE2Y6OAZX1AsmKPO88CzsEReIAJ226+ONFPAQXqwBLd nzgysam/yTuMFsRMQoszy7TolTguEdxbAYIQq35g+XgyABshTaAnlyGguJj0T4Wo /A6Vjis7N8ekvj78uKkDquV2UJUY0ut4cnNDpcIfzRdMdRdcHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHVtdpG+ghbd1N3nF8BoaxNV+dsQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZGU5YmFjYmItZjhiZS0z OTc3LThmYjYtZDlkN2JhM2FkODVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB3mVBf8RGpV9HfGogdbPk8b4XzQAaigZCd4q9LN0C/cI2CzHLcL /Ef/QL0YR75ZFHDupDzKK2+HzdPyB4njL2aRLwe88Qhd1Khuk1Xt1HwmxlLO1vuQ tN7u4/Y2vSKf+L8WKc+iE0/yQKLYjmdY7BA4OhoxflHhMgh9cKw24TEEexSZ9PDW oQhoVy95PukYdcuEFaCZdS3phGHIvDCOi5cXPoOgzMXkya4YQr/Odp4HkpeKCYKp q+c/Qs+j/07tsYv/sCUA184lstsJoy9iwvWc3gMAUInNbpsLWWaC72wEKUgDeSmB BCjKHxM+uQMeHM3stKZeHxhnTiL8H/xWDpo= -----END CERTIFICATE-----Generated at Fri Apr 4 17:46:06 2025 by rpki-client