$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/def7ffd9-a708-38b2-ae11-a3daf1dc5d6a.roa File: def7ffd9-a708-38b2-ae11-a3daf1dc5d6a.roa (raw, json) Hash identifier: r3nCS+HSqls/hfjbCyqUJrT8j3EeAXNKOS7iidA8bFY= Subject key identifier: C1:7A:B0:8D:7D:36:08:6D:55:83:9D:8A:2A:2D:23:63:A0:7F:EF:FF Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926E402D53032E28FD90E80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/def7ffd9-a708-38b2-ae11-a3daf1dc5d6a.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 23673 IP address blocks: 2001:470:25e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:e4:02:d5:30:32:e2:8f:d9:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=a4f66348-41a4-4019-8b0d-e26d12f90993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3b:97:c0:de:9c:96:0c:23:db:16:f9:db:51: 5f:42:31:73:89:cd:35:c5:5b:f7:a2:e2:cf:d5:ee: fb:01:20:6b:59:21:11:76:27:ca:ff:0d:87:38:82: e6:b9:0f:95:ad:28:3d:6f:a6:42:5a:90:7c:a7:76: 5c:15:6e:b6:c4:84:a7:35:ba:57:b7:18:ee:6e:69: 26:47:1e:ac:95:99:3e:4d:e4:b5:47:ce:b1:2f:38: 5a:81:a3:d4:ab:20:fc:62:b7:22:bc:5c:ab:3f:73: 0a:4d:23:a9:e7:fb:38:25:c1:83:83:07:14:c7:6e: 75:44:c1:e5:a3:5b:f0:44:4b:6e:36:5c:b4:cf:63: ea:77:da:ee:33:7f:db:db:91:c3:fb:a9:ba:16:2d: 35:a5:e9:60:42:50:33:c2:35:60:f8:6b:01:3c:e1: 0d:a4:41:65:69:9e:2e:66:a3:30:96:78:de:ef:42: 67:71:af:88:93:d6:fc:a1:fc:9e:dc:32:c5:ce:a8: ac:ce:58:84:91:52:05:d0:be:d2:e1:95:f6:cb:c5: a5:3d:88:4d:5b:af:78:dd:53:b8:97:5d:13:c6:00: f2:05:8e:01:77:30:47:24:77:93:21:e4:f3:8d:f2: 81:ea:cd:29:29:bf:d0:94:14:99:31:d5:99:e1:3c: 5b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:7A:B0:8D:7D:36:08:6D:55:83:9D:8A:2A:2D:23:63:A0:7F:EF:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/def7ffd9-a708-38b2-ae11-a3daf1dc5d6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:25e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:48:7d:9d:71:f9:02:a2:c4:1a:67:25:4e:59:ca:0e:f9:d8: 40:1d:ea:6f:fa:38:9f:db:bc:46:1a:d9:6b:89:c2:dc:38:95: bf:0d:86:75:d5:47:73:51:93:cc:8e:30:c1:ac:94:c2:b1:ec: 0b:fc:bf:0d:7c:ca:ce:9b:89:87:00:97:90:97:75:6e:b5:fe: a9:91:f7:f3:1f:8f:5d:b3:f5:04:2b:d8:89:60:fc:b8:a8:69: da:bc:7d:c0:1a:46:12:5f:8e:81:44:33:e9:fa:8f:a7:6f:be: eb:17:da:9a:db:02:ad:f9:39:eb:6c:77:99:0c:dd:db:8e:9c: ea:75:18:4d:db:63:54:da:49:be:bb:03:e9:a2:85:a0:f7:87: c5:78:e7:40:e1:7f:32:08:27:60:52:25:c3:b9:46:0b:40:ea: bc:18:12:56:09:59:3a:43:98:d2:38:9e:15:0e:bd:ac:55:8e: fa:99:63:82:01:cf:4e:ba:b4:df:cf:66:dc:0b:d6:8d:cb:c8: 29:d3:00:2f:ae:62:26:05:23:bc:4d:c1:c8:a4:a8:de:f0:e6: f7:0a:ce:37:f4:2e:af:b2:54:5c:05:bd:04:7e:70:6a:c3:fd: f7:46:8e:2f:33:89:d9:fa:52:c4:57:a6:29:9a:2a:a4:8f:f3: a3:72:68:64 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JuQC1TAy4o/ZDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk YTRmNjYzNDgtNDFhNC00MDE5LThiMGQtZTI2ZDEyZjkwOTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljuXwN6clgwj2xb521FfQjFzic01xVv3ouLP 1e77ASBrWSERdifK/w2HOILmuQ+VrSg9b6ZCWpB8p3ZcFW62xISnNbpXtxjubmkm Rx6slZk+TeS1R86xLzhagaPUqyD8YrcivFyrP3MKTSOp5/s4JcGDgwcUx251RMHl o1vwREtuNly0z2Pqd9ruM3/b25HD+6m6Fi01pelgQlAzwjVg+GsBPOENpEFlaZ4u ZqMwlnje70Jnca+Ik9b8ofye3DLFzqiszliEkVIF0L7S4ZX2y8WlPYhNW6943VO4 l10TxgDyBY4BdzBHJHeTIeTzjfKB6s0pKb/QlBSZMdWZ4TxbTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMF6sI19NghtVYOdiiotI2Ogf+//MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZGVmN2ZmZDktYTcwOC0z OGIyLWFlMTEtYTNkYWYxZGM1ZDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHpIfZ1x+QKixBpnJU5Zyg752EAd6m/6OJ/bvEYa2WuJwtw4lb8N hnXVR3NRk8yOMMGslMKx7Av8vw18ys6biYcAl5CXdW61/qmR9/Mfj12z9QQr2Ilg /Lioadq8fcAaRhJfjoFEM+n6j6dvvusX2prbAq35Oetsd5kM3duOnOp1GE3bY1Ta Sb67A+mihaD3h8V450DhfzIIJ2BSJcO5RgtA6rwYElYJWTpDmNI4nhUOvaxVjvqZ Y4IBz066tN/PZtwL1o3LyCnTAC+uYiYFI7xNwcikqN7w5vcKzjf0Lq+yVFwFvQR+ cGrD/fdGji8zidn6UsRXpimaKqSP86NyaGQ= -----END CERTIFICATE-----Generated at Fri Apr 4 17:45:11 2025 by rpki-client