$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ecbbaa49-5474-3208-80bf-76e12c35efa2.roa File: ecbbaa49-5474-3208-80bf-76e12c35efa2.roa (raw, json) Hash identifier: iBQlZ8eWNFtRy5mQsX+6AVBXeIW+C36cfndYGUqho5I= Subject key identifier: CE:17:6F:4D:60:C8:5E:93:7F:5A:16:F2:FB:51:8B:14:55:78:53:AB Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926BE11FBD20680CFC6D480 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ecbbaa49-5474-3208-80bf-76e12c35efa2.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 63368 IP address blocks: 2001:470:54::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:be:11:fb:d2:06:80:cf:c6:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=65bc5a9f-46e7-4c4b-b274-e57a030bc0bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b6:d9:8a:bd:c0:3f:35:17:cb:dd:35:dd:37: 9e:76:ff:e1:2b:b5:a2:db:26:75:bf:03:4d:88:d7: 17:a8:a4:9b:a6:da:b4:bd:29:77:1c:3e:4f:a1:31: c3:ff:d9:52:a9:81:87:ed:97:85:8d:de:49:a4:fe: 40:28:a2:4f:90:6f:e6:bc:ce:d6:ae:c2:12:2f:07: 17:b3:38:50:77:7c:cf:0f:8e:b1:a6:02:b4:a9:69: a2:4e:51:bf:dc:20:b8:08:b7:a7:0b:ca:e3:71:f2: 97:39:23:9e:f7:c6:57:e1:10:23:90:53:38:fb:0a: 51:63:85:b3:dd:43:ad:8a:6b:60:4c:77:0a:eb:aa: 86:d8:cb:71:82:cf:87:e9:5d:b6:72:71:c6:5e:7f: f7:00:5f:14:d6:eb:b4:e8:22:0b:a5:69:c4:ff:9a: 43:80:95:5d:d9:d0:19:44:02:78:d0:bc:48:30:98: 28:13:26:85:09:c1:19:b8:39:a2:5a:92:58:34:83: 8c:39:ad:5d:6e:e9:6c:a0:37:0d:6a:0e:9e:9a:e9: b7:58:c1:b8:97:29:a8:8c:62:3b:91:1e:d1:0b:70: 43:0b:24:6f:3d:7f:6d:60:b3:33:2d:eb:20:3f:c1: 28:8e:25:33:2b:c5:eb:59:1b:89:91:fb:8b:48:b6: 46:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:17:6F:4D:60:C8:5E:93:7F:5A:16:F2:FB:51:8B:14:55:78:53:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ecbbaa49-5474-3208-80bf-76e12c35efa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:54::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:35:b2:25:e1:0e:dd:bd:a2:6f:a7:9c:d7:09:13:c5:d6:bb: af:e8:d9:db:35:66:4e:c2:08:12:0b:ac:af:aa:ad:66:74:3d: 23:2d:98:9e:66:0a:12:21:dd:1f:2d:18:06:ee:2c:77:d0:cb: ce:47:65:c4:f0:bc:58:4f:47:fa:3f:34:53:14:77:f0:e2:be: cd:c1:32:f0:8f:5c:b5:49:74:0f:d8:ca:ba:14:10:f5:fd:e2: a5:74:b7:b5:e7:cc:c0:fd:c2:71:32:89:70:9d:63:75:25:40: 93:7b:09:73:1d:b4:52:f6:f0:8a:35:3d:06:b5:a1:49:36:ea: 09:c0:bd:87:4f:8d:d8:f4:d6:57:9d:3c:e0:aa:b1:fa:f3:f2: 3e:f2:af:db:87:72:0b:8a:01:f9:5e:a6:3f:ce:12:a0:fb:26: 0f:32:96:87:03:91:ad:44:61:a5:28:f6:d8:5e:69:66:88:89: 3a:24:72:4e:82:3e:bd:d9:03:17:a1:57:a8:3e:de:60:c7:91: 89:2a:a1:dd:f1:8d:4d:e2:91:78:c9:14:d7:7f:49:c3:03:fb: b4:73:59:06:82:5b:13:be:ba:9a:4e:ea:26:05:09:1f:69:96: 99:33:11:95:70:a4:ec:98:9b:c9:d7:29:65:03:eb:31:ef:30: 3d:be:fc:55 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5Jr4R+9IGgM/G1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk NjViYzVhOWYtNDZlNy00YzRiLWIyNzQtZTU3YTAzMGJjMGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirbZir3APzUXy9013Teedv/hK7Wi2yZ1vwNN iNcXqKSbptq0vSl3HD5PoTHD/9lSqYGH7ZeFjd5JpP5AKKJPkG/mvM7WrsISLwcX szhQd3zPD46xpgK0qWmiTlG/3CC4CLenC8rjcfKXOSOe98ZX4RAjkFM4+wpRY4Wz 3UOtimtgTHcK66qG2Mtxgs+H6V22cnHGXn/3AF8U1uu06CILpWnE/5pDgJVd2dAZ RAJ40LxIMJgoEyaFCcEZuDmiWpJYNIOMOa1dbulsoDcNag6emum3WMG4lymojGI7 kR7RC3BDCyRvPX9tYLMzLesgP8EojiUzK8XrWRuJkfuLSLZGgQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM4Xb01gyF6Tf1oW8vtRixRVeFOrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZWNiYmFhNDktNTQ3NC0z MjA4LTgwYmYtNzZlMTJjMzVlZmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcABU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACs1siXhDt29om+nnNcJE8XWu6/o2ds1Zk7CCBILrK+qrWZ0PSMt mJ5mChIh3R8tGAbuLHfQy85HZcTwvFhPR/o/NFMUd/Divs3BMvCPXLVJdA/YyroU EPX94qV0t7XnzMD9wnEyiXCdY3UlQJN7CXMdtFL28Io1PQa1oUk26gnAvYdPjdj0 1ledPOCqsfrz8j7yr9uHcguKAflepj/OEqD7Jg8ylocDka1EYaUo9theaWaIiTok ck6CPr3ZAxehV6g+3mDHkYkqod3xjU3ikXjJFNd/ScMD+7RzWQaCWxO+uppO6iYF CR9plpkzEZVwpOyYm8nXKWUD6zHvMD2+/FU= -----END CERTIFICATE-----Generated at Fri Apr 4 17:56:49 2025 by rpki-client