$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f058a927-1424-3706-8837-15b526d866a7.roa File: f058a927-1424-3706-8837-15b526d866a7.roa (raw, json) Hash identifier: +cAOYSBgnghvuNEDjMk2hFdYN409h7Szizt9U9gCFkk= Subject key identifier: 87:09:A5:41:3F:E3:58:17:69:EA:CC:25:88:E9:48:EF:6B:4C:25:E5 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926E4482E0D50C4A5885630 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f058a927-1424-3706-8837-15b526d866a7.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 8540 IP address blocks: 2001:470:26b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:e4:48:2e:0d:50:c4:a5:88:56:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=27caf8d3-0e87-4545-8c34-c9be99934990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:7a:b8:fd:02:40:bb:1d:be:fa:23:f0:eb:28: c7:7f:8e:ff:20:0b:d7:c2:99:93:2f:05:7e:be:15: 4a:ba:b7:4c:6a:2f:24:f6:5c:bd:d6:0d:05:42:91: ab:1e:e6:7a:09:d8:31:34:8b:5f:8e:8d:15:74:46: 35:ee:f3:35:59:f9:bc:6d:1d:7d:2e:c1:cb:b5:44: 9c:dd:ad:26:04:81:be:1c:bb:0a:72:0e:73:13:63: 1d:33:d0:a5:76:4b:fc:89:ab:b9:fd:31:70:65:fb: 60:e6:2f:d4:fb:f7:1c:da:e5:39:ee:9d:1e:26:f5: 10:52:a1:7c:e6:e6:e2:c6:72:7a:51:09:a0:4e:9b: 9a:2d:63:00:ed:1b:8b:ef:83:e6:10:02:7c:07:4a: 58:34:2d:ad:b5:fc:5b:7c:4a:9e:33:b8:c3:3f:85: 89:99:08:2a:2f:a3:5d:37:17:20:9f:05:32:42:93: 52:37:ab:45:4a:50:83:27:a1:aa:8c:35:50:d8:3a: f5:99:50:b6:be:b1:c0:02:a0:ad:e0:8b:72:52:8d: 81:e2:82:1b:ac:30:d4:1c:c9:e2:f2:c2:8a:d1:c5: de:6c:65:2f:31:b7:97:59:bb:15:9c:de:44:e2:70: 78:79:02:03:67:8c:71:ec:25:c5:26:ee:f4:ed:be: be:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:09:A5:41:3F:E3:58:17:69:EA:CC:25:88:E9:48:EF:6B:4C:25:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f058a927-1424-3706-8837-15b526d866a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:26b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:73:d2:a6:05:06:20:85:d1:bf:b0:83:ed:ad:92:29:94:78: a6:91:09:98:ad:dd:67:0b:13:cb:67:01:6e:78:40:96:63:7f: b3:ea:0e:1f:16:9b:8c:38:8f:9c:b9:cf:f5:e5:96:0b:18:14: 3b:88:1c:41:c5:c2:0c:6c:9d:0c:e8:90:6c:7e:ba:60:d0:fa: 19:80:df:b8:78:71:31:d6:e1:fc:2e:9b:7d:69:c4:52:0b:06: 27:11:98:96:3c:bc:69:f4:7d:46:51:12:69:ca:83:40:2f:a0: 6d:47:d2:0b:d1:98:b0:0e:68:36:d5:60:e4:b9:8d:3c:99:f9: 76:42:80:ec:39:5b:8b:59:04:f7:53:ea:40:fb:f9:3a:79:40: 74:f3:ae:ca:72:c8:75:66:a7:a9:65:3d:aa:ca:2a:32:64:c0: 0c:7a:99:8e:95:9c:32:98:14:c6:5f:de:ef:2a:6c:00:a5:0b: f8:e8:43:d0:3c:8b:9f:46:f4:6a:6d:8a:11:07:9b:77:56:ea: 48:31:b2:c8:bb:15:ed:bc:db:d2:1a:b1:de:bb:e9:19:b7:c4: 3d:b3:b4:02:2e:35:e1:5b:b8:b6:4e:d4:0f:2e:ca:e0:70:9a: 60:a4:cb:8e:7c:19:b8:3a:83:9a:72:cf:1c:af:63:43:82:22: f9:a4:fb:db -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JuRILg1QxKWIVjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk MjdjYWY4ZDMtMGU4Ny00NTQ1LThjMzQtYzliZTk5OTM0OTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3q4/QJAux2++iPw6yjHf47/IAvXwpmTLwV+ vhVKurdMai8k9ly91g0FQpGrHuZ6CdgxNItfjo0VdEY17vM1Wfm8bR19LsHLtUSc 3a0mBIG+HLsKcg5zE2MdM9Cldkv8iau5/TFwZftg5i/U+/cc2uU57p0eJvUQUqF8 5ubixnJ6UQmgTpuaLWMA7RuL74PmEAJ8B0pYNC2ttfxbfEqeM7jDP4WJmQgqL6Nd NxcgnwUyQpNSN6tFSlCDJ6GqjDVQ2Dr1mVC2vrHAAqCt4ItyUo2B4oIbrDDUHMni 8sKK0cXebGUvMbeXWbsVnN5E4nB4eQIDZ4xx7CXFJu707b6+CQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIcJpUE/41gXaerMJYjpSO9rTCXlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjA1OGE5MjctMTQyNC0z NzA2LTg4MzctMTViNTI2ZDg2NmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJJz0qYFBiCF0b+wg+2tkimUeKaRCZit3WcLE8tnAW54QJZjf7Pq Dh8Wm4w4j5y5z/XllgsYFDuIHEHFwgxsnQzokGx+umDQ+hmA37h4cTHW4fwum31p xFILBicRmJY8vGn0fUZREmnKg0AvoG1H0gvRmLAOaDbVYOS5jTyZ+XZCgOw5W4tZ BPdT6kD7+Tp5QHTzrspyyHVmp6llParKKjJkwAx6mY6VnDKYFMZf3u8qbAClC/jo Q9A8i59G9GptihEHm3dW6kgxssi7Fe2829Iasd676Rm3xD2ztAIuNeFbuLZO1A8u yuBwmmCky458Gbg6g5pyzxyvY0OCIvmk+9s= -----END CERTIFICATE-----Generated at Fri Apr 4 17:56:44 2025 by rpki-client