$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f08c36d6-5666-3da5-9ef8-a62882f81160.roa File: f08c36d6-5666-3da5-9ef8-a62882f81160.roa (raw, json) Hash identifier: yHiPCV4nqufdy9gwJF6+u6zmdkux8nNEF3iNOop7iys= Subject key identifier: 17:15:FB:8A:A8:C1:E8:44:30:3C:D6:EB:30:87:63:F2:0F:53:7E:5E Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584941AD1D99F67BD7F0EA8BDD00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f08c36d6-5666-3da5-9ef8-a62882f81160.roa Signing time: Fri 21 Mar 2025 01:30:10 +0000 ROA not before: Fri 21 Mar 2025 01:30:10 +0000 ROA not after: Thu 19 Jun 2025 01:30:10 +0000 asID: 329510 IP address blocks: 2001:470:15a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:41:ad:1d:99:f6:7b:d7:f0:ea:8b:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 21 01:30:10 2025 GMT Not After : Jun 19 01:30:10 2025 GMT Subject: CN=1bf8c5f9-27b3-4690-a1c1-dde57fae1948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b7:28:0f:a8:61:18:03:08:e8:6c:14:48:c5: 6c:5d:9d:51:60:9b:3e:e9:7d:d2:f7:d5:1d:a7:2e: 35:bb:45:23:7f:af:c4:c8:b7:3d:d7:5e:38:5f:ed: 9e:44:56:59:81:b0:1a:a7:8e:2d:3a:67:95:7a:d3: 83:38:3f:04:2c:d7:cd:91:4a:5e:f5:10:50:b7:71: 15:f5:9c:38:a2:82:81:e0:6a:1c:37:22:bf:e4:5f: 00:84:ad:b4:b6:21:3c:99:09:25:5d:c2:31:36:18: e2:e7:78:8f:ea:65:ba:81:be:74:d1:20:e7:17:fa: 49:96:51:85:44:8d:62:2b:bf:bd:dc:ed:7d:b0:f7: 15:f7:f4:5a:ce:2c:f3:dd:10:53:f5:41:ad:02:cc: 7c:f3:5e:cf:80:bb:ae:75:2b:9a:95:81:91:17:cc: c9:29:76:14:b9:61:51:8f:29:b0:f5:54:8f:0a:0e: fd:17:6f:00:dd:e3:9e:58:7d:6c:11:9f:2f:c1:2d: 64:e0:a3:44:99:04:39:1f:ed:6b:99:ef:56:e2:f8: 76:eb:f1:df:f1:8d:7c:7c:ac:aa:8a:49:45:b2:ca: 2b:64:8b:e2:c1:07:76:de:d2:8e:9f:2a:b8:76:33: 8c:af:96:b3:97:5d:95:52:64:b7:c4:44:78:b3:ce: 93:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:15:FB:8A:A8:C1:E8:44:30:3C:D6:EB:30:87:63:F2:0F:53:7E:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f08c36d6-5666-3da5-9ef8-a62882f81160.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:15a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:ef:08:13:6c:05:75:24:c2:32:fb:52:f3:ba:32:eb:48:5e: 2c:43:9f:4b:25:9d:06:0f:81:28:fb:10:0e:ab:14:83:61:9a: 18:50:17:03:f6:54:06:a1:48:18:1a:e5:6a:ed:ed:c5:2f:26: 50:61:52:f8:9f:51:88:e4:45:c0:ec:10:b5:0b:f4:7d:0e:b4: ef:4f:f4:6f:a0:ef:8d:52:a2:ed:b9:66:83:6f:28:5d:3d:23: 51:fd:f5:eb:4a:d6:00:6e:d6:4f:17:64:01:40:f0:50:b7:fc: 36:b5:26:a8:01:77:d2:cd:4e:d9:e8:82:32:a9:50:d8:63:a8: 97:70:54:d0:3f:1a:f5:94:c6:e0:52:21:27:86:f2:0e:6b:e5: 3e:88:45:6e:e9:e4:7c:17:73:2d:71:2d:db:3a:2a:60:c1:67: 50:ad:f0:1b:ff:cf:d4:de:ef:f1:2d:ee:f0:03:28:d7:6b:9c: d3:5f:18:f5:c1:fb:d6:91:84:8b:d0:b5:83:1d:54:cb:84:1d: 79:b2:7c:b5:92:c3:eb:d6:7d:1a:9f:fb:3c:cb:df:38:5c:e6: 45:36:f7:bd:a9:ab:71:18:cb:e8:20:4f:34:1f:5c:6f:72:3d: a9:54:11:e2:78:7f:27:30:e6:65:0d:0a:f8:e0:e5:b7:76:44: 50:50:d3:50 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElBrR2Z9nvX8OqL3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMyMTAxMzAxMFoXDTI1MDYxOTAxMzAxMFowLzEtMCsGA1UEAxMk MWJmOGM1ZjktMjdiMy00NjkwLWExYzEtZGRlNTdmYWUxOTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbcoD6hhGAMI6GwUSMVsXZ1RYJs+6X3S99Ud py41u0Ujf6/EyLc91144X+2eRFZZgbAap44tOmeVetODOD8ELNfNkUpe9RBQt3EV 9Zw4ooKB4GocNyK/5F8AhK20tiE8mQklXcIxNhji53iP6mW6gb500SDnF/pJllGF RI1iK7+93O19sPcV9/Razizz3RBT9UGtAsx8817PgLuudSualYGRF8zJKXYUuWFR jymw9VSPCg79F28A3eOeWH1sEZ8vwS1k4KNEmQQ5H+1rme9W4vh26/Hf8Y18fKyq iklFssorZIviwQd23tKOnyq4djOMr5azl12VUmS3xER4s86T+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBcV+4qowehEMDzW6zCHY/IPU35eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjA4YzM2ZDYtNTY2Ni0z ZGE1LTllZjgtYTYyODgyZjgxMTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAFa MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALPvCBNsBXUkwjL7UvO6MutIXixDn0slnQYPgSj7EA6rFINhmhhQ FwP2VAahSBga5Wrt7cUvJlBhUvifUYjkRcDsELUL9H0OtO9P9G+g741Sou25ZoNv KF09I1H99etK1gBu1k8XZAFA8FC3/Da1JqgBd9LNTtnogjKpUNhjqJdwVNA/GvWU xuBSISeG8g5r5T6IRW7p5HwXcy1xLds6KmDBZ1Ct8Bv/z9Te7/Et7vADKNdrnNNf GPXB+9aRhIvQtYMdVMuEHXmyfLWSw+vWfRqf+zzL3zhc5kU2972pq3EYy+ggTzQf XG9yPalUEeJ4fycw5mUNCvjg5bd2RFBQ01A= -----END CERTIFICATE-----Generated at Fri Apr 4 17:45:13 2025 by rpki-client