$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f3b2770f-b0f5-3bb7-9b43-2dd2ef450e51.roa File: f3b2770f-b0f5-3bb7-9b43-2dd2ef450e51.roa (raw, json) Hash identifier: xciZFc88wrC0zNB88eoUgvvr1pBF4kzjXalz1w09CG0= Subject key identifier: 98:06:BC:F0:A6:54:B0:5A:3E:25:CB:AD:AA:E8:4C:77:15:1D:24:C6 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926C0F081DA517EEF439B78 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f3b2770f-b0f5-3bb7-9b43-2dd2ef450e51.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 31769 IP address blocks: 2001:470:133::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:c0:f0:81:da:51:7e:ef:43:9b:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=1774eacf-c303-4f59-8a14-c68d73593719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b2:c8:2f:d2:6c:12:31:ff:62:89:cb:e4:39: ca:48:2c:05:78:32:b2:df:80:e7:0c:b6:94:74:11: 2b:aa:f3:3b:18:54:32:91:57:72:a0:60:9d:0f:81: 3f:74:2c:28:ee:5b:65:c7:42:43:59:a2:29:d9:4d: 58:60:ce:64:e9:bb:09:26:02:3b:2d:67:d0:ac:fd: 24:5c:38:50:ba:f2:c3:bd:bd:e3:1d:0c:75:04:4e: 05:58:ea:a4:39:39:de:1a:1d:2f:12:f6:0d:2b:36: 52:a0:74:b6:d6:59:36:75:20:97:b5:b1:ca:64:61: 6b:f1:e8:c4:54:59:10:bb:3d:53:15:d6:59:39:3f: fd:9d:9f:29:b5:3a:a6:6f:b7:c2:09:a5:b3:db:81: 5e:b9:71:b6:dd:96:dd:7c:6e:44:92:01:4f:ce:ce: d9:c8:13:92:73:e9:0a:7d:e9:fb:2f:d7:f3:22:89: ce:f5:67:cb:eb:15:f3:9e:df:91:cf:cb:f9:b5:09: b2:e6:38:b5:31:4a:98:2a:7c:e2:17:41:9c:5a:e8: 89:b0:0b:9a:77:e7:7d:b0:37:e6:8b:9a:f6:05:4d: c7:c6:6c:b6:5d:f7:53:9b:47:42:cf:40:73:d0:f9: 55:0e:91:fe:1e:b8:d3:f2:11:16:73:30:36:5a:9e: 3c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:06:BC:F0:A6:54:B0:5A:3E:25:CB:AD:AA:E8:4C:77:15:1D:24:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f3b2770f-b0f5-3bb7-9b43-2dd2ef450e51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:133::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:9b:37:53:0d:41:40:3b:5a:ad:24:26:b6:36:41:29:72:a2: d1:5b:ad:b0:06:b0:19:0b:c0:6a:28:30:40:34:be:3b:77:0b: bb:79:8a:c9:6b:91:91:db:f5:2f:22:4a:5a:88:be:4a:aa:2c: 0b:05:a8:14:d4:e8:af:e9:2d:b4:4b:3e:6e:23:97:3e:3a:9a: 7c:fb:44:8d:25:c3:19:08:50:62:78:7b:49:60:64:74:75:68: e0:13:47:83:b9:dc:d9:b2:f2:e4:58:64:39:44:dd:42:65:f9: 9c:f3:ad:a3:56:f2:62:98:92:99:68:f0:9b:f4:6e:f5:e9:47: 40:32:57:87:bb:25:a2:aa:e2:64:48:ba:c4:42:34:2a:e4:5a: 36:b6:8d:9c:ad:26:50:eb:9c:3a:35:eb:21:16:2f:9c:86:86: ea:47:07:15:ca:4d:26:05:22:81:7e:c1:4d:2a:da:15:d8:48: 75:6a:4f:0f:10:92:d0:db:d4:28:23:fc:2c:73:ac:7e:09:da: 51:52:f3:70:70:4b:a4:f8:d2:19:4b:09:dc:24:3e:52:14:7e: 9d:46:23:43:4a:e7:97:4a:13:06:70:8a:48:f8:91:a8:11:bc: 3f:d8:10:f4:66:aa:cf:93:6e:b2:bf:48:da:2d:89:91:8b:62: 75:b1:2e:ff -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JsDwgdpRfu9Dm3gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk MTc3NGVhY2YtYzMwMy00ZjU5LThhMTQtYzY4ZDczNTkzNzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbLIL9JsEjH/YonL5DnKSCwFeDKy34DnDLaU dBErqvM7GFQykVdyoGCdD4E/dCwo7ltlx0JDWaIp2U1YYM5k6bsJJgI7LWfQrP0k XDhQuvLDvb3jHQx1BE4FWOqkOTneGh0vEvYNKzZSoHS21lk2dSCXtbHKZGFr8ejE VFkQuz1TFdZZOT/9nZ8ptTqmb7fCCaWz24FeuXG23ZbdfG5EkgFPzs7ZyBOSc+kK fen7L9fzIonO9WfL6xXznt+Rz8v5tQmy5ji1MUqYKnziF0GcWuiJsAuad+d9sDfm i5r2BU3Hxmy2XfdTm0dCz0Bz0PlVDpH+HrjT8hEWczA2Wp48cwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJgGvPCmVLBaPiXLraroTHcVHSTGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjNiMjc3MGYtYjBmNS0z YmI3LTliNDMtMmRkMmVmNDUwZTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAEz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADibN1MNQUA7Wq0kJrY2QSlyotFbrbAGsBkLwGooMEA0vjt3C7t5 islrkZHb9S8iSlqIvkqqLAsFqBTU6K/pLbRLPm4jlz46mnz7RI0lwxkIUGJ4e0lg ZHR1aOATR4O53Nmy8uRYZDlE3UJl+ZzzraNW8mKYkplo8Jv0bvXpR0AyV4e7JaKq 4mRIusRCNCrkWja2jZytJlDrnDo16yEWL5yGhupHBxXKTSYFIoF+wU0q2hXYSHVq Tw8QktDb1Cgj/CxzrH4J2lFS83BwS6T40hlLCdwkPlIUfp1GI0NK55dKEwZwikj4 kagRvD/YEPRmqs+TbrK/SNotiZGLYnWxLv8= -----END CERTIFICATE-----Generated at Fri Apr 4 17:44:12 2025 by rpki-client