$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f4a650a5-f8ae-3060-a3c9-4cc01023e31a.roa File: f4a650a5-f8ae-3060-a3c9-4cc01023e31a.roa (raw, json) Hash identifier: 7duET81mVc1Crd6fivuMGYLOUuKTNW8vYns4pUY9ENg= Subject key identifier: 69:CF:02:E2:11:79:76:AE:1C:F9:56:1D:E3:70:6F:18:45:BB:99:96 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848DD4A459F09A161AB01230800 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f4a650a5-f8ae-3060-a3c9-4cc01023e31a.roa Signing time: Thu 13 Feb 2025 02:30:11 +0000 ROA not before: Thu 13 Feb 2025 02:30:11 +0000 ROA not after: Wed 14 May 2025 01:30:11 +0000 asID: 150178 IP address blocks: 2001:470:353::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:dd:4a:45:9f:09:a1:61:ab:01:23:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 13 02:30:11 2025 GMT Not After : May 14 01:30:11 2025 GMT Subject: CN=edd86e09-9a69-44fb-84cc-8c0a45b07290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6e:17:fb:2c:5d:ac:a6:1e:ba:23:1e:e5:ff: a9:17:91:f4:ff:9b:d4:48:c3:f8:61:20:f0:97:d0: 86:6e:73:61:71:d0:78:4d:6b:32:a6:87:41:4a:81: 7a:ca:1c:eb:b5:4e:47:63:9e:6e:ed:c3:49:8f:5b: e7:49:9c:f3:48:bd:91:75:0f:e7:85:7b:b2:29:e5: f5:c8:d8:72:6b:1f:01:a8:3d:b6:d2:52:ae:e6:86: fc:19:22:97:c5:48:4d:a6:13:ba:fc:4c:c4:a3:a6: 5a:b3:64:cb:a5:68:4b:be:18:98:2c:ec:e5:d4:d1: b3:a0:13:75:4d:51:21:98:0f:d3:77:f1:c8:1c:fd: 1c:f6:19:45:6e:52:e1:69:00:00:e9:ea:20:f7:bc: 53:1d:ec:5d:40:17:aa:bd:c8:60:2c:3e:cd:c6:ee: b1:2c:f6:f4:a8:fa:dc:35:39:08:eb:0a:31:1d:4f: ce:56:17:35:e1:bb:2f:e3:a0:89:79:6e:bd:1e:50: ff:94:1c:c7:11:7e:9d:9a:02:77:86:df:f1:28:80: 2c:da:6b:c1:ff:d0:c2:82:79:c9:1a:62:ce:ff:95: 1d:15:07:a7:62:77:a5:cb:bf:41:0b:23:f6:cf:34: 0f:0e:cf:92:f2:0c:14:c8:5f:6d:15:14:b2:35:a7: 0d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:CF:02:E2:11:79:76:AE:1C:F9:56:1D:E3:70:6F:18:45:BB:99:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f4a650a5-f8ae-3060-a3c9-4cc01023e31a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:353::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:0a:8a:d2:34:71:16:cb:6c:57:7c:c2:b9:a8:3e:ac:60:ca: af:e2:a4:83:be:14:3a:0d:34:64:ea:79:6b:8f:a9:59:63:27: 27:8e:0c:2d:a9:37:f7:bf:36:d2:80:e2:53:19:47:c1:57:ca: 60:0a:7c:38:91:36:9e:b5:73:b2:a7:82:ad:ea:8e:02:ff:96: d5:0c:09:c8:f7:ba:e4:d7:25:b6:8c:1e:63:0f:2e:d1:c7:e0: 19:77:76:39:4e:65:7e:41:1f:b6:ce:a3:0a:b5:fe:db:d6:95: 6c:c8:54:ec:49:4f:0a:8c:9c:fe:9c:bd:8b:55:05:2a:05:92: b7:23:6a:39:c1:1d:76:c2:46:41:e5:1e:eb:00:8e:a2:a9:05: 5c:91:a9:aa:31:c8:a0:31:bf:d0:b3:97:c2:74:bb:12:f6:37: 2c:b5:23:b9:5f:50:aa:b4:a9:e6:9e:7c:e7:6c:17:4b:d1:f3: 7c:b9:ef:9a:80:52:0e:fd:bb:71:bd:97:37:f8:d5:27:90:c5: f5:09:93:50:6f:98:2d:87:11:7f:0d:c7:90:9d:a1:9a:c4:f3: a7:7e:51:99:e9:d0:1f:f1:1b:5f:a1:b7:98:29:4a:91:06:8d: c2:66:18:47:ae:46:c4:17:85:e7:43:60:2a:37:ca:c8:34:f0: 9e:60:7e:53 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjdSkWfCaFhqwEjCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIxMzAyMzAxMVoXDTI1MDUxNDAxMzAxMVowLzEtMCsGA1UEAxMk ZWRkODZlMDktOWE2OS00NGZiLTg0Y2MtOGMwYTQ1YjA3MjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzm4X+yxdrKYeuiMe5f+pF5H0/5vUSMP4YSDw l9CGbnNhcdB4TWsypodBSoF6yhzrtU5HY55u7cNJj1vnSZzzSL2RdQ/nhXuyKeX1 yNhyax8BqD220lKu5ob8GSKXxUhNphO6/EzEo6Zas2TLpWhLvhiYLOzl1NGzoBN1 TVEhmA/Td/HIHP0c9hlFblLhaQAA6eog97xTHexdQBeqvchgLD7Nxu6xLPb0qPrc NTkI6woxHU/OVhc14bsv46CJeW69HlD/lBzHEX6dmgJ3ht/xKIAs2mvB/9DCgnnJ GmLO/5UdFQenYnely79BCyP2zzQPDs+S8gwUyF9tFRSyNacNbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGnPAuIReXauHPlWHeNwbxhFu5mWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjRhNjUwYTUtZjhhZS0z MDYwLWEzYzktNGNjMDEwMjNlMzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcANT MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI8KitI0cRbLbFd8wrmoPqxgyq/ipIO+FDoNNGTqeWuPqVljJyeO DC2pN/e/NtKA4lMZR8FXymAKfDiRNp61c7Kngq3qjgL/ltUMCcj3uuTXJbaMHmMP LtHH4Bl3djlOZX5BH7bOowq1/tvWlWzIVOxJTwqMnP6cvYtVBSoFkrcjajnBHXbC RkHlHusAjqKpBVyRqaoxyKAxv9Czl8J0uxL2Nyy1I7lfUKq0qeaefOdsF0vR83y5 75qAUg79u3G9lzf41SeQxfUJk1BvmC2HEX8Nx5CdoZrE86d+UZnp0B/xG1+ht5gp SpEGjcJmGEeuRsQXhedDYCo3ysg08J5gflM= -----END CERTIFICATE-----Generated at Fri Apr 4 17:47:04 2025 by rpki-client