$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f5fd9e91-8a78-364b-b3db-8a483dd5ce7c.roa File: f5fd9e91-8a78-364b-b3db-8a483dd5ce7c.roa (raw, json) Hash identifier: QRNI+N7t/q3ll/x/m8zNrcbcqIG34lzv9uppfXaSGI8= Subject key identifier: 3A:D2:6F:EB:9A:A5:82:58:F3:10:8E:26:F0:DF:76:C7:23:78:09:28 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926D25671468EBA2C4DC300 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f5fd9e91-8a78-364b-b3db-8a483dd5ce7c.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 55140 IP address blocks: 2001:470:31b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:d2:56:71:46:8e:ba:2c:4d:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=3f406a2c-a96e-476b-a9c0-e1596aaaae59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:cd:49:d2:50:89:49:b4:f8:a5:ac:7f:2c:b1: 55:50:57:11:c9:98:b2:34:4b:25:ec:de:e2:ab:dc: e0:56:3c:a7:4a:02:17:04:eb:e0:0b:90:4e:38:5a: d1:d3:c9:22:8c:45:be:d2:10:98:29:c1:57:81:6c: 48:c7:33:a1:f0:a2:b3:c9:12:72:58:5a:5e:fb:7d: c7:2d:64:12:17:f5:e7:49:78:ed:d4:25:47:a5:65: 1a:4d:3b:a3:34:f9:a9:b1:fe:c3:8c:34:ce:28:e5: 22:21:fa:80:98:4d:4f:8f:7a:a8:8e:35:e1:dd:97: 0b:aa:18:66:2e:ab:25:d6:ef:30:37:41:cf:6a:9d: 72:aa:24:19:13:2b:29:a0:da:4c:2f:7a:cd:78:67: 8e:b5:58:07:be:08:2c:55:03:f0:fe:fb:27:03:c8: 21:7e:8f:5c:53:38:08:56:85:ed:2e:32:e2:56:fe: 81:ef:ec:a6:e3:90:f0:e7:b2:c0:a2:10:b9:b6:d3: 79:a3:65:a7:c0:43:cc:bb:f4:5e:e4:37:d5:59:e8: 33:7c:1e:5c:e7:96:e8:f6:8e:ad:c2:de:0b:92:56: 30:91:44:73:79:ec:ca:51:d8:cc:20:29:ac:20:db: 83:83:6f:39:87:80:b2:99:3a:ae:db:46:53:ca:f2: bc:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D2:6F:EB:9A:A5:82:58:F3:10:8E:26:F0:DF:76:C7:23:78:09:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f5fd9e91-8a78-364b-b3db-8a483dd5ce7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:31b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:63:54:3a:9b:d1:d5:f9:df:49:6d:40:52:10:d1:0d:86:ea: f4:3b:91:6c:0b:d4:bf:ae:76:bf:94:d9:14:7e:fc:f0:4c:f7: 7d:fe:bd:41:45:32:c3:73:a3:8e:98:8f:a7:ff:8a:11:ec:82: 55:48:18:cd:f8:2b:36:2d:95:39:73:f9:ac:57:61:ba:67:86: 16:a3:2a:3e:0f:0f:1c:cc:e5:e8:b8:03:4b:af:8e:c8:d7:2f: c3:ae:ac:56:ad:89:69:8f:6c:86:1b:fa:4c:08:d2:69:9b:b7: 3b:89:6a:1d:a1:f9:23:b1:5d:50:2e:30:e8:5d:5a:ef:ed:7f: e0:21:7e:c5:08:83:da:29:87:1f:bf:ad:44:4b:4e:a9:ed:d7: 7f:7a:51:50:7e:4e:fc:c5:fb:0e:9d:b4:b2:85:97:c2:a8:1f: 80:52:a2:ff:91:42:3e:c7:ca:28:ab:59:2c:7b:fe:7c:d2:6e: 9e:2c:94:63:83:3f:67:52:72:8a:bf:20:de:4f:a6:58:87:47: e8:c2:45:17:45:27:3f:ca:00:f3:eb:d1:a1:02:22:45:42:b5: 17:46:8b:f6:06:f4:a5:a4:25:7a:ad:61:73:1a:4d:3a:73:4a: 3a:a4:86:e5:e1:63:19:2c:ae:96:93:38:3a:48:18:90:96:de: 69:dc:d5:ac -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JtJWcUaOuixNwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk M2Y0MDZhMmMtYTk2ZS00NzZiLWE5YzAtZTE1OTZhYWFhZTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgs1J0lCJSbT4pax/LLFVUFcRyZiyNEsl7N7i q9zgVjynSgIXBOvgC5BOOFrR08kijEW+0hCYKcFXgWxIxzOh8KKzyRJyWFpe+33H LWQSF/XnSXjt1CVHpWUaTTujNPmpsf7DjDTOKOUiIfqAmE1Pj3qojjXh3ZcLqhhm Lqsl1u8wN0HPap1yqiQZEyspoNpML3rNeGeOtVgHvggsVQPw/vsnA8ghfo9cUzgI VoXtLjLiVv6B7+ym45Dw57LAohC5ttN5o2WnwEPMu/Re5DfVWegzfB5c55bo9o6t wt4LklYwkURzeezKUdjMICmsINuDg285h4CymTqu20ZTyvK88QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDrSb+uapYJY8xCOJvDfdscjeAkoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjVmZDllOTEtOGE3OC0z NjRiLWIzZGItOGE0ODNkZDVjZTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAMb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALhjVDqb0dX530ltQFIQ0Q2G6vQ7kWwL1L+udr+U2RR+/PBM933+ vUFFMsNzo46Yj6f/ihHsglVIGM34KzYtlTlz+axXYbpnhhajKj4PDxzM5ei4A0uv jsjXL8OurFatiWmPbIYb+kwI0mmbtzuJah2h+SOxXVAuMOhdWu/tf+AhfsUIg9op hx+/rURLTqnt1396UVB+TvzF+w6dtLKFl8KoH4BSov+RQj7HyiirWSx7/nzSbp4s lGODP2dScoq/IN5PpliHR+jCRRdFJz/KAPPr0aECIkVCtRdGi/YG9KWkJXqtYXMa TTpzSjqkhuXhYxksrpaTODpIGJCW3mnc1aw= -----END CERTIFICATE-----Generated at Fri Apr 4 17:43:13 2025 by rpki-client