$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f7ef0847-1c6d-3a7f-a14a-20d1d78a1f8c.roa File: f7ef0847-1c6d-3a7f-a14a-20d1d78a1f8c.roa (raw, json) Hash identifier: KNhUs6jHz3AQQ/pUUVBRPcsMUIvrPmjSSZl+Tg+1t80= Subject key identifier: 55:43:EE:2F:7A:88:DC:B3:D2:D4:C5:28:F0:C4:7E:B9:82:F3:8D:AD Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858482D692DF3E048C7873A3ADB80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f7ef0847-1c6d-3a7f-a14a-20d1d78a1f8c.roa Signing time: Thu 12 Dec 2024 02:30:11 +0000 ROA not before: Thu 12 Dec 2024 02:30:11 +0000 ROA not after: Wed 12 Mar 2025 01:30:11 +0000 asID: 51069 IP address blocks: 2001:470:3e2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2d:69:2d:f3:e0:48:c7:87:3a:3a:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Dec 12 02:30:11 2024 GMT Not After : Mar 12 01:30:11 2025 GMT Subject: CN=4f2c2b80-11da-4ef4-9443-12ed9b689740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:26:e0:c1:39:a8:8c:2f:4d:bc:ff:3b:4c:02: 92:3b:ce:f8:a4:31:01:14:7a:f0:c7:d3:b2:5e:76: fe:b2:d3:c2:f4:24:25:4b:e6:03:69:70:b0:5d:cb: 79:b7:42:83:fd:45:43:a8:44:db:2f:36:d1:08:4a: 46:26:97:6d:16:92:6c:79:50:77:6c:4a:ce:4f:41: f7:b4:1e:31:89:07:1a:b2:5f:c8:d9:cf:e2:98:4c: 9f:6e:b7:51:f3:c8:1c:6d:fe:03:ac:44:b1:5a:ac: 22:46:cc:c2:65:e7:66:f4:b6:cd:33:f5:0e:cc:00: 85:b1:58:19:bd:2c:9c:b3:d8:19:85:6a:5e:9c:72: ba:3e:68:f6:d9:07:0e:d9:b5:06:20:a5:b0:fa:b1: 62:a4:18:a7:66:98:5f:10:02:df:46:3b:6f:f7:e8: 45:f6:b1:f2:8d:76:28:dc:38:c2:04:84:4d:58:9e: 48:62:63:41:cf:d3:f3:8a:63:3c:55:ad:12:3a:bd: cc:cd:fe:70:37:ab:2d:f0:cc:8a:5a:3a:be:cc:38: b7:9d:e6:ee:6e:bc:77:41:6c:71:74:34:82:86:c6: 2c:e1:40:2b:58:24:f6:a1:62:ee:53:e2:7d:d4:22: a4:b1:b4:b6:85:18:b9:7e:54:b7:75:88:1b:c8:30: c2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:43:EE:2F:7A:88:DC:B3:D2:D4:C5:28:F0:C4:7E:B9:82:F3:8D:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f7ef0847-1c6d-3a7f-a14a-20d1d78a1f8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3e2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:d4:83:90:23:91:ca:e5:26:68:ec:87:c6:b3:c3:97:1d:9d: dc:5c:45:e4:d1:45:73:30:e6:59:b5:d9:33:e3:2f:a8:53:8e: 27:ef:0b:43:0c:b7:66:db:19:fa:51:04:c8:88:19:50:09:7f: b9:a9:a6:87:2e:50:b0:14:be:95:4f:53:12:c8:f0:00:14:d8: 2d:9c:aa:42:e3:93:33:0d:6e:a1:f4:aa:e5:4a:82:16:30:6b: 8e:33:d0:23:90:e1:7d:b6:09:f5:ce:bd:c3:6d:7b:17:db:21: 0f:48:85:95:f1:07:18:d2:ac:9e:76:af:a7:ae:79:6c:27:e6: 8b:28:7b:aa:25:7c:d3:aa:34:3b:1f:9b:ae:61:03:a2:bd:51: cb:26:fa:b3:7c:7c:49:0a:6b:70:4f:8e:25:d1:bd:17:9b:55: cd:85:98:fe:a1:ed:1c:89:80:dc:91:e0:1b:84:33:49:00:99: d4:27:72:d1:e6:4c:90:b7:79:aa:4e:e6:5c:d9:ec:a1:05:38: 5e:30:29:08:ef:dc:ac:29:bc:22:55:f2:fa:74:5c:35:0b:79: 1c:6a:0a:1e:6d:c3:d5:f7:87:2a:9e:81:37:ad:63:ac:a2:35: 56:01:fc:f2:1e:71:3b:63:4f:9c:f6:73:dc:47:8a:c5:90:7a: 0c:1a:3e:1a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgtaS3z4EjHhzo624AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MTIxMjAyMzAxMVoXDTI1MDMxMjAxMzAxMVowLzEtMCsGA1UEAxMk NGYyYzJiODAtMTFkYS00ZWY0LTk0NDMtMTJlZDliNjg5NzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhibgwTmojC9NvP87TAKSO874pDEBFHrwx9Oy Xnb+stPC9CQlS+YDaXCwXct5t0KD/UVDqETbLzbRCEpGJpdtFpJseVB3bErOT0H3 tB4xiQcasl/I2c/imEyfbrdR88gcbf4DrESxWqwiRszCZedm9LbNM/UOzACFsVgZ vSycs9gZhWpenHK6Pmj22QcO2bUGIKWw+rFipBinZphfEALfRjtv9+hF9rHyjXYo 3DjCBIRNWJ5IYmNBz9PzimM8Va0SOr3Mzf5wN6st8MyKWjq+zDi3nebubrx3QWxx dDSChsYs4UArWCT2oWLuU+J91CKksbS2hRi5flS3dYgbyDDCWwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFVD7i96iNyz0tTFKPDEfrmC842tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjdlZjA4NDctMWM2ZC0z YTdmLWExNGEtMjBkMWQ3OGExZjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADDUg5AjkcrlJmjsh8azw5cdndxcReTRRXMw5lm12TPjL6hTjifv C0MMt2bbGfpRBMiIGVAJf7mppocuULAUvpVPUxLI8AAU2C2cqkLjkzMNbqH0quVK ghYwa44z0COQ4X22CfXOvcNtexfbIQ9IhZXxBxjSrJ52r6eueWwn5osoe6olfNOq NDsfm65hA6K9Ucsm+rN8fEkKa3BPjiXRvRebVc2FmP6h7RyJgNyR4BuEM0kAmdQn ctHmTJC3eapO5lzZ7KEFOF4wKQjv3KwpvCJV8vp0XDULeRxqCh5tw9X3hyqegTet Y6yiNVYB/PIecTtjT5z2c9xHisWQegwaPho= -----END CERTIFICATE-----Generated at Wed Feb 5 04:39:35 2025 by rpki-client