$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fbdeca2b-a23a-3cd4-9e66-f530b0f9ed0e.roa File: fbdeca2b-a23a-3cd4-9e66-f530b0f9ed0e.roa (raw, json) Hash identifier: pT2Rw5FoYQ8/ltKX1a6Nd7OuXaHAVwHJoNecbszxMac= Subject key identifier: E4:E1:E7:B9:BE:67:B7:A9:B0:72:F3:8F:25:7A:42:47:53:13:B2:E4 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926C163FE721927FFA8E680 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fbdeca2b-a23a-3cd4-9e66-f530b0f9ed0e.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 54243 IP address blocks: 2001:470:ce::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:c1:63:fe:72:19:27:ff:a8:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=c15dc26e-e6fc-48c0-b303-4177b3774888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:81:e4:96:33:9e:43:97:8e:24:f9:21:ca:83: 4f:8e:44:95:fe:85:a8:b6:9a:bf:18:6d:d5:b2:f1: b9:de:7a:9f:ae:17:6a:d3:e2:25:56:2e:22:68:d5: 7d:ba:33:69:de:4e:9c:58:53:6a:36:65:2b:a1:c4: 54:d2:de:4e:42:16:a1:fa:05:c4:26:f8:ea:83:0c: 3e:72:e0:20:9d:b3:a3:97:3e:b4:9b:be:85:9a:c9: ee:3d:97:48:6c:e9:06:6a:01:88:21:e0:94:78:5c: 0f:5b:96:88:a6:76:d5:79:4e:aa:06:6b:2b:c7:9c: 15:42:7f:14:cc:2b:c1:3e:9b:69:2b:49:07:29:f7: 40:d2:d0:93:54:a1:b9:96:20:b6:d3:83:d8:3b:5d: 34:19:74:69:f5:35:a3:1e:fa:ae:91:f3:4f:d4:70: df:a0:18:f1:7b:d6:be:f4:0f:aa:2d:ac:52:4f:32: 0f:9c:ee:b2:db:bb:10:55:17:af:80:32:c4:b9:a7: f8:c3:4f:0e:a3:9c:ad:50:19:ec:bc:e9:7d:f6:9e: fa:3b:d5:a9:09:7f:5a:b5:d3:5a:7e:0b:3a:f4:a4: 4d:5b:82:06:41:3c:6d:70:34:e6:82:5f:e1:d3:ba: 85:ec:c1:b8:98:ba:ed:2f:22:3e:64:0f:94:bb:a2: 23:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E1:E7:B9:BE:67:B7:A9:B0:72:F3:8F:25:7A:42:47:53:13:B2:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fbdeca2b-a23a-3cd4-9e66-f530b0f9ed0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:ce::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:08:a6:e5:b9:9f:56:7a:ab:ae:f3:74:fd:4e:0b:32:d9:05: 93:9f:a7:c5:a7:cc:28:9f:22:4e:e9:c7:91:72:08:b9:5e:6f: 18:7b:04:87:ba:86:bb:fb:ce:2a:66:bf:15:af:86:e0:b0:a0: 20:3a:cc:76:46:da:6e:c7:7b:0d:2d:dd:1b:0c:d9:f2:46:cd: 90:c0:c7:0c:44:4b:d2:d5:cf:82:24:14:7b:81:46:54:95:44: 69:f4:b2:84:28:d7:84:78:5f:33:78:7c:0f:fa:3e:40:4e:0b: 46:ca:2c:6c:eb:15:8d:a1:13:46:d8:b3:26:0d:eb:09:88:0e: 65:b5:dc:15:76:c3:56:d7:76:5d:2a:31:21:26:7d:fb:af:24: 39:20:23:50:42:b8:a4:a8:e3:2b:cf:e2:43:36:d8:b9:b6:0b: f2:05:bf:20:bf:a5:16:54:80:bf:6b:a6:9d:08:dc:4b:26:6a: 9d:ea:2e:ed:0b:b6:5a:e7:13:85:74:d4:4a:cd:5f:93:28:05: 3b:32:d2:d1:9f:e1:7f:64:d6:b9:11:76:57:3e:9c:b3:d8:c1: 40:ca:16:0d:14:5c:67:fa:48:0a:f8:f3:4a:d2:30:57:59:30: 7a:79:cd:65:de:f5:23:db:c4:49:19:d3:d2:88:6c:79:67:7b: 6c:ba:32:b8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JsFj/nIZJ/+o5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk YzE1ZGMyNmUtZTZmYy00OGMwLWIzMDMtNDE3N2IzNzc0ODg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIHkljOeQ5eOJPkhyoNPjkSV/oWotpq/GG3V svG53nqfrhdq0+IlVi4iaNV9ujNp3k6cWFNqNmUrocRU0t5OQhah+gXEJvjqgww+ cuAgnbOjlz60m76FmsnuPZdIbOkGagGIIeCUeFwPW5aIpnbVeU6qBmsrx5wVQn8U zCvBPptpK0kHKfdA0tCTVKG5liC204PYO100GXRp9TWjHvqukfNP1HDfoBjxe9a+ 9A+qLaxSTzIPnO6y27sQVRevgDLEuaf4w08Oo5ytUBnsvOl99p76O9WpCX9atdNa fgs69KRNW4IGQTxtcDTmgl/h07qF7MG4mLrtLyI+ZA+Uu6IjDwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOTh57m+Z7epsHLzjyV6QkdTE7LkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZmJkZWNhMmItYTIzYS0z Y2Q0LTllNjYtZjUzMGIwZjllZDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABAIpuW5n1Z6q67zdP1OCzLZBZOfp8WnzCifIk7px5FyCLlebxh7 BIe6hrv7zipmvxWvhuCwoCA6zHZG2m7Hew0t3RsM2fJGzZDAxwxES9LVz4IkFHuB RlSVRGn0soQo14R4XzN4fA/6PkBOC0bKLGzrFY2hE0bYsyYN6wmIDmW13BV2w1bX dl0qMSEmffuvJDkgI1BCuKSo4yvP4kM22Lm2C/IFvyC/pRZUgL9rpp0I3Esmap3q Lu0LtlrnE4V01ErNX5MoBTsy0tGf4X9k1rkRdlc+nLPYwUDKFg0UXGf6SAr480rS MFdZMHp5zWXe9SPbxEkZ09KIbHlne2y6Mrg= -----END CERTIFICATE-----Generated at Fri Apr 4 17:45:12 2025 by rpki-client