$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff6736a2-70b6-36dd-931d-fc3a5356fa47.roa File: ff6736a2-70b6-36dd-931d-fc3a5356fa47.roa (raw, json) Hash identifier: J9MGcUKZ22x+wLX3sbgWNmdSCGRK6KXkqGyCfuzuyts= Subject key identifier: 29:92:99:7F:49:0D:56:F0:09:CE:3A:F8:F1:2C:97:40:D8:03:44:79 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848AF2B723E524EFECF58266580 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff6736a2-70b6-36dd-931d-fc3a5356fa47.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 46632 IP address blocks: 2001:470:3c2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:72:3e:52:4e:fe:cf:58:26:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=1e687e33-baef-47e3-aff6-fbd5d4769d78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7a:b3:b3:0d:f1:5e:54:6c:73:fd:10:67:d5: 85:d4:8e:49:a8:d6:4a:18:a7:6e:68:33:94:e2:7e: ee:dd:57:bf:41:a0:8c:38:f1:ae:31:88:ef:b7:4b: 84:14:f3:13:7f:84:65:e0:16:2a:26:a2:9e:bf:fb: ea:2a:c7:f9:20:a2:90:1d:bd:6b:bd:66:dd:af:65: 3c:81:c1:df:ff:f8:cd:ad:27:76:8f:8e:75:a5:38: cd:32:0c:0d:ee:9f:b8:66:8c:18:b1:15:c3:82:ca: 66:d5:81:1b:bf:4a:06:b7:73:c0:3a:f8:a1:93:17: 82:bd:ee:90:29:69:ae:09:95:f6:05:f4:c5:53:2d: 6d:d7:61:84:47:45:29:97:89:78:84:96:bd:2e:f2: 3f:6c:f2:7f:ba:6b:b7:2b:51:fe:6f:cd:76:d5:1a: d5:a1:1a:2b:ad:59:68:e5:67:dc:68:58:0b:83:fd: 12:07:0c:31:84:8e:dc:ab:19:c2:3e:6f:f3:ff:36: 8f:22:56:28:f2:0f:cd:7a:87:d8:2c:4d:64:0d:97: bd:c5:c6:59:82:fe:27:01:63:cf:81:4f:88:62:23: 36:3d:ca:74:81:8e:2b:98:98:47:46:83:32:27:62: a3:aa:d8:a8:63:6a:de:97:4e:2f:8e:a0:58:11:80: b9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:92:99:7F:49:0D:56:F0:09:CE:3A:F8:F1:2C:97:40:D8:03:44:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff6736a2-70b6-36dd-931d-fc3a5356fa47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3c2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:f4:0f:86:86:3a:cd:8d:be:f7:67:a5:aa:40:03:7d:45:a5: ea:36:07:41:32:c0:a8:68:9e:db:bd:76:b9:1f:78:9b:a2:65: 4a:b6:a3:df:a0:33:a9:98:ad:b2:91:1c:73:cb:79:04:95:cd: d8:23:c1:94:47:85:87:66:88:a5:36:3e:b1:01:e2:4b:58:be: 5d:b8:58:be:18:25:aa:5f:7f:3c:bb:94:eb:ef:de:09:05:5b: 2e:02:99:4a:4a:30:10:53:6e:20:0c:1c:22:35:6a:f4:44:e0: 0d:34:05:4f:73:30:a2:6c:9b:89:0a:9a:e4:df:b0:48:89:51: 6f:72:82:30:6f:43:a4:78:3e:2a:b9:f4:46:cd:ce:cc:81:09: aa:9f:08:e5:0b:c4:4f:2a:2c:f1:09:39:09:5e:80:41:26:0f: f4:7b:2f:a9:f8:8a:43:03:86:8b:44:50:45:ed:57:23:78:c1: 4e:0a:07:34:d5:15:ee:4f:58:ab:d5:79:9e:66:81:07:42:31: bf:33:3d:af:f1:f6:1d:6c:22:a8:7c:0d:7a:fe:a4:f5:57:c5: a9:aa:68:cc:a8:bb:17:b5:f3:ad:86:ad:3e:6c:fe:9a:3d:e2: 64:f7:83:c3:53:48:6a:94:66:0e:71:00:24:37:2b:f4:db:a7: 88:34:35:a0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEivK3I+Uk7+z1gmZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk MWU2ODdlMzMtYmFlZi00N2UzLWFmZjYtZmJkNWQ0NzY5ZDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunqzsw3xXlRsc/0QZ9WF1I5JqNZKGKduaDOU 4n7u3Ve/QaCMOPGuMYjvt0uEFPMTf4Rl4BYqJqKev/vqKsf5IKKQHb1rvWbdr2U8 gcHf//jNrSd2j451pTjNMgwN7p+4ZowYsRXDgspm1YEbv0oGt3PAOvihkxeCve6Q KWmuCZX2BfTFUy1t12GER0Upl4l4hJa9LvI/bPJ/umu3K1H+b8121RrVoRorrVlo 5WfcaFgLg/0SBwwxhI7cqxnCPm/z/zaPIlYo8g/NeofYLE1kDZe9xcZZgv4nAWPP gU+IYiM2Pcp0gY4rmJhHRoMyJ2KjqtioY2rel04vjqBYEYC5MQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCmSmX9JDVbwCc46+PEsl0DYA0R5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZmY2NzM2YTItNzBiNi0z NmRkLTkzMWQtZmMzYTUzNTZmYTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIr0D4aGOs2NvvdnpapAA31Fpeo2B0EywKhontu9drkfeJuiZUq2 o9+gM6mYrbKRHHPLeQSVzdgjwZRHhYdmiKU2PrEB4ktYvl24WL4YJapffzy7lOvv 3gkFWy4CmUpKMBBTbiAMHCI1avRE4A00BU9zMKJsm4kKmuTfsEiJUW9ygjBvQ6R4 Piq59EbNzsyBCaqfCOULxE8qLPEJOQlegEEmD/R7L6n4ikMDhotEUEXtVyN4wU4K BzTVFe5PWKvVeZ5mgQdCMb8zPa/x9h1sIqh8DXr+pPVXxamqaMyouxe1862GrT5s /po94mT3g8NTSGqUZg5xACQ3K/Tbp4g0NaA= -----END CERTIFICATE-----Generated at Fri Apr 4 17:50:23 2025 by rpki-client