$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0296d979-346a-3508-b448-80a4ae640946.roa File: 0296d979-346a-3508-b448-80a4ae640946.roa (raw, json) Hash identifier: nspPW6hG+aUiBcrttw2Ym6Lf5kMXX0QQp5nbRKZy6IM= Subject key identifier: A3:B7:3A:AE:9B:C7:FE:AE:A4:33:7B:45:41:F6:2D:71:E5:A2:8F:5A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584919500E2BE3DE67B1C9AF9200 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0296d979-346a-3508-b448-80a4ae640946.roa Signing time: Thu 06 Mar 2025 14:30:20 +0000 ROA not before: Thu 06 Mar 2025 14:30:20 +0000 ROA not after: Wed 04 Jun 2025 13:30:20 +0000 asID: 36902 IP address blocks: 2001:470:15a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:50:0e:2b:e3:de:67:b1:c9:af:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 6 14:30:20 2025 GMT Not After : Jun 4 13:30:20 2025 GMT Subject: CN=ec32197e-1ab1-44fe-9ca3-9562992b73b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0b:59:19:b4:d2:76:24:db:9d:44:fa:aa:e6: 73:46:39:94:af:72:75:83:44:7e:59:43:0a:74:81: 12:23:a7:58:bf:84:5c:b6:15:1e:db:83:b4:8b:a6: 32:d0:f6:e4:6c:97:9d:1b:67:8b:7d:51:1e:8f:96: 83:80:05:f9:7c:d5:42:0e:b5:41:c0:fa:a7:78:15: b6:3e:72:b8:ac:26:b8:7f:9a:51:61:47:8c:e2:53: 8e:57:59:db:5a:6b:31:e1:10:45:8e:91:79:14:b3: 13:f0:4a:2c:60:93:3c:bc:25:c6:b0:05:39:00:10: 98:77:dd:1a:b4:c9:b9:b2:60:37:81:dc:ef:02:b3: de:a9:db:dd:cc:5e:dc:0c:38:03:4d:ae:46:fe:ff: e1:a9:9e:7a:67:b5:0e:43:15:7d:a0:a8:28:83:f3: 78:30:77:60:dd:4d:a1:9d:16:53:0f:3a:bf:56:b7: 6b:bc:ec:e8:dd:a9:0e:65:5c:13:04:89:06:b4:90: ca:7b:ff:21:5a:4e:85:54:68:6e:ee:de:89:2e:17: f1:5a:ce:d6:51:1f:e1:fe:00:54:fa:64:69:b0:28: 15:ea:b3:92:7f:b6:2a:f7:ce:98:a5:d8:fb:64:42: 19:b9:f0:86:e6:d2:ee:65:48:c6:41:b6:5c:39:1a: fb:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:B7:3A:AE:9B:C7:FE:AE:A4:33:7B:45:41:F6:2D:71:E5:A2:8F:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0296d979-346a-3508-b448-80a4ae640946.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:15a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:98:71:3b:7b:6c:3f:37:7e:89:35:68:6b:d6:2f:70:6b:ff: 6e:ab:cd:0c:7b:c3:ef:6b:bd:5b:b7:6a:b5:07:0c:d4:9e:98: 85:eb:c7:e5:28:4d:d0:7c:4e:51:2e:47:80:8e:b5:c9:e7:fb: 2e:b1:11:86:be:e6:91:7c:31:3c:69:d6:85:e4:70:03:6b:63: c4:12:05:7f:08:e8:d8:9c:c5:38:9f:53:93:61:31:d6:bb:76: 45:2b:7a:cc:e4:39:77:8a:c8:c4:fc:78:c1:c2:bc:28:0c:82: 9b:9f:35:8b:8b:eb:8c:6f:17:9c:cf:8f:00:29:8a:2e:fd:a7: 93:f2:24:f1:2f:84:fa:2a:c3:73:94:15:99:9e:18:78:6b:03: 0c:a4:7d:0b:45:1e:90:66:cb:a8:32:c1:29:15:2d:2d:09:25: 72:1e:10:d6:16:c4:90:57:56:e2:12:bb:f4:ad:25:96:47:ce: 8e:e6:71:5c:3b:80:c3:d6:c9:37:2e:ee:c9:27:a3:bf:13:bf: 21:9d:88:81:91:05:87:67:6d:3a:14:5e:ce:fe:86:f9:fc:0a: 20:93:57:12:a8:64:fe:51:3e:8f:a3:11:d3:28:f9:46:16:d9: b4:78:89:4b:17:c1:fd:24:71:ad:33:ff:0c:35:75:9c:ed:22: 2f:99:e6:ed -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkZUA4r495nscmvkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMwNjE0MzAyMFoXDTI1MDYwNDEzMzAyMFowLzEtMCsGA1UEAxMk ZWMzMjE5N2UtMWFiMS00NGZlLTljYTMtOTU2Mjk5MmI3M2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQtZGbTSdiTbnUT6quZzRjmUr3J1g0R+WUMK dIESI6dYv4RcthUe24O0i6Yy0PbkbJedG2eLfVEej5aDgAX5fNVCDrVBwPqneBW2 PnK4rCa4f5pRYUeM4lOOV1nbWmsx4RBFjpF5FLMT8EosYJM8vCXGsAU5ABCYd90a tMm5smA3gdzvArPeqdvdzF7cDDgDTa5G/v/hqZ56Z7UOQxV9oKgog/N4MHdg3U2h nRZTDzq/VrdrvOzo3akOZVwTBIkGtJDKe/8hWk6FVGhu7t6JLhfxWs7WUR/h/gBU +mRpsCgV6rOSf7Yq986Ypdj7ZEIZufCG5tLuZUjGQbZcORr7AwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKO3Oq6bx/6upDN7RUH2LXHloo9aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDI5NmQ5NzktMzQ2YS0z NTA4LWI0NDgtODBhNGFlNjQwOTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAFa MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADeYcTt7bD83fok1aGvWL3Br/26rzQx7w+9rvVu3arUHDNSemIXr x+UoTdB8TlEuR4COtcnn+y6xEYa+5pF8MTxp1oXkcANrY8QSBX8I6NicxTifU5Nh Mda7dkUreszkOXeKyMT8eMHCvCgMgpufNYuL64xvF5zPjwApii79p5PyJPEvhPoq w3OUFZmeGHhrAwykfQtFHpBmy6gywSkVLS0JJXIeENYWxJBXVuISu/StJZZHzo7m cVw7gMPWyTcu7skno78TvyGdiIGRBYdnbToUXs7+hvn8CiCTVxKoZP5RPo+jEdMo +UYW2bR4iUsXwf0kca0z/ww1dZztIi+Z5u0= -----END CERTIFICATE-----Generated at Sun Apr 27 02:21:49 2025 by rpki-client