$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0dbf9ef7-dc9f-3558-9c70-e44f5a52a515.roa File: 0dbf9ef7-dc9f-3558-9c70-e44f5a52a515.roa (raw, json) Hash identifier: dcBtQiCBj/JD/L+I9eHURkWaeQY4vVCx8QaEkZ4CGKk= Subject key identifier: E8:A5:B9:98:4D:0F:DC:E3:8A:68:FB:EE:DD:D2:C0:D3:79:DF:9E:18 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584976B81EB9909E2DB2B865BF40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0dbf9ef7-dc9f-3558-9c70-e44f5a52a515.roa Signing time: Wed 09 Apr 2025 01:30:11 +0000 ROA not before: Wed 09 Apr 2025 01:30:11 +0000 ROA not after: Tue 08 Jul 2025 01:30:11 +0000 asID: 4128 IP address blocks: 2001:470:43c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:76:b8:1e:b9:90:9e:2d:b2:b8:65:bf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 9 01:30:11 2025 GMT Not After : Jul 8 01:30:11 2025 GMT Subject: CN=eaeb78d3-b939-44ce-81e6-e0436dcaf6de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:aa:26:5d:36:60:2e:65:65:17:be:76:9a:d3: c2:3b:08:6c:44:18:18:36:c4:6d:02:2f:13:e6:37: d3:70:a1:49:32:0a:2e:ad:54:57:3f:e9:8f:b8:23: 14:ce:71:54:a4:f1:74:94:cf:a5:75:26:ae:26:c7: 27:4f:1b:4b:38:86:9b:64:5c:c8:08:09:22:7d:51: d9:52:a3:1c:6a:ac:52:bc:6f:93:12:96:f6:0b:50: a7:19:ad:34:3c:f1:4e:88:c0:f8:8a:0b:e2:33:9b: 7d:6b:5b:89:9d:b6:19:9b:1f:5e:3c:9b:b4:18:6f: 8d:fa:d4:c2:a7:f4:35:69:aa:ac:09:90:dd:2a:4e: 74:38:2a:7e:04:aa:3b:74:da:1a:ae:52:55:36:31: 92:51:98:0a:6e:85:8b:43:74:ec:68:3d:8c:9d:62: fb:3a:38:60:8e:8e:6d:d2:dc:53:31:89:d0:11:b9: 05:83:c5:64:81:83:35:d4:af:b8:5a:f9:ab:65:54: 0a:4e:1a:ac:15:7f:2a:76:48:4d:34:34:02:ab:6c: 24:54:34:d8:eb:aa:52:8b:04:0b:bb:22:c6:cf:9d: 21:f7:3d:4a:90:9c:d0:45:ba:8d:db:68:56:f9:0c: c5:a3:31:b8:89:05:5d:cc:ac:6e:cf:c0:e1:a4:a4: 2b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A5:B9:98:4D:0F:DC:E3:8A:68:FB:EE:DD:D2:C0:D3:79:DF:9E:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0dbf9ef7-dc9f-3558-9c70-e44f5a52a515.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:43c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:2e:9a:e5:dc:64:07:27:0f:f5:b3:07:18:dd:8e:04:5f:ea: 43:22:41:67:c1:9a:07:1b:6f:55:ed:98:5f:c2:cb:4f:65:0a: 82:30:1e:69:96:e9:ac:03:e8:93:98:cf:da:9e:62:61:62:d7: 3d:06:3d:6f:42:e2:6e:f6:97:60:c0:1f:53:7a:39:ae:ac:84: c7:e4:c9:34:2a:38:f2:7c:9d:7e:99:2e:d8:d1:83:59:68:17: e4:f8:78:b4:f3:bb:76:91:f1:b1:06:2c:d1:71:8d:df:35:2f: 9b:92:a8:3c:6a:bc:e5:c3:d8:ef:17:69:ce:ec:7c:c3:cf:4b: 5c:12:33:52:59:17:fd:2e:58:58:3b:02:65:7c:44:99:1a:6e: ca:51:e9:a9:97:27:0b:a5:07:f2:7d:8e:9f:7c:1f:90:31:cd: 6e:89:11:6e:55:83:6f:c5:c6:c7:26:56:c1:1a:35:8c:ce:c8: 83:bc:84:df:97:bd:38:20:7d:e0:88:48:84:75:fc:c0:89:90: 52:a7:b3:de:81:b7:19:78:f4:29:14:b6:74:54:5a:5f:a9:21: a3:89:97:51:9f:0a:eb:94:38:2b:4e:d4:4c:93:d4:09:4b:b9: 31:52:b4:f5:7e:9c:9f:85:04:fe:4b:ed:0b:42:ae:4a:fe:52: f1:2b:44:f1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl2uB65kJ4tsrhlv0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDQwOTAxMzAxMVoXDTI1MDcwODAxMzAxMVowLzEtMCsGA1UEAxMk ZWFlYjc4ZDMtYjkzOS00NGNlLTgxZTYtZTA0MzZkY2FmNmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6omXTZgLmVlF752mtPCOwhsRBgYNsRtAi8T 5jfTcKFJMgourVRXP+mPuCMUznFUpPF0lM+ldSauJscnTxtLOIabZFzICAkifVHZ UqMcaqxSvG+TEpb2C1CnGa00PPFOiMD4igviM5t9a1uJnbYZmx9ePJu0GG+N+tTC p/Q1aaqsCZDdKk50OCp+BKo7dNoarlJVNjGSUZgKboWLQ3TsaD2MnWL7Ojhgjo5t 0txTMYnQEbkFg8VkgYM11K+4WvmrZVQKThqsFX8qdkhNNDQCq2wkVDTY66pSiwQL uyLGz50h9z1KkJzQRbqN22hW+QzFozG4iQVdzKxuz8DhpKQrLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOiluZhND9zjimj77t3SwNN5354YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMGRiZjllZjctZGM5Zi0z NTU4LTljNzAtZTQ0ZjVhNTJhNTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQ8 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACsumuXcZAcnD/WzBxjdjgRf6kMiQWfBmgcbb1XtmF/Cy09lCoIw HmmW6awD6JOYz9qeYmFi1z0GPW9C4m72l2DAH1N6Oa6shMfkyTQqOPJ8nX6ZLtjR g1loF+T4eLTzu3aR8bEGLNFxjd81L5uSqDxqvOXD2O8Xac7sfMPPS1wSM1JZF/0u WFg7AmV8RJkabspR6amXJwulB/J9jp98H5AxzW6JEW5Vg2/FxscmVsEaNYzOyIO8 hN+XvTggfeCISIR1/MCJkFKns96Btxl49CkUtnRUWl+pIaOJl1GfCuuUOCtO1EyT 1AlLuTFStPV+nJ+FBP5L7QtCrkr+UvErRPE= -----END CERTIFICATE-----Generated at Sat Apr 26 23:46:35 2025 by rpki-client