$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33e6e30e-d772-381a-a9c0-73ce65dade73.roa File: 33e6e30e-d772-381a-a9c0-73ce65dade73.roa (raw, json) Hash identifier: vC9HMCzAbBUjG4ACcKFuKzt19YfspAm1B/vkQa9Luio= Subject key identifier: F2:10:B4:B1:2E:3E:FF:55:65:71:AE:C0:C3:9F:67:52:46:F7:72:77 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858498A42ED66AB0C666AF5843380 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33e6e30e-d772-381a-a9c0-73ce65dade73.roa Signing time: Wed 16 Apr 2025 01:30:14 +0000 ROA not before: Wed 16 Apr 2025 01:30:14 +0000 ROA not after: Tue 15 Jul 2025 01:30:14 +0000 asID: 23673 IP address blocks: 2001:470:e9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8a:42:ed:66:ab:0c:66:6a:f5:84:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 16 01:30:14 2025 GMT Not After : Jul 15 01:30:14 2025 GMT Subject: CN=f48c4897-1c99-4753-8d1a-e490d1287d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:87:e8:b4:e0:bd:e5:ec:0a:e0:8f:d7:55:af: 4f:84:53:69:b1:fb:c3:09:ec:84:e0:e5:95:c2:80: 4b:93:49:dc:43:f4:2e:c2:8d:0b:22:99:05:48:5d: 4b:05:2a:11:5f:5c:56:d6:66:5a:d0:ea:cc:51:c9: 0b:3f:c3:c2:b0:1a:af:d4:4d:37:18:73:f9:7f:df: 47:dd:1d:73:c7:87:a5:c2:41:13:b2:fd:e3:91:c4: 9d:ed:18:2b:02:d0:b8:60:eb:6e:96:b4:e3:01:b3: a4:5c:fe:f8:70:f3:43:24:ee:66:cd:13:4e:14:25: 49:50:0f:b5:aa:3d:39:b3:e9:0e:ba:46:f4:e5:90: 67:f1:9e:54:a8:ad:ea:90:39:4e:ef:ae:f9:46:67: 69:56:43:52:c9:99:69:5b:79:da:e6:f3:ac:bc:e5: f7:19:11:09:bc:78:27:3f:fa:48:bd:4d:bf:de:62: db:8b:ac:c5:c9:1f:64:8d:45:cc:f4:f8:3e:22:25: 41:0a:b5:95:75:0a:44:64:34:d4:a7:76:5f:7f:d7: 81:79:9e:8d:46:f6:56:b1:34:92:5e:36:fa:c7:5f: 8e:5c:45:27:73:35:d7:43:aa:e6:3b:3d:37:d3:a9: f6:c7:63:76:73:e5:80:80:46:72:d8:a5:88:48:40: 2f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:10:B4:B1:2E:3E:FF:55:65:71:AE:C0:C3:9F:67:52:46:F7:72:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33e6e30e-d772-381a-a9c0-73ce65dade73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:e9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:31:4b:14:e3:c1:69:c8:76:e2:14:83:be:bd:3d:63:a8:78: 0b:24:0f:96:30:a4:f6:2d:85:a2:82:a3:39:3b:36:2e:fc:5f: 43:8f:df:71:cb:39:aa:b9:76:e6:34:04:05:85:e3:aa:98:b8: 56:de:3a:87:58:42:d8:ba:a2:1e:23:8e:5e:24:94:63:19:3b: bd:e2:6e:b7:2c:27:cf:bc:6c:1c:fb:97:5c:e6:e6:ae:07:06: e3:6e:08:8b:9d:a2:66:34:4c:d5:25:5c:80:5c:7c:31:4b:7a: 7f:0b:b7:a7:de:a3:43:c2:c3:86:6c:54:91:21:42:f7:37:14: fb:85:38:18:c8:1c:ee:60:83:54:81:22:e1:20:5a:ca:d0:c2: 9a:9d:0e:8a:2a:88:49:42:c4:fc:cd:e1:6a:2c:c7:58:03:3e: 00:8b:ea:ba:90:a7:ed:d4:0e:a4:3e:b8:6c:85:f1:53:b9:a9: 19:14:34:be:3e:78:71:48:cb:37:b8:6f:82:df:99:e6:7a:68: 52:e1:36:30:63:4d:32:13:82:83:91:53:47:03:c4:31:21:c4: 45:1c:d8:14:2b:c7:22:e8:9a:8e:08:eb:c5:cc:b1:9c:0d:68: b3:2c:6b:9e:27:81:ba:53:33:79:21:3c:f8:5f:6b:d2:82:9a: 71:be:f6:d7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmKQu1mqwxmavWEM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDQxNjAxMzAxNFoXDTI1MDcxNTAxMzAxNFowLzEtMCsGA1UEAxMk ZjQ4YzQ4OTctMWM5OS00NzUzLThkMWEtZTQ5MGQxMjg3ZDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIfotOC95ewK4I/XVa9PhFNpsfvDCeyE4OWV woBLk0ncQ/Quwo0LIpkFSF1LBSoRX1xW1mZa0OrMUckLP8PCsBqv1E03GHP5f99H 3R1zx4elwkETsv3jkcSd7RgrAtC4YOtulrTjAbOkXP74cPNDJO5mzRNOFCVJUA+1 qj05s+kOukb05ZBn8Z5UqK3qkDlO7675RmdpVkNSyZlpW3na5vOsvOX3GREJvHgn P/pIvU2/3mLbi6zFyR9kjUXM9Pg+IiVBCrWVdQpEZDTUp3Zff9eBeZ6NRvZWsTSS Xjb6x1+OXEUnczXXQ6rmOz0306n2x2N2c+WAgEZy2KWISEAvmwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPIQtLEuPv9VZXGuwMOfZ1JG93J3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzNlNmUzMGUtZDc3Mi0z ODFhLWE5YzAtNzNjZTY1ZGFkZTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADp MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAAxSxTjwWnIduIUg769PWOoeAskD5YwpPYthaKCozk7Ni78X0OP 33HLOaq5duY0BAWF46qYuFbeOodYQti6oh4jjl4klGMZO73ibrcsJ8+8bBz7l1zm 5q4HBuNuCIudomY0TNUlXIBcfDFLen8Lt6feo0PCw4ZsVJEhQvc3FPuFOBjIHO5g g1SBIuEgWsrQwpqdDooqiElCxPzN4Wosx1gDPgCL6rqQp+3UDqQ+uGyF8VO5qRkU NL4+eHFIyze4b4LfmeZ6aFLhNjBjTTITgoORU0cDxDEhxEUc2BQrxyLomo4I68XM sZwNaLMsa54ngbpTM3khPPhfa9KCmnG+9tc= -----END CERTIFICATE-----Generated at Mon Apr 28 09:05:59 2025 by rpki-client