$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/34aad63d-e3f8-3dfe-bc16-7910f6094086.roa File: 34aad63d-e3f8-3dfe-bc16-7910f6094086.roa (raw, json) Hash identifier: HFCu7SxKoeybLI0AUE0hM3oc310X9o8W0h3S9eWHMhE= Subject key identifier: C9:2B:3E:7A:28:BC:35:FC:D9:9F:C0:91:F0:C0:F6:70:F1:42:62:20 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926DDF4610612DD1173FAF0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/34aad63d-e3f8-3dfe-bc16-7910f6094086.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 26042 IP address blocks: 2001:470:1ac::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:dd:f4:61:06:12:dd:11:73:fa:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=db9dd36b-8e88-4380-bb76-e9e6774ab5e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:53:17:1c:3b:70:ea:19:3d:e8:5d:33:d6:c5: 83:d0:cc:04:70:69:d5:8c:69:6f:7f:33:36:05:7e: b7:73:92:d3:75:dd:36:b2:6e:c9:cc:9d:68:57:87: 0c:db:9b:a3:a0:35:df:ec:c2:af:ed:57:ab:ce:b0: 55:73:d2:fb:44:52:0f:a7:44:90:74:46:cd:1e:bb: 33:77:bb:b7:29:8f:69:98:6a:05:0e:e6:50:de:35: 9f:16:0a:e4:3c:48:d9:31:b0:6d:c3:b9:95:d6:3a: 48:2c:ca:73:f9:4e:24:ad:67:31:7e:31:6a:f6:ba: 38:1b:ad:35:7a:98:c7:10:cd:57:15:39:10:20:06: 4d:b0:a5:f7:89:29:d8:9f:52:8a:34:ad:20:79:6b: 4a:c6:42:22:97:5e:05:9f:87:80:a1:7b:2e:47:b5: f0:2e:de:b7:2f:19:e1:a8:d3:e9:2b:50:7a:ef:80: 94:73:fe:06:57:4a:93:73:39:90:1a:bb:78:7f:c2: 76:2c:0a:f6:55:44:69:87:2e:ef:3c:6e:fa:ef:0f: ff:47:1e:f6:54:83:7f:7a:8c:2f:ce:46:a4:b5:d4: 77:3f:22:aa:fa:cb:8c:61:03:79:4d:6a:64:8b:cc: a3:7b:83:f9:1a:ee:17:d3:04:6c:19:95:0d:50:b7: 9d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:2B:3E:7A:28:BC:35:FC:D9:9F:C0:91:F0:C0:F6:70:F1:42:62:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/34aad63d-e3f8-3dfe-bc16-7910f6094086.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1ac::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:59:95:44:00:51:1f:2e:35:06:65:73:52:62:4a:92:d0:4e: bf:65:bb:d8:d9:76:12:2f:8c:91:5c:6e:e0:ba:64:1c:3c:05: 13:cd:fd:74:bc:52:3d:8f:59:4d:68:b5:c5:f4:7b:dd:5c:98: b0:c8:a8:21:e8:29:db:e6:3b:47:ad:7f:45:90:ef:ed:b2:06: dd:5a:ef:59:cf:84:ec:09:ab:38:cc:bd:a3:68:17:87:8b:2d: fb:78:27:e5:7b:25:0a:b6:39:12:09:f2:c6:88:b2:27:fb:a9: b0:86:4f:a5:4d:9f:54:c0:56:4d:6e:f1:46:55:78:90:67:5e: 28:e5:22:77:0d:dc:b1:c4:4a:2a:23:f1:e8:1d:be:09:05:b9: d5:10:3c:df:a8:cf:b2:b7:a1:75:dd:63:98:77:7f:cf:3d:6b: a9:8f:21:08:fc:3e:98:18:38:b3:bc:05:53:55:7e:a0:c1:a5: c4:44:dc:55:e6:74:fe:33:75:3d:bb:fe:ef:95:33:6d:09:b2: 7a:cf:f2:77:9d:d9:ef:c0:46:03:5f:87:d3:6a:ba:47:56:fc: 63:51:1f:06:77:32:f3:03:cb:9b:3b:6c:36:99:c6:79:58:cf: e6:84:19:79:5a:12:e8:48:ca:33:16:0a:c7:44:66:c5:37:8e: 45:3b:f5:f5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5Jt30YQYS3RFz+vAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk ZGI5ZGQzNmItOGU4OC00MzgwLWJiNzYtZTllNjc3NGFiNWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1MXHDtw6hk96F0z1sWD0MwEcGnVjGlvfzM2 BX63c5LTdd02sm7JzJ1oV4cM25ujoDXf7MKv7VerzrBVc9L7RFIPp0SQdEbNHrsz d7u3KY9pmGoFDuZQ3jWfFgrkPEjZMbBtw7mV1jpILMpz+U4krWcxfjFq9ro4G601 epjHEM1XFTkQIAZNsKX3iSnYn1KKNK0geWtKxkIil14Fn4eAoXsuR7XwLt63Lxnh qNPpK1B674CUc/4GV0qTczmQGrt4f8J2LAr2VURphy7vPG767w//Rx72VIN/eowv zkaktdR3PyKq+suMYQN5TWpki8yje4P5Gu4X0wRsGZUNULedYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMkrPnoovDX82Z/AkfDA9nDxQmIgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzRhYWQ2M2QtZTNmOC0z ZGZlLWJjMTYtNzkxMGY2MDk0MDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAGs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGZZlUQAUR8uNQZlc1JiSpLQTr9lu9jZdhIvjJFcbuC6ZBw8BRPN /XS8Uj2PWU1otcX0e91cmLDIqCHoKdvmO0etf0WQ7+2yBt1a71nPhOwJqzjMvaNo F4eLLft4J+V7JQq2ORIJ8saIsif7qbCGT6VNn1TAVk1u8UZVeJBnXijlIncN3LHE Sioj8egdvgkFudUQPN+oz7K3oXXdY5h3f889a6mPIQj8PpgYOLO8BVNVfqDBpcRE 3FXmdP4zdT27/u+VM20JsnrP8ned2e/ARgNfh9NqukdW/GNRHwZ3MvMDy5s7bDaZ xnlYz+aEGXlaEuhIyjMWCsdEZsU3jkU79fU= -----END CERTIFICATE-----Generated at Sun Apr 27 11:20:32 2025 by rpki-client