$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4a054505-add6-3a07-b5e3-7959cb147a45.roa File: 4a054505-add6-3a07-b5e3-7959cb147a45.roa (raw, json) Hash identifier: 9rn3B8a0qgCn3bWL/UOkBNsSpfRCa9xxj+0dF12HRXc= Subject key identifier: BB:C6:B0:89:26:29:B8:50:67:CA:09:D2:73:03:EB:43:C2:CE:56:6D Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858499F24BB619774D56AFB7C0A40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4a054505-add6-3a07-b5e3-7959cb147a45.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 27257 IP address blocks: 2001:470:354::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:bb:61:97:74:d5:6a:fb:7c:0a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=8490b05e-e50b-4ae2-96d3-a0f2fdc43346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:72:05:62:1e:a4:02:12:c8:76:cb:55:22:a2: 79:e6:55:54:93:7a:85:a8:99:1b:b8:b2:ee:62:0e: 78:ea:43:3e:f7:2a:eb:1b:41:f6:a6:63:58:7d:ac: 58:75:4d:c5:51:00:c7:77:33:9c:16:bb:d2:a1:c8: ea:54:83:bf:e8:61:d0:c2:36:ab:07:55:0b:72:fe: d0:b5:6e:9f:54:9e:a3:f2:b1:f3:30:8d:8c:91:74: 69:9f:26:30:7c:2e:c6:5b:99:de:b1:bd:c0:da:8f: b7:ea:92:bc:b9:22:5e:a8:15:3a:2d:c8:d7:e5:17: e2:a5:d7:1c:8e:c5:23:78:2b:e1:15:e4:12:f2:d9: 36:a6:e2:86:c8:b3:3a:0d:0e:48:4f:32:94:45:7f: 8a:df:f3:ac:58:d7:42:6f:f5:27:8f:28:34:e5:83: 5c:60:53:e0:f5:5e:44:7c:da:ed:7e:b0:a6:bf:2c: 0d:69:d3:25:34:d5:9e:7a:2f:ed:5b:a3:1e:71:6a: 7b:6e:4a:29:74:67:75:55:29:b8:68:c1:8e:c9:1b: d6:89:2f:f9:e6:d4:1b:20:ac:3f:63:7d:f8:03:2e: af:60:4c:13:59:92:0d:f1:c1:ae:1f:48:f4:d7:92: 58:ce:fc:a5:ac:12:bc:8b:7a:94:21:36:d2:78:98: 63:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C6:B0:89:26:29:B8:50:67:CA:09:D2:73:03:EB:43:C2:CE:56:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4a054505-add6-3a07-b5e3-7959cb147a45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:354::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:48:1a:9d:25:ee:01:b9:3a:81:b1:52:d9:fd:bb:19:70:0e: ce:f2:81:d1:f2:0c:84:74:fa:72:38:ec:80:94:14:9e:28:bc: 82:7b:e9:a5:0c:97:0b:01:f1:5f:09:08:13:d6:92:92:08:54: b0:84:bd:dc:45:9a:93:f9:ea:05:7c:69:bf:e8:cc:ea:96:b1: 89:a7:b6:09:f4:48:d1:87:76:3a:37:99:6c:9e:90:38:c0:56: 4c:5d:12:f0:da:21:86:66:95:ce:47:c4:1e:2c:2b:70:f8:18: 44:c9:32:d6:94:d2:97:df:ed:8c:5e:62:fe:0a:c4:38:1a:36: 4b:ce:41:46:53:d5:73:7e:b8:68:36:6e:b8:ae:77:69:61:63: e4:63:81:7d:50:4a:dc:c7:5d:f9:7c:94:3e:a9:c9:17:b2:11: 83:8c:37:a2:c4:4e:a8:e4:f7:4c:c2:5d:b3:6c:07:bf:eb:41: d7:2c:d0:25:d5:32:a0:eb:d5:0f:53:27:2e:e7:f9:57:55:f9: dc:99:9d:f9:53:9a:45:86:87:7b:8e:a4:66:1a:e9:b1:c8:40: 0e:83:d8:f7:e3:93:67:4e:09:77:78:f3:64:be:db:d3:d7:41: b0:a1:54:9d:33:5e:00:a0:0f:16:a4:c6:59:96:6e:4e:0a:a8: 2c:99:0c:00 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmfJLthl3TVavt8CkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk ODQ5MGIwNWUtZTUwYi00YWUyLTk2ZDMtYTBmMmZkYzQzMzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33IFYh6kAhLIdstVIqJ55lVUk3qFqJkbuLLu Yg546kM+9yrrG0H2pmNYfaxYdU3FUQDHdzOcFrvSocjqVIO/6GHQwjarB1ULcv7Q tW6fVJ6j8rHzMI2MkXRpnyYwfC7GW5nesb3A2o+36pK8uSJeqBU6LcjX5Rfipdcc jsUjeCvhFeQS8tk2puKGyLM6DQ5ITzKURX+K3/OsWNdCb/Unjyg05YNcYFPg9V5E fNrtfrCmvywNadMlNNWeei/tW6MecWp7bkopdGd1VSm4aMGOyRvWiS/55tQbIKw/ Y334Ay6vYEwTWZIN8cGuH0j015JYzvylrBK8i3qUITbSeJhjJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLvGsIkmKbhQZ8oJ0nMD60PCzlZtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNGEwNTQ1MDUtYWRkNi0z YTA3LWI1ZTMtNzk1OWNiMTQ3YTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcANU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB9IGp0l7gG5OoGxUtn9uxlwDs7ygdHyDIR0+nI47ICUFJ4ovIJ7 6aUMlwsB8V8JCBPWkpIIVLCEvdxFmpP56gV8ab/ozOqWsYmntgn0SNGHdjo3mWye kDjAVkxdEvDaIYZmlc5HxB4sK3D4GETJMtaU0pff7YxeYv4KxDgaNkvOQUZT1XN+ uGg2briud2lhY+RjgX1QStzHXfl8lD6pyReyEYOMN6LETqjk90zCXbNsB7/rQdcs 0CXVMqDr1Q9TJy7n+VdV+dyZnflTmkWGh3uOpGYa6bHIQA6D2Pfjk2dOCXd482S+ 29PXQbChVJ0zXgCgDxakxlmWbk4KqCyZDAA= -----END CERTIFICATE-----Generated at Sun Apr 27 15:20:50 2025 by rpki-client