$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5232a25a-6432-3b3e-a4e0-7e0f95439c81.roa File: 5232a25a-6432-3b3e-a4e0-7e0f95439c81.roa (raw, json) Hash identifier: g3jmvTp/i10d9B1gRyz3xz6bjzSn/EbNSP78kZ0pVk4= Subject key identifier: 7B:5F:80:9D:DB:20:E5:ED:CE:88:64:2F:05:82:19:76:75:E8:E9:12 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926E3AB8ACF9C2C99A35E80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5232a25a-6432-3b3e-a4e0-7e0f95439c81.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 45960 IP address blocks: 2001:470:243::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:e3:ab:8a:cf:9c:2c:99:a3:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=19b8f482-3794-43ff-a1ca-a269d93392e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0b:4f:25:eb:71:a6:f6:62:cd:d7:06:06:ea: ff:79:9b:f5:a3:ae:d3:b3:85:52:38:38:91:f0:ef: cb:1a:79:78:8f:c6:18:ad:1f:45:bc:1d:54:bf:a5: 79:6f:d4:1f:d1:d9:2c:2d:50:81:7c:74:eb:d4:af: 3d:ca:6f:2c:39:c4:79:a4:3a:ca:9a:6d:61:f9:34: 67:e8:f4:6e:fa:a6:99:18:fb:e9:88:c6:1d:5f:e6: f8:d6:cb:00:4d:94:f4:c8:56:e0:6b:a1:d2:7d:00: 6d:3b:a1:fa:77:5c:f2:38:5d:c6:33:8e:df:e1:e2: fc:b9:0c:6b:40:45:9d:d4:23:33:c0:14:a6:f7:dd: 47:61:29:89:62:cd:55:fd:ea:6e:db:52:91:fc:20: 04:f1:b6:d3:d4:74:53:c2:cf:30:1c:79:47:ba:40: 31:7c:4c:fb:ea:cb:07:2c:10:8a:f6:da:e4:2f:f9: 8b:3f:c5:d0:45:e2:ed:70:f1:14:a0:44:d7:02:8b: 32:01:ad:bb:bf:be:47:88:4d:cd:08:7e:f0:bd:98: 42:36:7b:0f:b2:88:54:50:de:7d:65:e8:f3:da:78: 1a:81:9b:e3:5c:cf:da:28:a1:46:26:e4:9e:9f:f4: a5:ab:5b:df:86:af:27:97:e6:1e:c9:ab:28:da:82: 59:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:5F:80:9D:DB:20:E5:ED:CE:88:64:2F:05:82:19:76:75:E8:E9:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5232a25a-6432-3b3e-a4e0-7e0f95439c81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:243::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:8a:df:f7:2c:00:fc:8a:c4:55:aa:81:87:6b:6d:5f:a9:58: 08:ff:75:fd:ba:51:df:6c:a3:eb:6c:ec:f7:16:92:18:59:27: 05:74:91:bd:47:13:83:ce:93:f2:36:b4:05:dc:e8:75:92:e3: 0f:b7:89:7a:b5:e5:53:db:84:e2:71:7f:61:21:c9:cf:6b:45: f2:b4:84:7c:33:27:15:71:db:0a:a9:9c:40:37:43:01:57:1b: a2:a4:7a:32:78:8c:d1:47:fb:86:43:6c:6f:46:e5:1e:41:39: ac:f8:c3:4f:d0:20:9d:8c:6b:3b:b5:f8:4b:7b:80:b4:51:22: a6:93:ed:94:c1:70:f7:89:81:10:6c:c0:0d:ed:05:fd:bf:86: c9:f2:5c:5b:91:bd:82:3f:c4:84:e8:18:c4:f6:2a:93:a9:dd: 3c:c1:df:77:93:c9:b3:03:3f:0a:5e:27:cc:f7:5f:5c:06:43: 34:9c:66:74:ac:2d:16:44:9f:04:18:c7:4b:3a:be:08:0b:5b: ab:b2:e2:09:09:73:17:ef:f1:f5:7a:ea:ca:73:1d:1f:ec:de: a1:67:1f:ee:b4:59:b8:f6:27:8c:84:73:19:51:77:dd:f2:31: c9:e5:15:bf:67:ba:1d:79:38:69:99:9f:23:3d:38:aa:40:d7: 1d:6e:61:da -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JuOris+cLJmjXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk MTliOGY0ODItMzc5NC00M2ZmLWExY2EtYTI2OWQ5MzM5MmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAtPJetxpvZizdcGBur/eZv1o67Ts4VSODiR 8O/LGnl4j8YYrR9FvB1Uv6V5b9Qf0dksLVCBfHTr1K89ym8sOcR5pDrKmm1h+TRn 6PRu+qaZGPvpiMYdX+b41ssATZT0yFbga6HSfQBtO6H6d1zyOF3GM47f4eL8uQxr QEWd1CMzwBSm991HYSmJYs1V/epu21KR/CAE8bbT1HRTws8wHHlHukAxfEz76ssH LBCK9trkL/mLP8XQReLtcPEUoETXAosyAa27v75HiE3NCH7wvZhCNnsPsohUUN59 Zejz2ngagZvjXM/aKKFGJuSen/Slq1vfhq8nl+Yeyaso2oJZiQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHtfgJ3bIOXtzohkLwWCGXZ16OkSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTIzMmEyNWEtNjQzMi0z YjNlLWE0ZTAtN2UwZjk1NDM5YzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFuK3/csAPyKxFWqgYdrbV+pWAj/df26Ud9so+ts7PcWkhhZJwV0 kb1HE4POk/I2tAXc6HWS4w+3iXq15VPbhOJxf2Ehyc9rRfK0hHwzJxVx2wqpnEA3 QwFXG6KkejJ4jNFH+4ZDbG9G5R5BOaz4w0/QIJ2Mazu1+Et7gLRRIqaT7ZTBcPeJ gRBswA3tBf2/hsnyXFuRvYI/xIToGMT2KpOp3TzB33eTybMDPwpeJ8z3X1wGQzSc ZnSsLRZEnwQYx0s6vggLW6uy4gkJcxfv8fV66spzHR/s3qFnH+60Wbj2J4yEcxlR d93yMcnlFb9nuh15OGmZnyM9OKpA1x1uYdo= -----END CERTIFICATE-----Generated at Sat Apr 26 16:24:31 2025 by rpki-client