$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/658691af-bff9-310a-8e0e-981cec48f097.roa File: 658691af-bff9-310a-8e0e-981cec48f097.roa (raw, json) Hash identifier: v+AKFgHAwmBvXk0bYXjHrGfpTI0VITzUOvbX4Y3Thhk= Subject key identifier: C9:CF:B7:59:9F:55:06:CC:F8:C8:4C:7E:E6:EA:C6:C5:AA:52:0B:90 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926CD157DECFB4D0AA1B600 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/658691af-bff9-310a-8e0e-981cec48f097.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 206186 IP address blocks: 2001:470:2a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:cd:15:7d:ec:fb:4d:0a:a1:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=2a0f4289-fda1-495c-ae17-eca167cfa51c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:27:d1:52:2f:79:9c:90:63:6b:16:08:a3:fd: 07:0d:74:91:3d:92:30:1c:21:10:d3:19:07:eb:bf: 6d:51:21:22:07:4f:cd:29:a4:ed:65:fd:bb:93:19: 24:d7:0c:a4:b6:fc:3b:4c:a1:f5:ff:11:60:ee:7f: 74:d6:2c:c9:bc:97:32:f3:1a:6a:c0:5a:bc:28:52: ba:78:e9:a5:1b:9e:14:cd:84:c6:c8:e3:d7:5d:ca: 8d:61:9f:aa:59:7b:98:32:7d:ff:55:49:50:26:d4: 99:06:bb:f9:a9:0e:76:87:1f:6a:16:d8:5c:25:8c: 39:20:90:51:7e:13:72:8b:6a:03:6a:6b:79:1b:ce: d5:eb:b5:18:64:d8:12:64:09:56:cf:19:8a:76:90: 0a:3d:fb:f5:5c:dc:77:c4:aa:0d:9e:22:bc:df:29: 60:67:27:0e:a0:79:0a:5d:57:3f:69:df:4d:bb:9b: f2:3a:37:23:17:89:1f:bb:1f:f2:82:f6:2d:d9:00: 04:2d:57:80:37:0c:e8:ce:06:d4:d2:e3:56:8f:c4: 49:bf:0f:65:c1:fe:a8:7f:aa:7b:c1:c0:68:35:53: 02:6b:23:97:b9:3a:33:7c:f3:7e:c6:47:e0:52:df: f1:a4:c6:ac:14:ec:c1:29:b2:ae:5e:27:f9:94:dc: 8c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:CF:B7:59:9F:55:06:CC:F8:C8:4C:7E:E6:EA:C6:C5:AA:52:0B:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/658691af-bff9-310a-8e0e-981cec48f097.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:bb:0f:9d:82:fe:8a:f4:af:f5:8e:c1:b9:48:3b:36:3e:72: 26:77:0b:1b:84:f6:0c:b7:76:56:e7:07:e2:07:c1:1c:96:3a: 65:a5:9a:b4:63:80:a2:23:f4:56:43:1e:ba:d5:d3:67:d4:20: 04:b9:47:e1:c3:f2:cd:ad:56:13:ab:10:6a:87:1f:58:a2:5b: ad:69:a5:4a:17:fa:7c:95:29:27:f2:ba:54:80:64:0e:ec:e5: f7:da:ed:20:76:39:b5:b0:f6:e3:2e:7c:cd:59:32:f3:8e:2e: 05:5f:e5:9c:a0:b4:e0:e9:00:a2:cc:50:e8:0c:29:b6:5b:c4: 8d:4e:29:11:0d:7b:90:84:a0:8f:06:f6:ac:aa:83:0e:70:dd: ea:b1:54:23:86:28:36:11:6a:d7:ce:79:f3:33:89:3f:55:5e: b4:b8:36:c5:c1:7d:04:ac:72:b3:81:dc:42:dd:5d:38:8c:91: 6c:2d:67:99:67:29:c5:64:3d:65:d1:54:6e:56:66:03:f2:aa: f3:84:12:37:95:b1:81:46:55:c8:34:0d:5c:b8:d2:e3:3e:85: fd:2d:3a:92:a1:dd:f3:6d:32:62:0e:99:9c:9d:2a:a3:7e:52: 4f:88:bd:4e:4c:ed:1d:c2:78:96:0d:88:6b:43:2a:1a:33:89: 2c:43:23:0d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5Js0Vfez7TQqhtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk MmEwZjQyODktZmRhMS00OTVjLWFlMTctZWNhMTY3Y2ZhNTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCfRUi95nJBjaxYIo/0HDXSRPZIwHCEQ0xkH 679tUSEiB0/NKaTtZf27kxkk1wyktvw7TKH1/xFg7n901izJvJcy8xpqwFq8KFK6 eOmlG54UzYTGyOPXXcqNYZ+qWXuYMn3/VUlQJtSZBrv5qQ52hx9qFthcJYw5IJBR fhNyi2oDamt5G87V67UYZNgSZAlWzxmKdpAKPfv1XNx3xKoNniK83ylgZycOoHkK XVc/ad9Nu5vyOjcjF4kfux/ygvYt2QAELVeANwzozgbU0uNWj8RJvw9lwf6of6p7 wcBoNVMCayOXuTozfPN+xkfgUt/xpMasFOzBKbKuXif5lNyMCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMnPt1mfVQbM+MhMfubqxsWqUguQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNjU4NjkxYWYtYmZmOS0z MTBhLThlMGUtOTgxY2VjNDhmMDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADu7D52C/or0r/WOwblIOzY+ciZ3CxuE9gy3dlbnB+IHwRyWOmWl mrRjgKIj9FZDHrrV02fUIAS5R+HD8s2tVhOrEGqHH1iiW61ppUoX+nyVKSfyulSA ZA7s5ffa7SB2ObWw9uMufM1ZMvOOLgVf5ZygtODpAKLMUOgMKbZbxI1OKRENe5CE oI8G9qyqgw5w3eqxVCOGKDYRatfOefMziT9VXrS4NsXBfQSscrOB3ELdXTiMkWwt Z5lnKcVkPWXRVG5WZgPyqvOEEjeVsYFGVcg0DVy40uM+hf0tOpKh3fNtMmIOmZyd KqN+Uk+IvU5M7R3CeJYNiGtDKhoziSxDIw0= -----END CERTIFICATE-----Generated at Sat Apr 26 22:13:49 2025 by rpki-client