$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7c7788c8-0052-3a9f-8848-47f429da02ae.roa File: 7c7788c8-0052-3a9f-8848-47f429da02ae.roa (raw, json) Hash identifier: fDzRhYc69lVDsY7DV81s5q/a15fIpGkqHZ/tTXacnns= Subject key identifier: D6:CF:97:D7:E5:8D:68:A5:3A:0C:EF:85:B2:6C:DD:C0:58:6A:2B:C0 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926C941E713036650106A80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7c7788c8-0052-3a9f-8848-47f429da02ae.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 11232 IP address blocks: 2001:470:241::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:c9:41:e7:13:03:66:50:10:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=bd7118ca-d3c1-4c44-a509-a55a631f932f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:62:7a:68:8b:a1:fe:32:99:5f:d7:bb:1c:8f: 66:e3:55:ca:18:dc:43:7a:f3:65:ba:7f:29:c9:19: 35:be:ca:61:8d:c4:fd:1f:e4:f0:52:a3:ab:27:8f: c3:23:d9:f0:05:1a:e9:b8:dc:b0:da:e1:e3:47:66: 56:83:db:a2:74:2b:33:f7:7d:28:4b:fb:3d:16:fb: 4b:b3:05:c0:fb:51:00:ed:56:37:85:4e:1c:9c:ce: 30:30:89:a9:51:47:9e:b0:3f:67:79:bb:e4:72:d0: 1f:42:ec:6c:4a:c2:43:62:d1:41:fe:df:f4:d2:bf: b5:92:0f:c0:93:ac:f2:54:a5:ab:db:f2:45:f8:a8: 33:14:47:fe:32:aa:60:7c:70:dc:6b:d9:80:fd:b3: a6:b1:15:a8:58:3e:49:44:bd:df:bc:67:26:57:d3: a8:61:19:9c:a6:b3:8c:42:f0:04:e3:bc:42:cd:15: 8c:33:c8:78:ab:d0:cc:16:bb:00:e1:6b:18:d7:64: a9:26:e0:04:d2:5e:dc:38:a0:a9:24:3a:1f:a0:31: 48:c8:bb:fa:ff:2d:0c:4a:f0:fc:94:84:38:6f:b2: bd:49:66:b2:44:16:1a:6e:5f:93:12:88:91:c7:28: 10:22:d7:e1:ca:09:ce:5f:99:d5:03:70:57:7f:95: 5e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:CF:97:D7:E5:8D:68:A5:3A:0C:EF:85:B2:6C:DD:C0:58:6A:2B:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7c7788c8-0052-3a9f-8848-47f429da02ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:241::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:f5:01:17:22:26:80:3a:ed:33:d9:ae:1e:51:fb:b3:9d:e9: cb:89:fb:f2:68:68:ce:a8:40:ea:31:18:36:9b:ec:88:14:b2: a5:b8:8e:3b:a3:60:97:45:85:55:a8:72:b6:1e:da:ab:49:93: bf:ce:fa:5f:00:92:eb:35:10:be:7d:d0:cb:72:c4:df:f1:e7: 36:7e:a6:aa:ac:83:22:a6:50:c5:35:56:b1:ab:cc:0c:d5:eb: a9:59:88:41:8d:f4:00:7e:69:1b:34:fe:5d:43:55:ff:6d:7a: 55:3e:41:03:75:f5:ae:70:af:ea:91:4d:1e:0e:0f:62:2e:69: 15:df:27:38:54:20:8c:63:2e:17:2e:aa:44:dc:0e:04:ff:6a: 80:56:4e:f5:de:48:7c:d5:25:ec:b9:ab:81:70:4e:32:da:a8: f7:2c:1c:b5:b9:fc:ff:02:08:82:7b:62:65:21:23:63:22:42: f8:66:15:3a:87:88:c2:d1:5e:65:13:bf:16:76:eb:02:ef:67: 1b:04:9f:70:69:ae:c5:10:db:52:3e:0f:8f:30:47:1f:9d:0d: ff:ee:1e:9d:6b:f5:6c:8a:fd:16:9b:6e:31:96:67:13:42:09: b6:5a:64:66:e1:f0:f1:6d:26:3f:bb:d3:81:05:e7:ca:54:2b: 54:3a:6d:31 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JslB5xMDZlAQaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk YmQ3MTE4Y2EtZDNjMS00YzQ0LWE1MDktYTU1YTYzMWY5MzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWJ6aIuh/jKZX9e7HI9m41XKGNxDevNlun8p yRk1vsphjcT9H+TwUqOrJ4/DI9nwBRrpuNyw2uHjR2ZWg9uidCsz930oS/s9FvtL swXA+1EA7VY3hU4cnM4wMImpUUeesD9nebvkctAfQuxsSsJDYtFB/t/00r+1kg/A k6zyVKWr2/JF+KgzFEf+MqpgfHDca9mA/bOmsRWoWD5JRL3fvGcmV9OoYRmcprOM QvAE47xCzRWMM8h4q9DMFrsA4WsY12SpJuAE0l7cOKCpJDofoDFIyLv6/y0MSvD8 lIQ4b7K9SWayRBYabl+TEoiRxygQItfhygnOX5nVA3BXf5VebQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNbPl9fljWilOgzvhbJs3cBYaivAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvN2M3Nzg4YzgtMDA1Mi0z YTlmLTg4NDgtNDdmNDI5ZGEwMmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADn1ARciJoA67TPZrh5R+7Od6cuJ+/JoaM6oQOoxGDab7IgUsqW4 jjujYJdFhVWocrYe2qtJk7/O+l8Akus1EL590MtyxN/x5zZ+pqqsgyKmUMU1VrGr zAzV66lZiEGN9AB+aRs0/l1DVf9telU+QQN19a5wr+qRTR4OD2IuaRXfJzhUIIxj LhcuqkTcDgT/aoBWTvXeSHzVJey5q4FwTjLaqPcsHLW5/P8CCIJ7YmUhI2MiQvhm FTqHiMLRXmUTvxZ26wLvZxsEn3BprsUQ21I+D48wRx+dDf/uHp1r9WyK/RabbjGW ZxNCCbZaZGbh8PFtJj+704EF58pUK1Q6bTE= -----END CERTIFICATE-----Generated at Sun Apr 27 03:25:05 2025 by rpki-client