$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/844570c7-1c5c-330c-8cf4-4b20c3a2a092.roa File: 844570c7-1c5c-330c-8cf4-4b20c3a2a092.roa (raw, json) Hash identifier: k8bg4CDjlglm4/LfmV/5QkAWE84p3lhRWQy6C9z6VIQ= Subject key identifier: 92:FB:19:4E:63:F1:B4:EE:39:9B:85:B7:E2:46:00:97:BA:C8:CF:CF Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926E3943AF49037A74D9980 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/844570c7-1c5c-330c-8cf4-4b20c3a2a092.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 151374 IP address blocks: 2001:470:b4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:e3:94:3a:f4:90:37:a7:4d:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=3a5c7a74-dc99-4a8d-956a-dec2545a5efe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:6d:ab:25:8f:74:00:57:9a:70:97:8a:a3:1f: 7a:45:3c:6e:96:8f:7a:31:28:b9:b9:0d:08:fe:f7: 47:92:24:18:5c:c3:90:dc:b4:a3:7c:55:43:62:ee: 27:52:b6:d7:d1:f7:ee:d3:3a:50:71:60:1b:c8:3b: 32:f8:90:b4:90:2d:21:86:17:ff:e3:dd:ff:8f:59: 0f:0b:d7:b7:d6:f3:f3:53:41:2c:ab:eb:df:1d:75: 0d:3c:9f:b8:c7:93:27:5d:23:4c:b4:91:99:1c:3a: bb:d9:d1:a6:7b:78:25:89:12:ff:77:ba:55:f1:28: 44:d2:41:41:fb:56:ac:e1:9b:eb:d2:34:03:b2:3b: c6:1d:3c:77:88:7b:bd:d0:60:f2:b7:9c:d4:78:e8: b5:3e:cc:12:11:ed:ad:89:22:96:e4:87:e1:a9:f7: 6a:67:94:c8:f9:f0:37:9c:5c:41:cb:1e:00:0c:92: 68:86:5f:4b:1d:41:19:dc:4b:19:18:41:f0:a6:2f: 36:9f:53:8d:79:6a:e6:f8:68:a3:ec:24:2b:51:68: 0b:3f:35:61:d6:e9:d4:cd:2a:01:77:75:7d:b3:5f: 96:81:ed:24:15:76:a7:c5:43:a1:d6:d9:ef:ca:0a: 29:61:24:40:e2:14:2c:0c:3c:02:82:d9:7a:d0:22: 76:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:FB:19:4E:63:F1:B4:EE:39:9B:85:B7:E2:46:00:97:BA:C8:CF:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/844570c7-1c5c-330c-8cf4-4b20c3a2a092.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:b4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:82:a6:d2:77:53:c8:88:ef:49:1e:b3:a2:20:f1:66:8f:5b: b1:41:78:a4:04:28:87:6d:b9:c2:12:d5:54:cb:eb:12:31:25: da:cc:1e:b9:b0:0f:08:07:4f:ec:ce:86:bf:a4:0b:bc:47:87: 3f:30:d3:fa:21:93:a4:be:40:bb:c2:44:1c:45:1a:8c:8b:cb: 31:aa:2f:fa:88:06:02:9e:71:bb:bd:10:fa:9e:82:b7:2b:ce: 29:d6:bb:b4:5d:44:cd:18:04:b8:24:23:dc:9e:9d:b8:45:16: 0d:bd:ca:ec:54:0f:9b:b9:dd:89:7c:e4:36:20:f3:55:12:f1: c6:bb:28:38:58:23:46:0f:94:49:45:07:56:fc:a8:22:ff:9c: 8a:27:8d:9a:82:27:d8:8e:f0:7a:15:87:64:8c:53:36:2e:7a: 65:15:82:bc:e3:ea:7a:38:71:96:48:04:af:e3:5e:90:bf:76: a4:cf:ee:b3:f8:3e:0c:fd:d9:e4:78:13:ff:30:61:cb:f9:32: 20:20:fc:b3:33:3b:d9:36:45:f5:72:47:97:83:bb:eb:c7:e9: ad:f5:b7:84:a8:f1:69:d9:b7:4c:31:bb:68:f1:db:46:0e:9c: 1f:07:74:4f:e9:99:57:e1:53:04:69:4a:18:01:72:cd:5a:62: d0:bc:c6:b9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JuOUOvSQN6dNmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk M2E1YzdhNzQtZGM5OS00YThkLTk1NmEtZGVjMjU0NWE1ZWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6W2rJY90AFeacJeKox96RTxulo96MSi5uQ0I /vdHkiQYXMOQ3LSjfFVDYu4nUrbX0ffu0zpQcWAbyDsy+JC0kC0hhhf/493/j1kP C9e31vPzU0Esq+vfHXUNPJ+4x5MnXSNMtJGZHDq72dGme3gliRL/d7pV8ShE0kFB +1as4Zvr0jQDsjvGHTx3iHu90GDyt5zUeOi1PswSEe2tiSKW5IfhqfdqZ5TI+fA3 nFxByx4ADJJohl9LHUEZ3EsZGEHwpi82n1ONeWrm+Gij7CQrUWgLPzVh1unUzSoB d3V9s1+Wge0kFXanxUOh1tnvygopYSRA4hQsDDwCgtl60CJ2PwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJL7GU5j8bTuOZuFt+JGAJe6yM/PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODQ0NTcwYzctMWM1Yy0z MzBjLThjZjQtNGIyMGMzYTJhMDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAC0 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJGCptJ3U8iI70kes6Ig8WaPW7FBeKQEKIdtucIS1VTL6xIxJdrM HrmwDwgHT+zOhr+kC7xHhz8w0/ohk6S+QLvCRBxFGoyLyzGqL/qIBgKecbu9EPqe grcrzinWu7RdRM0YBLgkI9yenbhFFg29yuxUD5u53Yl85DYg81US8ca7KDhYI0YP lElFB1b8qCL/nIonjZqCJ9iO8HoVh2SMUzYuemUVgrzj6no4cZZIBK/jXpC/dqTP 7rP4Pgz92eR4E/8wYcv5MiAg/LMzO9k2RfVyR5eDu+vH6a31t4So8WnZt0wxu2jx 20YOnB8HdE/pmVfhUwRpShgBcs1aYtC8xrk= -----END CERTIFICATE-----Generated at Sun Apr 27 07:12:27 2025 by rpki-client