$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85f9682d-7d53-3d36-93a1-3376b5c05034.roa File: 85f9682d-7d53-3d36-93a1-3376b5c05034.roa (raw, json) Hash identifier: cRMSdBJLGYYsViXwBLxkHcokbIf/XspVO5b+nV5jGdE= Subject key identifier: 72:B8:6F:2D:E1:F2:8A:AF:55:E9:3F:3E:72:DB:43:17:51:02:20:B1 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858494733F1BE3BCF85EE0EF189C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85f9682d-7d53-3d36-93a1-3376b5c05034.roa Signing time: Sun 23 Mar 2025 01:00:39 +0000 ROA not before: Sun 23 Mar 2025 01:00:39 +0000 ROA not after: Sat 21 Jun 2025 01:00:39 +0000 asID: 15267 IP address blocks: 2001:470:345::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:33:f1:be:3b:cf:85:ee:0e:f1:89:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 23 01:00:39 2025 GMT Not After : Jun 21 01:00:39 2025 GMT Subject: CN=e5e4ed85-e64f-4848-8df3-91fd5ccf728b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7e:65:91:96:0f:fa:be:0b:b1:0a:fb:c8:22: 36:65:a5:0f:c8:ea:ce:52:09:09:6a:a7:c0:a5:2e: 43:15:59:5a:b3:96:02:15:b3:03:c6:e2:45:4d:88: 47:a3:a8:10:74:79:96:c9:d1:1d:89:08:4e:88:0a: 04:ce:4f:dc:28:b5:d9:0d:bf:8e:a2:43:cc:64:60: 92:c3:c9:ca:00:e8:89:ed:2f:e0:2e:30:c2:73:34: 12:d8:79:96:47:2f:83:45:f7:76:6f:b5:11:11:e5: 38:b2:81:82:80:77:f4:8d:9c:bd:2a:01:ed:14:1a: ce:6a:99:2e:90:2b:b3:9e:d6:41:22:b0:b9:73:28: 6e:bc:1f:0e:9f:4b:be:5a:4f:d4:79:87:50:75:98: 38:f7:e6:19:13:70:e2:42:13:5c:6b:b5:13:9f:e0: 39:38:1a:58:b7:37:c8:b1:66:21:7c:72:1b:b5:27: 43:b6:01:ea:61:2b:a5:b0:2d:9a:79:13:6f:45:44: 2a:ce:fd:ec:b7:fd:4a:0a:2d:29:2a:90:17:7c:46: 5b:64:90:4e:cf:bb:b2:8b:fe:b4:60:0a:89:8a:59: 22:d1:c7:eb:d6:77:ab:9b:12:02:e0:c4:02:32:a7: a3:ed:35:bb:46:55:77:30:5c:71:3f:2b:81:c6:13: fa:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B8:6F:2D:E1:F2:8A:AF:55:E9:3F:3E:72:DB:43:17:51:02:20:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85f9682d-7d53-3d36-93a1-3376b5c05034.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:345::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:66:8c:99:ac:ea:d8:e6:04:07:dd:df:bc:f8:65:42:95:59: 7f:04:59:52:ba:12:53:98:dc:d5:48:16:f5:6b:6d:67:ea:f6: 77:b3:ae:65:b6:d6:b8:d1:63:b4:7e:b4:89:c8:75:04:06:c5: 56:c1:db:1a:a5:e4:c4:94:fa:5b:e3:c5:89:74:f8:f9:cb:de: 8a:e6:82:8a:dc:cc:82:29:24:d8:e7:4a:5e:e0:b3:b1:59:5a: b5:6f:50:6d:16:ff:59:36:46:64:0a:82:a8:4a:f4:db:84:b8: e1:c5:2c:76:00:87:bf:1d:c8:ab:a3:37:53:77:23:b4:99:c1: 88:79:ba:80:8d:9c:f9:98:6b:90:40:d5:ea:7e:32:f7:20:70: 0c:93:e2:bf:35:14:3d:08:d5:78:31:23:30:4d:18:2d:de:d1: 02:29:c5:bc:ff:14:0f:8f:f8:ef:08:13:64:81:18:46:e6:aa: ec:2b:98:dd:af:8c:8b:f5:a7:1d:5c:53:0d:75:1c:eb:08:8d: 10:a6:62:4a:b2:b4:3c:5e:58:07:1d:ce:82:24:75:d9:8f:85: ee:d3:7d:4d:1f:fe:2e:f4:b9:78:c1:e1:5f:fe:c3:13:bd:bb: 9a:15:48:60:2e:f6:cd:79:ea:82:79:4c:39:35:53:a3:a1:b7: 6e:fd:de:19 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElHM/G+O8+F7g7xicAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk ZTVlNGVkODUtZTY0Zi00ODQ4LThkZjMtOTFmZDVjY2Y3MjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvH5lkZYP+r4LsQr7yCI2ZaUPyOrOUgkJaqfA pS5DFVlas5YCFbMDxuJFTYhHo6gQdHmWydEdiQhOiAoEzk/cKLXZDb+OokPMZGCS w8nKAOiJ7S/gLjDCczQS2HmWRy+DRfd2b7UREeU4soGCgHf0jZy9KgHtFBrOapku kCuzntZBIrC5cyhuvB8On0u+Wk/UeYdQdZg49+YZE3DiQhNca7UTn+A5OBpYtzfI sWYhfHIbtSdDtgHqYSulsC2aeRNvRUQqzv3st/1KCi0pKpAXfEZbZJBOz7uyi/60 YAqJilki0cfr1nermxIC4MQCMqej7TW7RlV3MFxxPyuBxhP65QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHK4by3h8oqvVek/PnLbQxdRAiCxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODVmOTY4MmQtN2Q1My0z ZDM2LTkzYTEtMzM3NmI1YzA1MDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcANF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALtmjJms6tjmBAfd37z4ZUKVWX8EWVK6ElOY3NVIFvVrbWfq9nez rmW21rjRY7R+tInIdQQGxVbB2xql5MSU+lvjxYl0+PnL3ormgorczIIpJNjnSl7g s7FZWrVvUG0W/1k2RmQKgqhK9NuEuOHFLHYAh78dyKujN1N3I7SZwYh5uoCNnPmY a5BA1ep+MvcgcAyT4r81FD0I1XgxIzBNGC3e0QIpxbz/FA+P+O8IE2SBGEbmquwr mN2vjIv1px1cUw11HOsIjRCmYkqytDxeWAcdzoIkddmPhe7TfU0f/i70uXjB4V/+ wxO9u5oVSGAu9s156oJ5TDk1U6Oht2793hk= -----END CERTIFICATE-----Generated at Sun Apr 27 01:31:28 2025 by rpki-client