$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8afd3ef0-698d-334e-bd79-3cd5f07aefe7.roa File: 8afd3ef0-698d-334e-bd79-3cd5f07aefe7.roa (raw, json) Hash identifier: Ov+vAoUvcgnNm+9cVpkGRPKLHxm3lizzVr4JuvUo/tk= Subject key identifier: 06:0F:4D:AC:A7:A2:A3:53:C5:68:15:19:C6:98:94:FB:EA:CC:94:68 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858492B48FDD65545B24636295740 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8afd3ef0-698d-334e-bd79-3cd5f07aefe7.roa Signing time: Thu 13 Mar 2025 01:00:39 +0000 ROA not before: Thu 13 Mar 2025 01:00:39 +0000 ROA not after: Wed 11 Jun 2025 01:00:39 +0000 asID: 16578 IP address blocks: 2001:470:3e6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2b:48:fd:d6:55:45:b2:46:36:29:57:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 13 01:00:39 2025 GMT Not After : Jun 11 01:00:39 2025 GMT Subject: CN=b68087d2-c6d3-4321-a0e3-db894f91b6e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ad:1e:07:62:bf:34:e6:f4:5f:88:66:c3:39: a2:b4:37:5d:a8:bd:f7:76:88:6f:e3:75:40:ab:c2: 94:93:95:19:da:97:ab:20:a8:0b:07:98:b4:8c:6c: d5:16:69:9e:c6:77:06:f2:d3:db:12:c6:1a:dd:71: ea:04:6a:0c:72:85:2f:b0:c9:71:be:f4:02:96:12: 48:94:0b:28:07:01:00:0f:0d:75:19:4a:80:6c:f1: 92:c2:17:6d:85:89:3d:64:e3:d8:fe:0c:18:cd:69: bb:84:45:8a:94:d4:06:c6:31:8e:95:78:a0:fc:c8: 82:b7:52:ac:fc:00:65:f7:58:74:b9:97:d2:6b:ee: a7:87:a9:f1:8a:f0:39:39:bb:af:ac:63:29:b1:f8: c2:3e:75:a1:55:98:1e:a0:b9:7f:5c:57:cb:44:91: 95:d6:1d:e9:46:f8:04:5d:7f:ab:83:65:77:ed:16: 33:21:ab:a8:be:db:c7:51:42:9e:8e:c6:06:37:63: 51:3c:47:ff:5d:ed:e3:f7:bd:d3:d0:b9:d5:6b:b5: ba:35:6d:fa:7b:35:a9:c4:6b:68:c9:56:5e:bc:e4: e5:de:b5:7c:11:ea:f0:5d:3a:85:c2:c4:c4:fc:f0: 33:08:1c:51:02:90:3a:28:4a:7c:e1:fb:c3:ec:2a: 4d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:0F:4D:AC:A7:A2:A3:53:C5:68:15:19:C6:98:94:FB:EA:CC:94:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8afd3ef0-698d-334e-bd79-3cd5f07aefe7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3e6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:a1:03:11:15:90:98:3d:00:19:d4:4f:13:0f:7b:ca:b1:51: 7e:ab:ba:fa:5b:2e:eb:31:0a:85:78:14:c9:e1:65:1a:0d:c5: 33:26:c8:d3:2a:5b:af:9d:41:10:32:5d:e4:8c:b5:f6:86:19: 59:fe:0d:66:78:fb:4d:a4:73:c6:00:a4:a0:99:5d:1b:b1:10: a1:bc:75:67:1e:14:da:00:27:e8:c5:a2:af:36:ab:88:07:af: 9e:64:5c:5d:85:ff:f4:e1:af:98:8c:7f:90:e2:23:1c:52:d1: 7e:1c:80:89:8f:f7:91:97:7f:90:8a:9a:a4:1c:d4:d2:01:9e: cd:e3:ad:85:98:69:e8:80:93:f0:9d:28:9e:12:23:ac:73:54: 16:51:47:0f:d1:1e:d7:93:2e:9d:5b:bf:5e:77:6c:a0:14:c1: f4:e7:16:f9:34:41:85:d6:a0:80:c3:0e:7e:b6:0d:95:bd:fd: 3a:3a:9e:56:c3:8f:a1:e9:90:fd:a9:ed:29:22:14:be:76:6a: a2:b7:f6:96:8c:48:06:86:5c:3e:32:a6:a8:4b:2b:0e:35:b0: fe:23:b6:57:51:91:1e:b1:3d:2e:1e:94:e3:94:d8:52:1a:1a: 92:34:21:e0:cb:9a:9e:c8:48:59:2a:53:ac:ad:01:71:21:06: fb:02:1f:ae -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkrSP3WVUWyRjYpV0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMxMzAxMDAzOVoXDTI1MDYxMTAxMDAzOVowLzEtMCsGA1UEAxMk YjY4MDg3ZDItYzZkMy00MzIxLWEwZTMtZGI4OTRmOTFiNmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgq0eB2K/NOb0X4hmwzmitDddqL33dohv43VA q8KUk5UZ2perIKgLB5i0jGzVFmmexncG8tPbEsYa3XHqBGoMcoUvsMlxvvQClhJI lAsoBwEADw11GUqAbPGSwhdthYk9ZOPY/gwYzWm7hEWKlNQGxjGOlXig/MiCt1Ks /ABl91h0uZfSa+6nh6nxivA5ObuvrGMpsfjCPnWhVZgeoLl/XFfLRJGV1h3pRvgE XX+rg2V37RYzIauovtvHUUKejsYGN2NRPEf/Xe3j973T0LnVa7W6NW36ezWpxGto yVZevOTl3rV8EerwXTqFwsTE/PAzCBxRApA6KEp84fvD7CpNzwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAYPTaynoqNTxWgVGcaYlPvqzJRoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOGFmZDNlZjAtNjk4ZC0z MzRlLWJkNzktM2NkNWYwN2FlZmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHihAxEVkJg9ABnUTxMPe8qxUX6ruvpbLusxCoV4FMnhZRoNxTMm yNMqW6+dQRAyXeSMtfaGGVn+DWZ4+02kc8YApKCZXRuxEKG8dWceFNoAJ+jFoq82 q4gHr55kXF2F//Thr5iMf5DiIxxS0X4cgImP95GXf5CKmqQc1NIBns3jrYWYaeiA k/CdKJ4SI6xzVBZRRw/RHteTLp1bv153bKAUwfTnFvk0QYXWoIDDDn62DZW9/To6 nlbDj6HpkP2p7SkiFL52aqK39paMSAaGXD4ypqhLKw41sP4jtldRkR6xPS4elOOU 2FIaGpI0IeDLmp7ISFkqU6ytAXEhBvsCH64= -----END CERTIFICATE-----Generated at Sun Apr 27 07:31:08 2025 by rpki-client