$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8b535b5a-969a-352f-a9c0-83b0882db806.roa File: 8b535b5a-969a-352f-a9c0-83b0882db806.roa (raw, json) Hash identifier: FCbpRlQQQdC101Sitg+n/Y4/gDMajU602HBGnh5Jai4= Subject key identifier: 76:C5:4B:D5:FF:75:CF:69:96:30:9F:FE:73:CC:45:99:E4:67:B7:BC Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926D5ABB08090F79C1AC640 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8b535b5a-969a-352f-a9c0-83b0882db806.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 41357 IP address blocks: 2001:470:38::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:d5:ab:b0:80:90:f7:9c:1a:c6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=63f4be90-604c-4f16-aff1-ce817942f501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1c:52:89:98:eb:d9:cd:b4:b3:5b:8f:2a:f1: 4d:ab:fc:25:e1:ae:05:70:e2:d7:c4:da:24:11:be: 97:1d:46:d0:a2:f4:96:88:be:f3:ce:d8:07:29:a2: d5:ec:aa:a3:b6:b7:5a:32:6d:c4:e2:92:09:a4:e2: 7d:c9:39:48:1e:65:ce:90:9c:e3:6b:e3:cd:b1:c3: 3a:6f:8f:ae:cc:a1:82:52:94:2c:34:43:75:d2:1d: c7:44:74:0f:dc:30:13:83:21:29:0a:6a:6c:ad:42: 85:46:53:d8:e9:36:7d:20:1a:56:05:32:03:bf:72: 58:75:dc:79:78:b4:de:2a:57:5a:f8:22:57:7d:bd: 6c:6a:f6:27:6c:9f:83:25:d8:aa:17:8a:d8:2b:d0: 20:15:b5:02:9d:91:45:eb:a9:7f:4f:1f:51:bc:7f: f4:e1:1b:c3:3b:7b:e4:25:89:4a:07:07:d3:5e:af: ca:e0:cb:2f:ed:b5:4d:c3:a5:d4:c4:57:b3:a0:be: 4f:bc:f9:b0:9d:09:f6:82:d0:6d:24:64:cd:50:d6: 6b:9e:6b:5f:85:ad:54:d9:b5:b2:57:27:29:0c:4f: 44:ec:08:ce:f2:35:19:3e:4f:ed:b9:72:5f:16:20: d4:99:08:a3:f3:50:aa:8c:68:d0:aa:ef:c6:8c:2c: 6d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C5:4B:D5:FF:75:CF:69:96:30:9F:FE:73:CC:45:99:E4:67:B7:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8b535b5a-969a-352f-a9c0-83b0882db806.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:38::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:5a:54:0e:bb:08:f7:2f:3f:0a:83:0c:40:ed:a1:b7:1e:f7: 68:2f:ec:de:f4:a7:0c:ce:c5:3b:18:1a:e4:25:82:34:e9:2d: de:b5:8c:9a:03:5a:ea:d0:bb:39:cc:8b:08:c4:4f:91:99:3b: 9b:c2:c3:8d:bf:af:be:0c:ed:8b:12:3f:3d:b4:bd:82:bc:33: 7f:85:c2:31:c4:91:05:36:dd:f6:a0:53:13:01:90:c1:27:ee: d8:d4:68:3f:25:25:41:44:65:dd:54:b8:f9:54:90:6f:c8:ca: 59:69:b7:c9:e3:af:71:b1:ef:e3:8e:28:f4:40:b9:9d:bc:aa: eb:00:cf:3f:df:06:c4:38:51:e6:e2:fc:a6:87:a2:08:2e:af: 5d:f8:dc:96:71:f3:94:77:a6:7e:94:97:38:de:48:06:41:19: 5b:e6:69:14:6e:3f:93:fb:ba:4c:e0:3d:8e:22:4f:4a:64:75: c5:c4:6f:0d:a5:c5:46:9e:a9:1e:83:cd:98:68:21:78:9b:c4: 5d:b3:47:ca:ea:fa:86:a7:3c:e6:65:e2:ee:2f:16:9c:2c:70: c6:2e:ff:8b:e4:e6:3e:cd:c6:11:9a:97:4e:8f:06:b3:30:9e: 70:ed:eb:e5:c1:4b:18:58:1b:0a:73:ef:95:a6:1d:f7:b0:55: 76:0e:31:1a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JtWrsICQ95waxkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk NjNmNGJlOTAtNjA0Yy00ZjE2LWFmZjEtY2U4MTc5NDJmNTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RxSiZjr2c20s1uPKvFNq/wl4a4FcOLXxNok Eb6XHUbQovSWiL7zztgHKaLV7KqjtrdaMm3E4pIJpOJ9yTlIHmXOkJzja+PNscM6 b4+uzKGCUpQsNEN10h3HRHQP3DATgyEpCmpsrUKFRlPY6TZ9IBpWBTIDv3JYddx5 eLTeKlda+CJXfb1savYnbJ+DJdiqF4rYK9AgFbUCnZFF66l/Tx9RvH/04RvDO3vk JYlKBwfTXq/K4Msv7bVNw6XUxFezoL5PvPmwnQn2gtBtJGTNUNZrnmtfha1U2bWy VycpDE9E7AjO8jUZPk/tuXJfFiDUmQij81CqjGjQqu/GjCxtiwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHbFS9X/dc9pljCf/nPMRZnkZ7e8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOGI1MzViNWEtOTY5YS0z NTJmLWE5YzAtODNiMDg4MmRiODA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAA4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHhaVA67CPcvPwqDDEDtobce92gv7N70pwzOxTsYGuQlgjTpLd61 jJoDWurQuznMiwjET5GZO5vCw42/r74M7YsSPz20vYK8M3+FwjHEkQU23fagUxMB kMEn7tjUaD8lJUFEZd1UuPlUkG/Iyllpt8njr3Gx7+OOKPRAuZ28qusAzz/fBsQ4 Uebi/KaHoggur1343JZx85R3pn6UlzjeSAZBGVvmaRRuP5P7ukzgPY4iT0pkdcXE bw2lxUaeqR6DzZhoIXibxF2zR8rq+oanPOZl4u4vFpwscMYu/4vk5j7NxhGal06P BrMwnnDt6+XBSxhYGwpz75WmHfewVXYOMRo= -----END CERTIFICATE-----Generated at Sun Apr 27 14:16:29 2025 by rpki-client