$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/936d625b-5325-341b-9d17-0a6a9aea1999.roa File: 936d625b-5325-341b-9d17-0a6a9aea1999.roa (raw, json) Hash identifier: AU5zW0Y3mt0tmoECxwvVzcvj5g65Jfd0tGfbW3lgsuc= Subject key identifier: 02:7C:97:63:EA:C8:C1:A6:3E:40:DE:4F:F9:E8:94:23:04:CB:56:2E Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584964846EDDE0C43307BDBC6640 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/936d625b-5325-341b-9d17-0a6a9aea1999.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 21699 IP address blocks: 2001:470:2f7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:6e:dd:e0:c4:33:07:bd:bc:66:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=d513ac98-27d8-4c8a-8131-b821ec6b3900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:71:d2:95:1f:39:87:29:65:12:b8:7e:d0:9f: 2e:8f:04:da:2d:5c:ff:cd:8b:57:b9:77:dc:7c:d7: 49:d5:40:59:aa:03:18:eb:53:e5:6a:90:23:6c:03: 2f:c1:36:d4:b5:c6:e1:14:f6:4c:04:5f:b1:7d:c2: da:07:cc:4c:6e:c7:a8:08:4e:82:9e:b5:1d:36:27: b6:45:47:d0:df:14:1a:28:9d:1c:50:90:a5:99:e8: 99:8c:89:a0:8f:f0:2c:be:78:23:10:d6:7b:8d:8c: 9e:92:4f:df:2c:53:b4:1c:2d:0d:2a:4b:3f:9f:5b: 83:b9:46:e4:5f:d1:d5:37:81:40:56:fb:5b:4f:0f: c5:b7:68:57:c5:f5:2b:11:3b:66:39:e7:0e:4a:b8: 1e:ce:7e:d5:6b:ee:05:8f:34:21:ba:2a:64:a5:41: 02:b1:f9:b5:b2:7d:cc:28:20:a4:eb:2d:47:f7:36: d1:a2:f9:7d:5e:6d:a0:e5:15:5a:29:1b:f0:92:e4: af:26:85:d2:20:6f:4a:98:29:06:e5:78:f8:c1:60: c4:36:93:ec:6a:50:14:32:5c:9b:ce:9d:61:39:8e: d1:58:c7:4b:24:df:e7:d8:c9:87:c3:f8:81:7f:75: a5:81:19:58:f5:94:49:e8:0f:b6:78:2e:35:f3:93: 55:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:7C:97:63:EA:C8:C1:A6:3E:40:DE:4F:F9:E8:94:23:04:CB:56:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/936d625b-5325-341b-9d17-0a6a9aea1999.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2f7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:84:84:7c:e7:79:f1:dd:b9:76:54:a2:7b:57:a0:ff:bc:76: 49:3e:88:ed:32:ee:c5:30:96:d4:10:80:00:34:27:6b:4c:ad: 20:f6:a1:95:e2:85:e8:15:0e:11:22:5a:a4:be:76:4d:85:2b: 2f:31:70:9b:68:59:25:f8:3d:1b:11:bb:04:c8:c3:c6:06:4b: 41:f7:8a:b4:00:ee:cc:d2:84:ef:e5:35:47:d0:30:84:a3:88: 5c:6f:ec:d1:ec:ed:8b:89:36:12:0d:1c:75:1a:38:7f:c4:6e: 11:89:17:3a:c8:78:af:f5:d8:ca:02:6e:19:cd:25:36:10:5d: ce:e1:33:6d:7d:ac:f0:94:9e:94:df:71:1d:e5:84:34:e4:9b: 0e:9b:c7:0c:a1:77:4b:e5:1b:a0:fc:5c:f7:a9:a2:ee:eb:4c: 7c:34:56:e5:79:a9:ad:6e:70:5c:75:85:54:63:e1:94:33:1a: 1c:6b:c3:46:df:21:f2:d7:d1:88:70:6c:3f:cc:49:4f:2b:ed: 8c:37:b2:95:fc:78:95:eb:ee:5d:b2:c5:3c:65:b5:ce:53:27: 1e:d6:43:97:e8:d9:8e:fc:cd:1d:ec:38:2b:55:68:3f:28:1b: 12:a3:c4:b2:85:fa:2a:de:06:9e:03:38:69:27:29:10:d5:ba: 24:22:60:1b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElkhG7d4MQzB728ZkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk ZDUxM2FjOTgtMjdkOC00YzhhLTgxMzEtYjgyMWVjNmIzOTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHHSlR85hyllErh+0J8ujwTaLVz/zYtXuXfc fNdJ1UBZqgMY61PlapAjbAMvwTbUtcbhFPZMBF+xfcLaB8xMbseoCE6CnrUdNie2 RUfQ3xQaKJ0cUJClmeiZjImgj/AsvngjENZ7jYyekk/fLFO0HC0NKks/n1uDuUbk X9HVN4FAVvtbTw/Ft2hXxfUrETtmOecOSrgezn7Va+4FjzQhuipkpUECsfm1sn3M KCCk6y1H9zbRovl9Xm2g5RVaKRvwkuSvJoXSIG9KmCkG5Xj4wWDENpPsalAUMlyb zp1hOY7RWMdLJN/n2MmHw/iBf3WlgRlY9ZRJ6A+2eC4185NVHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAJ8l2PqyMGmPkDeT/nolCMEy1YuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTM2ZDYyNWItNTMyNS0z NDFiLTlkMTctMGE2YTlhZWExOTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAL3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHOEhHznefHduXZUontXoP+8dkk+iO0y7sUwltQQgAA0J2tMrSD2 oZXihegVDhEiWqS+dk2FKy8xcJtoWSX4PRsRuwTIw8YGS0H3irQA7szShO/lNUfQ MISjiFxv7NHs7YuJNhINHHUaOH/EbhGJFzrIeK/12MoCbhnNJTYQXc7hM219rPCU npTfcR3lhDTkmw6bxwyhd0vlG6D8XPepou7rTHw0VuV5qa1ucFx1hVRj4ZQzGhxr w0bfIfLX0YhwbD/MSU8r7Yw3spX8eJXr7l2yxTxltc5TJx7WQ5fo2Y78zR3sOCtV aD8oGxKjxLKF+ireBp4DOGknKRDVuiQiYBs= -----END CERTIFICATE-----Generated at Sun Apr 27 00:13:50 2025 by rpki-client