$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a232f75c-46e8-3d93-8406-d3f904ca2565.roa File: a232f75c-46e8-3d93-8406-d3f904ca2565.roa (raw, json) Hash identifier: 8GqOf5Z7RBZpc75QEz6uzx56qs3ZecZqCXMmOZQ+Rzw= Subject key identifier: 8A:1E:E3:AB:05:E2:9B:F8:7A:C3:C4:C9:56:3E:D7:AD:1F:44:8A:A9 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848E16BC21AEF131205D4D98280 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a232f75c-46e8-3d93-8406-d3f904ca2565.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 32489 IP address blocks: 2001:470:3d5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:c2:1a:ef:13:12:05:d4:d9:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=a53a7ce0-f4d1-40ce-86d5-0aba1952c1ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:4a:1e:d1:f7:3f:96:2e:11:92:e5:1a:00:a8: dd:82:33:3d:b1:e6:35:bf:db:de:0d:9e:ef:f7:25: 29:14:62:3e:e4:79:20:01:ba:3b:22:5b:e8:8d:23: a7:4f:4d:5a:91:0e:85:4b:9f:2b:51:8a:29:26:22: fa:bd:fa:41:a4:3f:75:ab:1e:e7:92:ae:34:17:5a: 05:94:00:ee:0f:8a:68:e0:95:44:10:1a:da:16:eb: e6:91:d2:9c:cb:c8:fc:50:90:92:73:e0:65:41:4e: d1:d7:05:a9:bc:33:4b:bb:1e:8f:60:62:f7:ec:12: 10:21:a5:df:67:69:f6:08:36:39:08:b5:7f:09:b9: 25:59:b5:2e:6d:5e:7e:39:28:c6:21:a1:8f:e4:a2: 7c:9f:23:54:3b:22:52:ab:5c:67:8c:af:07:a6:11: 5d:17:5e:94:5a:ce:55:8b:3b:2a:ce:f6:9e:14:c9: a6:50:59:c0:08:01:d5:dd:fe:41:b0:5a:23:9f:81: 98:b1:5e:8c:82:fc:f6:75:a7:d5:73:6f:66:4e:49: b7:05:83:6a:08:24:dc:04:ee:32:fb:b2:e9:5c:7f: 41:f1:f6:b2:e0:74:a7:2a:61:83:34:af:5b:e8:ce: e5:3b:c2:3d:88:a4:ee:29:86:40:5b:61:83:a6:10: 11:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:1E:E3:AB:05:E2:9B:F8:7A:C3:C4:C9:56:3E:D7:AD:1F:44:8A:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a232f75c-46e8-3d93-8406-d3f904ca2565.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3d5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:98:cf:0c:ba:b2:60:61:81:3c:a1:e6:cf:57:c3:95:75:22: 4f:0c:97:5d:84:35:0a:82:97:42:bc:a8:fb:bc:ba:2e:71:22: 04:b7:b1:6d:d4:a7:cf:88:fb:7c:8d:3f:b2:40:a6:2a:0f:c1: 4a:08:3b:10:e2:3b:d6:02:8a:8c:6e:d1:60:2b:a7:9d:c8:74: 77:d5:a1:fb:00:47:a7:cb:af:e5:ee:e5:36:8c:e5:39:0c:6b: 0c:7f:8a:bf:da:3b:ec:1e:dd:de:3e:a7:ce:b3:17:3f:99:f9: d5:05:21:09:9e:8e:d8:d4:de:01:b5:ea:96:e5:f2:13:48:da: 9f:ee:11:b3:ba:a5:96:74:5c:fd:c2:0d:9b:05:32:83:14:d3: b1:46:be:b3:1c:e0:11:c6:0f:55:c1:b2:da:43:b2:08:d9:aa: 8c:6c:57:dd:6d:ce:f0:b4:d4:16:4d:21:86:5b:d5:a8:58:f4: 5e:68:02:07:9a:79:aa:6e:7b:bf:c5:0d:9b:fe:b7:9f:9f:c5: 74:de:80:c9:95:07:9b:db:e5:e3:b0:a8:e5:7d:8c:47:ef:12: 28:9a:1d:9e:6b:1b:01:f3:36:08:a3:d5:58:02:f8:5d:06:fe: 7f:92:f8:b6:f1:08:27:42:29:87:d0:ed:01:2c:40:53:bc:6e: 5c:07:eb:87 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjha8Ia7xMSBdTZgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk YTUzYTdjZTAtZjRkMS00MGNlLTg2ZDUtMGFiYTE5NTJjMWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkoe0fc/li4RkuUaAKjdgjM9seY1v9veDZ7v 9yUpFGI+5HkgAbo7IlvojSOnT01akQ6FS58rUYopJiL6vfpBpD91qx7nkq40F1oF lADuD4po4JVEEBraFuvmkdKcy8j8UJCSc+BlQU7R1wWpvDNLux6PYGL37BIQIaXf Z2n2CDY5CLV/CbklWbUubV5+OSjGIaGP5KJ8nyNUOyJSq1xnjK8HphFdF16UWs5V izsqzvaeFMmmUFnACAHV3f5BsFojn4GYsV6Mgvz2dafVc29mTkm3BYNqCCTcBO4y +7LpXH9B8fay4HSnKmGDNK9b6M7lO8I9iKTuKYZAW2GDphARcQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIoe46sF4pv4esPEyVY+160fRIqpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTIzMmY3NWMtNDZlOC0z ZDkzLTg0MDYtZDNmOTA0Y2EyNTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC2Yzwy6smBhgTyh5s9Xw5V1Ik8Ml12ENQqCl0K8qPu8ui5xIgS3 sW3Up8+I+3yNP7JApioPwUoIOxDiO9YCioxu0WArp53IdHfVofsAR6fLr+Xu5TaM 5TkMawx/ir/aO+we3d4+p86zFz+Z+dUFIQmejtjU3gG16pbl8hNI2p/uEbO6pZZ0 XP3CDZsFMoMU07FGvrMc4BHGD1XBstpDsgjZqoxsV91tzvC01BZNIYZb1ahY9F5o Ageaeapue7/FDZv+t5+fxXTegMmVB5vb5eOwqOV9jEfvEiiaHZ5rGwHzNgij1VgC +F0G/n+S+LbxCCdCKYfQ7QEsQFO8blwH64c= -----END CERTIFICATE-----Generated at Sun Apr 27 06:20:38 2025 by rpki-client