$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a6cba60e-ac12-3c39-b8d8-1d89f6e7c9d5.roa File: a6cba60e-ac12-3c39-b8d8-1d89f6e7c9d5.roa (raw, json) Hash identifier: /a/GwfZeMgbS4HudyGfVCgj5F2fWqeUyyrlX2jFBdv0= Subject key identifier: B2:D5:B2:67:02:01:50:37:38:CE:B6:D2:E2:79:32:E5:23:AA:05:80 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584965F803A3CE1C8DE70284A700 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a6cba60e-ac12-3c39-b8d8-1d89f6e7c9d5.roa Signing time: Thu 03 Apr 2025 01:30:11 +0000 ROA not before: Thu 03 Apr 2025 01:30:11 +0000 ROA not after: Wed 02 Jul 2025 01:30:11 +0000 asID: 4128 IP address blocks: 2001:470:435::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:f8:03:a3:ce:1c:8d:e7:02:84:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 3 01:30:11 2025 GMT Not After : Jul 2 01:30:11 2025 GMT Subject: CN=a4e421b1-c3cd-4e27-a9d3-7403a7dee99d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7f:25:fb:5e:42:57:68:52:e9:25:c4:56:42: fe:2f:fe:79:bb:6e:37:f4:3a:aa:fd:f0:fd:18:88: 1e:23:02:37:dc:0b:21:7b:0e:a6:4c:8e:7c:22:ab: b6:53:17:fb:aa:0d:d2:b5:62:74:70:a8:7e:76:e2: 9a:0d:76:ae:2a:ce:58:b0:6e:03:4f:a6:a7:45:59: 9a:13:26:28:3d:de:24:cf:a4:78:1d:ee:67:38:6b: ea:78:5c:b2:d5:d9:df:75:88:e7:32:ea:84:2a:4d: a2:1d:f0:a5:b5:b6:6e:78:77:bd:9a:46:56:ef:4a: 16:b8:66:41:2f:88:95:3c:ce:30:54:b6:b4:b8:b9: 73:9c:33:cc:31:cd:44:1a:20:d8:9c:e1:12:e9:60: a6:11:8f:a5:61:76:3c:4c:f7:17:ea:a6:af:e0:20: c4:f6:1f:b2:25:83:58:ac:19:9b:0b:6c:c6:0c:e0: 65:1d:cf:15:27:eb:6e:df:49:1f:94:4e:5d:37:36: 7b:0f:09:da:7a:d3:6e:28:95:19:94:cf:1d:6f:49: 0a:8e:15:19:90:d6:bb:b8:5a:17:d2:90:2e:91:b8: 8a:15:41:c9:61:98:b0:bc:e7:04:e8:c1:b9:cb:f6: 24:54:01:8c:96:af:a1:dc:9e:57:1b:9d:4a:c2:af: da:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D5:B2:67:02:01:50:37:38:CE:B6:D2:E2:79:32:E5:23:AA:05:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a6cba60e-ac12-3c39-b8d8-1d89f6e7c9d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:435::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:31:ca:7f:d2:0a:8b:60:81:2f:9e:4c:d7:d9:c0:d8:63:65: 74:b5:50:8c:69:2f:cc:95:ea:7f:9e:07:b2:a5:98:7d:1f:eb: 7d:f3:5d:91:62:3d:6b:7b:02:c0:d9:06:df:e6:83:95:81:d6: 1f:39:9b:16:8b:3a:ef:fc:3c:4f:14:d3:5a:c3:2e:ed:83:ce: ca:26:eb:f6:28:22:5d:18:4c:72:6e:6a:69:7a:f4:e6:23:53: ea:b1:24:a5:bb:92:a2:a6:cf:14:84:0d:fe:68:4b:7e:ef:fa: d8:5f:4c:14:91:22:ef:33:0a:d9:c5:19:dc:a0:bf:b9:23:7c: 58:aa:2b:2c:8a:9a:a6:99:df:02:5c:e6:c2:12:ec:43:0c:6c: 8a:06:22:26:7e:a8:a0:d3:d7:ba:10:a3:ed:25:83:dd:88:87: 43:f1:27:66:c8:c9:c3:21:88:3b:99:66:8c:98:c2:42:36:1b: 03:75:26:60:0a:2c:e0:e3:76:8b:d7:0e:b9:6f:50:8a:ef:9d: a4:26:e0:31:b2:7a:7d:d8:5d:f1:a1:e9:f7:7f:85:b4:ff:71: b1:03:3b:6b:2b:fe:b0:b2:f8:de:2f:f6:82:ac:d0:03:14:77: 31:8a:8a:79:ce:09:e0:db:bb:3b:a8:b4:94:8a:1e:5f:46:ba: 7a:79:42:59 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEll+AOjzhyN5wKEpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDQwMzAxMzAxMVoXDTI1MDcwMjAxMzAxMVowLzEtMCsGA1UEAxMk YTRlNDIxYjEtYzNjZC00ZTI3LWE5ZDMtNzQwM2E3ZGVlOTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH8l+15CV2hS6SXEVkL+L/55u2439Dqq/fD9 GIgeIwI33Ashew6mTI58Iqu2Uxf7qg3StWJ0cKh+duKaDXauKs5YsG4DT6anRVma EyYoPd4kz6R4He5nOGvqeFyy1dnfdYjnMuqEKk2iHfCltbZueHe9mkZW70oWuGZB L4iVPM4wVLa0uLlznDPMMc1EGiDYnOES6WCmEY+lYXY8TPcX6qav4CDE9h+yJYNY rBmbC2zGDOBlHc8VJ+tu30kflE5dNzZ7DwnaetNuKJUZlM8db0kKjhUZkNa7uFoX 0pAukbiKFUHJYZiwvOcE6MG5y/YkVAGMlq+h3J5XG51Kwq/aLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLLVsmcCAVA3OM620uJ5MuUjqgWAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTZjYmE2MGUtYWMxMi0z YzM5LWI4ZDgtMWQ4OWY2ZTdjOWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQ1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALoxyn/SCotggS+eTNfZwNhjZXS1UIxpL8yV6n+eB7KlmH0f633z XZFiPWt7AsDZBt/mg5WB1h85mxaLOu/8PE8U01rDLu2Dzsom6/YoIl0YTHJuaml6 9OYjU+qxJKW7kqKmzxSEDf5oS37v+thfTBSRIu8zCtnFGdygv7kjfFiqKyyKmqaZ 3wJc5sIS7EMMbIoGIiZ+qKDT17oQo+0lg92Ih0PxJ2bIycMhiDuZZoyYwkI2GwN1 JmAKLODjdovXDrlvUIrvnaQm4DGyen3YXfGh6fd/hbT/cbEDO2sr/rCy+N4v9oKs 0AMUdzGKinnOCeDbuzuotJSKHl9Gunp5Qlk= -----END CERTIFICATE-----Generated at Sun Apr 27 12:12:17 2025 by rpki-client