$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a75561fc-8a75-3c11-9f9b-a79c5387ff20.roa File: a75561fc-8a75-3c11-9f9b-a79c5387ff20.roa (raw, json) Hash identifier: 7S1C4CN1eAtNut+Bls9P6XLriBAsXqHkvXqOaWWslY0= Subject key identifier: B4:DC:43:89:8C:8F:8E:F1:68:53:DF:49:6C:E0:B6:96:DB:F3:AC:4A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858496B8D6265E9EBE177EE267B90 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a75561fc-8a75-3c11-9f9b-a79c5387ff20.roa Signing time: Sat 05 Apr 2025 01:30:11 +0000 ROA not before: Sat 05 Apr 2025 01:30:11 +0000 ROA not after: Fri 04 Jul 2025 01:30:11 +0000 asID: 48265 IP address blocks: 2001:470:43a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6b:8d:62:65:e9:eb:e1:77:ee:26:7b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 5 01:30:11 2025 GMT Not After : Jul 4 01:30:11 2025 GMT Subject: CN=bb29de4d-b2f0-4cff-9f8c-8b1978c38f9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:8d:b9:75:c5:02:32:6e:22:b4:a8:61:8d:71: d0:f4:84:55:95:cb:8f:16:2d:08:17:ea:ba:21:63: 8d:30:07:c4:d2:35:f9:bb:08:10:79:52:27:bc:64: ac:38:e5:f7:49:b9:41:60:cb:5a:52:e3:13:d8:9d: 95:5d:ad:18:53:e5:17:92:09:81:fe:6b:60:60:0c: 3e:8d:f3:17:ff:88:8b:09:f1:33:5e:48:a7:a7:f9: 95:8a:70:74:c1:85:87:6c:b5:f7:cb:62:71:79:f7: c4:b9:ae:8b:9a:9b:cd:4e:47:33:e8:e4:68:85:20: f2:e0:35:9d:d7:5d:e6:92:69:8e:44:7a:ed:2f:f5: 09:83:c1:4b:fc:8b:34:f7:50:fa:75:76:0c:ed:98: 29:07:67:4b:c8:2a:0f:b9:c3:dc:3a:62:10:c7:8f: 55:f7:56:49:9e:5a:88:23:cb:7c:2b:1f:57:33:0d: 16:dc:4f:7e:33:93:83:f5:2b:00:cd:71:52:8a:8a: 76:fa:c0:ff:5b:15:90:92:43:a0:92:fc:21:90:1e: 0d:b2:9a:36:ea:39:60:5e:76:67:3f:06:f9:89:db: 71:b0:d7:d4:dc:76:d0:43:ff:bd:92:d6:bf:64:67: b2:4b:cf:77:ae:66:8b:63:d4:cd:65:f8:65:9d:99: 31:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:DC:43:89:8C:8F:8E:F1:68:53:DF:49:6C:E0:B6:96:DB:F3:AC:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a75561fc-8a75-3c11-9f9b-a79c5387ff20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:43a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:1c:56:e8:56:7d:ee:b7:fd:b3:ab:43:7d:ec:8c:63:d8:03: 2c:ed:72:84:9d:f1:77:47:12:b4:fc:a8:a3:05:9d:bf:b0:c2: 8b:db:f2:f5:9b:b3:d6:7e:7e:15:75:20:e0:0f:a0:04:01:62: f2:a1:63:ba:3d:f4:97:d1:7b:ab:52:f4:7a:0d:c6:1e:08:72: 66:20:d9:dd:34:ac:56:eb:16:34:d5:0d:62:52:8a:7d:4c:01: 10:ed:26:61:ec:59:20:a3:d3:50:a6:d7:c5:3f:13:5c:0b:4f: 96:97:19:a0:be:71:09:6b:f8:09:b1:de:9e:e9:c1:b6:b1:2b: 2c:8e:bd:f5:8d:54:81:fb:da:4c:4f:c5:dd:e3:89:93:b4:6e: 5b:31:47:40:94:fa:9c:bd:6a:84:01:a2:31:c5:2d:23:5b:f4: 06:9b:a4:3d:46:b4:37:fa:4d:f5:23:cc:aa:e2:e9:c7:f4:13: 3b:c8:44:8e:06:20:82:8b:4a:93:f2:19:c6:fe:2a:96:ea:7c: 6b:3e:f1:d1:e0:4c:84:34:aa:d0:47:9c:0c:bf:de:2c:89:35: f5:9b:93:9c:75:6c:61:6d:95:77:62:c2:09:87:c9:a5:d8:0a: c6:d3:ce:f2:67:81:61:63:e3:47:d3:a7:48:45:59:7f:93:2c: 57:20:a3:0d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElrjWJl6evhd+4me5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDQwNTAxMzAxMVoXDTI1MDcwNDAxMzAxMVowLzEtMCsGA1UEAxMk YmIyOWRlNGQtYjJmMC00Y2ZmLTlmOGMtOGIxOTc4YzM4ZjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhY25dcUCMm4itKhhjXHQ9IRVlcuPFi0IF+q6 IWONMAfE0jX5uwgQeVInvGSsOOX3SblBYMtaUuMT2J2VXa0YU+UXkgmB/mtgYAw+ jfMX/4iLCfEzXkinp/mVinB0wYWHbLX3y2JxeffEua6LmpvNTkcz6ORohSDy4DWd 113mkmmORHrtL/UJg8FL/Is091D6dXYM7ZgpB2dLyCoPucPcOmIQx49V91ZJnlqI I8t8Kx9XMw0W3E9+M5OD9SsAzXFSiop2+sD/WxWQkkOgkvwhkB4Nspo26jlgXnZn Pwb5idtxsNfU3HbQQ/+9kta/ZGeyS893rmaLY9TNZfhlnZkxewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLTcQ4mMj47xaFPfSWzgtpbb86xKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTc1NTYxZmMtOGE3NS0z YzExLTlmOWItYTc5YzUzODdmZjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQ6 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJUcVuhWfe63/bOrQ33sjGPYAyztcoSd8XdHErT8qKMFnb+wwovb 8vWbs9Z+fhV1IOAPoAQBYvKhY7o99JfRe6tS9HoNxh4IcmYg2d00rFbrFjTVDWJS in1MARDtJmHsWSCj01Cm18U/E1wLT5aXGaC+cQlr+Amx3p7pwbaxKyyOvfWNVIH7 2kxPxd3jiZO0blsxR0CU+py9aoQBojHFLSNb9AabpD1GtDf6TfUjzKri6cf0EzvI RI4GIIKLSpPyGcb+KpbqfGs+8dHgTIQ0qtBHnAy/3iyJNfWbk5x1bGFtlXdiwgmH yaXYCsbTzvJngWFj40fTp0hFWX+TLFcgow0= -----END CERTIFICATE-----Generated at Sun Apr 27 09:16:08 2025 by rpki-client