$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aafa7218-9f55-3fdd-b76a-aefa27a87775.roa File: aafa7218-9f55-3fdd-b76a-aefa27a87775.roa (raw, json) Hash identifier: Vwy1Tx1iBVwjmGxhJZX7mp38M81lQsUJwDzmGHArHEA= Subject key identifier: 4C:33:C8:0A:47:E4:46:FA:83:B7:C8:83:21:C0:91:D3:44:D9:C7:D5 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858495EEEF28B7DA5ADD8F4486900 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aafa7218-9f55-3fdd-b76a-aefa27a87775.roa Signing time: Mon 31 Mar 2025 13:00:59 +0000 ROA not before: Mon 31 Mar 2025 13:00:59 +0000 ROA not after: Sun 29 Jun 2025 13:00:59 +0000 asID: 40300 IP address blocks: 2001:470:266::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:ee:f2:8b:7d:a5:ad:d8:f4:48:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 31 13:00:59 2025 GMT Not After : Jun 29 13:00:59 2025 GMT Subject: CN=28f4bff6-9c07-4a89-82d3-86f12d16c7ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f1:a5:91:1f:14:16:45:e4:80:ab:96:a2:59: f9:09:3e:34:6b:04:2e:e3:fc:f5:ff:9f:e8:b6:3e: 08:ce:17:9e:f4:f2:c4:0b:82:9b:3b:d0:b7:95:d4: 3c:31:06:80:00:f8:12:0d:8d:9c:a3:73:33:5f:ef: 77:62:6d:ac:0f:62:7d:49:a7:27:bd:5b:bd:41:8a: be:91:89:47:2c:69:cd:d3:7f:dc:c5:07:29:fd:0d: 9f:72:0b:1e:36:9d:52:d2:52:9f:48:55:db:5f:90: 18:11:e6:3e:40:5d:ea:dd:2a:25:11:f2:54:3c:e8: ba:e6:34:2e:67:53:6f:1a:f4:e9:af:cb:51:48:00: f6:21:97:d3:94:f8:c6:6e:58:3c:b6:03:5e:e4:ec: 78:03:a6:fb:5c:10:d3:34:5e:1c:26:13:75:a6:80: 7d:1b:e3:50:1b:43:3c:18:7c:bd:f9:c6:bf:c2:e6: f4:9c:20:86:2e:8e:17:28:18:33:e6:0c:26:0c:36: ef:d0:a6:cb:65:50:d9:b0:66:82:c0:c5:b2:48:49: e3:4f:bd:e9:41:b0:8e:b9:42:1a:23:77:23:cd:4e: d9:42:58:07:3d:44:e2:54:16:f2:15:9b:5a:d1:10: 55:fc:09:2b:83:67:e6:49:4c:13:b2:03:f6:e0:56: fa:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:33:C8:0A:47:E4:46:FA:83:B7:C8:83:21:C0:91:D3:44:D9:C7:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aafa7218-9f55-3fdd-b76a-aefa27a87775.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:266::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:ea:f4:b5:58:00:07:2c:cc:2a:87:02:98:02:e3:64:26:da: c3:3d:7e:f1:5f:d9:a5:eb:b2:52:1c:ab:82:61:08:d3:5d:01: 2b:2d:77:7f:d6:32:99:51:6b:51:32:b8:2f:59:08:79:57:fe: b7:d9:7f:b3:22:7d:ec:ee:64:87:7d:45:9e:9a:6e:15:dc:4f: 08:2d:8b:56:84:be:7c:ce:62:99:11:6f:6b:eb:20:29:c6:68: 65:18:bc:44:39:2d:a2:c4:aa:50:48:ad:d7:c8:d1:04:d6:dd: ce:43:37:6e:35:b4:89:35:bf:f6:13:3a:ac:ce:7e:8e:42:3e: f5:b2:e4:a5:3f:5f:4b:e6:6c:75:4d:d6:4f:ea:b6:60:79:61: 74:7b:af:47:71:e7:b0:88:98:fc:16:20:bd:8c:98:8a:33:57: d4:09:61:15:24:28:64:8a:44:f3:0e:df:c3:01:5e:f2:93:b2: dd:99:46:4f:a3:49:9e:86:38:15:ad:32:11:5c:6f:ae:75:0f: d0:e3:4a:b0:79:1d:c2:c0:47:13:cc:c0:41:d8:de:53:42:99: 06:4f:f1:47:e7:ad:11:b9:15:11:ec:c6:2c:91:71:46:7a:3e: 5e:91:29:32:e3:4e:52:49:e7:e8:d7:78:fd:8e:df:14:5e:3e: a5:24:39:af -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEle7vKLfaWt2PRIaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk MjhmNGJmZjYtOWMwNy00YTg5LTgyZDMtODZmMTJkMTZjN2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/GlkR8UFkXkgKuWoln5CT40awQu4/z1/5/o tj4Izhee9PLEC4KbO9C3ldQ8MQaAAPgSDY2co3MzX+93Ym2sD2J9SacnvVu9QYq+ kYlHLGnN03/cxQcp/Q2fcgseNp1S0lKfSFXbX5AYEeY+QF3q3SolEfJUPOi65jQu Z1NvGvTpr8tRSAD2IZfTlPjGblg8tgNe5Ox4A6b7XBDTNF4cJhN1poB9G+NQG0M8 GHy9+ca/wub0nCCGLo4XKBgz5gwmDDbv0KbLZVDZsGaCwMWySEnjT73pQbCOuUIa I3cjzU7ZQlgHPUTiVBbyFZta0RBV/Akrg2fmSUwTsgP24Fb6QQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEwzyApH5Eb6g7fIgyHAkdNE2cfVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYWFmYTcyMTgtOWY1NS0z ZmRkLWI3NmEtYWVmYTI3YTg3Nzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFjq9LVYAAcszCqHApgC42Qm2sM9fvFf2aXrslIcq4JhCNNdASst d3/WMplRa1EyuC9ZCHlX/rfZf7MifezuZId9RZ6abhXcTwgti1aEvnzOYpkRb2vr ICnGaGUYvEQ5LaLEqlBIrdfI0QTW3c5DN241tIk1v/YTOqzOfo5CPvWy5KU/X0vm bHVN1k/qtmB5YXR7r0dx57CImPwWIL2MmIozV9QJYRUkKGSKRPMO38MBXvKTst2Z Rk+jSZ6GOBWtMhFcb651D9DjSrB5HcLARxPMwEHY3lNCmQZP8UfnrRG5FRHsxiyR cUZ6Pl6RKTLjTlJJ5+jXeP2O3xRePqUkOa8= -----END CERTIFICATE-----Generated at Sun Apr 27 02:53:19 2025 by rpki-client