$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/acd41c21-9c7d-35f6-b33b-a7eddd68aa60.roa File: acd41c21-9c7d-35f6-b33b-a7eddd68aa60.roa (raw, json) Hash identifier: Ru+AgkXVaUX02JRAGqrv7xm3/dGZAvod1Zn5tgsfIuw= Subject key identifier: 69:25:F4:93:52:6B:51:8C:03:BC:27:D4:0D:D7:70:45:F9:8A:88:21 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926C6705D1D358BF33B3080 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/acd41c21-9c7d-35f6-b33b-a7eddd68aa60.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 8057 IP address blocks: 2001:470:1c2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:c6:70:5d:1d:35:8b:f3:3b:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=2001846c-61fc-483d-9b94-83a5ff1af2e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e5:7b:96:c1:5d:c9:62:a8:94:9b:03:4c:f4: 5d:68:cc:80:d1:56:0a:51:fb:53:59:58:30:d9:b5: 0d:b7:eb:4e:e0:41:1f:b1:3e:a7:2c:2c:29:6b:8d: 97:88:21:d4:93:2c:da:4b:ba:e1:de:b3:19:49:31: aa:b2:e7:0d:78:36:51:11:93:59:6a:f0:f8:30:41: 21:a8:12:45:6a:2f:c5:d9:4e:17:43:bd:a8:26:4b: 41:a5:88:c6:af:21:36:e1:c3:3f:06:43:2b:50:1e: 2e:32:f4:99:0f:b1:1e:c2:31:24:e2:59:d5:3b:33: 00:58:e4:78:6a:c6:4e:4b:50:99:70:0c:80:ea:4d: 1e:02:16:41:e4:55:f5:8c:94:9a:ec:66:7e:10:72: dd:67:e8:79:31:96:ed:34:06:e8:45:6e:65:a1:5e: a0:66:9b:7d:0d:fe:3e:be:0e:4d:82:bf:98:e7:07: bc:aa:11:51:e0:31:cf:82:6c:90:9a:c2:4e:be:3d: 89:5d:58:e0:e5:fb:c3:e7:88:6c:37:6a:31:6d:1a: 08:b8:53:bc:fb:44:19:00:7c:9b:06:4c:df:a4:30: 59:b5:af:77:cc:34:4d:bf:1d:cc:41:4d:e3:34:65: ec:8f:80:bb:34:76:bb:e0:18:69:b3:f4:40:35:4b: 84:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:25:F4:93:52:6B:51:8C:03:BC:27:D4:0D:D7:70:45:F9:8A:88:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/acd41c21-9c7d-35f6-b33b-a7eddd68aa60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1c2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:48:ca:7c:51:4e:37:33:7e:1c:43:59:e2:12:cc:2c:15:d5: c3:6e:76:e9:f3:b9:0d:7b:c6:1d:c2:19:40:45:23:8f:39:4c: e0:00:cb:c0:14:44:3b:9f:65:52:de:0f:4b:12:da:1a:10:36: 4d:b8:e3:b5:5a:ec:8a:35:c8:08:a3:d8:ad:57:bf:68:e5:d5: 2b:40:1f:09:7d:f3:dd:88:78:ca:59:7b:d7:a2:05:b3:28:32: 82:86:ce:e9:df:4d:69:f4:fb:69:1f:73:47:21:d0:58:9e:1e: da:a8:25:5f:6b:b4:51:f7:02:a5:10:4e:3d:8f:a7:ee:02:f7: 41:49:fb:56:eb:57:4b:be:53:60:e2:3d:ff:76:a0:db:67:64: 02:04:90:a2:58:cb:21:94:f1:1f:1c:2d:67:9c:4b:35:6d:76: 12:51:51:da:61:c4:3b:fe:0c:27:d8:ad:cd:53:df:22:b2:7a: ff:b0:19:f7:a4:4e:9a:ea:71:51:ce:83:4c:80:b1:10:e3:36: ab:eb:f3:31:df:a2:78:cf:45:86:cc:3d:b3:e8:7d:76:9f:a9: c9:c0:c9:23:ea:a6:26:1b:54:8b:ee:5d:c1:87:31:49:9f:5b: 70:dd:f9:ec:f3:83:d4:57:ef:90:ea:67:2d:95:52:9e:09:e4: a5:47:17:2d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JsZwXR01i/M7MIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk MjAwMTg0NmMtNjFmYy00ODNkLTliOTQtODNhNWZmMWFmMmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOV7lsFdyWKolJsDTPRdaMyA0VYKUftTWVgw 2bUNt+tO4EEfsT6nLCwpa42XiCHUkyzaS7rh3rMZSTGqsucNeDZREZNZavD4MEEh qBJFai/F2U4XQ72oJktBpYjGryE24cM/BkMrUB4uMvSZD7EewjEk4lnVOzMAWOR4 asZOS1CZcAyA6k0eAhZB5FX1jJSa7GZ+EHLdZ+h5MZbtNAboRW5loV6gZpt9Df4+ vg5Ngr+Y5we8qhFR4DHPgmyQmsJOvj2JXVjg5fvD54hsN2oxbRoIuFO8+0QZAHyb BkzfpDBZta93zDRNvx3MQU3jNGXsj4C7NHa74Bhps/RANUuEMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGkl9JNSa1GMA7wn1A3XcEX5ioghMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYWNkNDFjMjEtOWM3ZC0z NWY2LWIzM2ItYTdlZGRkNjhhYTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACBIynxRTjczfhxDWeISzCwV1cNudunzuQ17xh3CGUBFI485TOAA y8AURDufZVLeD0sS2hoQNk2447Va7Io1yAij2K1Xv2jl1StAHwl9892IeMpZe9ei BbMoMoKGzunfTWn0+2kfc0ch0FieHtqoJV9rtFH3AqUQTj2Pp+4C90FJ+1brV0u+ U2DiPf92oNtnZAIEkKJYyyGU8R8cLWecSzVtdhJRUdphxDv+DCfYrc1T3yKyev+w GfekTprqcVHOg0yAsRDjNqvr8zHfonjPRYbMPbPofXafqcnAySPqpiYbVIvuXcGH MUmfW3Dd+ezzg9RX75DqZy2VUp4J5KVHFy0= -----END CERTIFICATE-----Generated at Sun Apr 27 09:15:06 2025 by rpki-client