$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8c97ed1-3c86-33be-bfc2-001f656c1b95.roa File: c8c97ed1-3c86-33be-bfc2-001f656c1b95.roa (raw, json) Hash identifier: hTZGWfvyNgR1dxxjWnqHgdhPr9D3l0rYMhHwsWRjeok= Subject key identifier: 76:AB:FD:6F:5C:D8:45:D6:56:4E:CC:E5:C0:50:5D:8A:DE:8E:96:B6 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848CF54E3E65107D324106D6960 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8c97ed1-3c86-33be-bfc2-001f656c1b95.roa Signing time: Sat 08 Feb 2025 02:30:16 +0000 ROA not before: Sat 08 Feb 2025 02:30:16 +0000 ROA not after: Fri 09 May 2025 01:30:16 +0000 asID: 54004 IP address blocks: 2001:470:411::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cf:54:e3:e6:51:07:d3:24:10:6d:69:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 8 02:30:16 2025 GMT Not After : May 9 01:30:16 2025 GMT Subject: CN=13f3f0bd-9a79-4b91-8784-83aa435f5646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5f:d5:bf:d6:84:8c:10:00:cc:39:4d:19:e4: 66:16:2a:82:fd:34:c3:60:cd:33:18:89:3f:43:1f: 1d:05:5d:56:d2:03:b3:fc:a1:17:26:eb:41:50:f7: 57:74:be:15:68:69:33:93:23:4a:38:8c:ff:75:b3: 2a:db:e8:b5:42:14:38:2e:41:4b:64:3a:e6:a8:88: 6d:07:20:c1:f3:52:0f:c1:39:24:9d:c4:7e:2f:d4: f8:e4:f5:63:73:5b:71:ff:42:49:8b:7e:67:67:6c: 2c:8d:88:18:b8:13:e8:4d:31:14:f5:cc:b4:da:75: 1a:3d:dd:96:55:ef:d0:16:bc:38:6a:a1:ab:bb:64: cb:c7:f2:06:bf:47:31:5f:2a:0b:16:f5:29:79:ef: c7:11:ca:bd:60:d8:2c:c2:fc:dd:51:f5:6b:08:77: e4:b0:76:2f:52:ef:bc:ac:cf:dd:ff:0b:64:cb:12: dc:a3:f5:f8:0e:64:85:f8:b0:f0:fc:d4:37:ac:51: fc:09:21:6a:0d:ac:b8:16:27:de:1f:ca:9d:79:0b: 0f:39:b9:aa:cc:b1:dc:93:1e:d7:d2:fe:0e:28:ca: bd:7b:e9:68:35:f7:fd:60:ee:8e:38:fe:76:39:30: af:be:e9:e9:c6:c6:ee:82:3e:63:ae:19:bb:54:c4: b2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:AB:FD:6F:5C:D8:45:D6:56:4E:CC:E5:C0:50:5D:8A:DE:8E:96:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8c97ed1-3c86-33be-bfc2-001f656c1b95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:411::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:8a:7b:dd:c9:ea:66:f7:1c:d0:5c:14:69:d7:d0:de:08:b0: 5a:b1:b8:a0:63:ed:2e:56:fe:62:28:9e:45:ea:c5:60:a0:ab: 1f:d0:84:65:d2:bc:df:84:41:3d:d3:f4:5c:f7:e0:75:2a:0d: c5:df:e2:13:26:80:fe:93:38:0e:69:55:7a:bd:c1:4a:a0:93: f4:f1:36:01:bb:e5:2b:ce:00:f2:eb:2c:75:89:47:69:d0:85: 00:3a:6b:81:96:41:6e:26:78:d9:b7:70:5d:57:72:12:9b:a0: 9c:e8:3b:fd:c8:24:90:f1:55:af:6e:30:da:03:63:b3:70:11: 02:ad:75:dc:40:36:fd:0b:f0:94:f6:b4:ca:25:dd:49:20:1b: 00:58:db:a5:3d:c9:bb:18:a8:85:d5:ef:7d:2d:2f:ed:9f:3e: f3:42:b4:e8:c9:3c:1f:43:03:24:bb:85:1e:b4:38:ff:05:e2: 52:55:b0:a2:41:f5:ac:0a:f1:25:a5:b1:73:64:56:26:54:e3: 41:45:32:6d:46:a4:72:a4:c0:1d:01:d7:7f:17:c9:b4:d2:86: 98:34:58:96:05:ea:82:da:6c:f6:dd:b2:de:9c:31:40:1f:46: e6:b5:98:34:51:83:fe:d6:e8:97:82:1f:04:8c:15:be:11:8a: 33:4b:0b:1c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjPVOPmUQfTJBBtaWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIwODAyMzAxNloXDTI1MDUwOTAxMzAxNlowLzEtMCsGA1UEAxMk MTNmM2YwYmQtOWE3OS00YjkxLTg3ODQtODNhYTQzNWY1NjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlF/Vv9aEjBAAzDlNGeRmFiqC/TTDYM0zGIk/ Qx8dBV1W0gOz/KEXJutBUPdXdL4VaGkzkyNKOIz/dbMq2+i1QhQ4LkFLZDrmqIht ByDB81IPwTkkncR+L9T45PVjc1tx/0JJi35nZ2wsjYgYuBPoTTEU9cy02nUaPd2W Ve/QFrw4aqGru2TLx/IGv0cxXyoLFvUpee/HEcq9YNgswvzdUfVrCHfksHYvUu+8 rM/d/wtkyxLco/X4DmSF+LDw/NQ3rFH8CSFqDay4FifeH8qdeQsPObmqzLHckx7X 0v4OKMq9e+loNff9YO6OOP52OTCvvunpxsbugj5jrhm7VMSyfwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHar/W9c2EXWVk7M5cBQXYrejpa2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzhjOTdlZDEtM2M4Ni0z M2JlLWJmYzItMDAxZjY1NmMxYjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALqKe93J6mb3HNBcFGnX0N4IsFqxuKBj7S5W/mIonkXqxWCgqx/Q hGXSvN+EQT3T9Fz34HUqDcXf4hMmgP6TOA5pVXq9wUqgk/TxNgG75SvOAPLrLHWJ R2nQhQA6a4GWQW4meNm3cF1XchKboJzoO/3IJJDxVa9uMNoDY7NwEQKtddxANv0L 8JT2tMol3UkgGwBY26U9ybsYqIXV730tL+2fPvNCtOjJPB9DAyS7hR60OP8F4lJV sKJB9awK8SWlsXNkViZU40FFMm1GpHKkwB0B138XybTShpg0WJYF6oLabPbdst6c MUAfRua1mDRRg/7W6JeCHwSMFb4RijNLCxw= -----END CERTIFICATE-----Generated at Mon Apr 28 08:05:00 2025 by rpki-client