$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8d0cce3-234e-378c-aa79-f69293d49938.roa File: c8d0cce3-234e-378c-aa79-f69293d49938.roa (raw, json) Hash identifier: bZntVO4gswYYtu83DpIDhahkRTO2QtEBC0aQkWy+sow= Subject key identifier: C9:84:04:03:D7:66:76:0B:20:C4:33:06:C1:45:14:00:EE:29:32:DE Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858498339BF32A0FF3447FC14A780 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8d0cce3-234e-378c-aa79-f69293d49938.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 59953 IP address blocks: 2001:470:3f7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:bf:32:a0:ff:34:47:fc:14:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=38efa4af-d378-4435-b4af-bdf08be0f06b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e6:b8:df:79:6f:02:05:f2:7e:82:c9:30:9b: ce:0b:f7:c8:71:13:97:5e:61:9c:1d:7d:13:9f:38: 17:50:af:61:6e:1b:02:d2:17:dd:e7:75:33:09:fa: dc:16:6e:c7:9e:4a:d9:8b:b7:57:6e:d6:9d:96:1b: 43:4e:2a:cc:ff:5a:f5:3a:4e:79:79:5a:44:44:f9: b0:66:8f:19:b1:82:b9:a4:3e:d1:a9:b1:82:a9:42: 4f:ff:b1:46:a1:fb:17:a5:39:38:02:e1:32:21:f0: 26:fd:fd:97:2d:f7:74:22:84:c7:19:b1:eb:53:1f: e4:2b:06:03:9a:c9:69:bf:2f:58:10:20:a4:1d:f4: 61:42:10:91:8f:90:0a:e4:3d:5e:dd:e5:48:62:0d: 17:18:85:46:08:81:65:14:75:1f:96:ea:b8:ed:6e: af:de:c3:cf:2b:f3:aa:30:da:e5:25:60:83:da:ee: 6f:b3:0c:dd:f2:ca:eb:f5:c2:82:56:5c:42:17:41: e1:d8:be:e2:7c:1c:f9:ce:70:0e:e4:a5:06:ea:ab: 34:8f:2e:6c:4e:68:6b:54:3e:02:93:a5:61:6a:24: 21:c7:92:54:c4:bf:41:b9:7e:6c:74:4e:97:c4:0d: 32:a9:cb:54:f8:d5:1e:eb:3f:dc:0e:f4:c1:5d:34: ad:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:84:04:03:D7:66:76:0B:20:C4:33:06:C1:45:14:00:EE:29:32:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8d0cce3-234e-378c-aa79-f69293d49938.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3f7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:e0:2e:dc:be:70:aa:60:5c:de:71:43:a6:8d:d6:4e:f8:e9: 02:52:76:50:0d:cb:29:59:4f:98:21:00:45:23:f1:29:a6:34: 22:e7:50:a2:c6:1c:cd:19:14:c9:ba:95:05:c4:d3:1a:db:ee: df:9f:ec:16:66:75:4a:c7:98:33:6a:41:04:eb:77:bd:1b:f5: 5f:0a:05:55:e3:19:d6:0f:60:f4:72:29:90:10:3c:93:02:16: 99:0f:db:1b:c0:3e:ed:ef:c2:6d:b1:73:91:b1:b1:ec:eb:37: e0:b7:d9:6f:cf:9b:5f:7a:77:92:01:e1:10:b0:72:c3:a1:89: 35:66:9f:cc:89:2b:39:56:71:70:c6:61:f8:74:44:6e:68:7c: c4:ab:7f:d1:9b:51:f2:4a:61:6c:fc:ec:10:16:55:ea:7a:a6: d6:eb:9f:93:ab:63:05:a6:f0:c6:3a:8a:f7:32:2e:ce:45:56: 63:d6:66:e3:e3:a3:af:08:d8:e1:9c:06:dd:2c:2d:13:eb:c7: ed:41:5b:7b:bc:69:e8:7c:14:34:e7:16:d3:c3:ae:70:fe:06: 8d:6c:70:49:7a:09:80:32:ac:32:6a:d9:f5:4f:e8:a4:74:a4: 0f:74:21:5f:19:3f:c9:90:2d:de:13:44:98:ec:e5:11:87:50: bb:c0:3a:77 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmDOb8yoP80R/wUp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk MzhlZmE0YWYtZDM3OC00NDM1LWI0YWYtYmRmMDhiZTBmMDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOa433lvAgXyfoLJMJvOC/fIcROXXmGcHX0T nzgXUK9hbhsC0hfd53UzCfrcFm7HnkrZi7dXbtadlhtDTirM/1r1Ok55eVpERPmw Zo8ZsYK5pD7RqbGCqUJP/7FGofsXpTk4AuEyIfAm/f2XLfd0IoTHGbHrUx/kKwYD mslpvy9YECCkHfRhQhCRj5AK5D1e3eVIYg0XGIVGCIFlFHUfluq47W6v3sPPK/Oq MNrlJWCD2u5vswzd8srr9cKCVlxCF0Hh2L7ifBz5znAO5KUG6qs0jy5sTmhrVD4C k6VhaiQhx5JUxL9BuX5sdE6XxA0yqctU+NUe6z/cDvTBXTStWQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMmEBAPXZnYLIMQzBsFFFADuKTLeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzhkMGNjZTMtMjM0ZS0z NzhjLWFhNzktZjY5MjkzZDQ5OTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAP3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB3gLty+cKpgXN5xQ6aN1k746QJSdlANyylZT5ghAEUj8SmmNCLn UKLGHM0ZFMm6lQXE0xrb7t+f7BZmdUrHmDNqQQTrd70b9V8KBVXjGdYPYPRyKZAQ PJMCFpkP2xvAPu3vwm2xc5GxsezrN+C32W/Pm196d5IB4RCwcsOhiTVmn8yJKzlW cXDGYfh0RG5ofMSrf9GbUfJKYWz87BAWVep6ptbrn5OrYwWm8MY6ivcyLs5FVmPW ZuPjo68I2OGcBt0sLRPrx+1BW3u8aeh8FDTnFtPDrnD+Bo1scEl6CYAyrDJq2fVP 6KR0pA90IV8ZP8mQLd4TRJjs5RGHULvAOnc= -----END CERTIFICATE-----Generated at Mon Apr 28 12:43:52 2025 by rpki-client