$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d777fcbb-172a-3a40-a10d-f51fd828f583.roa File: d777fcbb-172a-3a40-a10d-f51fd828f583.roa (raw, json) Hash identifier: gnwGNnA7gzP44LzSt8Jj4YKHC6XV2lXYKHmD8/EfPzw= Subject key identifier: 7D:83:A0:A9:0E:BA:36:BB:12:20:CA:BC:25:83:15:34:28:8D:05:A1 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926C8A1FE082574AEF98A80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d777fcbb-172a-3a40-a10d-f51fd828f583.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 212955 IP address blocks: 2001:470:23d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:c8:a1:fe:08:25:74:ae:f9:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=a1df25b7-6323-467e-8427-37878b099135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e2:3e:c6:b6:4d:30:c5:1f:85:bc:d8:85:4f: 67:c7:3c:72:a8:22:2f:3b:16:7a:5d:19:e0:b9:09: c7:7f:50:45:d8:ef:ed:ad:68:5f:c0:91:d4:72:40: cd:b6:de:37:68:c8:ef:8f:e2:1f:5d:4d:21:16:66: ab:cf:77:5f:6e:7f:35:66:f8:a6:21:c1:05:06:db: b7:46:fe:9d:e7:0e:ec:1d:34:7b:3f:90:be:60:19: f4:67:14:b4:15:f7:78:2b:4a:e0:7b:7c:f3:91:73: 22:00:5e:ab:f2:67:a6:66:fb:1d:aa:5c:66:b7:d4: 27:37:84:d6:1a:80:31:95:07:ae:98:1b:95:9b:32: 11:9b:05:34:f5:fe:94:d0:e8:ef:e2:e9:59:14:16: 1a:e2:a3:05:08:ca:5e:fd:b0:8a:50:91:aa:56:0f: 33:1d:9c:8d:35:10:ec:48:6a:57:c9:fb:a7:67:ed: 05:6e:ea:a4:30:d2:55:d7:c7:83:26:1c:ab:09:ae: f2:1a:48:7e:af:cf:1a:c2:de:6f:27:fc:b0:a1:7c: 07:1d:64:eb:b1:89:9e:7a:96:1f:b3:6f:42:bc:b3: 36:b3:03:56:89:81:f1:2a:98:67:af:11:49:ab:5b: 41:77:33:f2:29:b4:c5:16:38:d3:38:7c:23:fd:5e: 23:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:83:A0:A9:0E:BA:36:BB:12:20:CA:BC:25:83:15:34:28:8D:05:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d777fcbb-172a-3a40-a10d-f51fd828f583.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:23d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:8b:11:f6:f5:e9:c9:15:f7:30:a9:51:60:7c:13:62:f4:65: 7a:6b:75:bd:e0:0b:e2:f4:35:af:a5:9f:2a:f9:9e:9b:8d:36: b9:85:48:b5:51:6b:a1:10:b1:fc:e0:86:ec:93:cf:fc:41:15: 82:af:1e:75:94:28:f5:c2:22:5a:d9:eb:83:19:c2:34:23:3f: 11:43:94:ae:c1:92:e2:66:c0:d9:07:3c:1b:03:07:70:c4:cd: 85:fd:68:e1:fa:67:49:aa:d2:a6:7a:9a:a3:36:fc:6c:6b:3f: 0e:0a:25:1b:3c:85:38:56:8a:5a:b5:f4:82:dd:18:df:2b:26: 0f:d2:1d:4e:d9:da:ce:40:ac:39:1d:7e:94:c6:3d:3c:fe:ce: 24:b9:df:52:8f:66:d7:46:41:4c:ee:d1:35:2c:7a:92:fd:10: 26:a0:00:b1:6d:30:52:f2:56:e1:89:b1:9d:f9:63:97:bc:91: e0:3d:a9:54:54:d1:c9:da:c6:78:60:3f:26:17:09:dd:32:e8: 50:16:1b:c0:77:5a:c9:8d:d5:c1:73:31:61:ea:86:67:f6:0c: 99:18:cd:f7:f6:9d:ed:21:5d:ae:f6:f5:fd:b9:7d:4e:a8:8a: f6:6a:61:10:4c:c4:6c:90:8d:4b:e2:c4:55:1d:ef:d4:ab:30: 78:00:56:79 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5Jsih/ggldK75ioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk YTFkZjI1YjctNjMyMy00NjdlLTg0MjctMzc4NzhiMDk5MTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueI+xrZNMMUfhbzYhU9nxzxyqCIvOxZ6XRng uQnHf1BF2O/trWhfwJHUckDNtt43aMjvj+IfXU0hFmarz3dfbn81ZvimIcEFBtu3 Rv6d5w7sHTR7P5C+YBn0ZxS0Ffd4K0rge3zzkXMiAF6r8memZvsdqlxmt9QnN4TW GoAxlQeumBuVmzIRmwU09f6U0Ojv4ulZFBYa4qMFCMpe/bCKUJGqVg8zHZyNNRDs SGpXyfunZ+0FbuqkMNJV18eDJhyrCa7yGkh+r88awt5vJ/ywoXwHHWTrsYmeepYf s29CvLM2swNWiYHxKphnrxFJq1tBdzPyKbTFFjjTOHwj/V4jywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH2DoKkOuja7EiDKvCWDFTQojQWhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDc3N2ZjYmItMTcyYS0z YTQwLWExMGQtZjUxZmQ4MjhmNTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALaLEfb16ckV9zCpUWB8E2L0ZXprdb3gC+L0Na+lnyr5npuNNrmF SLVRa6EQsfzghuyTz/xBFYKvHnWUKPXCIlrZ64MZwjQjPxFDlK7BkuJmwNkHPBsD B3DEzYX9aOH6Z0mq0qZ6mqM2/GxrPw4KJRs8hThWilq19ILdGN8rJg/SHU7Z2s5A rDkdfpTGPTz+ziS531KPZtdGQUzu0TUsepL9ECagALFtMFLyVuGJsZ35Y5e8keA9 qVRU0cnaxnhgPyYXCd0y6FAWG8B3WsmN1cFzMWHqhmf2DJkYzff2ne0hXa729f25 fU6oivZqYRBMxGyQjUvixFUd79SrMHgAVnk= -----END CERTIFICATE-----Generated at Sun Apr 27 17:45:43 2025 by rpki-client