$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dab4c68b-96d9-351c-a5be-7ed8f4a8b098.roa File: dab4c68b-96d9-351c-a5be-7ed8f4a8b098.roa (raw, json) Hash identifier: n3NHx2Zfl6N8H31c+zUKWQjPCg126I0XURDUI3GlHLs= Subject key identifier: 33:6A:7A:B9:B6:A6:F3:77:04:75:F5:E8:0A:98:AD:98:63:5E:4C:7E Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926CE29F9107F8992C16100 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dab4c68b-96d9-351c-a5be-7ed8f4a8b098.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 151358 IP address blocks: 2001:470:2a9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:ce:29:f9:10:7f:89:92:c1:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=45b46931-a924-418e-acde-09089a29ba57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:da:b4:09:57:cc:8c:2a:6d:ee:84:aa:35:b4: 9d:8f:15:60:75:80:01:96:c2:f1:22:92:96:b6:71: d2:86:f9:64:69:63:63:48:18:9b:e4:64:5c:65:31: 3f:55:d8:8f:01:b2:d9:4b:f4:6b:e1:49:a0:83:d9: 00:25:91:3c:41:e0:f7:97:21:69:93:82:66:ae:f6: b3:ff:ce:21:18:b6:57:d0:8a:0c:d3:f3:34:1a:c6: b4:8f:a7:43:e9:df:16:db:04:5d:6d:8b:9c:22:03: 0f:9a:f2:3e:66:c0:fe:b9:42:01:03:dc:7d:56:79: 7c:f2:0c:0b:36:2c:7d:66:fe:1a:6d:4a:52:6b:5c: a3:e4:18:e5:52:f1:12:eb:ce:b2:5c:a4:91:59:33: 57:bb:23:59:31:e5:59:78:74:17:ef:ab:f2:87:55: 37:51:1c:c7:a2:c5:89:25:0f:32:06:0d:ac:4e:19: 7d:6b:e8:2f:42:3d:db:bd:d7:5d:df:e3:11:63:ce: 85:95:36:20:25:cc:d5:4d:c8:bc:9a:23:3e:9a:42: 6c:e6:7a:95:c8:08:0d:5c:39:11:98:df:96:1e:38: d1:1f:99:2b:93:4e:6d:b7:7f:ed:6e:5c:8d:6e:46: 5d:30:d9:65:0d:c5:90:b7:29:48:1f:8a:e3:2f:ed: c3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:6A:7A:B9:B6:A6:F3:77:04:75:F5:E8:0A:98:AD:98:63:5E:4C:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dab4c68b-96d9-351c-a5be-7ed8f4a8b098.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:e5:4d:b8:4f:7e:34:cc:fe:69:d3:62:91:4c:fc:45:15:58: a4:83:c2:25:8b:21:a1:7b:98:68:17:9c:b8:07:54:72:6f:ff: 68:1b:d1:e7:16:fa:5d:c4:48:12:c4:4e:68:aa:92:42:49:d8: fa:f6:d2:1f:6c:c1:19:18:94:ae:a2:38:91:dc:01:2d:fd:d0: 0c:bf:82:50:1e:74:89:8a:48:f5:65:49:26:4d:bc:72:c3:b1: cc:99:8b:34:61:ee:69:ee:c7:24:fe:4e:8a:4e:a8:f1:34:f3: aa:8f:9e:c8:55:e7:a8:62:9a:8a:fd:5a:fc:9d:cc:76:06:95: e9:66:6c:db:84:62:61:5d:13:bc:a8:fc:7f:a3:1f:29:00:2a: 4e:85:9d:a3:68:32:dd:c5:55:9d:42:3d:2e:f6:e7:0b:0a:a9: 92:a2:38:3d:44:fd:21:26:a1:67:bb:0a:05:4e:52:6d:35:bd: 35:a5:ab:c1:36:95:0f:2a:00:bc:8d:47:02:a7:aa:b4:92:4d: 48:8c:48:3c:15:6d:d0:70:06:e9:cc:e6:b9:4e:5d:03:05:c2: 51:18:71:03:9f:a3:79:29:0c:ad:f0:16:84:7d:de:22:1b:56: 85:78:e4:1a:d5:3b:f2:23:47:fa:05:41:14:76:61:16:d9:4e: 6d:58:92:5f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5Js4p+RB/iZLBYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk NDViNDY5MzEtYTkyNC00MThlLWFjZGUtMDkwODlhMjliYTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9q0CVfMjCpt7oSqNbSdjxVgdYABlsLxIpKW tnHShvlkaWNjSBib5GRcZTE/VdiPAbLZS/Rr4Umgg9kAJZE8QeD3lyFpk4Jmrvaz /84hGLZX0IoM0/M0Gsa0j6dD6d8W2wRdbYucIgMPmvI+ZsD+uUIBA9x9Vnl88gwL Nix9Zv4abUpSa1yj5BjlUvES686yXKSRWTNXuyNZMeVZeHQX76vyh1U3URzHosWJ JQ8yBg2sThl9a+gvQj3bvddd3+MRY86FlTYgJczVTci8miM+mkJs5nqVyAgNXDkR mN+WHjjRH5krk05tt3/tblyNbkZdMNllDcWQtylIH4rjL+3DLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDNqerm2pvN3BHX16AqYrZhjXkx+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZGFiNGM2OGItOTZkOS0z NTFjLWE1YmUtN2VkOGY0YThiMDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKp MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD/lTbhPfjTM/mnTYpFM/EUVWKSDwiWLIaF7mGgXnLgHVHJv/2gb 0ecW+l3ESBLETmiqkkJJ2Pr20h9swRkYlK6iOJHcAS390Ay/glAedImKSPVlSSZN vHLDscyZizRh7mnuxyT+TopOqPE086qPnshV56himor9WvydzHYGlelmbNuEYmFd E7yo/H+jHykAKk6FnaNoMt3FVZ1CPS725wsKqZKiOD1E/SEmoWe7CgVOUm01vTWl q8E2lQ8qALyNRwKnqrSSTUiMSDwVbdBwBunM5rlOXQMFwlEYcQOfo3kpDK3wFoR9 3iIbVoV45BrVO/IjR/oFQRR2YRbZTm1Ykl8= -----END CERTIFICATE-----Generated at Sun Apr 27 12:13:14 2025 by rpki-client