$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e2c22353-7880-38a5-82e6-1559e24cb966.roa File: e2c22353-7880-38a5-82e6-1559e24cb966.roa (raw, json) Hash identifier: gIZ/QZ+8T4jWIZvE2LzT2y4lzufSd4BvRCh22FpK4qo= Subject key identifier: 5A:E2:2A:03:EA:C0:C2:F3:61:1C:C2:8E:2D:66:FA:FC:F2:AE:49:44 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858493EE27662270BE8248AB9DB80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e2c22353-7880-38a5-82e6-1559e24cb966.roa Signing time: Thu 20 Mar 2025 01:30:14 +0000 ROA not before: Thu 20 Mar 2025 01:30:14 +0000 ROA not after: Wed 18 Jun 2025 01:30:14 +0000 asID: 11476 IP address blocks: 2001:470:53::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:e2:76:62:27:0b:e8:24:8a:b9:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 20 01:30:14 2025 GMT Not After : Jun 18 01:30:14 2025 GMT Subject: CN=4d067e98-402a-4271-b909-fc2f533132c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:45:df:37:da:bb:f9:c4:60:39:61:f3:57:ab: 9c:53:f2:44:29:d5:00:09:11:e0:31:cb:5e:bf:07: 83:68:16:da:6e:16:f7:52:d0:9d:c4:6e:af:11:1c: 0b:ef:b7:7d:c7:48:a7:42:3e:ce:09:14:62:e8:06: c7:38:74:26:ca:96:67:a8:25:2e:10:95:b1:16:03: f9:30:53:ed:34:7a:8d:e9:b7:78:74:3e:08:17:a2: 6d:9b:f8:49:02:c8:bb:c5:d9:08:2e:9a:45:83:52: 07:e3:e2:2a:cf:e9:55:e5:83:7c:fd:9b:9a:1c:29: d9:66:67:77:eb:24:18:c0:b7:97:46:86:aa:d8:8c: c4:4a:28:5a:ec:74:db:2d:42:be:91:92:60:24:d0: aa:34:e6:d5:a4:b0:b5:ee:51:cc:1f:0b:44:c8:e2: 91:d2:87:ff:27:38:5c:15:fd:62:30:00:48:c9:c0: 7e:aa:fa:e1:b0:cb:08:24:c9:c7:86:ac:0f:fe:f1: 72:e7:d4:e8:c3:9b:35:d7:70:a8:77:44:d5:8e:51: e2:d8:46:98:45:d6:2f:cf:73:e2:46:ac:a6:0c:55: 6d:07:d1:57:42:76:0a:2d:ae:81:7c:25:23:7b:13: b9:b7:9c:7d:3e:16:d1:32:96:19:ce:54:e4:83:b4: c2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E2:2A:03:EA:C0:C2:F3:61:1C:C2:8E:2D:66:FA:FC:F2:AE:49:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e2c22353-7880-38a5-82e6-1559e24cb966.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:53::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:54:84:9a:91:56:60:a3:84:88:2f:c6:f1:58:56:c9:a1:9f: bd:a4:e7:22:c9:37:a1:19:9b:68:a3:77:dd:f0:93:e6:8f:dc: 1a:f3:aa:b0:c0:f8:9d:c7:01:4c:75:00:f5:dc:28:38:bd:68: d5:25:22:f8:61:96:e9:20:2d:38:a8:f4:5a:66:bd:34:62:d0: 1b:28:68:dd:37:36:84:a0:a2:02:16:74:f5:01:00:80:c5:8a: ba:9c:e9:fa:fa:94:9d:bf:5d:62:8e:8b:d9:88:49:c8:8e:c1: ac:c2:f3:cd:9c:f5:cf:78:54:e2:a9:3f:02:65:f8:5c:b0:4f: 67:2e:63:54:d5:45:94:66:e0:b3:0d:02:5e:95:82:80:41:f3: 6b:19:02:7d:02:8c:d5:10:a5:21:e3:9f:b0:bf:d1:62:f2:db: f9:00:e8:b6:c5:3c:4a:a1:53:30:c8:9a:67:90:98:bc:5e:47: f9:25:84:62:c5:97:8d:bd:f2:bb:03:0d:ff:14:50:33:c0:fb: a3:42:91:88:50:81:fb:50:a4:32:64:8e:18:cd:5f:6e:e5:50: 4d:15:63:47:e3:f0:de:28:34:3c:4f:08:4c:a0:96:d8:e2:6d: 44:1f:57:e7:81:ff:db:d6:f7:08:8a:e6:fe:f4:c8:ea:45:12: 37:0a:49:f3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEk+4nZiJwvoJIq524AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMyMDAxMzAxNFoXDTI1MDYxODAxMzAxNFowLzEtMCsGA1UEAxMk NGQwNjdlOTgtNDAyYS00MjcxLWI5MDktZmMyZjUzMzEzMmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0XfN9q7+cRgOWHzV6ucU/JEKdUACRHgMcte vweDaBbabhb3UtCdxG6vERwL77d9x0inQj7OCRRi6AbHOHQmypZnqCUuEJWxFgP5 MFPtNHqN6bd4dD4IF6Jtm/hJAsi7xdkILppFg1IH4+Iqz+lV5YN8/ZuaHCnZZmd3 6yQYwLeXRoaq2IzESiha7HTbLUK+kZJgJNCqNObVpLC17lHMHwtEyOKR0of/Jzhc Ff1iMABIycB+qvrhsMsIJMnHhqwP/vFy59Tow5s113Cod0TVjlHi2EaYRdYvz3Pi RqymDFVtB9FXQnYKLa6BfCUjexO5t5x9PhbRMpYZzlTkg7TCuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFriKgPqwMLzYRzCji1m+vzyrklEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZTJjMjIzNTMtNzg4MC0z OGE1LTgyZTYtMTU1OWUyNGNiOTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcABT MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEBUhJqRVmCjhIgvxvFYVsmhn72k5yLJN6EZm2ijd93wk+aP3Brz qrDA+J3HAUx1APXcKDi9aNUlIvhhlukgLTio9FpmvTRi0BsoaN03NoSgogIWdPUB AIDFirqc6fr6lJ2/XWKOi9mISciOwazC882c9c94VOKpPwJl+FywT2cuY1TVRZRm 4LMNAl6VgoBB82sZAn0CjNUQpSHjn7C/0WLy2/kA6LbFPEqhUzDImmeQmLxeR/kl hGLFl4298rsDDf8UUDPA+6NCkYhQgftQpDJkjhjNX27lUE0VY0fj8N4oNDxPCEyg ltjibUQfV+eB/9vW9wiK5v70yOpFEjcKSfM= -----END CERTIFICATE-----Generated at Mon Apr 28 05:35:24 2025 by rpki-client