$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e58cd4a2-0bd5-3888-8c83-a306664c73c1.roa File: e58cd4a2-0bd5-3888-8c83-a306664c73c1.roa (raw, json) Hash identifier: ikyxPxd0k8zCbt2hgpxi9XcJQfDBFSCVB0oyBzoe7uE= Subject key identifier: 9B:1F:15:9E:C0:CD:F3:F8:1B:A0:28:6C:CA:94:F0:2A:B1:52:A0:74 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849446943979C7FCE2AB6038200 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e58cd4a2-0bd5-3888-8c83-a306664c73c1.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 215444 IP address blocks: 2001:470:33c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:43:97:9c:7f:ce:2a:b6:03:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=2bfe3e9c-6aae-4143-8204-c4d9ea01069b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e3:2b:68:89:ea:a3:3b:e3:12:ee:f3:86:cb: 84:06:8b:2d:66:a6:03:ab:61:ef:38:13:59:33:05: d5:5a:09:55:dc:1b:83:5c:5f:4d:5f:d6:3f:c1:ea: 77:39:fe:9b:22:27:ba:45:56:af:0a:9e:70:46:a8: bf:19:0a:06:30:02:2f:fc:55:28:ee:44:ea:82:1f: e1:2b:0b:61:91:2d:d2:e5:a0:49:82:ef:ed:eb:e3: 8a:dd:b7:d0:bf:a3:09:43:dd:31:74:c9:2e:23:11: a7:5e:d3:9d:14:25:82:e2:da:7f:73:e6:08:88:37: bb:3e:ae:84:56:2f:f4:29:c9:e0:17:4d:f9:25:59: 75:ff:20:c6:57:df:25:9b:3a:b0:70:05:1c:d7:78: 0b:44:34:5f:44:1f:26:11:6b:a2:9b:41:53:cf:f7: c6:e3:fe:b2:40:6f:39:34:49:84:1e:c1:75:f3:b1: 6b:09:fc:23:77:79:98:2e:46:1c:3c:8a:87:d9:1a: 8f:1b:06:35:d8:34:34:fc:d8:ec:dc:ff:a4:48:ea: fe:38:56:d4:cc:74:20:7d:6b:40:f9:cd:a3:33:ab: 1a:55:dd:38:63:50:3f:41:cc:04:0b:00:01:9a:61: bc:89:db:68:42:07:40:37:37:80:0f:87:2e:8a:b8: eb:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:1F:15:9E:C0:CD:F3:F8:1B:A0:28:6C:CA:94:F0:2A:B1:52:A0:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e58cd4a2-0bd5-3888-8c83-a306664c73c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:33c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:f8:d8:e5:0a:1c:8e:60:08:42:16:b0:07:94:65:c0:5e:bd: b0:6a:3e:87:fa:84:32:6f:d5:af:6b:59:a3:e1:15:8f:cb:c4: 23:30:5b:8a:df:c0:9d:df:df:6f:bd:5e:41:55:1b:01:19:46: a5:1d:74:36:32:fd:89:b8:2a:b4:ed:62:cb:c2:91:a8:79:be: fb:4b:56:25:a2:fe:c5:ef:46:e1:bc:48:c1:4d:a4:27:a2:93: 42:f9:b9:a8:bb:bd:8c:09:b5:9c:58:11:e2:dd:e4:7c:b8:48: 1b:14:9c:51:f5:39:86:90:af:bf:f3:74:bd:07:98:21:c0:77: 72:ca:24:1f:34:39:c4:69:fe:05:21:4b:2a:26:66:cf:63:9d: 94:a8:4c:b5:ce:d8:50:4c:ff:32:4f:8e:07:6e:21:7f:be:ed: ac:00:46:64:e4:71:db:a2:ee:4c:41:b6:11:46:55:90:ff:20: 6e:ed:ae:14:a6:44:d2:3d:49:1b:1e:15:06:26:c5:72:3e:04: 7d:bd:3b:f1:76:fb:a4:a9:d9:b8:05:c7:1b:d9:04:d1:b9:11: 49:a7:60:3a:90:39:5d:7f:26:b3:03:8e:b1:ca:98:ec:d4:a6: 2a:91:24:7c:e4:4f:35:0f:ba:6e:e6:77:1c:8e:58:4f:77:39: fc:2f:15:0e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElEaUOXnH/OKrYDggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk MmJmZTNlOWMtNmFhZS00MTQzLTgyMDQtYzRkOWVhMDEwNjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOMraInqozvjEu7zhsuEBostZqYDq2HvOBNZ MwXVWglV3BuDXF9NX9Y/wep3Of6bIie6RVavCp5wRqi/GQoGMAIv/FUo7kTqgh/h KwthkS3S5aBJgu/t6+OK3bfQv6MJQ90xdMkuIxGnXtOdFCWC4tp/c+YIiDe7Pq6E Vi/0KcngF035JVl1/yDGV98lmzqwcAUc13gLRDRfRB8mEWuim0FTz/fG4/6yQG85 NEmEHsF187FrCfwjd3mYLkYcPIqH2RqPGwY12DQ0/Njs3P+kSOr+OFbUzHQgfWtA +c2jM6saVd04Y1A/QcwECwABmmG8idtoQgdANzeAD4cuirjrSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJsfFZ7AzfP4G6AobMqU8CqxUqB0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZTU4Y2Q0YTItMGJkNS0z ODg4LThjODMtYTMwNjY2NGM3M2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAM8 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACL42OUKHI5gCEIWsAeUZcBevbBqPof6hDJv1a9rWaPhFY/LxCMw W4rfwJ3f32+9XkFVGwEZRqUddDYy/Ym4KrTtYsvCkah5vvtLViWi/sXvRuG8SMFN pCeik0L5uai7vYwJtZxYEeLd5Hy4SBsUnFH1OYaQr7/zdL0HmCHAd3LKJB80OcRp /gUhSyomZs9jnZSoTLXO2FBM/zJPjgduIX++7awARmTkcdui7kxBthFGVZD/IG7t rhSmRNI9SRseFQYmxXI+BH29O/F2+6Sp2bgFxxvZBNG5EUmnYDqQOV1/JrMDjrHK mOzUpiqRJHzkTzUPum7mdxyOWE93OfwvFQ4= -----END CERTIFICATE-----Generated at Sun Apr 27 00:11:29 2025 by rpki-client