$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/123ca315-755a-32b7-a7a9-85a41620507a.roa File: 123ca315-755a-32b7-a7a9-85a41620507a.roa (raw, json) Hash identifier: lq5C90ThEjSmkKEWtRIXedrxwHF1rkw2bhPHx+BOTdk= Subject key identifier: 5A:E2:4E:AA:BA:55:FF:D6:96:30:3A:71:CF:39:BD:DD:66:4D:81:D9 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848FD56D1C1FC3181AF2926A880 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/123ca315-755a-32b7-a7a9-85a41620507a.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 59437 IP address blocks: 2001:470:328::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:d1:c1:fc:31:81:af:29:26:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=42f86db3-8a1b-43b1-83f7-74d9f5ad7e13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e2:15:01:75:73:5d:7b:d6:e3:26:12:1e:60: 58:90:83:3c:02:94:e1:62:8d:2c:8c:cb:f1:d8:1f: 71:d7:8e:cd:c7:14:57:e7:20:19:82:40:eb:7a:8f: 28:2e:85:5b:fe:d8:23:05:95:a5:97:49:81:7a:8d: c9:de:24:59:48:d9:54:e4:50:1e:c2:ca:6b:54:28: 8f:0b:34:9b:3d:9c:eb:69:df:ac:02:cb:40:37:7c: fa:7d:62:17:ff:38:2d:e4:87:87:c9:0f:e9:73:a0: cc:9d:2e:5e:e7:6b:dc:f3:03:8f:e6:21:c0:6b:e5: 26:9e:13:fa:40:65:b5:88:f9:9f:a6:38:3a:45:4c: 53:28:26:0b:64:64:20:46:7e:a0:be:7f:06:0e:de: a6:a6:a8:a8:60:08:55:3c:17:5a:89:28:6b:c4:f6: ff:c0:16:f0:04:07:76:74:8f:c2:3c:89:e1:97:c5: 53:3a:71:d1:d3:01:2f:04:fd:22:bf:72:dd:14:ee: 13:77:f7:60:e3:71:e6:93:55:03:73:e9:61:6f:81: 81:29:8a:3b:ba:0a:ac:02:8a:51:ac:f1:93:bd:47: ac:74:88:9a:d3:1b:cd:96:24:4f:65:3f:78:06:d8: 69:57:19:10:de:25:d8:43:53:da:df:b3:47:bb:6a: f5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E2:4E:AA:BA:55:FF:D6:96:30:3A:71:CF:39:BD:DD:66:4D:81:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/123ca315-755a-32b7-a7a9-85a41620507a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:328::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:2f:f9:9e:ff:f3:ee:8e:bd:13:25:bb:6d:53:c6:2c:04:2a: 86:ed:95:dc:f7:e4:25:0c:32:20:c4:22:fd:97:ff:8b:bb:2b: 2c:ae:ab:59:9b:9d:6e:79:b7:fc:bd:8e:8f:1d:fc:23:9c:8d: 9e:9e:59:de:28:ac:4e:ba:6a:06:aa:46:b5:09:ac:0c:f5:47: d9:03:7c:b9:0e:1a:c1:ce:bf:c2:cf:62:39:e6:c3:0e:5c:3a: 98:45:89:b5:be:5d:7f:5d:33:32:ce:9a:c2:69:c1:f0:47:6f: 76:49:41:7b:44:7a:32:35:cd:cd:af:fa:4f:0d:53:3d:ba:45: 49:45:3a:68:6e:57:55:63:f2:fb:d3:40:34:58:71:c4:74:bd: 15:a4:ba:ee:5e:3a:40:ca:e5:01:3a:e3:ec:af:9c:c8:70:68: 80:eb:11:ef:fd:eb:dc:93:5a:e2:5f:38:2f:a4:46:f0:db:ad: 19:83:d2:a2:71:1b:64:cf:fe:2d:7a:9a:3f:41:fb:16:75:ef: 24:67:67:16:bd:9b:4a:f9:fb:0c:54:07:a0:7e:dd:44:51:55: b3:59:ce:5a:4a:94:36:a4:81:ed:48:e1:d5:e4:e5:9e:76:2e: a1:2d:ab:93:c5:3b:2f:a5:13:18:94:fd:bf:4b:9b:e3:72:37: 34:f1:1f:36 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj9VtHB/DGBrykmqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk NDJmODZkYjMtOGExYi00M2IxLTgzZjctNzRkOWY1YWQ3ZTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquIVAXVzXXvW4yYSHmBYkIM8ApThYo0sjMvx 2B9x147NxxRX5yAZgkDreo8oLoVb/tgjBZWll0mBeo3J3iRZSNlU5FAewsprVCiP CzSbPZzrad+sAstAN3z6fWIX/zgt5IeHyQ/pc6DMnS5e52vc8wOP5iHAa+UmnhP6 QGW1iPmfpjg6RUxTKCYLZGQgRn6gvn8GDt6mpqioYAhVPBdaiShrxPb/wBbwBAd2 dI/CPInhl8VTOnHR0wEvBP0iv3LdFO4Td/dg43Hmk1UDc+lhb4GBKYo7ugqsAopR rPGTvUesdIia0xvNliRPZT94BthpVxkQ3iXYQ1Pa37NHu2r1lwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFriTqq6Vf/WljA6cc85vd1mTYHZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMTIzY2EzMTUtNzU1YS0z MmI3LWE3YTktODVhNDE2MjA1MDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAMo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABMv+Z7/8+6OvRMlu21TxiwEKobtldz35CUMMiDEIv2X/4u7Kyyu q1mbnW55t/y9jo8d/COcjZ6eWd4orE66agaqRrUJrAz1R9kDfLkOGsHOv8LPYjnm ww5cOphFibW+XX9dMzLOmsJpwfBHb3ZJQXtEejI1zc2v+k8NUz26RUlFOmhuV1Vj 8vvTQDRYccR0vRWkuu5eOkDK5QE64+yvnMhwaIDrEe/969yTWuJfOC+kRvDbrRmD 0qJxG2TP/i16mj9B+xZ17yRnZxa9m0r5+wxUB6B+3URRVbNZzlpKlDakge1I4dXk 5Z52LqEtq5PFOy+lExiU/b9Lm+NyNzTxHzY= -----END CERTIFICATE-----Generated at Wed May 7 11:39:09 2025 by rpki-client