$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2870ce7b-3941-3e3d-98f1-2e8bbc7fe161.roa File: 2870ce7b-3941-3e3d-98f1-2e8bbc7fe161.roa (raw, json) Hash identifier: iYL/kqMYbZ80onWxSaNPOgOXJEIxLsrC9Vp9HzRBG/w= Subject key identifier: 95:65:18:BE:A3:25:ED:13:A4:4F:09:54:08:7C:BF:C0:6B:0B:F5:74 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926BC27E714634342897C70 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2870ce7b-3941-3e3d-98f1-2e8bbc7fe161.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 53813 IP address blocks: 2001:470:8e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:bc:27:e7:14:63:43:42:89:7c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=1dc6caf8-0090-4fb4-9fa7-dbd800909821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:56:f9:fd:f8:e3:81:52:4a:5d:2c:18:bf:ac: b5:c4:d4:e0:3d:58:6f:f2:31:99:63:6b:03:4c:85: ea:f3:83:41:b0:8f:b2:1a:f3:53:a0:50:73:b6:67: fe:cc:f9:a4:00:7d:9a:df:1e:99:9b:09:df:2b:69: 9b:4b:a9:3b:64:0c:bf:cf:67:b8:6a:8a:3c:6d:3c: 8b:f3:3f:09:07:9a:b9:11:44:a6:2c:2a:09:87:2a: 2b:70:92:f4:97:2e:bb:5d:4e:e2:2c:81:8e:2c:24: 99:a3:31:67:9c:38:ad:a2:55:bd:63:31:02:10:c3: d5:40:39:fe:4a:e4:f4:3b:68:01:6c:9a:9f:25:62: 9b:a8:5a:65:a1:1b:f7:63:f4:45:69:68:35:7b:e9: ca:d2:e8:d2:38:4e:bd:8a:64:42:4b:31:68:f7:97: 4b:86:4d:9b:f7:7e:73:42:e6:37:d5:15:62:04:69: b9:a0:8e:56:a3:30:48:84:d7:89:2b:51:ef:83:0d: d0:73:9d:86:44:1c:ce:66:71:6f:c9:00:dc:9f:87: c4:ee:f2:94:5c:6d:c5:e3:fc:47:c1:b2:51:92:d2: f1:07:3d:60:6c:cb:34:87:df:b2:d2:d0:c7:5e:d9: 8d:42:e5:6d:8c:e3:25:f0:f4:f3:5d:da:0e:cf:69: 18:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:65:18:BE:A3:25:ED:13:A4:4F:09:54:08:7C:BF:C0:6B:0B:F5:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2870ce7b-3941-3e3d-98f1-2e8bbc7fe161.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:8e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:5d:70:e7:c8:89:be:8c:33:89:41:d0:93:75:5e:6c:7f:f9: ef:ba:41:b7:7d:aa:49:36:61:e0:7b:a9:04:83:92:1f:76:6f: 24:2d:81:c1:3a:49:f3:76:2d:78:30:80:a2:be:8e:ce:cb:bb: c6:0c:5f:e6:a4:9f:ba:ab:e0:95:eb:09:67:75:a5:d9:14:ec: c4:20:4b:c0:01:2c:e9:90:bd:ae:a0:51:b3:f1:44:85:5e:cb: 7c:ea:ad:ff:b2:64:6f:45:dc:5a:b5:29:0a:57:a7:84:39:2c: 17:07:05:6e:29:51:ec:dd:1a:5d:9f:30:54:a1:07:d1:59:7a: 40:ed:7c:31:69:fc:cf:6b:cf:54:74:27:b0:8d:92:d2:84:f4: 9e:0c:04:4c:e2:16:17:a1:9e:64:08:2c:97:10:c5:65:7d:f2: b9:0f:34:00:39:7e:f4:da:50:14:7f:5d:5f:e4:99:51:5f:02: b7:16:e8:83:c4:96:44:eb:1e:79:82:a9:88:27:a9:1b:00:82: 11:d4:89:25:76:ee:25:e6:f5:99:94:1d:4f:aa:78:11:cc:2d: f2:46:00:09:ef:28:7a:60:2e:c8:b6:8a:ce:98:76:38:ce:73: dc:63:39:52:86:3b:fd:a1:47:3c:70:4c:c1:28:12:bc:06:38: fc:44:f2:ad -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5Jrwn5xRjQ0KJfHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk MWRjNmNhZjgtMDA5MC00ZmI0LTlmYTctZGJkODAwOTA5ODIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1b5/fjjgVJKXSwYv6y1xNTgPVhv8jGZY2sD TIXq84NBsI+yGvNToFBztmf+zPmkAH2a3x6ZmwnfK2mbS6k7ZAy/z2e4aoo8bTyL 8z8JB5q5EUSmLCoJhyorcJL0ly67XU7iLIGOLCSZozFnnDitolW9YzECEMPVQDn+ SuT0O2gBbJqfJWKbqFploRv3Y/RFaWg1e+nK0ujSOE69imRCSzFo95dLhk2b935z QuY31RViBGm5oI5WozBIhNeJK1Hvgw3Qc52GRBzOZnFvyQDcn4fE7vKUXG3F4/xH wbJRktLxBz1gbMs0h9+y0tDHXtmNQuVtjOMl8PTzXdoOz2kYtQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJVlGL6jJe0TpE8JVAh8v8BrC/V0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjg3MGNlN2ItMzk0MS0z ZTNkLTk4ZjEtMmU4YmJjN2ZlMTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEtdcOfIib6MM4lB0JN1Xmx/+e+6Qbd9qkk2YeB7qQSDkh92byQt gcE6SfN2LXgwgKK+js7Lu8YMX+akn7qr4JXrCWd1pdkU7MQgS8ABLOmQva6gUbPx RIVey3zqrf+yZG9F3Fq1KQpXp4Q5LBcHBW4pUezdGl2fMFShB9FZekDtfDFp/M9r z1R0J7CNktKE9J4MBEziFhehnmQILJcQxWV98rkPNAA5fvTaUBR/XV/kmVFfArcW 6IPElkTrHnmCqYgnqRsAghHUiSV27iXm9ZmUHU+qeBHMLfJGAAnvKHpgLsi2is6Y djjOc9xjOVKGO/2hRzxwTMEoErwGOPxE8q0= -----END CERTIFICATE-----Generated at Mon May 5 12:18:24 2025 by rpki-client