$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/403fefd1-873d-3617-a8f7-ea3c6f6da7f1.roa File: 403fefd1-873d-3617-a8f7-ea3c6f6da7f1.roa (raw, json) Hash identifier: CUfmAsCvCUv/j7WQF1bqOzDKaNjc8OnKp0Lq5fMObnQ= Subject key identifier: C0:09:BB:1B:0D:BE:B2:BA:B3:09:1E:04:89:72:89:7D:85:BD:B2:4F Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926CBD96A335226770A52D0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/403fefd1-873d-3617-a8f7-ea3c6f6da7f1.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 133398 IP address blocks: 2001:470:288::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:cb:d9:6a:33:52:26:77:0a:52:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=06977f74-46f4-466e-b17c-613cd133ed97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:9d:4d:81:86:48:d8:af:f1:55:13:d6:65:8f: fc:83:95:99:eb:e5:23:5f:10:ef:1c:56:ee:cf:82: b6:27:72:78:14:c1:35:62:54:88:67:6a:2e:df:34: b8:3d:bc:cd:36:1b:82:75:35:28:27:e5:b9:2c:cb: f5:8e:7f:2c:7b:b6:b6:2c:c2:cc:4d:49:a3:18:68: 38:f3:a1:18:f8:dc:7c:d4:5b:57:02:43:04:dc:4c: da:42:1a:d8:83:c8:50:cd:b2:41:a4:bf:ce:9d:be: 31:7d:18:fb:8b:89:6e:84:de:77:6a:c6:49:d5:71: c5:c1:c7:e0:e7:49:f1:4f:7e:33:f1:ec:cf:9d:c4: 46:9d:46:7d:08:cf:44:75:01:28:bf:0e:81:18:6f: 17:15:ee:58:ec:99:cf:d6:f2:84:ac:6e:b3:b0:4d: 0e:bc:15:f7:33:ab:ea:04:00:3c:ed:6a:00:47:bf: d0:a4:8e:52:b8:d3:e3:48:23:26:02:59:d6:21:54: fc:f5:01:2d:ca:8f:41:e1:f2:8b:e1:2b:87:5e:77: b8:64:2e:d4:73:3d:dc:53:30:b5:3a:5c:91:4f:32: d8:d5:aa:a9:45:e0:a6:1c:9d:4c:de:04:00:3a:f2: ae:df:65:e4:4d:04:22:b2:1d:a3:aa:c9:a2:ca:38: c7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:09:BB:1B:0D:BE:B2:BA:B3:09:1E:04:89:72:89:7D:85:BD:B2:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/403fefd1-873d-3617-a8f7-ea3c6f6da7f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:288::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:64:22:67:18:6b:62:5e:e6:5c:f3:d2:94:c7:c8:32:97:6d: f3:4c:2a:db:e5:8e:ac:aa:2e:eb:52:93:a6:26:06:4f:22:e6: a1:7b:2a:44:e9:0c:72:03:41:f6:06:e6:e2:2b:dd:d5:2a:c5: 28:7b:bc:d3:db:76:97:74:05:80:cb:d1:36:fd:ee:e7:42:10: e3:a9:a1:8a:c6:17:e2:ff:11:74:cc:e0:d2:56:74:7e:5c:b8: 94:2f:e8:73:8e:e3:3f:b1:62:b3:25:03:2a:00:bb:ae:69:b2: e0:df:ce:94:33:ad:8d:93:58:fd:10:a7:00:e9:04:d6:50:b4: 20:d6:31:83:55:9a:3c:68:46:8b:40:36:d1:14:73:d7:b0:29: 1d:93:b1:53:7c:06:41:5c:9d:f8:2c:7f:ea:d7:9a:b1:99:84: fc:0f:98:1a:8e:09:f5:08:d2:03:34:5f:5f:f8:11:85:46:4e: 12:68:4d:5b:92:56:51:b6:00:a0:76:67:9b:b1:cf:2c:a0:9d: 8d:63:9d:9a:ba:da:e8:3e:a7:3f:c4:a3:09:1b:38:5f:c4:ea: 3b:eb:ab:25:41:22:6c:3b:b5:54:48:34:22:b9:72:8a:5d:f8: 0e:13:ef:e6:f1:45:75:84:07:bf:13:97:cf:df:a0:c9:2c:50: 1d:97:a4:a9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JsvZajNSJncKUtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk MDY5NzdmNzQtNDZmNC00NjZlLWIxN2MtNjEzY2QxMzNlZDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJ1NgYZI2K/xVRPWZY/8g5WZ6+UjXxDvHFbu z4K2J3J4FME1YlSIZ2ou3zS4PbzNNhuCdTUoJ+W5LMv1jn8se7a2LMLMTUmjGGg4 86EY+Nx81FtXAkME3EzaQhrYg8hQzbJBpL/Onb4xfRj7i4luhN53asZJ1XHFwcfg 50nxT34z8ezPncRGnUZ9CM9EdQEovw6BGG8XFe5Y7JnP1vKErG6zsE0OvBX3M6vq BAA87WoAR7/QpI5SuNPjSCMmAlnWIVT89QEtyo9B4fKL4SuHXne4ZC7Ucz3cUzC1 OlyRTzLY1aqpReCmHJ1M3gQAOvKu32XkTQQish2jqsmiyjjH8wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMAJuxsNvrK6swkeBIlyiX2FvbJPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDAzZmVmZDEtODczZC0z NjE3LWE4ZjctZWEzYzZmNmRhN2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABFkImcYa2Je5lzz0pTHyDKXbfNMKtvljqyqLutSk6YmBk8i5qF7 KkTpDHIDQfYG5uIr3dUqxSh7vNPbdpd0BYDL0Tb97udCEOOpoYrGF+L/EXTM4NJW dH5cuJQv6HOO4z+xYrMlAyoAu65psuDfzpQzrY2TWP0QpwDpBNZQtCDWMYNVmjxo RotANtEUc9ewKR2TsVN8BkFcnfgsf+rXmrGZhPwPmBqOCfUI0gM0X1/4EYVGThJo TVuSVlG2AKB2Z5uxzyygnY1jnZq62ug+pz/EowkbOF/E6jvrqyVBImw7tVRINCK5 copd+A4T7+bxRXWEB78Tl8/foMksUB2XpKk= -----END CERTIFICATE-----Generated at Mon May 5 11:47:22 2025 by rpki-client