$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4d40b93d-acec-38dd-9713-18db9799f2d9.roa File: 4d40b93d-acec-38dd-9713-18db9799f2d9.roa (raw, json) Hash identifier: nwEx+HVpmUTczkDwLLF2ZU6qgG4eqZ7QYsiujarSpNc= Subject key identifier: 71:24:4D:90:E6:9F:AD:93:32:8B:D2:6C:34:86:C8:C8:61:D7:86:B3 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926CC38D5039C954B00D4A0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4d40b93d-acec-38dd-9713-18db9799f2d9.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 20432 IP address blocks: 2001:470:295::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:cc:38:d5:03:9c:95:4b:00:d4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=45e68b13-25d6-4fc4-b1f6-4dce51802066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a9:66:bc:9a:b8:de:3e:3b:a2:1f:9f:9b:0d: 9a:ef:c5:bc:bd:20:79:28:05:2b:9c:30:c1:48:3c: d2:dc:87:82:48:3d:4a:01:30:15:bb:73:a9:01:3b: 45:e2:ad:cb:94:30:6b:7c:97:b0:92:4b:f1:51:76: 73:36:30:90:3f:ac:c5:ef:6c:27:c5:ae:b0:fb:49: 94:77:ab:33:b0:92:dd:12:ae:d9:ad:8e:88:6d:29: 94:b8:aa:9f:f9:5a:ca:0a:1e:45:91:c9:15:b7:4b: 37:07:fc:39:56:8c:ca:02:61:6a:4d:74:40:aa:e3: 86:ff:00:bd:ff:06:17:06:cb:7b:ba:6f:6e:12:12: 76:2b:54:bf:cb:e3:87:3a:f6:50:fc:04:68:36:31: ec:9d:b6:c1:ac:23:46:a1:b7:42:b4:62:5d:64:c5: fa:37:b9:01:a8:b2:98:9a:91:60:53:ce:82:79:27: 90:7d:ef:8b:b6:93:c1:55:3d:37:bf:b6:09:a1:f2: 9c:fe:f4:60:fa:b8:42:fa:ce:61:85:00:a9:31:66: 5d:d4:57:90:ac:d1:14:54:57:99:53:c2:35:d7:b4: 2b:8a:1a:9a:af:f8:1a:65:92:42:ee:f2:79:3d:39: 80:b8:1f:13:51:29:ae:42:58:4a:13:e1:f6:70:e2: 6d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:24:4D:90:E6:9F:AD:93:32:8B:D2:6C:34:86:C8:C8:61:D7:86:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4d40b93d-acec-38dd-9713-18db9799f2d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:295::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:66:ae:f5:53:e8:02:a8:8d:08:e5:05:62:96:43:37:3c:78: 5b:63:cb:2f:48:e2:75:9a:a8:42:be:ee:25:2e:ca:8c:58:99: 92:87:04:60:1c:12:cb:cf:7f:63:99:47:5c:d4:c6:1c:12:89: 3f:73:57:21:8b:ec:80:5d:18:4b:4c:26:2f:f1:32:4d:22:6b: c1:5a:0c:f7:12:76:42:e3:29:71:fe:10:90:1e:3b:88:99:22: 83:35:3c:70:ae:10:df:c9:ef:81:29:3d:d6:63:e5:d3:19:b7: 5b:37:86:d0:96:bb:3c:7c:80:9f:67:d1:fb:7b:46:a5:a5:29: 5d:7f:7e:06:0b:84:6e:5e:d8:5a:27:36:5c:6e:92:7f:6b:57: 22:59:88:7b:6e:97:b0:d7:01:37:27:c5:01:35:4a:32:1e:6e: 2a:84:a6:17:20:df:4d:4f:7b:da:55:36:cd:46:a7:f4:7f:3a: 69:b1:52:b7:17:78:dc:00:73:01:bc:83:d3:71:ab:79:92:8c: 89:ad:74:da:0d:5d:00:35:66:0e:57:6c:67:a9:8c:f2:c4:ca: 80:a1:73:90:ca:42:f2:7b:ea:66:0b:b7:95:52:cd:25:f9:35: a1:9f:b1:40:98:01:01:ae:b6:de:24:bc:1c:d1:40:24:e4:bf: 78:fc:ea:56 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5Jsw41QOclUsA1KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk NDVlNjhiMTMtMjVkNi00ZmM0LWIxZjYtNGRjZTUxODAyMDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqlmvJq43j47oh+fmw2a78W8vSB5KAUrnDDB SDzS3IeCSD1KATAVu3OpATtF4q3LlDBrfJewkkvxUXZzNjCQP6zF72wnxa6w+0mU d6szsJLdEq7ZrY6IbSmUuKqf+VrKCh5FkckVt0s3B/w5VozKAmFqTXRAquOG/wC9 /wYXBst7um9uEhJ2K1S/y+OHOvZQ/ARoNjHsnbbBrCNGobdCtGJdZMX6N7kBqLKY mpFgU86CeSeQfe+LtpPBVT03v7YJofKc/vRg+rhC+s5hhQCpMWZd1FeQrNEUVFeZ U8I117Qrihqar/gaZZJC7vJ5PTmAuB8TUSmuQlhKE+H2cOJtPwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHEkTZDmn62TMovSbDSGyMhh14azMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNGQ0MGI5M2QtYWNlYy0z OGRkLTk3MTMtMThkYjk3OTlmMmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGtmrvVT6AKojQjlBWKWQzc8eFtjyy9I4nWaqEK+7iUuyoxYmZKH BGAcEsvPf2OZR1zUxhwSiT9zVyGL7IBdGEtMJi/xMk0ia8FaDPcSdkLjKXH+EJAe O4iZIoM1PHCuEN/J74EpPdZj5dMZt1s3htCWuzx8gJ9n0ft7RqWlKV1/fgYLhG5e 2FonNlxukn9rVyJZiHtul7DXATcnxQE1SjIebiqEphcg301Pe9pVNs1Gp/R/Ommx UrcXeNwAcwG8g9Nxq3mSjImtdNoNXQA1Zg5XbGepjPLEyoChc5DKQvJ76mYLt5VS zSX5NaGfsUCYAQGutt4kvBzRQCTkv3j86lY= -----END CERTIFICATE-----Generated at Wed May 7 11:05:52 2025 by rpki-client