$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/853da2ad-54d6-3ed9-b09f-07fc3b64a6f0.roa File: 853da2ad-54d6-3ed9-b09f-07fc3b64a6f0.roa (raw, json) Hash identifier: febSlYYM0jJSYW3c27GzEAIAQqq6zoQA1+sg8JybROE= Subject key identifier: EC:9F:F9:F9:B6:DA:B7:40:72:8E:E2:66:99:6D:EC:4F:14:71:EE:35 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926E10190D54084A58E8100 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/853da2ad-54d6-3ed9-b09f-07fc3b64a6f0.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 46506 IP address blocks: 2001:470:211::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:e1:01:90:d5:40:84:a5:8e:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=5dfef5e6-9d05-4eed-9dad-2ab535b6c2b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2e:16:18:9f:1f:b1:5d:eb:e0:83:b4:14:2a: 63:f1:99:ba:35:0e:ce:98:57:1e:02:f8:b1:0f:1c: 98:77:ec:7b:df:60:03:0c:18:f3:49:cc:7b:4c:fd: da:40:e8:b6:93:cb:79:66:de:7e:fe:d4:76:1f:8a: 2f:76:75:20:4a:a4:18:b8:04:c9:9f:b2:67:f5:26: 42:ca:a7:9a:5b:f7:5d:51:23:8e:e8:20:cb:cd:91: 03:b5:29:43:1d:00:aa:b5:3c:c4:af:31:32:f0:c3: 94:25:e4:c7:08:3d:be:f4:3c:2b:97:45:42:ff:89: b3:c3:81:95:e6:b9:0d:c2:7f:d7:d5:22:17:c7:38: 46:c4:7d:bc:52:d7:e4:82:ef:bb:70:a0:a6:a6:69: ea:81:11:ca:66:7d:a7:11:a0:88:ad:54:14:4e:40: 90:f7:d8:dd:2f:40:cf:18:40:23:0c:48:1a:c7:36: 8a:27:a7:9a:c2:f3:39:f9:d7:3f:5a:59:36:43:3b: 8b:d3:8c:ce:a5:42:e6:73:ce:aa:e6:66:d7:9a:78: 36:a7:9f:e3:43:a0:47:99:cd:db:1a:3d:3a:4f:6e: 19:bc:81:18:61:c5:8d:60:33:20:eb:f9:c3:f2:0c: 83:13:d2:03:0c:41:d9:2a:ff:10:b4:3d:cd:b8:f0: 89:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:9F:F9:F9:B6:DA:B7:40:72:8E:E2:66:99:6D:EC:4F:14:71:EE:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/853da2ad-54d6-3ed9-b09f-07fc3b64a6f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:211::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:05:a1:93:94:8b:4c:f3:fb:f0:e4:2c:50:d1:a5:87:aa:47: 83:59:04:96:ee:e3:c8:30:0a:97:15:00:20:da:df:26:0b:70: d8:53:af:68:48:07:72:6e:e4:3e:9f:5b:40:55:6e:78:0f:a0: f9:2c:c9:06:86:43:fe:67:58:e2:fa:6c:78:df:b6:ac:36:9c: 56:85:45:8f:5f:01:4b:60:72:34:7b:12:2a:3e:dc:00:c8:54: 2f:84:c6:4a:ac:07:7b:4b:97:64:a7:cb:00:41:70:af:96:00: cf:4e:fa:63:46:86:11:80:b1:2a:ef:5e:85:03:55:8c:72:1f: 88:c5:41:99:d0:83:6a:db:ff:e8:a4:fe:66:7d:cc:b3:55:e0: ac:56:51:b0:ad:b4:28:92:54:8a:c7:65:9b:fe:de:f1:6f:f6: 4c:63:a4:9a:a5:8e:86:42:18:d9:ca:80:9f:f0:38:d9:24:43: 92:2d:64:37:1a:a2:01:64:76:f3:37:6c:a7:40:f8:11:ad:a2: de:bf:64:d2:14:5c:ae:eb:98:38:c8:6c:c4:b6:9c:0c:44:0b: 7a:fd:68:b2:7b:c7:17:0c:85:2b:26:11:2f:07:fc:4c:23:31: 1b:85:a1:03:9d:a5:93:d9:9e:89:a3:99:3f:b1:9b:6f:1e:ae: 08:36:50:6a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JuEBkNVAhKWOgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk NWRmZWY1ZTYtOWQwNS00ZWVkLTlkYWQtMmFiNTM1YjZjMmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1C4WGJ8fsV3r4IO0FCpj8Zm6NQ7OmFceAvix DxyYd+x732ADDBjzScx7TP3aQOi2k8t5Zt5+/tR2H4ovdnUgSqQYuATJn7Jn9SZC yqeaW/ddUSOO6CDLzZEDtSlDHQCqtTzErzEy8MOUJeTHCD2+9Dwrl0VC/4mzw4GV 5rkNwn/X1SIXxzhGxH28Utfkgu+7cKCmpmnqgRHKZn2nEaCIrVQUTkCQ99jdL0DP GEAjDEgaxzaKJ6eawvM5+dc/Wlk2QzuL04zOpULmc86q5mbXmng2p5/jQ6BHmc3b Gj06T24ZvIEYYcWNYDMg6/nD8gyDE9IDDEHZKv8QtD3NuPCJhwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOyf+fm22rdAco7iZplt7E8Uce41MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODUzZGEyYWQtNTRkNi0z ZWQ5LWIwOWYtMDdmYzNiNjRhNmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAIR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFsFoZOUi0zz+/DkLFDRpYeqR4NZBJbu48gwCpcVACDa3yYLcNhT r2hIB3Ju5D6fW0BVbngPoPksyQaGQ/5nWOL6bHjftqw2nFaFRY9fAUtgcjR7Eio+ 3ADIVC+ExkqsB3tLl2SnywBBcK+WAM9O+mNGhhGAsSrvXoUDVYxyH4jFQZnQg2rb /+ik/mZ9zLNV4KxWUbCttCiSVIrHZZv+3vFv9kxjpJqljoZCGNnKgJ/wONkkQ5It ZDcaogFkdvM3bKdA+BGtot6/ZNIUXK7rmDjIbMS2nAxEC3r9aLJ7xxcMhSsmES8H /EwjMRuFoQOdpZPZnomjmT+xm28ergg2UGo= -----END CERTIFICATE-----Generated at Mon May 5 04:00:51 2025 by rpki-client