$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b85b7a23-153a-3df6-aa0e-230c34a7b3c1.roa File: b85b7a23-153a-3df6-aa0e-230c34a7b3c1.roa (raw, json) Hash identifier: MeBTxLaNyPBGGJQFFTDCNSSXgITH6Dgjtr67D6u0sGk= Subject key identifier: D7:95:56:BB:DA:87:D2:A7:C4:C2:EA:E0:2E:BE:67:8E:66:7F:E7:16 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926E38846714C66A18416B0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b85b7a23-153a-3df6-aa0e-230c34a7b3c1.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 50023 IP address blocks: 2001:470:23f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:e3:88:46:71:4c:66:a1:84:16:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=b3349936-0751-4642-a698-532e47c7ab07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:77:7c:69:db:6f:09:f1:b8:b7:db:ef:e1:aa: 10:98:72:bf:73:46:c7:cd:bc:03:fc:2e:96:0a:24: 8d:5a:df:c2:dc:ea:95:1a:f5:b2:28:4b:86:80:bf: bb:09:1d:dc:ca:05:e3:1d:00:8c:96:b0:b5:0a:1b: 9b:35:08:6b:e1:b7:6f:dc:75:81:10:24:bf:dc:4b: bb:30:ec:ad:2a:fd:d9:64:cd:4c:88:7b:16:ed:db: eb:22:8b:f2:a9:ae:62:fe:89:56:89:3e:3c:a1:f6: c3:81:e8:cc:96:ab:68:ca:28:d3:dd:d4:f9:82:a4: 8d:8c:cd:b2:a4:16:66:d8:eb:9d:23:cd:14:a0:2a: 68:07:20:db:81:d6:df:ee:c8:55:7e:74:60:46:d6: 51:1f:25:61:e7:6a:6e:74:52:58:56:10:c0:9c:aa: d7:ec:1a:24:2c:86:ee:92:61:95:5f:78:4c:06:56: 8f:e7:30:48:42:8a:44:b4:c8:fb:52:93:0a:01:82: c5:8a:9b:f5:4d:ed:b4:7f:2c:d9:3c:28:e1:ca:24: b2:1a:d0:d8:a3:ad:d8:17:e6:eb:53:5a:a8:1c:e4: e5:e2:c1:ec:26:0d:80:f6:8d:a3:63:cc:ad:94:64: 07:0f:c8:c8:97:d1:7b:86:a1:a5:87:04:a9:0b:e7: fe:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:95:56:BB:DA:87:D2:A7:C4:C2:EA:E0:2E:BE:67:8E:66:7F:E7:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b85b7a23-153a-3df6-aa0e-230c34a7b3c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:23f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:af:1e:89:26:58:7c:81:d4:66:84:95:d2:a7:51:c5:a5:87: 9d:40:e0:36:c3:c1:d0:b9:a2:7d:09:b1:09:5e:fa:6e:fb:29: 4e:ca:c9:94:af:74:10:b8:37:6a:e4:39:4e:04:19:31:21:7e: 6d:b4:7f:23:b5:1e:9e:59:72:a1:1d:87:8f:7c:5b:dd:be:1e: 65:89:ee:4e:60:95:c9:05:1c:fb:7f:58:a0:64:68:d4:a6:1a: 27:56:64:e2:8b:87:fe:b0:77:24:6a:85:85:fc:45:be:c1:98: 50:7a:85:8c:79:9a:49:06:9b:de:cc:ab:aa:69:64:70:98:f2: e0:67:22:72:19:fc:66:2e:f1:ac:51:68:a9:95:bd:e2:c3:31: 77:2f:18:69:03:ba:f6:a6:80:a4:0d:e7:1e:ed:48:24:af:af: 93:78:e2:57:b8:e5:70:87:8e:8a:bc:9c:c0:31:16:4d:b8:b2: cb:69:af:9b:bf:52:e5:89:f8:d9:0b:df:bd:98:c3:58:15:35: 15:22:ed:12:4c:25:64:5d:aa:a2:3d:4d:8b:e0:d4:91:8a:3d: 36:bb:7d:d5:34:d6:a9:bc:4f:1b:27:60:3d:e2:c0:f8:17:a6: c3:39:00:81:bd:8c:1f:d1:8f:56:9b:da:46:74:ff:b7:56:4d: 3b:bf:89:e0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JuOIRnFMZqGEFrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk YjMzNDk5MzYtMDc1MS00NjQyLWE2OTgtNTMyZTQ3YzdhYjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXd8adtvCfG4t9vv4aoQmHK/c0bHzbwD/C6W CiSNWt/C3OqVGvWyKEuGgL+7CR3cygXjHQCMlrC1ChubNQhr4bdv3HWBECS/3Eu7 MOytKv3ZZM1MiHsW7dvrIovyqa5i/olWiT48ofbDgejMlqtoyijT3dT5gqSNjM2y pBZm2OudI80UoCpoByDbgdbf7shVfnRgRtZRHyVh52pudFJYVhDAnKrX7BokLIbu kmGVX3hMBlaP5zBIQopEtMj7UpMKAYLFipv1Te20fyzZPCjhyiSyGtDYo63YF+br U1qoHOTl4sHsJg2A9o2jY8ytlGQHD8jIl9F7hqGlhwSpC+f+EQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNeVVrvah9KnxMLq4C6+Z45mf+cWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjg1YjdhMjMtMTUzYS0z ZGY2LWFhMGUtMjMwYzM0YTdiM2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAGvHokmWHyB1GaEldKnUcWlh51A4DbDwdC5on0JsQle+m77KU7K yZSvdBC4N2rkOU4EGTEhfm20fyO1Hp5ZcqEdh498W92+HmWJ7k5glckFHPt/WKBk aNSmGidWZOKLh/6wdyRqhYX8Rb7BmFB6hYx5mkkGm97Mq6ppZHCY8uBnInIZ/GYu 8axRaKmVveLDMXcvGGkDuvamgKQN5x7tSCSvr5N44le45XCHjoq8nMAxFk24sstp r5u/UuWJ+NkL372Yw1gVNRUi7RJMJWRdqqI9TYvg1JGKPTa7fdU01qm8TxsnYD3i wPgXpsM5AIG9jB/Rj1ab2kZ0/7dWTTu/ieA= -----END CERTIFICATE-----Generated at Mon May 5 09:46:55 2025 by rpki-client