$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b9da1da4-6220-31e5-8686-3aa5d7f597ec.roa File: b9da1da4-6220-31e5-8686-3aa5d7f597ec.roa (raw, json) Hash identifier: njDuAOKVWBqnTSP4+jfR7fVIC8NmkeHDjVKHBucwo6I= Subject key identifier: BD:60:8A:7F:0A:86:7E:B5:EF:17:AE:FB:8C:A0:C3:15:E1:1E:67:6F Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926CADE6D80BDFD212CAAC0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b9da1da4-6220-31e5-8686-3aa5d7f597ec.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 54900 IP address blocks: 2001:470:270::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:ca:de:6d:80:bd:fd:21:2c:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=5cae1d73-64ce-4412-b712-5268efb6bb61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a8:5d:07:22:da:2c:cd:1d:a6:f5:3d:39:57: 48:20:3a:01:2d:42:ec:65:93:87:87:1c:4d:98:39: 53:10:d7:50:de:16:bf:3b:46:27:ac:4e:f3:e1:05: e1:95:f6:4f:ec:95:23:d2:93:b5:4b:64:aa:a6:92: f5:84:ef:22:cf:7a:ec:36:68:85:6c:cb:5f:6c:30: 6b:37:2f:c3:91:8e:1e:8c:ae:a4:65:64:a5:fc:1c: bf:40:de:21:9c:29:dd:50:a0:91:8e:51:b6:4a:02: 08:da:a9:06:df:2b:a1:70:7e:ea:9b:22:67:33:b5: 38:c1:7a:09:7c:20:82:f0:ab:7c:cd:8f:9b:b9:24: 69:a4:02:51:18:2b:f2:31:a6:5c:5a:48:cb:17:f6: 64:5a:0a:b1:17:af:23:9f:ef:f3:e1:f3:f4:f7:62: a1:01:53:68:03:6c:30:ff:1d:95:2e:80:91:f4:10: de:c7:bd:e1:d1:93:54:b9:e1:40:77:1b:b3:bb:c9: de:10:c1:8f:ca:f0:23:1c:22:33:10:86:47:12:39: e9:df:8d:52:84:d4:a4:d5:06:dc:0a:73:49:39:50: 05:48:e0:bd:8d:ba:aa:c1:6a:73:31:d7:76:fb:7d: d7:c7:6d:12:31:1b:ff:13:18:34:da:d5:73:bb:f7: dd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:60:8A:7F:0A:86:7E:B5:EF:17:AE:FB:8C:A0:C3:15:E1:1E:67:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b9da1da4-6220-31e5-8686-3aa5d7f597ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:270::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:72:c0:f0:46:85:83:54:c1:48:a5:12:59:66:97:b5:94:03: 0c:98:a0:9f:08:da:67:9a:7f:77:a3:59:6e:71:4d:fb:d3:8e: f9:ad:dd:43:65:35:dc:66:b1:dd:eb:8c:ab:9a:bd:0e:61:c3: 57:80:ec:8a:49:24:e1:01:09:72:71:be:25:56:80:7c:66:bd: a9:be:67:e1:85:e8:35:90:97:44:dd:a6:b2:00:e3:e2:69:0e: 28:4f:a0:56:68:db:01:95:6f:cd:e6:1a:47:c8:da:e6:95:51: 86:9f:1d:9a:2f:28:fa:37:ba:1e:0e:99:82:5f:ab:67:a7:82: 33:c0:f2:73:3b:77:f6:96:d7:3f:ec:b2:1a:28:9c:c3:13:e0: d6:3b:fd:9d:08:52:ce:e1:6f:93:eb:98:3f:cd:c6:30:cd:b9: 68:bf:c9:db:8f:07:69:20:2c:9b:39:6a:be:4f:53:af:a5:7b: 53:8f:80:08:1c:96:89:7a:85:16:3a:5a:df:f8:f4:85:07:c3: 47:a8:9b:9c:d8:a3:97:6e:d2:3a:dd:2c:0a:92:d0:fa:d3:5f: 35:67:9d:9e:ad:9d:60:ef:24:8c:76:f0:67:31:f2:0a:c4:12: 75:54:01:d5:16:75:32:b4:17:5f:b0:cc:47:aa:20:0b:af:87: 62:a7:68:dd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JsrebYC9/SEsqsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk NWNhZTFkNzMtNjRjZS00NDEyLWI3MTItNTI2OGVmYjZiYjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApahdByLaLM0dpvU9OVdIIDoBLULsZZOHhxxN mDlTENdQ3ha/O0YnrE7z4QXhlfZP7JUj0pO1S2SqppL1hO8iz3rsNmiFbMtfbDBr Ny/DkY4ejK6kZWSl/By/QN4hnCndUKCRjlG2SgII2qkG3yuhcH7qmyJnM7U4wXoJ fCCC8Kt8zY+buSRppAJRGCvyMaZcWkjLF/ZkWgqxF68jn+/z4fP092KhAVNoA2ww /x2VLoCR9BDex73h0ZNUueFAdxuzu8neEMGPyvAjHCIzEIZHEjnp341ShNSk1Qbc CnNJOVAFSOC9jbqqwWpzMdd2+33Xx20SMRv/Exg02tVzu/fdPwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL1gin8Khn617xeu+4ygwxXhHmdvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjlkYTFkYTQtNjIyMC0z MWU1LTg2ODYtM2FhNWQ3ZjU5N2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD9ywPBGhYNUwUilEllml7WUAwyYoJ8I2meaf3ejWW5xTfvTjvmt 3UNlNdxmsd3rjKuavQ5hw1eA7IpJJOEBCXJxviVWgHxmvam+Z+GF6DWQl0TdprIA 4+JpDihPoFZo2wGVb83mGkfI2uaVUYafHZovKPo3uh4OmYJfq2engjPA8nM7d/aW 1z/sshoonMMT4NY7/Z0IUs7hb5PrmD/NxjDNuWi/yduPB2kgLJs5ar5PU6+le1OP gAgclol6hRY6Wt/49IUHw0eom5zYo5du0jrdLAqS0PrTXzVnnZ6tnWDvJIx28Gcx 8grEEnVUAdUWdTK0F1+wzEeqIAuvh2KnaN0= -----END CERTIFICATE-----Generated at Mon May 5 15:33:00 2025 by rpki-client