$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/be6c9a6b-d631-3a7a-b2b7-20c7deeea63f.roa File: be6c9a6b-d631-3a7a-b2b7-20c7deeea63f.roa (raw, json) Hash identifier: Qg8CIvOKemKB+qKxqcgFdXBq7YqNJmtziZLqA2TsHS4= Subject key identifier: 15:63:98:20:62:1A:FE:1E:9C:12:C1:8B:EE:BB:BA:C5:4A:8A:C2:12 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926C74AD6385A45C84A7700 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/be6c9a6b-d631-3a7a-b2b7-20c7deeea63f.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 25198 IP address blocks: 2001:470:1d7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:c7:4a:d6:38:5a:45:c8:4a:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=4e1b9184-9dc3-40a4-9c95-c18f3f3fa958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b8:b1:1a:05:6b:ee:29:b8:4e:17:a1:88:b7: fa:c1:1e:b0:d8:5f:83:69:3c:27:6b:07:90:72:93: 32:52:36:89:0c:9b:c1:ee:2c:6c:9f:c0:09:d4:d1: e7:9e:a1:07:db:20:ac:49:c1:ed:d0:cf:ba:31:65: 0d:87:88:65:51:67:d0:32:9c:df:66:3a:d7:93:ac: ff:98:29:78:73:e9:63:7e:3e:68:eb:5e:24:7b:81: db:0e:1f:43:9d:ec:e3:13:01:a4:92:bf:6b:05:20: f1:c4:d2:aa:76:88:b4:18:6d:1b:81:6c:70:70:34: 10:85:b2:dc:e1:a0:54:78:e2:2d:db:7e:9b:00:e8: 73:36:e3:60:e4:03:50:d8:33:5a:93:75:6a:13:a5: 7d:1c:07:b0:99:d1:a5:69:ef:c6:13:47:05:8f:9c: ec:d6:6c:50:fb:43:1e:78:a9:00:7a:a6:87:d3:1a: 6b:69:7b:f6:04:b1:b1:92:92:2c:4d:cf:99:6c:f7: c7:93:be:2f:5d:7f:40:8d:31:20:41:9a:12:53:3b: 05:de:c2:4d:eb:52:b7:16:cc:e9:3f:06:ea:7c:20: 3a:25:fe:65:e8:7b:8e:db:ef:5d:11:c2:87:e4:8a: 78:9a:68:08:f8:96:0f:6b:88:af:36:e6:28:ff:ab: ff:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:63:98:20:62:1A:FE:1E:9C:12:C1:8B:EE:BB:BA:C5:4A:8A:C2:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/be6c9a6b-d631-3a7a-b2b7-20c7deeea63f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1d7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:1f:67:94:9c:38:0e:34:62:3d:cc:d6:19:a6:f3:33:6d:fb: d1:ba:69:65:39:e4:44:dc:f0:bd:68:7d:58:6b:e7:fb:4e:af: 17:01:13:2e:bb:94:9e:fc:93:c6:07:15:15:c2:d0:ae:28:f2: 5d:7f:9f:a1:ba:08:bf:8a:2b:a4:af:92:b0:d5:0a:32:cd:99: b4:bc:37:16:9e:29:65:b0:9f:9a:22:da:7a:4d:86:36:6d:47: dc:12:10:6d:b8:04:af:22:86:1a:08:4b:c1:7c:6a:06:b1:56: 29:50:81:54:43:f9:17:69:24:9f:4f:d2:35:80:d0:d0:fd:ff: ca:26:80:b4:c2:c4:6e:c2:fc:92:79:a2:6f:50:44:1c:25:32: 8a:2c:ba:71:e6:4c:e3:25:1f:8c:c8:ad:6d:6d:f4:20:94:72: b2:8c:dd:d6:40:97:15:a3:24:ef:4a:38:64:15:00:c4:ba:11: 74:7e:bc:58:77:df:f2:74:13:50:af:0a:33:91:f5:bd:cc:a6: 22:ae:19:ca:5f:ec:38:f4:55:e3:0a:f3:4d:20:28:56:62:ae: b0:07:f3:c6:9b:c4:d5:c8:89:f9:ff:a9:25:72:ad:a7:b4:e0: 3c:50:8d:f9:bf:9a:36:fe:5e:6c:7b:97:52:b9:7a:66:99:6b: 63:a5:ef:f0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JsdK1jhaRchKdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk NGUxYjkxODQtOWRjMy00MGE0LTljOTUtYzE4ZjNmM2ZhOTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurixGgVr7im4ThehiLf6wR6w2F+DaTwnaweQ cpMyUjaJDJvB7ixsn8AJ1NHnnqEH2yCsScHt0M+6MWUNh4hlUWfQMpzfZjrXk6z/ mCl4c+ljfj5o614ke4HbDh9DnezjEwGkkr9rBSDxxNKqdoi0GG0bgWxwcDQQhbLc 4aBUeOIt236bAOhzNuNg5ANQ2DNak3VqE6V9HAewmdGlae/GE0cFj5zs1mxQ+0Me eKkAeqaH0xpraXv2BLGxkpIsTc+ZbPfHk74vXX9AjTEgQZoSUzsF3sJN61K3Fszp PwbqfCA6Jf5l6HuO2+9dEcKH5Ip4mmgI+JYPa4ivNuYo/6v/twIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBVjmCBiGv4enBLBi+67usVKisISMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmU2YzlhNmItZDYzMS0z YTdhLWIyYjctMjBjN2RlZWVhNjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFQfZ5ScOA40Yj3M1hmm8zNt+9G6aWU55ETc8L1ofVhr5/tOrxcB Ey67lJ78k8YHFRXC0K4o8l1/n6G6CL+KK6SvkrDVCjLNmbS8NxaeKWWwn5oi2npN hjZtR9wSEG24BK8ihhoIS8F8agaxVilQgVRD+RdpJJ9P0jWA0ND9/8omgLTCxG7C /JJ5om9QRBwlMoosunHmTOMlH4zIrW1t9CCUcrKM3dZAlxWjJO9KOGQVAMS6EXR+ vFh33/J0E1CvCjOR9b3MpiKuGcpf7Dj0VeMK800gKFZirrAH88abxNXIifn/qSVy rae04DxQjfm/mjb+Xmx7l1K5emaZa2Ol7/A= -----END CERTIFICATE-----Generated at Tue May 6 11:00:00 2025 by rpki-client