$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d9aeca6a-e1ce-3f37-a024-704cb3bce6ff.roa File: d9aeca6a-e1ce-3f37-a024-704cb3bce6ff.roa (raw, json) Hash identifier: ml9GQFiuQZAe3p/DJJZwfm7zgn1b6u/bWtLT2aiw5+Q= Subject key identifier: 63:2F:90:0D:C6:C1:6A:AB:5D:E1:4C:2E:B4:7A:40:F2:03:BD:6B:B6 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858492CB22E512605432819420200 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d9aeca6a-e1ce-3f37-a024-704cb3bce6ff.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 153317 IP address blocks: 2001:470:39f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b2:2e:51:26:05:43:28:19:42:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=bc354085-9386-46e3-babd-98c87ff83eea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:92:90:a0:ed:88:4e:f9:20:1e:97:66:bb:1e: 61:46:d9:be:f3:c6:4f:21:81:b6:f0:86:97:bd:8c: e6:6e:67:9d:df:9e:8c:98:09:ed:aa:b2:18:d3:9e: d8:72:17:e8:9f:63:43:bf:ac:10:a7:b3:e0:a3:45: b6:00:12:3c:9b:75:76:98:92:fc:a9:34:31:c6:b1: a4:1a:8d:03:2e:49:d1:aa:c9:04:e8:99:96:a8:cc: ab:d9:73:29:82:63:b2:eb:ae:1b:20:f1:bd:02:9a: e3:ce:9e:b9:5e:2b:ab:7c:fd:18:85:2d:0f:be:f7: 5d:bb:f1:58:3c:ec:c5:12:c2:ee:46:3e:aa:ee:2a: 68:40:e7:63:56:3d:6f:42:0e:5d:3a:5a:2d:de:09: 3b:36:11:70:cb:fa:42:be:87:bb:8c:b4:16:17:66: c8:70:17:41:6a:99:91:34:93:25:64:6e:a7:19:a2: 4c:90:a0:05:7c:9c:ca:b9:fc:38:2e:e7:28:00:62: 29:5b:88:c2:49:c9:9f:1c:4a:3c:9b:ed:db:6e:29: ac:41:03:a4:2f:12:d1:c6:7f:52:99:8b:80:f3:b6: f3:34:46:0a:11:b3:30:4e:7b:56:c9:82:fd:c8:5b: 53:a3:fd:48:92:14:7a:da:4c:75:73:b4:a5:cd:92: 6a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:2F:90:0D:C6:C1:6A:AB:5D:E1:4C:2E:B4:7A:40:F2:03:BD:6B:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d9aeca6a-e1ce-3f37-a024-704cb3bce6ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:39f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:e3:98:5e:d1:56:79:95:e5:2b:a4:7d:a3:d5:a6:8e:44:a1: 15:0d:cf:7a:6f:0c:99:03:e3:2a:ae:9b:9e:7e:63:70:c2:40: c8:0c:26:0e:c1:6a:f5:c8:1b:18:27:90:87:5f:1e:8f:bd:2c: 3f:e5:31:90:22:05:1c:73:a7:9d:a7:e8:0e:a7:07:d7:1a:2b: c4:13:c3:e6:2c:60:9b:a3:31:a3:52:fe:89:16:1f:df:30:a0: 7d:a5:bb:b7:6a:46:f9:47:04:c9:85:37:aa:13:6e:3c:d4:25: ca:ad:fa:30:5c:c4:a4:21:fd:8a:3d:ee:23:4c:1b:b3:5e:2c: 20:95:e7:9c:d1:42:34:75:15:9f:8c:2b:f7:24:b3:91:64:5a: 11:e0:8d:96:22:d2:24:b3:ea:fd:6a:9a:cb:4f:60:94:b1:b6: 52:ce:bf:76:93:11:ad:ea:f6:87:47:b7:fc:95:db:7a:8a:45: 6a:bb:2f:97:ab:e4:7f:98:32:87:9c:b4:6c:bb:f9:1c:2d:c6: 11:fe:ed:36:03:99:3a:4a:e4:05:58:22:2b:d2:36:a3:82:11: 19:08:72:42:7d:56:05:f1:da:c9:d2:f2:e3:c9:33:fe:53:ba: 22:35:40:00:a1:c1:d8:8d:df:a6:ac:5a:6e:28:64:0b:a2:94: 31:06:10:63 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkssi5RJgVDKBlCAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk YmMzNTQwODUtOTM4Ni00NmUzLWJhYmQtOThjODdmZjgzZWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5KQoO2ITvkgHpdmux5hRtm+88ZPIYG28IaX vYzmbmed356MmAntqrIY057Ychfon2NDv6wQp7Pgo0W2ABI8m3V2mJL8qTQxxrGk Go0DLknRqskE6JmWqMyr2XMpgmOy664bIPG9Aprjzp65XiurfP0YhS0Pvvddu/FY POzFEsLuRj6q7ipoQOdjVj1vQg5dOlot3gk7NhFwy/pCvoe7jLQWF2bIcBdBapmR NJMlZG6nGaJMkKAFfJzKufw4LucoAGIpW4jCScmfHEo8m+3bbimsQQOkLxLRxn9S mYuA87bzNEYKEbMwTntWyYL9yFtTo/1IkhR62kx1c7SlzZJqqQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGMvkA3GwWqrXeFMLrR6QPIDvWu2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDlhZWNhNmEtZTFjZS0z ZjM3LWEwMjQtNzA0Y2IzYmNlNmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMHjmF7RVnmV5SukfaPVpo5EoRUNz3pvDJkD4yqum55+Y3DCQMgM Jg7BavXIGxgnkIdfHo+9LD/lMZAiBRxzp52n6A6nB9caK8QTw+YsYJujMaNS/okW H98woH2lu7dqRvlHBMmFN6oTbjzUJcqt+jBcxKQh/Yo97iNMG7NeLCCV55zRQjR1 FZ+MK/cks5FkWhHgjZYi0iSz6v1qmstPYJSxtlLOv3aTEa3q9odHt/yV23qKRWq7 L5er5H+YMoectGy7+RwtxhH+7TYDmTpK5AVYIivSNqOCERkIckJ9VgXx2snS8uPJ M/5TuiI1QAChwdiN36asWm4oZAuilDEGEGM= -----END CERTIFICATE-----Generated at Mon May 5 07:00:55 2025 by rpki-client