$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1a51a1de-0053-3e36-b3c7-288e4c9b0971.roa File: 1a51a1de-0053-3e36-b3c7-288e4c9b0971.roa (raw, json) Hash identifier: 00ezBjz44PQudQNGeCTX0In5UyfHcxZPZ+k+lLaJGJE= Subject key identifier: E7:8C:65:83:6C:E9:98:E7:C1:C1:E8:F7:DB:EF:2E:4B:AC:02:91:E3 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858492E13C922784D718129E3B800 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1a51a1de-0053-3e36-b3c7-288e4c9b0971.roa Signing time: Fri 14 Mar 2025 01:00:39 +0000 ROA not before: Fri 14 Mar 2025 01:00:39 +0000 ROA not after: Thu 12 Jun 2025 01:00:39 +0000 asID: 40263 IP address blocks: 2001:470:32b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2e:13:c9:22:78:4d:71:81:29:e3:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 14 01:00:39 2025 GMT Not After : Jun 12 01:00:39 2025 GMT Subject: CN=a81cb3c2-21bd-4118-a9fb-6ddc219f50cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:73:a3:34:19:d2:af:c4:f1:27:7b:32:c2:56: 17:8f:8e:3c:32:4e:11:9b:d3:9b:c3:94:c4:bb:e7: 94:8b:2c:59:f0:08:9a:8f:04:b0:76:77:85:f5:2c: 30:78:9f:fa:bd:73:7b:35:e7:87:76:f0:42:8d:21: 3f:0e:8e:6c:a2:e6:e1:a5:98:6f:8d:24:f6:f1:10: ec:20:44:d9:cc:94:46:63:49:23:55:34:4f:81:b7: ea:97:8c:6a:33:46:14:50:70:98:c1:32:2f:d1:1d: 8b:91:99:27:1f:41:fd:92:9b:62:a7:60:0e:1d:ea: d9:db:63:ef:6b:5a:b2:86:3f:3a:ce:2d:70:1a:9c: 59:17:1f:21:78:e8:7c:d5:a8:51:6f:31:28:ea:98: 51:58:be:dd:74:0d:49:bc:90:24:20:d3:d5:10:8f: ed:84:44:3a:3c:55:b5:88:03:96:8b:6d:01:84:e7: 8d:17:d1:b1:bd:12:35:5a:a4:30:4c:ce:5d:2d:f6: 41:55:05:11:d8:af:34:3e:48:1d:b7:af:a6:db:ab: b2:84:dc:04:f5:f7:b3:8a:c6:dd:b7:4a:8d:a9:bb: 04:03:60:2e:07:8e:54:e1:0a:dc:80:b7:db:f2:2a: a8:e4:56:3d:9b:47:29:e6:dc:4c:6c:79:e7:dc:f0: db:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:8C:65:83:6C:E9:98:E7:C1:C1:E8:F7:DB:EF:2E:4B:AC:02:91:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1a51a1de-0053-3e36-b3c7-288e4c9b0971.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:32b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:11:4a:ec:46:6d:f7:30:99:5c:ce:bc:d3:49:61:43:f3:5b: 45:0a:c9:0c:0d:95:de:01:0f:2a:3d:a6:9d:6b:ee:53:25:e1: 01:7c:32:e4:20:3a:d5:6e:7f:81:2a:26:2f:92:83:ea:6b:aa: b7:19:ca:87:0b:03:f9:d1:43:32:0e:8b:da:db:81:23:fc:a1: d6:13:22:66:05:5f:5a:8d:fc:bd:81:1c:18:94:a7:8f:e2:d9: eb:d3:32:89:4e:0e:59:4a:28:6a:c6:c0:c4:51:5d:ee:98:d4: 1f:8f:d3:68:9d:4d:4f:06:e6:0b:94:f9:96:58:dd:a5:7e:06: 31:70:2e:97:67:06:cb:45:cb:ef:98:06:bd:3d:f4:18:5b:34: 2a:5f:96:ce:e1:c8:46:3d:d4:a6:8f:5b:fa:49:ac:5b:0d:18: 2e:54:67:81:03:60:59:3a:f2:7d:7f:d7:41:44:65:90:8b:55: bf:7d:94:2a:e9:df:a5:b4:5b:90:6a:3f:8a:98:ec:11:03:a5: 79:ba:6b:75:73:39:90:fe:9d:2d:18:25:a2:cb:a5:89:da:73: 3a:4e:10:0f:7c:9b:19:39:79:55:24:2d:71:c5:c8:dd:76:bd: f2:91:53:57:9e:af:dc:95:f7:f2:21:43:90:6b:df:5b:6f:d4: 0a:55:2c:50 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkuE8kieE1xgSnjuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMxNDAxMDAzOVoXDTI1MDYxMjAxMDAzOVowLzEtMCsGA1UEAxMk YTgxY2IzYzItMjFiZC00MTE4LWE5ZmItNmRkYzIxOWY1MGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3OjNBnSr8TxJ3sywlYXj448Mk4Rm9Obw5TE u+eUiyxZ8AiajwSwdneF9SwweJ/6vXN7NeeHdvBCjSE/Do5soubhpZhvjST28RDs IETZzJRGY0kjVTRPgbfql4xqM0YUUHCYwTIv0R2LkZknH0H9kptip2AOHerZ22Pv a1qyhj86zi1wGpxZFx8heOh81ahRbzEo6phRWL7ddA1JvJAkINPVEI/thEQ6PFW1 iAOWi20BhOeNF9GxvRI1WqQwTM5dLfZBVQUR2K80Pkgdt6+m26uyhNwE9fezisbd t0qNqbsEA2AuB45U4QrcgLfb8iqo5FY9m0cp5txMbHnn3PDbgQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOeMZYNs6ZjnwcHo99vvLkusApHjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMWE1MWExZGUtMDA1My0z ZTM2LWIzYzctMjg4ZTRjOWIwOTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAMr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF0RSuxGbfcwmVzOvNNJYUPzW0UKyQwNld4BDyo9pp1r7lMl4QF8 MuQgOtVuf4EqJi+Sg+prqrcZyocLA/nRQzIOi9rbgSP8odYTImYFX1qN/L2BHBiU p4/i2evTMolODllKKGrGwMRRXe6Y1B+P02idTU8G5guU+ZZY3aV+BjFwLpdnBstF y++YBr099BhbNCpfls7hyEY91KaPW/pJrFsNGC5UZ4EDYFk68n1/10FEZZCLVb99 lCrp36W0W5BqP4qY7BEDpXm6a3VzOZD+nS0YJaLLpYnaczpOEA98mxk5eVUkLXHF yN12vfKRU1eer9yV9/IhQ5Br31tv1ApVLFA= -----END CERTIFICATE-----Generated at Fri Apr 4 17:45:10 2025 by rpki-client