$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21f8c037-912c-328c-a5e2-5442a3d1b99f.roa File: 21f8c037-912c-328c-a5e2-5442a3d1b99f.roa (raw, json) Hash identifier: MDroPLfClOXXkCx8hH1dCYZkNpTFGgDFPYSM3LUX9nI= Subject key identifier: 6A:ED:62:AD:FB:80:85:A1:A4:9A:FE:0D:DC:0E:A4:CC:32:E3:E7:B5 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926CE1B54114E97EF648A00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21f8c037-912c-328c-a5e2-5442a3d1b99f.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 25687 IP address blocks: 2001:470:2a4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:ce:1b:54:11:4e:97:ef:64:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=d8fc9666-c10e-4ce0-9470-57d4c5e78f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9e:83:84:09:38:a2:52:7c:e0:37:12:6a:cb: 14:c4:a6:66:f5:92:18:b1:46:36:db:3a:2c:90:3a: 7f:5f:f2:5b:1b:09:16:d1:3e:c1:61:96:17:9e:c4: 59:cd:f4:1c:66:9a:91:ab:5d:31:65:d1:e7:83:ce: c0:a8:27:35:53:eb:44:a9:56:a5:53:9a:75:36:20: 42:02:28:53:f7:c5:47:f8:27:ad:08:da:18:f0:41: 2d:de:3b:d3:36:8e:96:45:ee:5e:11:0e:68:dc:2b: 9a:5c:1a:32:b2:43:8f:e9:93:ca:f4:03:f5:17:ea: ef:b1:6b:65:35:4b:00:00:36:fe:83:89:9c:13:ab: ef:1e:34:cb:02:20:76:ba:55:af:23:9d:7f:03:a2: 5e:e9:fe:68:f5:1f:27:d0:e9:97:fa:b5:a0:95:e4: 53:89:c2:e3:4a:71:11:4e:ee:78:f8:ca:b5:09:35: c7:65:90:aa:c8:71:1b:6d:c1:8b:2f:88:73:d4:05: 70:ab:82:8a:da:95:6b:fa:5c:16:2a:32:a6:c2:ba: ee:56:bd:ed:d1:32:eb:48:a2:1e:58:08:c6:e5:94: 6d:cc:42:cb:0c:8f:ac:c2:50:e5:e6:05:a7:67:18: 2b:ed:70:5c:0c:1f:ab:cb:ff:d1:c2:cd:4e:ab:a1: 24:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:ED:62:AD:FB:80:85:A1:A4:9A:FE:0D:DC:0E:A4:CC:32:E3:E7:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21f8c037-912c-328c-a5e2-5442a3d1b99f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:97:7d:4b:29:37:e4:11:c3:b2:cc:82:9f:89:bf:8a:4b:23: ef:29:73:df:ec:86:62:2a:a4:d6:fc:a6:15:d7:e8:7e:e8:03: d1:4d:22:d5:fd:e3:50:e0:f4:78:cb:9b:66:91:40:c8:0b:73: c3:90:74:e8:b8:8d:77:8b:ae:f1:22:fd:cc:cf:65:20:42:29: 78:15:f5:1b:3f:e1:1b:16:1c:ad:9b:f5:1a:14:9b:d1:6e:8c: 4a:fa:6d:17:61:99:56:45:6b:7f:0c:5a:3f:b7:de:aa:9a:32: 38:39:22:07:8e:bc:5e:85:ef:13:dd:f5:f9:1e:fe:55:b6:6c: c1:81:59:24:63:9a:12:97:36:f2:49:d1:b9:4a:e3:4b:f1:72: 05:39:e1:fb:50:8f:26:1a:1d:ab:c3:fd:05:75:32:2e:4b:6d: 94:23:7d:c3:46:54:d5:ce:37:e9:3c:c8:7a:71:89:06:da:00: 12:70:48:cb:8c:59:03:60:66:1b:25:04:18:b5:47:b7:c2:30: 04:34:91:a0:74:24:90:97:a2:bc:ae:e8:2d:f2:ec:ef:87:48: 5b:53:d4:92:eb:5a:5b:0f:cf:1a:c0:75:33:ae:ba:c3:cf:e5: 83:98:67:bf:5d:99:92:e8:7e:00:4e:a3:e2:68:b2:e3:71:79: 1e:8a:b7:6c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5Js4bVBFOl+9kigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk ZDhmYzk2NjYtYzEwZS00Y2UwLTk0NzAtNTdkNGM1ZTc4ZjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZ6DhAk4olJ84DcSassUxKZm9ZIYsUY22zos kDp/X/JbGwkW0T7BYZYXnsRZzfQcZpqRq10xZdHng87AqCc1U+tEqValU5p1NiBC AihT98VH+CetCNoY8EEt3jvTNo6WRe5eEQ5o3CuaXBoyskOP6ZPK9AP1F+rvsWtl NUsAADb+g4mcE6vvHjTLAiB2ulWvI51/A6Je6f5o9R8n0OmX+rWgleRTicLjSnER Tu54+Mq1CTXHZZCqyHEbbcGLL4hz1AVwq4KK2pVr+lwWKjKmwrruVr3t0TLrSKIe WAjG5ZRtzELLDI+swlDl5gWnZxgr7XBcDB+ry//Rws1Oq6Ek8QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGrtYq37gIWhpJr+DdwOpMwy4+e1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjFmOGMwMzctOTEyYy0z MjhjLWE1ZTItNTQ0MmEzZDFiOTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIyXfUspN+QRw7LMgp+Jv4pLI+8pc9/shmIqpNb8phXX6H7oA9FN ItX941Dg9HjLm2aRQMgLc8OQdOi4jXeLrvEi/czPZSBCKXgV9Rs/4RsWHK2b9RoU m9FujEr6bRdhmVZFa38MWj+33qqaMjg5IgeOvF6F7xPd9fke/lW2bMGBWSRjmhKX NvJJ0blK40vxcgU54ftQjyYaHavD/QV1Mi5LbZQjfcNGVNXON+k8yHpxiQbaABJw SMuMWQNgZhslBBi1R7fCMAQ0kaB0JJCXoryu6C3y7O+HSFtT1JLrWlsPzxrAdTOu usPP5YOYZ79dmZLofgBOo+JosuNxeR6Kt2w= -----END CERTIFICATE-----Generated at Fri Apr 4 17:44:11 2025 by rpki-client