$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/223a3bde-4871-384e-8a5a-b078a2c2bbba.roa File: 223a3bde-4871-384e-8a5a-b078a2c2bbba.roa (raw, json) Hash identifier: iBcgn3Qg7eHIll8qjwign0XEwetalS3zqf4GO0sC6Ac= Subject key identifier: AF:59:65:24:84:DC:49:85:AF:58:84:13:87:94:FF:60:39:C2:85:EB Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FE9CBB8D52F60AF2E1480 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/223a3bde-4871-384e-8a5a-b078a2c2bbba.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 400765 IP address blocks: 2001:470:a3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:e9:cb:b8:d5:2f:60:af:2e:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=0e62cd1f-f4d9-4c4f-9585-e7e71ac9cb76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:56:34:98:8b:ef:4b:2e:53:f5:8c:18:0a:79: 46:4d:2a:a4:31:1e:ba:9b:af:2c:7a:e2:b9:7d:5c: 76:c9:ef:6b:95:14:d5:a7:73:2f:ea:5d:2c:e1:a7: 11:14:14:e3:67:2d:34:c8:1e:b7:2d:cc:4d:82:40: a4:5c:00:cc:29:1f:29:9d:64:3f:b0:d0:11:13:f8: c8:a1:03:52:51:20:00:28:19:4a:66:cd:c1:0f:fc: a4:2c:d8:6a:a1:a1:69:68:79:4a:88:92:71:a3:47: b5:48:54:a5:99:51:de:5a:2f:d5:6e:fc:25:06:ef: 29:4e:19:b4:b6:06:28:e7:4f:36:18:1a:bf:19:4f: a5:19:c1:9f:bf:98:0f:9b:96:a0:70:0a:d7:60:12: 5b:5b:53:2d:63:af:e8:3a:53:58:93:26:c1:79:40: c7:ce:56:b8:45:e9:16:39:18:f5:20:2e:a3:6f:69: 7c:ff:6e:6e:30:07:7c:56:7a:f7:87:65:08:80:c1: 9a:95:34:81:38:ff:90:89:dd:5b:b2:8f:2e:fb:a1: 52:86:87:37:b5:96:1d:d6:8f:27:3b:72:b2:b7:c6: 32:91:6b:f1:c5:50:c5:19:26:86:ab:de:81:df:a6: cb:6c:cc:3d:58:49:08:30:0e:54:83:7b:5c:82:e3: 54:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:59:65:24:84:DC:49:85:AF:58:84:13:87:94:FF:60:39:C2:85:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/223a3bde-4871-384e-8a5a-b078a2c2bbba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:a3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:df:a1:31:d4:09:11:ab:03:77:46:c0:3e:94:75:07:d0:b1: 02:60:db:51:da:9f:81:e1:da:92:6c:07:19:43:bc:13:80:29: e7:35:69:24:c0:08:41:37:2e:80:9e:32:a7:be:15:69:d4:2f: a0:58:1b:e1:83:47:95:39:53:75:02:59:c8:5d:a2:04:f9:33: 41:e3:1e:73:c4:7d:34:a4:d7:25:9b:32:66:c4:6b:b0:95:2e: 41:d5:6d:ef:ea:cb:ed:af:b9:bf:9e:4e:19:33:fa:08:ce:9a: 9d:18:4c:31:17:fc:c2:69:fe:09:97:63:e8:09:a4:d6:2b:fb: 5c:3e:d2:7c:76:f5:82:52:ea:d5:e3:a3:c1:c5:6e:90:7d:03: d4:6a:11:d1:50:3c:2e:7f:3d:17:6c:26:ad:ac:69:12:0a:31: db:c4:f5:f9:a5:68:90:f8:6c:03:fb:a0:65:2c:d9:49:0e:be: 09:93:b6:2e:cf:ca:3f:c5:f2:26:67:ff:48:67:73:e5:9e:c9: 33:6d:33:9b:9f:f6:8a:e2:d3:6d:c4:8b:66:85:4c:31:6c:3d: b3:80:85:d2:61:d7:48:10:0e:f9:44:95:ca:07:b2:74:64:a0: d6:ad:ba:f8:e9:3e:8f:5d:7f:38:07:66:c9:8d:88:44:14:4f: 74:5d:d0:50 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX+nLuNUvYK8uFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk MGU2MmNkMWYtZjRkOS00YzRmLTk1ODUtZTdlNzFhYzljYjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFY0mIvvSy5T9YwYCnlGTSqkMR66m68seuK5 fVx2ye9rlRTVp3Mv6l0s4acRFBTjZy00yB63LcxNgkCkXADMKR8pnWQ/sNARE/jI oQNSUSAAKBlKZs3BD/ykLNhqoaFpaHlKiJJxo0e1SFSlmVHeWi/VbvwlBu8pThm0 tgYo5082GBq/GU+lGcGfv5gPm5agcArXYBJbW1MtY6/oOlNYkybBeUDHzla4RekW ORj1IC6jb2l8/25uMAd8Vnr3h2UIgMGalTSBOP+Qid1bso8u+6FShoc3tZYd1o8n O3Kyt8YykWvxxVDFGSaGq96B36bLbMw9WEkIMA5Ug3tcguNUvQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK9ZZSSE3EmFr1iEE4eU/2A5woXrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjIzYTNiZGUtNDg3MS0z ODRlLThhNWEtYjA3OGEyYzJiYmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAPfoTHUCRGrA3dGwD6UdQfQsQJg21Han4Hh2pJsBxlDvBOAKec1 aSTACEE3LoCeMqe+FWnUL6BYG+GDR5U5U3UCWchdogT5M0HjHnPEfTSk1yWbMmbE a7CVLkHVbe/qy+2vub+eThkz+gjOmp0YTDEX/MJp/gmXY+gJpNYr+1w+0nx29YJS 6tXjo8HFbpB9A9RqEdFQPC5/PRdsJq2saRIKMdvE9fmlaJD4bAP7oGUs2UkOvgmT ti7Pyj/F8iZn/0hnc+WeyTNtM5uf9ori023Ei2aFTDFsPbOAhdJh10gQDvlElcoH snRkoNatuvjpPo9dfzgHZsmNiEQUT3Rd0FA= -----END CERTIFICATE-----Generated at Sun Jun 8 03:58:58 2025 by rpki-client