$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/403fefd1-873d-3617-a8f7-ea3c6f6da7f1.roa File: 403fefd1-873d-3617-a8f7-ea3c6f6da7f1.roa (raw, json) Hash identifier: Yjy83vxz7+Xe3SRpiRD2CrW7SxDnZq5g3uReHjRHy1M= Subject key identifier: C3:FA:1B:F8:57:16:8B:40:C5:16:FB:54:F2:96:56:CA:1B:8C:D3:E1 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FC7890FAF266FB7ACB420 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/403fefd1-873d-3617-a8f7-ea3c6f6da7f1.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 133398 IP address blocks: 2001:470:288::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:c7:89:0f:af:26:6f:b7:ac:b4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=e0bf6b2a-b6ec-4774-ba74-8f6fbc2ef947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:8a:5f:d6:dc:b5:da:f9:34:a7:ba:53:91:6a: 9a:22:97:0b:ee:8c:e2:a1:8a:39:fa:15:5a:fe:94: 65:30:0e:99:78:79:48:48:2f:05:dd:6a:9f:0e:e7: 12:59:94:94:9c:e9:1c:01:01:2b:19:44:1c:e3:38: 0a:7d:9a:62:66:35:8b:30:17:6c:92:de:76:84:26: 42:05:9c:04:af:93:c9:f0:02:56:f3:18:a1:f3:3b: c5:6a:29:86:66:b7:84:c5:78:e4:43:38:c1:4d:be: e6:fb:5a:ec:0e:43:36:37:aa:53:f0:15:a0:80:ce: 8a:8d:30:8c:4e:43:41:14:68:49:3f:22:3d:4a:35: 2a:56:f0:25:04:87:73:1d:74:d7:d1:a6:4a:2f:15: 73:ee:4b:10:b4:ef:a4:99:ac:d7:8f:8d:30:71:b1: 82:73:30:d0:f1:63:1a:7d:c8:8e:5a:36:e6:19:d3: 80:db:7b:2a:24:31:88:e0:96:13:e2:d5:d3:94:7e: 6d:6a:48:52:97:08:50:bd:1c:ad:51:1e:a9:1e:86: 91:40:74:81:ee:95:97:d3:e0:0b:52:e5:b6:2f:4d: b6:e7:1f:ee:cc:b8:4c:b0:5a:9b:51:cc:ee:28:a7: 93:7f:cc:0d:0e:13:ef:63:35:f8:f4:15:74:b4:38: 98:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:FA:1B:F8:57:16:8B:40:C5:16:FB:54:F2:96:56:CA:1B:8C:D3:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/403fefd1-873d-3617-a8f7-ea3c6f6da7f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:288::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:52:a4:cb:82:f3:d4:f3:51:90:35:b6:c5:7f:5f:1c:a0:ca: 86:73:33:f2:90:0c:7a:7b:a9:3b:00:26:b6:c2:bb:c8:ec:be: 3c:91:58:e8:04:a3:a7:cc:9c:c3:80:c4:81:3d:ec:cc:11:e1: 8f:15:d5:03:8d:76:b9:ae:cd:b5:ff:0f:51:b2:dc:7c:81:e3: 68:87:bb:34:82:47:a4:3c:e9:aa:97:e7:90:5a:c6:5f:8c:f5: 46:14:98:e4:35:2f:7b:dc:f9:94:64:d4:ca:c8:8a:02:5b:7f: 13:a8:02:2a:14:ed:bf:08:b7:50:47:3d:e7:5b:4c:e8:42:3e: 68:99:d4:e7:43:5a:14:37:2f:a4:d7:26:43:e8:43:1c:90:0e: ae:f0:5b:5c:a3:f1:17:3c:e1:8c:c0:07:b6:bf:7b:74:1a:50: f1:60:54:88:76:29:dd:93:21:28:43:da:cf:15:d3:9a:60:bf: c7:ff:95:da:8e:61:73:cc:f4:ed:d9:76:06:46:74:0b:46:2b: b2:86:fa:1e:b3:a0:62:d3:07:a1:92:f4:00:c1:13:dd:53:d5: 9b:42:c0:e2:6b:68:8a:4b:a0:72:40:1a:17:69:29:67:f8:9d: 09:ca:0e:0c:cc:37:2c:a3:ac:9b:e6:8f:ca:1d:aa:ed:a6:c0: 73:26:01:f2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX8eJD68mb7estCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk ZTBiZjZiMmEtYjZlYy00Nzc0LWJhNzQtOGY2ZmJjMmVmOTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Ypf1ty12vk0p7pTkWqaIpcL7ozioYo5+hVa /pRlMA6ZeHlISC8F3WqfDucSWZSUnOkcAQErGUQc4zgKfZpiZjWLMBdskt52hCZC BZwEr5PJ8AJW8xih8zvFaimGZreExXjkQzjBTb7m+1rsDkM2N6pT8BWggM6KjTCM TkNBFGhJPyI9SjUqVvAlBIdzHXTX0aZKLxVz7ksQtO+kmazXj40wcbGCczDQ8WMa fciOWjbmGdOA23sqJDGI4JYT4tXTlH5takhSlwhQvRytUR6pHoaRQHSB7pWX0+AL UuW2L0225x/uzLhMsFqbUczuKKeTf8wNDhPvYzX49BV0tDiYNwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMP6G/hXFotAxRb7VPKWVsobjNPhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDAzZmVmZDEtODczZC0z NjE3LWE4ZjctZWEzYzZmNmRhN2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFJSpMuC89TzUZA1tsV/XxygyoZzM/KQDHp7qTsAJrbCu8jsvjyR WOgEo6fMnMOAxIE97MwR4Y8V1QONdrmuzbX/D1Gy3HyB42iHuzSCR6Q86aqX55Ba xl+M9UYUmOQ1L3vc+ZRk1MrIigJbfxOoAioU7b8It1BHPedbTOhCPmiZ1OdDWhQ3 L6TXJkPoQxyQDq7wW1yj8Rc84YzAB7a/e3QaUPFgVIh2Kd2TIShD2s8V05pgv8f/ ldqOYXPM9O3ZdgZGdAtGK7KG+h6zoGLTB6GS9ADBE91T1ZtCwOJraIpLoHJAGhdp KWf4nQnKDgzMNyyjrJvmj8odqu2mwHMmAfI= -----END CERTIFICATE-----Generated at Sat Jun 7 04:04:43 2025 by rpki-client