$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/41944b50-72f6-3ff0-96f0-f230dcfd5e1a.roa File: 41944b50-72f6-3ff0-96f0-f230dcfd5e1a.roa (raw, json) Hash identifier: KXdvtdxaZ24r1Zu1fuM9fs3DfZ5nDKAew8M8N5/fj2Y= Subject key identifier: D3:BF:F3:E8:8E:E3:00:CA:4A:6E:87:75:3F:70:D0:40:3E:AF:58:5F Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584925C251E186A3A6B04582C100 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/41944b50-72f6-3ff0-96f0-f230dcfd5e1a.roa Signing time: Tue 11 Mar 2025 01:30:16 +0000 ROA not before: Tue 11 Mar 2025 01:30:16 +0000 ROA not after: Mon 09 Jun 2025 01:30:16 +0000 asID: 36902 IP address blocks: 2001:470:422::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:25:c2:51:e1:86:a3:a6:b0:45:82:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 11 01:30:16 2025 GMT Not After : Jun 9 01:30:16 2025 GMT Subject: CN=777b737f-0094-4485-b14f-e5490bc24bc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5a:96:9e:b4:bf:3e:04:8b:be:71:6c:7c:be: b0:a1:22:ed:a5:74:39:99:ef:aa:74:0b:5e:49:b4: 09:bc:5d:34:5f:19:cd:41:38:7f:81:b7:ad:54:bf: ef:bb:52:bd:e8:c2:85:19:64:69:a2:ee:46:90:a9: 03:bd:93:e2:54:04:4b:2c:8d:91:25:6f:49:88:bc: 2b:38:d7:ae:29:dd:c2:eb:3f:9d:b7:47:58:39:6a: 17:2b:d4:49:9f:cc:ee:0f:f6:79:59:c7:d9:98:57: 25:ad:a4:25:a8:34:3e:bb:8d:39:85:a6:da:08:ee: 66:32:86:a8:ed:f2:e6:34:b8:04:d8:17:d8:65:33: 43:50:15:38:0d:9f:9e:4e:4f:27:95:cb:6c:93:7d: 36:8d:da:1d:11:5a:63:a8:e5:03:94:a1:7b:8f:2e: 78:25:c0:5b:67:b7:35:ba:da:c6:3d:67:b0:8d:47: de:76:e5:33:1a:51:a1:bc:36:95:b3:38:8e:52:9d: 22:cd:55:47:4a:df:b5:40:53:ad:d3:27:6b:51:c9: 36:d2:31:ba:96:a2:a2:30:12:d4:89:6e:9a:1a:6b: b8:78:7d:b4:15:72:ed:f0:fd:c4:0d:8c:0c:ed:91: 0c:69:e0:64:e2:f9:eb:86:9e:02:06:ee:f3:1d:38: fa:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:BF:F3:E8:8E:E3:00:CA:4A:6E:87:75:3F:70:D0:40:3E:AF:58:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/41944b50-72f6-3ff0-96f0-f230dcfd5e1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:422::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:de:24:31:96:0f:09:88:b3:c9:fc:ef:e8:64:d0:c9:a4:11: 2f:5a:0c:ae:0b:1b:15:57:5e:31:ca:31:ec:d6:dc:e2:fe:40: 11:ba:39:e7:a4:c4:48:f4:ba:d5:67:5f:47:31:b1:0e:b1:a6: c9:b1:fb:b2:a3:d0:5c:ef:84:e6:d9:0d:f7:fa:1d:8d:d5:92: 7f:54:6a:b0:8d:75:de:82:0f:b1:24:5c:3f:e9:a1:08:2c:51: 41:f2:2d:17:9a:7a:fe:45:41:38:0d:98:09:92:99:e2:45:34: 62:df:b8:ce:79:1d:10:f8:d6:a1:1d:84:7f:38:ef:48:06:83: a5:3c:80:8b:ad:2d:6c:0b:0e:44:ec:34:5a:58:d3:f1:de:78: 7a:49:83:b7:18:82:8f:a2:aa:d4:f9:74:eb:b0:5c:20:bc:af: b7:6e:f6:de:d3:e9:dd:ec:a3:d0:6a:65:47:34:94:74:a1:c4: 17:61:32:3b:06:36:b8:00:ff:30:96:0a:16:71:f9:6f:a4:6a: 98:b1:86:de:e2:dc:74:b7:8f:18:c8:f3:87:d8:4c:7e:cd:05: ad:ac:be:a8:d8:c0:fb:a8:97:a9:02:92:bb:40:b6:46:bf:13: aa:37:7b:86:bb:d9:ce:85:59:be:a0:a1:a5:2a:7e:72:3a:d4: 3e:a6:51:e6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEklwlHhhqOmsEWCwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMxMTAxMzAxNloXDTI1MDYwOTAxMzAxNlowLzEtMCsGA1UEAxMk Nzc3YjczN2YtMDA5NC00NDg1LWIxNGYtZTU0OTBiYzI0YmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVqWnrS/PgSLvnFsfL6woSLtpXQ5me+qdAte SbQJvF00XxnNQTh/gbetVL/vu1K96MKFGWRpou5GkKkDvZPiVARLLI2RJW9JiLwr ONeuKd3C6z+dt0dYOWoXK9RJn8zuD/Z5WcfZmFclraQlqDQ+u405habaCO5mMoao 7fLmNLgE2BfYZTNDUBU4DZ+eTk8nlctsk302jdodEVpjqOUDlKF7jy54JcBbZ7c1 utrGPWewjUfeduUzGlGhvDaVsziOUp0izVVHSt+1QFOt0ydrUck20jG6lqKiMBLU iW6aGmu4eH20FXLt8P3EDYwM7ZEMaeBk4vnrhp4CBu7zHTj6EQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNO/8+iO4wDKSm6HdT9w0EA+r1hfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDE5NDRiNTAtNzJmNi0z ZmYwLTk2ZjAtZjIzMGRjZmQ1ZTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHHeJDGWDwmIs8n87+hk0MmkES9aDK4LGxVXXjHKMezW3OL+QBG6 OeekxEj0utVnX0cxsQ6xpsmx+7Kj0FzvhObZDff6HY3Vkn9UarCNdd6CD7EkXD/p oQgsUUHyLReaev5FQTgNmAmSmeJFNGLfuM55HRD41qEdhH8470gGg6U8gIutLWwL DkTsNFpY0/HeeHpJg7cYgo+iqtT5dOuwXCC8r7du9t7T6d3so9BqZUc0lHShxBdh MjsGNrgA/zCWChZx+W+kapixht7i3HS3jxjI84fYTH7NBa2svqjYwPuol6kCkrtA tka/E6o3e4a72c6FWb6goaUqfnI61D6mUeY= -----END CERTIFICATE-----Generated at Fri Apr 4 17:54:07 2025 by rpki-client