$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/487f8435-f2f4-3ef1-a0fc-a360a347b62a.roa File: 487f8435-f2f4-3ef1-a0fc-a360a347b62a.roa (raw, json) Hash identifier: MkHGoZ2XbFWHbRph3nA3ywTptI83JN97fYHkHHU/tio= Subject key identifier: 60:16:7E:69:79:CE:60:03:E8:12:55:B5:5D:64:3F:26:2F:7C:EF:0A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926B9A619AB48211D4F4E80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/487f8435-f2f4-3ef1-a0fc-a360a347b62a.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 36103 IP address blocks: 2001:470:e4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:b9:a6:19:ab:48:21:1d:4f:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=53cf2d4e-1f6c-4850-8b87-b79f0d8ce553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:11:54:ce:d0:30:0a:0f:93:28:93:c8:31:24: e2:d5:07:54:58:9c:ab:75:b3:b2:3e:f0:7c:7b:3a: 04:a8:a6:c1:85:d4:c2:8c:cc:2e:64:7d:b9:49:af: 71:49:37:18:67:2c:ce:3a:06:ad:39:d2:2c:43:c3: f5:5f:64:9d:c8:cf:fd:eb:30:fe:ba:d3:75:59:7e: 0a:53:ab:1c:23:0c:89:1e:65:a3:6e:a4:7c:15:3e: cf:54:95:03:a8:cb:13:bc:fe:ab:2b:fe:86:45:2b: 88:09:7b:dd:9a:25:69:99:f4:38:22:d2:1d:66:a9: a8:a9:9f:cf:1b:c3:34:c1:08:d3:45:4a:02:29:81: c3:91:42:03:35:3a:82:ad:a0:50:35:6a:1d:a4:9d: b6:91:22:2e:40:36:43:d3:a2:58:a9:c2:be:03:23: 0f:e6:20:0f:e1:8f:ae:35:8e:76:e3:9d:bf:98:7f: b3:0d:83:12:54:11:d8:bc:ec:6b:59:d6:bd:d8:77: 46:0e:16:da:fe:92:80:46:56:eb:9b:a6:54:fa:d7: 35:53:5a:af:b6:ce:3d:11:12:1d:a1:17:6e:04:55: 00:f2:d9:d4:f6:48:77:90:e2:13:cd:f3:99:65:54: 6a:08:e4:79:19:26:39:65:5a:3b:14:85:90:8b:a1: 60:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:16:7E:69:79:CE:60:03:E8:12:55:B5:5D:64:3F:26:2F:7C:EF:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/487f8435-f2f4-3ef1-a0fc-a360a347b62a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:e4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:13:7f:7b:d6:4f:d8:69:08:f9:d4:ec:31:9b:3b:82:1a:73: 47:33:d7:2c:80:a2:69:93:4e:e0:b3:89:76:73:4c:cc:72:66: 68:f6:9a:0d:1b:ea:6c:c9:86:a8:e7:4b:70:4f:7f:11:dc:f3: fa:e7:2a:80:8d:08:45:c4:91:7c:1d:ab:dc:84:8a:64:6e:68: 72:99:fc:82:18:94:c2:12:bd:49:13:25:8c:d4:44:49:c2:d1: 1f:33:20:05:41:ee:e5:42:0b:be:e3:dd:00:5a:2c:1d:97:55: 21:6a:5b:ca:d0:49:5b:ed:ad:4b:d7:ea:9c:24:97:a5:56:fb: 4a:a1:f1:91:8c:06:be:f4:57:49:ba:86:a6:12:2c:10:54:58: 52:56:97:df:ae:20:cd:9c:10:a8:eb:62:6d:05:9d:f9:28:a0: 92:05:0e:d2:01:e3:f0:69:02:aa:24:89:84:bf:f2:8f:18:0b: 3d:e4:9d:d0:e6:cc:df:67:42:32:a1:04:93:d4:7f:ef:ca:c8: f3:ce:f7:c0:aa:f6:aa:63:46:87:8b:a3:e2:87:e2:4f:66:28: b4:e9:ec:1e:d7:00:b6:72:f2:95:f3:35:82:f5:7b:0f:5c:02: df:61:8f:9c:c2:ae:85:7f:4c:4e:89:e7:19:00:5f:7a:89:60: 7f:ba:8a:56 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JrmmGatIIR1PToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk NTNjZjJkNGUtMWY2Yy00ODUwLThiODctYjc5ZjBkOGNlNTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RFUztAwCg+TKJPIMSTi1QdUWJyrdbOyPvB8 ezoEqKbBhdTCjMwuZH25Sa9xSTcYZyzOOgatOdIsQ8P1X2SdyM/96zD+utN1WX4K U6scIwyJHmWjbqR8FT7PVJUDqMsTvP6rK/6GRSuICXvdmiVpmfQ4ItIdZqmoqZ/P G8M0wQjTRUoCKYHDkUIDNTqCraBQNWodpJ22kSIuQDZD06JYqcK+AyMP5iAP4Y+u NY52452/mH+zDYMSVBHYvOxrWda92HdGDhba/pKARlbrm6ZU+tc1U1qvts49ERId oRduBFUA8tnU9kh3kOITzfOZZVRqCOR5GSY5ZVo7FIWQi6FgMQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGAWfml5zmAD6BJVtV1kPyYvfO8KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDg3Zjg0MzUtZjJmNC0z ZWYxLWEwZmMtYTM2MGEzNDdiNjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEoTf3vWT9hpCPnU7DGbO4Iac0cz1yyAommTTuCziXZzTMxyZmj2 mg0b6mzJhqjnS3BPfxHc8/rnKoCNCEXEkXwdq9yEimRuaHKZ/IIYlMISvUkTJYzU REnC0R8zIAVB7uVCC77j3QBaLB2XVSFqW8rQSVvtrUvX6pwkl6VW+0qh8ZGMBr70 V0m6hqYSLBBUWFJWl9+uIM2cEKjrYm0FnfkooJIFDtIB4/BpAqokiYS/8o8YCz3k ndDmzN9nQjKhBJPUf+/KyPPO98Cq9qpjRoeLo+KH4k9mKLTp7B7XALZy8pXzNYL1 ew9cAt9hj5zCroV/TE6J5xkAX3qJYH+6ilY= -----END CERTIFICATE-----Generated at Fri Apr 4 17:43:13 2025 by rpki-client