$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b290a66-dfee-326b-be76-7a2b6d3ae94b.roa File: 4b290a66-dfee-326b-be76-7a2b6d3ae94b.roa (raw, json) Hash identifier: kwXL+HTiK3dJCFcYuCLpWz9Z6z3guKshETJvmsNCKlQ= Subject key identifier: B1:44:E0:0A:46:D7:98:3B:DA:60:0E:BF:D0:B7:77:48:44:C9:15:2C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FC7B8C92D4C1A29802980 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b290a66-dfee-326b-be76-7a2b6d3ae94b.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 205019 IP address blocks: 2001:470:28e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:c7:b8:c9:2d:4c:1a:29:80:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=76bba6ff-2c81-42db-b72f-2db36e8e2b01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:cf:b6:28:52:0f:70:d9:7b:75:34:7c:d2:95: 7c:1a:03:49:74:a0:50:d4:3c:98:2b:a7:9c:88:db: 4b:98:f6:60:55:dd:28:14:70:06:39:c2:a1:dd:3f: 06:9e:ac:45:a3:8e:fa:47:41:d9:0a:d7:2e:7b:55: 6c:6a:e7:9e:c9:e2:1f:a1:bd:bb:a8:bb:ae:c5:52: 82:09:80:7b:0b:ab:b7:6b:d6:4c:d6:c2:ca:ea:1e: 88:d7:19:d8:c7:f4:b4:8a:0a:66:e6:a5:ec:38:cc: cb:f5:d6:9c:1c:15:ba:5d:1d:a8:17:38:24:b5:74: 8b:18:3e:a9:7b:0c:17:86:4e:7f:48:5a:72:74:b4: ea:8b:94:6d:90:f5:43:3d:04:ef:b1:58:a7:d8:27: bb:62:dd:ec:2a:5d:5c:12:6b:cb:65:23:7d:49:ae: 19:89:54:0b:9a:9f:0e:48:93:1d:f6:a2:a0:cd:60: 49:d7:bd:1b:af:14:7c:08:ac:98:5c:d0:a8:74:ba: 1b:18:5e:7a:d5:d4:4a:cc:ee:77:f3:62:29:f9:af: 48:93:66:dc:d2:a3:f5:93:60:5f:31:92:c1:0d:0c: bb:df:8b:c5:65:1d:38:1e:fe:61:72:6d:87:eb:48: 03:3f:0c:f8:8a:73:2f:19:64:27:37:4f:b6:0a:0a: b6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:44:E0:0A:46:D7:98:3B:DA:60:0E:BF:D0:B7:77:48:44:C9:15:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b290a66-dfee-326b-be76-7a2b6d3ae94b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:28e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:cf:2d:3c:ad:39:ed:b3:73:d2:e5:5f:4d:22:c6:d5:b1:53: b1:f4:80:cc:78:56:b0:3e:17:e3:7f:cf:e0:86:f6:4b:6a:a2: 71:f3:61:d0:90:b9:26:6c:c5:a9:98:62:94:0d:59:24:b5:bf: 8d:dd:15:25:31:4f:67:81:f2:7e:ae:19:b2:7e:2f:64:27:2f: e2:dc:32:a5:28:a3:ca:83:97:eb:74:95:13:0a:bb:9c:d1:29: 9e:02:53:5f:c8:17:9c:03:be:cc:bc:1f:1c:ef:ab:57:ae:71: d3:d4:86:dd:01:4b:a4:2b:af:ce:47:01:e1:21:63:8e:5a:bd: b6:4b:5f:2d:77:6d:43:de:21:ca:02:7c:9d:94:0b:dd:fe:9d: e7:d1:f8:62:9c:de:83:14:5a:be:bb:a6:ff:c6:18:98:b2:51: b8:14:a8:e0:40:67:96:a0:08:5d:a1:ee:56:dc:4d:61:0f:e9: 24:ce:07:e0:e9:09:01:3f:53:1e:2a:b0:71:4c:14:c6:c9:52: d8:3e:7d:15:c4:78:b2:4f:7a:6e:12:9a:28:f7:1c:e6:fc:41: 23:1b:db:ba:c4:fa:1c:3d:cb:95:e0:d7:28:f2:5a:d1:a9:fb: b9:ce:6c:d1:0a:47:f3:90:d4:ea:b8:61:16:ab:e9:92:48:94: f1:01:d3:22 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX8e4yS1MGimAKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk NzZiYmE2ZmYtMmM4MS00MmRiLWI3MmYtMmRiMzZlOGUyYjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8+2KFIPcNl7dTR80pV8GgNJdKBQ1DyYK6ec iNtLmPZgVd0oFHAGOcKh3T8GnqxFo476R0HZCtcue1VsaueeyeIfob27qLuuxVKC CYB7C6u3a9ZM1sLK6h6I1xnYx/S0igpm5qXsOMzL9dacHBW6XR2oFzgktXSLGD6p ewwXhk5/SFpydLTqi5RtkPVDPQTvsVin2Ce7Yt3sKl1cEmvLZSN9Sa4ZiVQLmp8O SJMd9qKgzWBJ170brxR8CKyYXNCodLobGF561dRKzO5382Ip+a9Ik2bc0qP1k2Bf MZLBDQy734vFZR04Hv5hcm2H60gDPwz4inMvGWQnN0+2Cgq2iQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLFE4ApG15g72mAOv9C3d0hEyRUsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNGIyOTBhNjYtZGZlZS0z MjZiLWJlNzYtN2EyYjZkM2FlOTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGbPLTytOe2zc9LlX00ixtWxU7H0gMx4VrA+F+N/z+CG9ktqonHz YdCQuSZsxamYYpQNWSS1v43dFSUxT2eB8n6uGbJ+L2QnL+LcMqUoo8qDl+t0lRMK u5zRKZ4CU1/IF5wDvsy8Hxzvq1eucdPUht0BS6Qrr85HAeEhY45avbZLXy13bUPe IcoCfJ2UC93+nefR+GKc3oMUWr67pv/GGJiyUbgUqOBAZ5agCF2h7lbcTWEP6STO B+DpCQE/Ux4qsHFMFMbJUtg+fRXEeLJPem4Smij3HOb8QSMb27rE+hw9y5Xg1yjy WtGp+7nObNEKR/OQ1Oq4YRar6ZJIlPEB0yI= -----END CERTIFICATE-----Generated at Thu Jun 5 18:20:34 2025 by rpki-client