$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/571f153f-8d1e-3dde-af1c-db063d2fd80d.roa File: 571f153f-8d1e-3dde-af1c-db063d2fd80d.roa (raw, json) Hash identifier: 42mQ4NqF9rkCkO74gpV2m3wwZIujX0RqUf0W+xhTUgw= Subject key identifier: 50:DB:31:CB:36:30:88:57:54:71:BF:3F:10:4E:C9:9C:83:0D:05:55 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858492F87BC1B36F8A945A3EF0F80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/571f153f-8d1e-3dde-af1c-db063d2fd80d.roa Signing time: Fri 14 Mar 2025 13:30:18 +0000 ROA not before: Fri 14 Mar 2025 13:30:18 +0000 ROA not after: Thu 12 Jun 2025 13:30:18 +0000 asID: 210119 IP address blocks: 2001:470:427::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2f:87:bc:1b:36:f8:a9:45:a3:ef:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 14 13:30:18 2025 GMT Not After : Jun 12 13:30:18 2025 GMT Subject: CN=48dd7372-53e2-4ec1-b813-522ce6d5175e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:37:74:29:3c:61:b5:92:98:b2:13:4e:80:9f: 42:52:f4:17:12:a4:d3:b9:3f:a2:af:e9:9e:0d:42: 73:42:4f:65:9e:6b:75:aa:e6:35:ac:09:4b:e4:0d: 9e:50:de:38:79:f6:3a:f9:b2:4b:9f:3d:eb:39:9c: 8e:54:07:82:7d:1b:ae:66:54:3f:ed:ac:6d:f7:8e: ae:bd:cf:bd:53:d7:80:f4:49:61:af:d4:63:c8:13: a4:c4:25:bc:a6:d1:f1:74:f0:35:ab:2c:2d:b1:0d: 70:e5:cb:50:08:58:a4:22:60:b3:dd:d4:de:25:a7: 4e:9c:34:17:31:09:11:a3:c6:3e:7f:b5:3b:38:fb: cc:70:5d:4f:98:a0:81:57:ae:97:2f:69:a6:f6:12: 73:f5:53:88:fd:46:7c:b8:87:14:47:0a:35:dd:d8: ce:9b:25:2b:53:23:94:c1:0e:8a:8a:87:a3:f0:17: d0:a0:03:c5:b5:3a:66:0a:35:0e:30:8e:81:62:c9: 09:eb:8b:53:29:d7:4e:16:e7:43:25:d2:80:ca:83: a5:bb:43:b1:80:c4:a4:8e:ea:c5:01:12:f8:2a:67: c2:d3:33:c9:70:32:8f:44:d7:ea:fc:7b:35:29:0f: bf:68:8b:f2:c2:41:9c:ad:06:18:33:a1:9d:cd:f9: 2b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:DB:31:CB:36:30:88:57:54:71:BF:3F:10:4E:C9:9C:83:0D:05:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/571f153f-8d1e-3dde-af1c-db063d2fd80d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:427::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:cb:44:02:c7:b9:2d:b1:1b:f6:f1:10:b3:03:5b:14:5b:46: 30:39:7a:6f:5c:6c:55:ea:d9:55:04:c7:64:b5:32:cc:0d:af: b9:cc:19:5e:ad:36:dc:c1:dc:b8:ab:0a:aa:b6:7f:ac:41:f5: af:33:07:e7:a0:d1:3d:77:51:27:64:45:5d:c9:78:ea:ba:a0: 48:46:5e:7a:65:24:88:e5:41:e5:df:34:9b:89:01:36:26:fb: 82:4d:fc:73:b7:19:a4:34:4b:98:6f:1f:bb:67:73:34:59:35: d8:db:22:36:47:aa:ca:aa:1e:bb:59:d4:38:8a:8b:7f:67:a0: 39:a1:f6:e8:d4:55:dd:cc:ed:fd:d4:8c:67:0f:2f:72:c6:29: b4:3e:82:ec:ca:1b:f2:68:db:bc:fb:c1:ec:7c:c2:34:6b:fe: 5d:ac:06:44:96:44:2a:22:85:fd:6f:06:00:8b:b2:a6:3c:8f: b6:10:72:aa:b9:d4:22:b9:b0:46:0d:cd:9a:5b:fb:fd:cd:f0: 50:4c:6a:5b:76:1e:74:c4:78:57:4f:e5:52:04:e8:37:50:1c: ac:6b:ff:63:0e:24:8d:2f:64:6c:12:3e:39:d4:46:b3:e4:b8: 83:1d:37:9f:b6:32:54:d4:ed:65:22:10:3b:19:8b:b6:57:0e: 8b:b3:be:26 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkvh7wbNvipRaPvD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMxNDEzMzAxOFoXDTI1MDYxMjEzMzAxOFowLzEtMCsGA1UEAxMk NDhkZDczNzItNTNlMi00ZWMxLWI4MTMtNTIyY2U2ZDUxNzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzd0KTxhtZKYshNOgJ9CUvQXEqTTuT+ir+me DUJzQk9lnmt1quY1rAlL5A2eUN44efY6+bJLnz3rOZyOVAeCfRuuZlQ/7axt946u vc+9U9eA9Elhr9RjyBOkxCW8ptHxdPA1qywtsQ1w5ctQCFikImCz3dTeJadOnDQX MQkRo8Y+f7U7OPvMcF1PmKCBV66XL2mm9hJz9VOI/UZ8uIcURwo13djOmyUrUyOU wQ6Kioej8BfQoAPFtTpmCjUOMI6BYskJ64tTKddOFudDJdKAyoOlu0OxgMSkjurF ARL4KmfC0zPJcDKPRNfq/Hs1KQ+/aIvywkGcrQYYM6GdzfkrawIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFDbMcs2MIhXVHG/PxBOyZyDDQVVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTcxZjE1M2YtOGQxZS0z ZGRlLWFmMWMtZGIwNjNkMmZkODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABTLRALHuS2xG/bxELMDWxRbRjA5em9cbFXq2VUEx2S1MswNr7nM GV6tNtzB3LirCqq2f6xB9a8zB+eg0T13USdkRV3JeOq6oEhGXnplJIjlQeXfNJuJ ATYm+4JN/HO3GaQ0S5hvH7tnczRZNdjbIjZHqsqqHrtZ1DiKi39noDmh9ujUVd3M 7f3UjGcPL3LGKbQ+guzKG/Jo27z7wex8wjRr/l2sBkSWRCoihf1vBgCLsqY8j7YQ cqq51CK5sEYNzZpb+/3N8FBMalt2HnTEeFdP5VIE6DdQHKxr/2MOJI0vZGwSPjnU RrPkuIMdN5+2MlTU7WUiEDsZi7ZXDouzviY= -----END CERTIFICATE-----Generated at Fri Apr 4 17:41:25 2025 by rpki-client