$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5cb1ba93-1260-3280-bb73-02ae195f131d.roa File: 5cb1ba93-1260-3280-bb73-02ae195f131d.roa (raw, json) Hash identifier: ZZu2MRc5xzR8WfOkwbG5LqnSqqwxnjCzBR9Su8j1iFY= Subject key identifier: 76:3A:B1:16:B1:C9:FD:24:3B:1D:0A:7B:8F:5B:88:23:62:4D:BF:44 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858489E6B5C3118B59D0FD4988160 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5cb1ba93-1260-3280-bb73-02ae195f131d.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 399426 IP address blocks: 2001:470:3bc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:5c:31:18:b5:9d:0f:d4:98:81:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=e2f23c04-a473-461d-8069-e1afb030f1cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:bc:33:c2:5c:3d:f5:d2:bb:72:37:00:42:cb: 15:ec:29:b1:b8:7b:4e:e6:f2:ed:59:44:ef:89:7f: 97:3a:b6:d6:11:c7:92:c1:0c:f3:8a:02:b2:78:27: 7c:e8:eb:02:91:27:5e:0c:b5:a0:f0:ad:0c:8f:b6: 9d:e3:45:cd:ae:17:47:61:3d:01:d2:48:c0:2a:13: ae:6d:e2:9c:8b:5c:77:39:d7:26:c4:9b:9b:1c:72: 1c:51:f5:8e:ab:c8:02:21:9b:0c:52:57:3d:60:0f: dc:88:69:61:9a:7c:ec:0f:13:f6:50:90:3b:9c:e8: 6d:a7:75:13:1e:8a:14:f2:da:b1:55:4d:83:87:4c: 40:78:35:05:3b:0e:d9:52:4f:ae:f8:ff:20:5e:13: dc:76:2e:e7:24:86:6a:2c:a7:41:23:70:c4:e8:37: b7:8d:eb:f4:bc:52:58:7d:8b:fd:16:30:e0:44:72: 0a:0c:06:c8:86:94:8f:06:36:24:70:25:c7:dd:a6: 35:b7:a4:1c:1b:0c:e8:8f:19:20:8d:26:37:ff:85: 03:53:62:b3:0b:7b:8f:6d:fe:36:96:a0:d4:e4:6b: 46:fe:0d:94:17:b8:ec:59:f8:b1:17:ab:61:c8:23: 4d:01:0f:ed:8d:96:a8:c5:37:49:fc:ac:d4:f0:c7: b1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:3A:B1:16:B1:C9:FD:24:3B:1D:0A:7B:8F:5B:88:23:62:4D:BF:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5cb1ba93-1260-3280-bb73-02ae195f131d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3bc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:ee:dd:54:74:a2:df:84:75:32:42:82:4d:03:d3:30:d6:77: c3:00:23:6b:6f:ab:de:59:85:c4:9e:07:3a:9c:66:61:df:71: c6:4a:0e:13:eb:20:ab:c5:d6:ce:51:0f:a0:54:c0:ba:9d:82: 8c:77:46:44:de:ad:1f:0b:71:37:ed:88:08:62:c9:6a:bb:b1: 1f:e7:30:7c:db:06:66:5b:34:bf:7b:4b:20:c4:d2:fd:e4:e5: 8e:73:00:72:68:5e:bb:a6:71:38:72:67:60:4a:92:bf:d8:33: 0a:86:ff:b1:78:59:c3:0a:d3:3c:30:c7:a7:c7:26:73:0c:6e: b9:72:f6:99:88:8f:db:73:df:ff:79:a1:88:f5:16:7d:49:bc: c1:bb:72:ff:bc:11:59:49:89:f8:f7:bb:f9:59:f1:62:3c:c4: 2c:0e:fe:76:4b:22:da:77:54:af:98:e9:32:3a:65:91:5c:a3: 00:a3:eb:20:c5:06:bb:72:36:01:94:62:e5:7b:72:0d:a4:6e: 81:b5:65:6b:82:62:4a:fa:9d:57:85:eb:e2:0b:b2:51:34:ec: 0d:d1:22:74:0a:c7:91:66:ad:ce:eb:30:0e:cb:7c:ee:7b:d7: d1:e0:00:9c:25:b9:de:3c:87:65:ae:5a:d6:af:3c:ee:00:35: c1:d9:e8:f8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiea1wxGLWdD9SYgWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZTJmMjNjMDQtYTQ3My00NjFkLTgwNjktZTFhZmIwMzBmMWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7wzwlw99dK7cjcAQssV7CmxuHtO5vLtWUTv iX+XOrbWEceSwQzzigKyeCd86OsCkSdeDLWg8K0Mj7ad40XNrhdHYT0B0kjAKhOu beKci1x3OdcmxJubHHIcUfWOq8gCIZsMUlc9YA/ciGlhmnzsDxP2UJA7nOhtp3UT HooU8tqxVU2Dh0xAeDUFOw7ZUk+u+P8gXhPcdi7nJIZqLKdBI3DE6De3jev0vFJY fYv9FjDgRHIKDAbIhpSPBjYkcCXH3aY1t6QcGwzojxkgjSY3/4UDU2KzC3uPbf42 lqDU5GtG/g2UF7jsWfixF6thyCNNAQ/tjZaoxTdJ/KzU8Mex6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHY6sRaxyf0kOx0Ke49biCNiTb9EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNWNiMWJhOTMtMTI2MC0z MjgwLWJiNzMtMDJhZTE5NWYxMzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAO8 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAILu3VR0ot+EdTJCgk0D0zDWd8MAI2tvq95ZhcSeBzqcZmHfccZK DhPrIKvF1s5RD6BUwLqdgox3RkTerR8LcTftiAhiyWq7sR/nMHzbBmZbNL97SyDE 0v3k5Y5zAHJoXrumcThyZ2BKkr/YMwqG/7F4WcMK0zwwx6fHJnMMbrly9pmIj9tz 3/95oYj1Fn1JvMG7cv+8EVlJifj3u/lZ8WI8xCwO/nZLItp3VK+Y6TI6ZZFcowCj 6yDFBrtyNgGUYuV7cg2kboG1ZWuCYkr6nVeF6+ILslE07A3RInQKx5Fmrc7rMA7L fO5719HgAJwlud48h2WuWtavPO4ANcHZ6Pg= -----END CERTIFICATE-----Generated at Fri Apr 4 17:59:37 2025 by rpki-client