$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/70c8e9e1-9888-3a19-8d4f-5779a1219972.roa File: 70c8e9e1-9888-3a19-8d4f-5779a1219972.roa (raw, json) Hash identifier: PX2MMcK+TiTXt52YeTiKBwDR3d26vHXngZXEJqVhB20= Subject key identifier: EA:9B:4B:34:31:21:EC:0D:AE:41:A7:D3:2F:B2:3B:18:FC:D4:55:66 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858492F87C1B8D52F3E563237BE40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/70c8e9e1-9888-3a19-8d4f-5779a1219972.roa Signing time: Fri 14 Mar 2025 13:30:21 +0000 ROA not before: Fri 14 Mar 2025 13:30:21 +0000 ROA not after: Thu 12 Jun 2025 13:30:21 +0000 asID: 30886 IP address blocks: 2001:470:427::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2f:87:c1:b8:d5:2f:3e:56:32:37:be:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 14 13:30:21 2025 GMT Not After : Jun 12 13:30:21 2025 GMT Subject: CN=56a63914-98a6-4408-a3cc-175fe08d7aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:95:a4:f2:dc:15:1b:4b:4c:76:a3:e2:dc:4f: 7c:93:d8:20:b6:ad:d9:8f:04:83:28:d0:b0:1f:1f: 84:9c:1c:6f:b1:5c:b1:ba:f0:16:d3:b3:b1:11:ec: 7d:60:31:c6:f7:e3:74:58:17:55:7f:e8:d9:b2:c3: 44:ec:65:40:bd:1b:30:cc:68:77:67:c4:0c:8a:be: ce:dc:71:7e:f0:fa:4a:20:64:32:86:e4:b7:32:60: 2f:fb:69:93:82:df:63:3b:6d:24:46:6a:6d:dd:fd: e5:e8:02:69:ff:37:e5:61:17:49:64:47:0b:e3:8c: b4:f0:bd:13:d1:79:6f:65:5d:9a:f1:41:4c:2f:8a: e2:c1:b3:be:ee:2e:1f:25:ac:37:23:5e:45:2b:94: 9e:38:65:af:0d:49:33:15:b3:8d:28:ee:86:24:95: 4c:55:02:6a:57:f2:d5:5c:e1:10:81:ed:c8:1a:f3: f0:05:a3:f5:46:66:b8:d5:b9:80:02:43:71:4f:c0: 25:56:c6:18:e2:78:20:b4:88:02:ec:ae:1c:19:37: 21:f7:8d:d6:4d:80:1a:1d:ba:b3:4e:ee:88:ff:12: 2b:91:a7:96:a3:06:38:e5:06:31:88:99:d3:db:d3: d5:98:85:5e:f3:e5:cd:a2:ec:85:d9:6b:d4:63:a9: 0c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9B:4B:34:31:21:EC:0D:AE:41:A7:D3:2F:B2:3B:18:FC:D4:55:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/70c8e9e1-9888-3a19-8d4f-5779a1219972.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:427::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:9f:ee:d0:30:1c:d5:90:e8:89:2c:07:cd:14:b1:f2:f0:7f: 05:f7:9a:9d:48:a9:01:c1:11:7d:dc:ce:43:d2:8d:bd:fe:1e: af:c1:83:5b:8a:89:1f:16:e1:41:ae:61:a2:62:82:2b:d4:78: 51:ed:2f:da:28:d9:48:c1:39:0d:2a:0f:b6:51:89:25:13:6c: b5:49:99:c8:b5:a7:e9:0a:40:37:7a:d8:95:95:96:3f:47:a8: d7:e1:5c:b5:cb:1f:43:33:81:f8:54:a2:1c:05:3d:ab:a6:70: 09:ae:81:97:10:ba:bb:90:12:47:f7:d0:90:52:e1:fb:20:88: 29:a5:6b:eb:93:2d:81:44:3a:28:3e:5b:b7:c1:1e:e1:b7:8b: eb:56:b6:3b:b2:2c:1a:d1:28:6c:f3:3b:0d:ae:81:de:cf:d2: 11:28:5e:5c:df:c1:92:56:cd:cf:20:41:21:79:8d:e1:70:56: a7:5b:f6:10:d5:0f:20:61:41:d3:9e:07:eb:10:27:b0:85:c1: fe:56:34:84:3c:b4:f4:51:07:71:cd:cd:df:99:cb:2f:af:85: 10:94:76:0a:ed:51:f5:66:c1:fe:59:de:0e:a7:78:d7:bd:a5: 19:8b:1b:7f:02:65:18:21:1f:48:e6:03:15:15:e3:69:ba:f6: 54:fe:fd:dc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkvh8G41S8+VjI3vkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMxNDEzMzAyMVoXDTI1MDYxMjEzMzAyMVowLzEtMCsGA1UEAxMk NTZhNjM5MTQtOThhNi00NDA4LWEzY2MtMTc1ZmUwOGQ3YWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5Wk8twVG0tMdqPi3E98k9ggtq3ZjwSDKNCw Hx+EnBxvsVyxuvAW07OxEex9YDHG9+N0WBdVf+jZssNE7GVAvRswzGh3Z8QMir7O 3HF+8PpKIGQyhuS3MmAv+2mTgt9jO20kRmpt3f3l6AJp/zflYRdJZEcL44y08L0T 0XlvZV2a8UFML4riwbO+7i4fJaw3I15FK5SeOGWvDUkzFbONKO6GJJVMVQJqV/LV XOEQge3IGvPwBaP1Rma41bmAAkNxT8AlVsYY4nggtIgC7K4cGTch943WTYAaHbqz Tu6I/xIrkaeWowY45QYxiJnT29PVmIVe8+XNouyF2WvUY6kMJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOqbSzQxIewNrkGn0y+yOxj81FVmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNzBjOGU5ZTEtOTg4OC0z YTE5LThkNGYtNTc3OWExMjE5OTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGWf7tAwHNWQ6IksB80UsfLwfwX3mp1IqQHBEX3czkPSjb3+Hq/B g1uKiR8W4UGuYaJigivUeFHtL9oo2UjBOQ0qD7ZRiSUTbLVJmci1p+kKQDd62JWV lj9HqNfhXLXLH0MzgfhUohwFPaumcAmugZcQuruQEkf30JBS4fsgiCmla+uTLYFE Oig+W7fBHuG3i+tWtjuyLBrRKGzzOw2ugd7P0hEoXlzfwZJWzc8gQSF5jeFwVqdb 9hDVDyBhQdOeB+sQJ7CFwf5WNIQ8tPRRB3HNzd+Zyy+vhRCUdgrtUfVmwf5Z3g6n eNe9pRmLG38CZRghH0jmAxUV42m69lT+/dw= -----END CERTIFICATE-----Generated at Fri Apr 4 17:55:44 2025 by rpki-client