$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7ba0a543-ac21-3f49-b1ea-e29bbeb08e8e.roa File: 7ba0a543-ac21-3f49-b1ea-e29bbeb08e8e.roa (raw, json) Hash identifier: RBwW53VLWex6Y2Qn84PZ5YlZS8CDpIC7Qus9pW5vHEo= Subject key identifier: 5B:AA:71:ED:04:E7:E9:F7:1D:FE:CB:C5:E2:96:23:AB:D3:09:06:06 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FCC005A957DA12EC54EA0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7ba0a543-ac21-3f49-b1ea-e29bbeb08e8e.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 9927 IP address blocks: 2001:470:291::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:cc:00:5a:95:7d:a1:2e:c5:4e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=d8a810ce-a5c2-4575-97c4-5064560e3434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ea:00:41:0a:c3:ca:a4:ca:9a:7d:ff:70:20: d6:a9:bc:03:59:79:8d:ce:8c:f5:9b:c7:c3:48:b6: 99:e6:5c:e7:f3:79:2a:12:89:90:78:f6:34:48:b7: 1d:ed:fd:59:a9:14:90:14:58:2a:72:47:d3:7e:b1: f3:dd:71:31:c9:5b:67:cf:28:52:20:c5:38:0f:6c: fb:67:bc:e4:66:fe:3f:2b:67:eb:dd:f4:de:04:b3: e2:17:ef:98:8a:2c:24:b3:10:a7:28:6d:31:03:c9: d4:e7:e4:eb:8b:69:f6:bf:da:f8:3b:9f:d5:08:92: 0f:70:10:6f:2f:cd:e1:93:56:88:b3:79:9c:f5:42: 69:3d:70:19:64:7a:07:a3:de:9c:ed:96:7e:d9:cf: 3a:1a:b2:d8:8b:68:9b:00:c7:bf:6d:d9:58:c8:2a: b0:b5:af:2a:7e:ac:1b:9f:8c:bc:a8:fd:0e:d6:e5: d4:d6:17:6e:7b:8f:fa:8b:b4:40:9a:6b:44:6d:a7: 83:f9:0a:7d:c6:bd:26:7d:81:5a:55:74:2c:38:79: 6b:1e:b7:0d:6d:04:1e:19:fe:46:5f:33:3f:53:44: 8f:2f:ea:96:93:c3:dc:56:ce:1d:cd:17:4f:53:7b: 93:d7:13:8e:c6:d4:8f:78:db:04:41:c3:5c:f2:f7: f1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:AA:71:ED:04:E7:E9:F7:1D:FE:CB:C5:E2:96:23:AB:D3:09:06:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7ba0a543-ac21-3f49-b1ea-e29bbeb08e8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:291::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:54:af:85:9a:ea:fe:40:21:1d:5d:90:09:82:1c:e3:cb:65: 01:6e:c1:0f:bb:0c:91:a2:1d:6a:e3:25:3a:61:5b:80:53:57: 0f:7e:45:eb:67:af:76:df:18:d9:f9:a9:d7:d7:d6:f2:f9:b5: 1c:bb:3b:93:5f:f8:ed:6a:c8:a0:a3:8a:5b:f0:ae:82:73:85: d8:f4:ff:1e:f5:cf:cf:f8:06:75:fe:1b:38:59:1d:4c:a0:9e: f5:43:8a:b9:51:42:0c:d2:f7:eb:76:ff:9d:c6:30:7e:c0:d1: ba:d5:48:ca:70:64:75:60:71:0d:25:31:99:13:da:f6:d4:91: 81:b9:f9:7d:e2:fd:e4:1f:f6:e0:fa:bd:df:b9:3c:73:23:5b: 13:96:e9:11:15:aa:f8:71:d1:dd:bb:fb:e4:de:60:f4:f2:6d: 70:75:04:1b:dd:7a:cb:42:34:30:d3:8f:10:06:cf:ed:d2:70: e7:27:72:fe:9f:9e:80:a9:d0:7d:89:65:e9:e5:a3:a5:9d:46: ea:c6:1b:c6:8d:05:34:94:f6:64:ef:02:fb:0a:92:31:c7:4a: 9a:53:84:48:0d:f6:e0:d5:2f:0f:59:59:f2:9a:99:53:79:72: e1:68:2e:06:33:8c:41:97:44:53:03:b5:5f:fc:a0:30:6c:36: 09:e4:aa:0a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX8wAWpV9oS7FTqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk ZDhhODEwY2UtYTVjMi00NTc1LTk3YzQtNTA2NDU2MGUzNDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuoAQQrDyqTKmn3/cCDWqbwDWXmNzoz1m8fD SLaZ5lzn83kqEomQePY0SLcd7f1ZqRSQFFgqckfTfrHz3XExyVtnzyhSIMU4D2z7 Z7zkZv4/K2fr3fTeBLPiF++YiiwksxCnKG0xA8nU5+Tri2n2v9r4O5/VCJIPcBBv L83hk1aIs3mc9UJpPXAZZHoHo96c7ZZ+2c86GrLYi2ibAMe/bdlYyCqwta8qfqwb n4y8qP0O1uXU1hdue4/6i7RAmmtEbaeD+Qp9xr0mfYFaVXQsOHlrHrcNbQQeGf5G XzM/U0SPL+qWk8PcVs4dzRdPU3uT1xOOxtSPeNsEQcNc8vfxdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFuqce0E5+n3Hf7LxeKWI6vTCQYGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvN2JhMGE1NDMtYWMyMS0z ZjQ5LWIxZWEtZTI5YmJlYjA4ZThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI1Ur4Wa6v5AIR1dkAmCHOPLZQFuwQ+7DJGiHWrjJTphW4BTVw9+ Retnr3bfGNn5qdfX1vL5tRy7O5Nf+O1qyKCjilvwroJzhdj0/x71z8/4BnX+GzhZ HUygnvVDirlRQgzS9+t2/53GMH7A0brVSMpwZHVgcQ0lMZkT2vbUkYG5+X3i/eQf 9uD6vd+5PHMjWxOW6REVqvhx0d27++TeYPTybXB1BBvdestCNDDTjxAGz+3ScOcn cv6fnoCp0H2JZenlo6WdRurGG8aNBTSU9mTvAvsKkjHHSppThEgN9uDVLw9ZWfKa mVN5cuFoLgYzjEGXRFMDtV/8oDBsNgnkqgo= -----END CERTIFICATE-----Generated at Sat Jun 7 14:20:03 2025 by rpki-client