$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7ba4d2cb-d861-3202-a43a-d95e61246ed7.roa File: 7ba4d2cb-d861-3202-a43a-d95e61246ed7.roa (raw, json) Hash identifier: fFzsWPw3NXkGc1vpVZBgbmh4pOItijovL9Dqa4zsozQ= Subject key identifier: 01:A8:00:7A:0C:40:07:6C:DE:B6:89:25:7D:F6:DC:6A:21:49:7D:8A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926B853CA4B7D89D67D5520 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7ba4d2cb-d861-3202-a43a-d95e61246ed7.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 18865 IP address blocks: 2001:470:2e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:b8:53:ca:4b:7d:89:d6:7d:55:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=ca274bac-1cb2-4dbe-a4d1-514b86ec21a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:84:15:77:ee:05:a3:1d:f9:1c:43:82:88:c1: d7:a5:28:12:85:a9:6e:b3:bf:3c:48:9b:a8:62:d9: 1d:86:51:9e:ae:2f:d2:78:a4:a4:1f:a1:90:d6:9a: 1c:54:49:a4:a6:16:89:cf:ef:48:90:89:b2:55:4b: 69:c1:6f:c1:ef:c9:7b:77:cd:4e:c4:54:5d:b6:01: 91:84:8c:df:11:25:63:2b:99:a4:df:b0:17:57:f2: d3:f9:80:5e:90:15:13:22:37:54:07:bd:1b:39:f7: 9a:b4:7d:99:fa:f6:e1:ce:c0:49:c9:ef:48:ba:78: 89:e0:9e:49:5d:2f:9b:df:9e:e5:e2:74:a9:c1:9c: 79:1d:70:1a:e1:60:0c:42:1c:bd:ed:3a:82:ff:9e: eb:ae:a9:5a:8b:ff:a9:86:c2:1f:34:47:44:c5:c1: 82:22:52:11:f1:bb:07:3c:0a:66:08:4e:c8:c5:b3: 7f:8e:d2:c2:09:17:c9:cc:8f:c3:6d:cc:6d:88:30: 1f:0b:84:a8:26:9a:96:73:1d:64:0a:60:6a:17:a6: 28:9c:3b:d4:f4:ff:f6:59:85:bc:aa:14:a5:79:e3: ec:b7:63:57:80:55:04:61:16:14:20:7c:ab:da:2c: 47:d7:b1:0b:5f:a7:e2:10:fe:6f:48:fc:81:9e:31: 7b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A8:00:7A:0C:40:07:6C:DE:B6:89:25:7D:F6:DC:6A:21:49:7D:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7ba4d2cb-d861-3202-a43a-d95e61246ed7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:b1:5a:57:1c:1f:bc:69:22:a8:90:e7:39:00:6d:76:1f:34: 7b:73:06:65:4f:c6:73:cd:aa:eb:bd:7f:43:e6:62:75:b2:c3: 94:de:ce:15:d8:d7:c2:9c:9f:66:bc:99:be:86:5d:d3:ce:1e: 27:24:a5:ed:54:5f:3b:2a:de:69:4d:94:16:e9:7f:19:f8:5b: 2b:60:b7:dd:1f:eb:6f:7f:75:ea:82:87:ff:36:11:ce:f0:bc: 7f:16:53:a8:19:53:ec:4f:15:52:09:c2:a1:0f:11:9a:fc:ad: b2:87:d4:58:bc:27:64:6c:34:44:6b:f1:e9:81:fa:f7:98:69: 1d:d3:22:a9:9e:67:14:a0:84:d6:2d:0e:08:a2:8d:96:94:23: ae:eb:c4:92:67:3b:5d:48:0b:21:22:44:0c:b6:09:7f:eb:a8: ef:64:0d:26:d5:e4:e5:1a:c4:95:f7:fb:d1:ec:2c:82:43:cc: 49:64:f5:ac:14:2b:37:d5:5f:72:c5:e6:42:25:8e:b6:6f:59: be:7f:f8:ca:e3:a0:2a:72:d5:28:da:34:46:d5:29:51:db:5d: be:21:28:ca:9d:cc:4c:3c:45:3a:76:68:ef:6b:5c:8e:c7:9d: bc:ad:37:cc:4f:6e:5e:e3:58:cd:a3:20:12:ef:44:c7:00:ce: 29:c6:85:cb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JrhTykt9idZ9VSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk Y2EyNzRiYWMtMWNiMi00ZGJlLWE0ZDEtNTE0Yjg2ZWMyMWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIQVd+4Fox35HEOCiMHXpSgShalus788SJuo YtkdhlGeri/SeKSkH6GQ1pocVEmkphaJz+9IkImyVUtpwW/B78l7d81OxFRdtgGR hIzfESVjK5mk37AXV/LT+YBekBUTIjdUB70bOfeatH2Z+vbhzsBJye9IuniJ4J5J XS+b357l4nSpwZx5HXAa4WAMQhy97TqC/57rrqlai/+phsIfNEdExcGCIlIR8bsH PApmCE7IxbN/jtLCCRfJzI/DbcxtiDAfC4SoJpqWcx1kCmBqF6YonDvU9P/2WYW8 qhSleePst2NXgFUEYRYUIHyr2ixH17ELX6fiEP5vSPyBnjF7GQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAGoAHoMQAds3raJJX323GohSX2KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvN2JhNGQyY2ItZDg2MS0z MjAyLWE0M2EtZDk1ZTYxMjQ2ZWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAAu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACKxWlccH7xpIqiQ5zkAbXYfNHtzBmVPxnPNquu9f0PmYnWyw5Te zhXY18Kcn2a8mb6GXdPOHickpe1UXzsq3mlNlBbpfxn4Wytgt90f629/deqCh/82 Ec7wvH8WU6gZU+xPFVIJwqEPEZr8rbKH1Fi8J2RsNERr8emB+veYaR3TIqmeZxSg hNYtDgiijZaUI67rxJJnO11ICyEiRAy2CX/rqO9kDSbV5OUaxJX3+9HsLIJDzElk 9awUKzfVX3LF5kIljrZvWb5/+MrjoCpy1SjaNEbVKVHbXb4hKMqdzEw8RTp2aO9r XI7HnbytN8xPbl7jWM2jIBLvRMcAzinGhcs= -----END CERTIFICATE-----Generated at Fri Apr 4 17:46:09 2025 by rpki-client