$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7c4f08e0-b371-3eb8-90b6-c3e9edeca9f4.roa File: 7c4f08e0-b371-3eb8-90b6-c3e9edeca9f4.roa (raw, json) Hash identifier: U0AjXbUFwnoxwqbSfJVXFDvR/AAVVjOGbnQkpLaqq68= Subject key identifier: 30:C3:1C:24:4F:F4:32:22:3E:8B:F9:7B:AB:7F:9A:AB:24:A4:C0:66 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848A83F44E551CDB1F62B0415E0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7c4f08e0-b371-3eb8-90b6-c3e9edeca9f4.roa Signing time: Sat 25 Jan 2025 02:30:10 +0000 ROA not before: Sat 25 Jan 2025 02:30:10 +0000 ROA not after: Fri 25 Apr 2025 01:30:10 +0000 asID: 53586 IP address blocks: 2001:470:401::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:3f:44:e5:51:cd:b1:f6:2b:04:15:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jan 25 02:30:10 2025 GMT Not After : Apr 25 01:30:10 2025 GMT Subject: CN=087280ae-fb8f-484e-905a-ad6cf619f1f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:dc:ab:2d:fc:fa:1d:c5:83:ee:d8:8b:88:fb: 6c:6a:c8:53:75:8e:48:e0:62:0d:03:dc:28:93:ad: 63:fc:18:b9:3b:2b:8c:61:7f:21:29:fd:c9:d8:ea: 59:f7:e4:f9:18:e2:69:0d:28:dd:9b:1b:0f:76:dd: 2b:17:d1:9a:3a:0a:0b:5b:5c:b8:2b:68:7f:a2:4b: a4:b9:ac:db:20:37:2d:4e:8c:8a:36:1d:a5:4f:41: cf:35:e3:d9:cd:7d:6b:fa:9a:57:32:29:d8:86:37: 7f:a4:98:b0:e8:10:7e:a2:5e:44:4f:f9:01:17:bd: c6:dd:d7:c7:41:bf:5a:59:01:80:e0:b9:42:7c:85: cb:c2:37:be:f0:00:08:3f:9f:03:9a:2d:ba:10:ca: 2d:c4:c2:24:8f:2d:f9:99:ba:ae:75:ed:09:48:e7: 07:24:b5:bc:7b:00:c4:ac:8a:86:d0:e8:06:4a:a5: af:c3:8f:18:a3:97:10:92:4c:37:09:15:c2:dc:c5: 35:90:77:f9:bd:38:25:09:f9:18:b9:35:94:26:76: 9a:22:3c:37:69:e7:65:12:ef:20:d8:9d:12:f2:2c: e4:a1:dc:37:86:c8:f7:43:20:26:eb:9f:40:ab:8c: 88:96:ee:5d:46:5e:af:c3:42:09:10:2a:16:80:96: 0b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C3:1C:24:4F:F4:32:22:3E:8B:F9:7B:AB:7F:9A:AB:24:A4:C0:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7c4f08e0-b371-3eb8-90b6-c3e9edeca9f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:401::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:73:ca:ef:a6:78:6e:f1:c8:c8:ee:40:e1:69:35:0c:5f:d1: c7:6e:a4:56:03:52:d7:c3:86:ba:da:23:b0:e6:f9:c1:43:66: 61:d5:ae:4e:a3:13:95:db:aa:95:11:0e:c0:95:aa:30:35:0a: ed:d4:59:0a:8d:05:82:3e:0d:c1:51:4c:6d:6d:53:8f:a4:21: 05:c2:ea:ec:43:5b:2a:d5:67:c3:5f:4d:52:db:42:3c:e0:66: ba:7b:e2:22:97:cd:86:0a:24:1a:fe:fe:90:fb:51:49:68:eb: 42:bb:67:a2:eb:8f:e7:42:dc:83:48:32:9f:e8:5e:d3:06:00: d3:db:15:f4:1a:92:6a:b1:32:d1:e5:1c:9e:0d:d0:b5:da:3f: 6e:4f:6a:da:3e:ed:1e:8c:db:fd:4d:0d:f8:09:be:40:93:a6: 32:2c:2f:d6:ef:47:de:0f:1e:ae:88:94:55:d6:fe:98:41:e0: e5:99:c1:88:23:ee:c1:78:da:bf:6b:95:f1:e6:d1:56:3a:43: e8:ef:f4:8e:7b:bd:31:64:d3:f5:75:e8:44:52:e2:6c:60:8c: 46:58:d2:7d:46:a6:aa:aa:b6:fa:11:7b:ac:12:9a:53:61:fc: 77:dd:04:1c:08:76:6c:7f:92:35:2e:b2:91:4e:c1:ab:87:4b: 56:c1:75:53 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEioP0TlUc2x9isEFeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDEyNTAyMzAxMFoXDTI1MDQyNTAxMzAxMFowLzEtMCsGA1UEAxMk MDg3MjgwYWUtZmI4Zi00ODRlLTkwNWEtYWQ2Y2Y2MTlmMWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNyrLfz6HcWD7tiLiPtsashTdY5I4GINA9wo k61j/Bi5OyuMYX8hKf3J2OpZ9+T5GOJpDSjdmxsPdt0rF9GaOgoLW1y4K2h/okuk uazbIDctToyKNh2lT0HPNePZzX1r+ppXMinYhjd/pJiw6BB+ol5ET/kBF73G3dfH Qb9aWQGA4LlCfIXLwje+8AAIP58Dmi26EMotxMIkjy35mbqude0JSOcHJLW8ewDE rIqG0OgGSqWvw48Yo5cQkkw3CRXC3MU1kHf5vTglCfkYuTWUJnaaIjw3aedlEu8g 2J0S8izkodw3hsj3QyAm659Aq4yIlu5dRl6vw0IJECoWgJYLFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDDDHCRP9DIiPov5e6t/mqskpMBmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvN2M0ZjA4ZTAtYjM3MS0z ZWI4LTkwYjYtYzNlOWVkZWNhOWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA1zyu+meG7xyMjuQOFpNQxf0cdupFYDUtfDhrraI7Dm+cFDZmHV rk6jE5XbqpURDsCVqjA1Cu3UWQqNBYI+DcFRTG1tU4+kIQXC6uxDWyrVZ8NfTVLb QjzgZrp74iKXzYYKJBr+/pD7UUlo60K7Z6Lrj+dC3INIMp/oXtMGANPbFfQakmqx MtHlHJ4N0LXaP25Pato+7R6M2/1NDfgJvkCTpjIsL9bvR94PHq6IlFXW/phB4OWZ wYgj7sF42r9rlfHm0VY6Q+jv9I57vTFk0/V16ERS4mxgjEZY0n1GpqqqtvoRe6wS mlNh/HfdBBwIdmx/kjUuspFOwauHS1bBdVM= -----END CERTIFICATE-----Generated at Fri Mar 14 12:29:35 2025 by rpki-client