$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7e140b0d-9ce5-39d9-b61a-fee3ba210d23.roa File: 7e140b0d-9ce5-39d9-b61a-fee3ba210d23.roa (raw, json) Hash identifier: kzDwq1J5b7OLQ+Zdu83YTLB1xA7BYjS06zCiWbCG/R8= Subject key identifier: 14:B2:B2:A6:32:7C:0E:44:B9:FE:32:A1:A6:39:D4:51:2E:1F:EE:D9 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FCB7B8997724754A4BBC0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7e140b0d-9ce5-39d9-b61a-fee3ba210d23.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 1853 IP address blocks: 2001:470:2dd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:cb:7b:89:97:72:47:54:a4:bb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=36df6faa-0de6-4172-bb0c-184db1e10d0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4c:25:11:1a:36:42:c0:a2:1d:c9:fd:3f:ae: e5:b4:44:d2:a8:6c:9f:90:b9:57:82:d3:61:17:24: 9a:72:35:cd:25:19:9f:db:0e:77:0a:3f:6c:13:09: db:8a:2b:5b:d3:7b:e0:ad:bd:c5:cb:9d:47:76:22: 0f:ac:88:11:c8:c4:f7:95:07:c9:64:61:6f:62:03: df:55:1d:32:c9:ca:82:5f:f7:c0:bb:3d:de:58:76: 83:4a:fe:96:5c:bc:ea:8d:92:f0:0d:ab:c9:07:03: 67:f5:8d:63:b0:b5:69:e7:79:69:fd:0b:63:3e:db: 06:8f:c5:46:8b:2a:db:f2:cb:f5:c6:df:d0:bf:ec: 89:be:99:a4:31:04:ea:1e:a0:db:73:a1:fb:3c:84: 55:85:f6:c1:00:30:b3:2b:c3:f0:28:b3:a2:25:3c: af:26:43:cd:63:dc:56:e3:04:7d:96:af:40:a5:15: b6:17:10:40:26:47:8a:18:7c:1c:79:3a:f6:47:0e: 74:91:e9:7d:4e:12:b4:d7:a5:1f:b5:de:7c:22:14: 8e:ea:15:96:5d:4e:3e:e2:29:bb:e2:3d:84:1f:c2: d0:ec:5a:87:0f:8b:2d:3c:b9:a6:1e:ad:24:a0:82: c3:1c:44:12:b2:9c:24:70:9e:fd:ed:d9:a0:c8:db: e7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B2:B2:A6:32:7C:0E:44:B9:FE:32:A1:A6:39:D4:51:2E:1F:EE:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7e140b0d-9ce5-39d9-b61a-fee3ba210d23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2dd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:e2:79:77:ef:39:96:87:98:21:19:c3:a1:9a:7b:d9:90:0a: 19:37:9a:a5:db:38:22:6b:6a:23:71:2e:78:f9:40:12:4f:b9: dc:87:a8:2a:5e:05:94:0f:12:48:fb:63:a5:35:0e:c2:6b:f0: 9a:1f:b5:98:f9:8e:d9:90:76:17:95:85:75:b9:ac:f3:ea:b1: e8:a2:8c:14:b7:38:63:38:08:3e:7a:ee:2c:95:74:8f:14:7b: 0b:06:59:98:26:ac:5d:8f:8f:af:83:e8:d3:d9:a5:64:05:c6: 89:62:42:b9:28:8f:f7:78:89:5d:21:95:e3:85:72:64:ec:ee: 7f:d4:c9:8e:71:19:18:44:1c:66:6e:01:e2:71:b3:f5:90:22: d7:ce:45:ba:7e:bb:a8:85:21:72:09:db:67:c2:49:07:ae:1e: 66:69:75:a1:1e:6b:f2:7f:82:6e:f1:1c:d9:27:32:07:45:82: e8:e0:cb:5c:66:07:17:2f:51:6c:07:d5:29:3e:39:22:a8:37: 86:d6:db:35:dc:93:79:19:ef:54:eb:71:cf:24:31:06:63:9c: bf:84:0e:c9:22:59:51:20:0c:02:fc:3c:fe:c5:ca:e2:ba:db: 87:26:43:da:b5:ee:20:8b:d7:ab:2e:79:c5:08:7e:11:62:33: 1b:02:10:46 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX8t7iZdyR1Sku8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk MzZkZjZmYWEtMGRlNi00MTcyLWJiMGMtMTg0ZGIxZTEwZDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkwlERo2QsCiHcn9P67ltETSqGyfkLlXgtNh FySacjXNJRmf2w53Cj9sEwnbiitb03vgrb3Fy51HdiIPrIgRyMT3lQfJZGFvYgPf VR0yycqCX/fAuz3eWHaDSv6WXLzqjZLwDavJBwNn9Y1jsLVp53lp/QtjPtsGj8VG iyrb8sv1xt/Qv+yJvpmkMQTqHqDbc6H7PIRVhfbBADCzK8PwKLOiJTyvJkPNY9xW 4wR9lq9ApRW2FxBAJkeKGHwceTr2Rw50kel9ThK016Uftd58IhSO6hWWXU4+4im7 4j2EH8LQ7FqHD4stPLmmHq0koILDHEQSspwkcJ797dmgyNvnAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBSysqYyfA5Euf4yoaY51FEuH+7ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvN2UxNDBiMGQtOWNlNS0z OWQ5LWI2MWEtZmVlM2JhMjEwZDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABHieXfvOZaHmCEZw6Gae9mQChk3mqXbOCJraiNxLnj5QBJPudyH qCpeBZQPEkj7Y6U1DsJr8JoftZj5jtmQdheVhXW5rPPqseiijBS3OGM4CD567iyV dI8UewsGWZgmrF2Pj6+D6NPZpWQFxoliQrkoj/d4iV0hleOFcmTs7n/UyY5xGRhE HGZuAeJxs/WQItfORbp+u6iFIXIJ22fCSQeuHmZpdaEea/J/gm7xHNknMgdFgujg y1xmBxcvUWwH1Sk+OSKoN4bW2zXck3kZ71Trcc8kMQZjnL+EDskiWVEgDAL8PP7F yuK624cmQ9q17iCL16suecUIfhFiMxsCEEY= -----END CERTIFICATE-----Generated at Sun Jun 8 18:28:52 2025 by rpki-client