$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/857f8519-5259-3051-b3a3-cbed201e7089.roa File: 857f8519-5259-3051-b3a3-cbed201e7089.roa (raw, json) Hash identifier: 7d+RxZJtFIVR7XMPewbSyHCxz4f+nPh8CnJEqNrr5Sk= Subject key identifier: AE:2E:B9:F0:E2:E5:40:5C:AF:AB:BE:F4:AF:E5:E2:2F:53:5C:7B:F9 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849B6EDD64C78BCB24A89C31D40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/857f8519-5259-3051-b3a3-cbed201e7089.roa Signing time: Fri 02 May 2025 01:30:09 +0000 ROA not before: Fri 02 May 2025 01:30:09 +0000 ROA not after: Thu 31 Jul 2025 01:30:09 +0000 asID: 213291 IP address blocks: 2001:470:453::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:ed:d6:4c:78:bc:b2:4a:89:c3:1d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 2 01:30:09 2025 GMT Not After : Jul 31 01:30:09 2025 GMT Subject: CN=31019d81-e99e-46e6-b1ab-9efb0d5da3f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:da:74:3f:f0:83:5c:a2:8f:52:e3:74:8e:90: 82:4c:1e:6c:ea:bc:23:81:66:3d:08:69:57:64:6d: 0b:70:dc:b0:22:fa:5c:55:9a:0a:da:b1:f9:40:5a: bc:41:e5:ee:6c:3c:51:a7:3e:ed:a0:12:ae:de:42: 42:29:f2:3a:0a:01:71:51:33:dd:79:b3:04:c7:05: b2:a6:90:00:d5:c3:5b:39:8c:88:7b:b5:a8:eb:26: 4b:1d:f6:40:05:e7:32:9e:69:b2:3e:12:26:70:63: f2:18:62:fa:af:72:e7:43:59:50:4a:4e:23:e1:66: 5b:c6:cb:81:55:2e:b2:23:71:85:c7:69:1b:87:3b: 2e:ce:62:65:e3:9e:26:bd:24:e1:59:8e:99:fa:75: 5c:44:5b:13:94:f9:11:a9:99:97:f6:d2:af:42:cf: a4:ab:11:ae:14:06:26:a6:84:4f:4e:a1:06:2c:38: 60:72:73:6d:3b:46:af:48:12:38:72:88:07:e3:47: 15:b0:62:e4:92:b7:a8:f2:70:3f:c3:dc:aa:d4:12: 0e:d2:b8:d1:35:de:be:2e:f1:c3:8c:62:89:15:20: 93:2f:2d:81:8c:9b:98:8a:a2:fb:d6:73:9e:ce:da: ac:8b:f9:0c:f2:31:e3:b9:3d:9b:5c:f6:e0:2c:f0: 83:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:2E:B9:F0:E2:E5:40:5C:AF:AB:BE:F4:AF:E5:E2:2F:53:5C:7B:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/857f8519-5259-3051-b3a3-cbed201e7089.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:453::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:dc:d4:8c:b5:58:0b:fc:31:e1:92:87:27:2c:87:cc:81:6d: ff:3f:e0:1d:64:c1:2e:ca:a5:3d:6a:cc:00:91:a4:e0:ce:65: 92:f0:e9:2c:73:59:4f:76:86:a8:93:59:97:00:6c:76:93:b6: 14:f8:8b:43:91:e9:a3:c5:6c:4a:fb:82:b9:76:99:7b:9c:d3: 6a:0c:f8:76:ac:21:6a:0a:eb:b6:ca:7d:5a:34:83:e0:78:13: 50:ba:ae:44:c9:8c:c7:3c:39:a8:12:28:3a:48:4b:dd:23:dd: 9c:27:64:30:29:aa:88:33:27:af:1f:60:c2:f1:4d:58:66:fb: 85:9f:fe:65:54:4c:03:51:75:e4:f6:f1:73:53:26:3c:56:c5: 3a:e7:11:8c:97:07:ec:9c:7b:d7:fb:12:6e:ed:38:ba:4c:1b: c5:ae:ea:1b:27:4c:2f:72:75:41:24:c0:8e:73:8e:d9:60:f4: 01:62:42:27:b4:94:37:f5:7f:30:df:e7:13:b2:9b:14:c4:7e: 93:7f:1f:66:0a:c7:dd:71:5a:fe:c4:30:ac:56:32:c6:24:31: 6b:c2:b9:f2:a3:71:29:d4:2b:85:30:f8:42:f4:68:0a:00:f9: 9e:36:af:9a:e4:d9:27:83:82:3f:66:89:08:17:eb:b8:38:bc: 29:b8:83:3e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm27dZMeLyySonDHUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUwMjAxMzAwOVoXDTI1MDczMTAxMzAwOVowLzEtMCsGA1UEAxMk MzEwMTlkODEtZTk5ZS00NmU2LWIxYWItOWVmYjBkNWRhM2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdp0P/CDXKKPUuN0jpCCTB5s6rwjgWY9CGlX ZG0LcNywIvpcVZoK2rH5QFq8QeXubDxRpz7toBKu3kJCKfI6CgFxUTPdebMExwWy ppAA1cNbOYyIe7Wo6yZLHfZABecynmmyPhImcGPyGGL6r3LnQ1lQSk4j4WZbxsuB VS6yI3GFx2kbhzsuzmJl454mvSThWY6Z+nVcRFsTlPkRqZmX9tKvQs+kqxGuFAYm poRPTqEGLDhgcnNtO0avSBI4cogH40cVsGLkkreo8nA/w9yq1BIO0rjRNd6+LvHD jGKJFSCTLy2BjJuYiqL71nOeztqsi/kM8jHjuT2bXPbgLPCDlwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK4uufDi5UBcr6u+9K/l4i9TXHv5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODU3Zjg1MTktNTI1OS0z MDUxLWIzYTMtY2JlZDIwMWU3MDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcART MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABPc1Iy1WAv8MeGShycsh8yBbf8/4B1kwS7KpT1qzACRpODOZZLw 6SxzWU92hqiTWZcAbHaTthT4i0OR6aPFbEr7grl2mXuc02oM+HasIWoK67bKfVo0 g+B4E1C6rkTJjMc8OagSKDpIS90j3ZwnZDApqogzJ68fYMLxTVhm+4Wf/mVUTANR deT28XNTJjxWxTrnEYyXB+yce9f7Em7tOLpMG8Wu6hsnTC9ydUEkwI5zjtlg9AFi Qie0lDf1fzDf5xOymxTEfpN/H2YKx91xWv7EMKxWMsYkMWvCufKjcSnUK4Uw+EL0 aAoA+Z42r5rk2SeDgj9miQgX67g4vCm4gz4= -----END CERTIFICATE-----Generated at Sun Jun 8 12:37:24 2025 by rpki-client