$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/86592fa6-1bb8-3329-a670-4ce80396e3d2.roa File: 86592fa6-1bb8-3329-a670-4ce80396e3d2.roa (raw, json) Hash identifier: yegfEuc8VlkfpPlHx7m0GSycKCeHUwRrF3EsZuRF9uU= Subject key identifier: 3C:67:31:BC:C3:97:57:63:64:62:13:B2:21:7D:82:BC:1B:B9:99:07 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858494B6432499023225D1F1BE380 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/86592fa6-1bb8-3329-a670-4ce80396e3d2.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 14576 IP address blocks: 2001:470:2ef::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:32:49:90:23:22:5d:1f:1b:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=c02f0c30-c70d-42e4-8e60-b9e13c437776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f2:16:56:73:32:fc:6a:8e:2d:87:5e:9e:50: f0:6f:1c:af:f9:5c:bb:e5:d9:24:b7:18:a5:56:55: 20:b4:fc:c5:73:62:61:21:01:15:33:1f:85:0e:dc: e3:1b:cd:32:e6:6c:95:ed:19:7c:fb:79:cb:76:39: ef:7e:68:6a:eb:97:62:a1:88:6d:87:bb:e6:00:9e: 65:d1:08:9e:88:79:5c:77:3d:f6:64:47:69:4c:4c: 61:b4:d7:8f:12:d6:31:58:e8:92:0f:fe:0e:8b:94: fa:1b:7c:43:32:63:28:69:df:91:15:d0:00:36:fe: ce:6c:84:47:07:81:f2:2d:09:9e:92:2a:8b:2f:94: 5c:76:3d:a4:7d:27:8c:67:ad:f9:4a:d9:c7:d9:d4: af:61:c2:29:dd:9c:50:c3:27:e5:9b:39:ff:0e:b3: 71:e4:f7:8b:ab:d3:26:eb:d9:62:28:02:30:4e:ca: 24:1f:13:e6:d6:bf:4d:a8:81:2e:6e:e6:dd:8b:67: 7e:2b:6d:1b:39:df:88:d6:40:0a:c4:6f:5c:06:f2: 89:79:9b:1f:a4:68:69:fd:a2:f1:ed:d0:72:fc:d4: 02:05:d5:73:6d:8c:f1:8d:ea:4d:c7:97:43:d0:2a: 23:ff:1c:b5:e0:3e:f4:09:2b:61:79:06:f2:77:45: 9e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:67:31:BC:C3:97:57:63:64:62:13:B2:21:7D:82:BC:1B:B9:99:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/86592fa6-1bb8-3329-a670-4ce80396e3d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2ef::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:2e:73:a7:24:46:18:a6:2b:af:27:3a:80:33:73:c5:cd:d4: a0:ec:6d:c8:c2:1d:5e:7b:22:d7:eb:0f:9c:27:35:e1:4b:90: 51:b4:2d:8c:e2:cd:b6:5a:2a:b8:6a:0d:15:76:88:3a:f2:1a: 0c:e6:23:17:b0:3d:f4:58:9d:e7:a1:31:b1:a3:56:14:b1:b4: f3:3e:56:53:de:47:92:31:d0:4b:b2:cb:8f:8a:7c:aa:78:66: 83:6f:20:e0:4c:61:e3:0c:40:bf:bb:e5:ea:11:69:91:7c:fb: 6d:e0:20:fe:d9:38:a5:13:49:39:50:25:f3:c5:41:7d:81:a0: a5:bb:8c:5b:be:88:bb:03:3b:02:b5:04:54:4e:cf:55:3f:b9: ec:9e:8f:29:c2:8f:c6:8b:39:62:87:08:47:17:f8:e9:6e:e4: 7c:a5:00:e5:f0:54:2e:08:a4:ef:cc:40:de:e6:43:1d:17:0f: 38:69:65:d5:fe:02:51:59:0a:ed:fd:00:49:5a:70:8e:a0:62: b8:5a:ca:91:2b:27:80:8e:42:08:22:3e:30:e3:a2:e0:6c:2b: 54:42:2c:53:a7:33:50:3c:ea:25:b4:63:66:94:a3:1a:c7:8a: 2b:a9:2e:79:e5:26:b2:3d:fa:73:1b:cc:ec:f6:b5:9d:8f:0c: c4:94:bb:85 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElLZDJJkCMiXR8b44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk YzAyZjBjMzAtYzcwZC00MmU0LThlNjAtYjllMTNjNDM3Nzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofIWVnMy/GqOLYdenlDwbxyv+Vy75dkktxil VlUgtPzFc2JhIQEVMx+FDtzjG80y5myV7Rl8+3nLdjnvfmhq65dioYhth7vmAJ5l 0QieiHlcdz32ZEdpTExhtNePEtYxWOiSD/4Oi5T6G3xDMmMoad+RFdAANv7ObIRH B4HyLQmekiqLL5Rcdj2kfSeMZ635StnH2dSvYcIp3ZxQwyflmzn/DrNx5PeLq9Mm 69liKAIwTsokHxPm1r9NqIEububdi2d+K20bOd+I1kAKxG9cBvKJeZsfpGhp/aLx 7dBy/NQCBdVzbYzxjepNx5dD0Coj/xy14D70CStheQbyd0WeIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDxnMbzDl1djZGITsiF9grwbuZkHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODY1OTJmYTYtMWJiOC0z MzI5LWE2NzAtNGNlODAzOTZlM2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALv MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKkuc6ckRhimK68nOoAzc8XN1KDsbcjCHV57ItfrD5wnNeFLkFG0 LYzizbZaKrhqDRV2iDryGgzmIxewPfRYneehMbGjVhSxtPM+VlPeR5Ix0Euyy4+K fKp4ZoNvIOBMYeMMQL+75eoRaZF8+23gIP7ZOKUTSTlQJfPFQX2BoKW7jFu+iLsD OwK1BFROz1U/ueyejynCj8aLOWKHCEcX+Olu5HylAOXwVC4IpO/MQN7mQx0XDzhp ZdX+AlFZCu39AElacI6gYrhaypErJ4COQggiPjDjouBsK1RCLFOnM1A86iW0Y2aU oxrHiiupLnnlJrI9+nMbzOz2tZ2PDMSUu4U= -----END CERTIFICATE-----Generated at Fri Apr 4 17:50:30 2025 by rpki-client