$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8db2f3de-9b32-356a-843b-d4e3e7cfa144.roa File: 8db2f3de-9b32-356a-843b-d4e3e7cfa144.roa (raw, json) Hash identifier: ZIJAlk09lA/ocoS20ac/77xxceostmdBZ37U7XIuC2U= Subject key identifier: 45:8F:D4:34:EA:34:CE:98:9E:E5:62:2E:C8:27:47:4B:39:56:E8:44 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848B634AE17A4BF8838ED39E380 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8db2f3de-9b32-356a-843b-d4e3e7cfa144.roa Signing time: Thu 30 Jan 2025 02:30:09 +0000 ROA not before: Thu 30 Jan 2025 02:30:09 +0000 ROA not after: Wed 30 Apr 2025 01:30:09 +0000 asID: 400111 IP address blocks: 2001:470:407::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b6:34:ae:17:a4:bf:88:38:ed:39:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jan 30 02:30:09 2025 GMT Not After : Apr 30 01:30:09 2025 GMT Subject: CN=b5565220-3583-4b10-957c-bfc6828e9a9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:69:78:a2:0e:51:10:44:53:8d:c2:d5:bf:dc: 69:dc:37:e9:fb:fc:79:c1:e0:a8:16:c2:6b:a7:4b: d8:61:45:51:e9:2c:5a:f1:2c:d9:fb:4c:10:47:c6: 27:ac:74:cc:14:83:dc:ec:b8:3c:82:9a:7c:d1:d7: 88:4d:d1:0b:49:7b:7d:ee:86:90:70:0f:35:9e:fb: 0d:48:76:13:fb:0a:31:5d:86:72:da:09:e8:68:10: 45:d3:6a:79:69:45:2a:e8:fa:fe:eb:0d:3e:5a:ec: 90:95:a2:ac:ec:f4:e9:7f:76:fe:19:46:bd:84:fa: 8c:44:9a:49:6e:e0:3b:40:a2:3a:53:20:e2:6c:5c: cf:e8:da:e4:7b:d9:9c:d3:6e:ed:de:3d:22:c6:d4: 1b:da:6c:4b:12:f4:53:5d:6c:cd:90:2e:16:d6:12: 05:44:3a:88:80:84:78:69:6a:08:89:20:ac:cb:2b: 47:7a:e3:76:23:3f:18:a4:5a:b9:31:d9:be:ff:e4: 80:eb:d6:67:2d:85:a1:73:52:30:1c:ab:8c:e4:1c: 33:d6:65:60:3f:bd:ec:5d:e2:df:b5:dd:e0:d4:e0: 42:30:bc:3e:0c:a2:0a:ca:3e:91:6f:fa:d8:9b:1c: 8b:41:70:4d:94:ce:9b:a2:fc:3d:56:ca:32:97:90: 9f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:8F:D4:34:EA:34:CE:98:9E:E5:62:2E:C8:27:47:4B:39:56:E8:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8db2f3de-9b32-356a-843b-d4e3e7cfa144.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:407::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:66:14:19:5f:ae:0b:7a:02:18:82:d7:db:69:22:c0:09:29: 85:ab:bd:ba:88:18:be:eb:29:51:b0:fe:02:fa:4c:a8:a9:b7: 96:36:5e:cf:36:87:0a:79:9a:54:66:ad:a3:54:5b:86:5c:90: 9f:19:f1:07:b7:ed:df:94:9c:ca:86:5e:17:89:b9:3e:59:f3: 81:e9:4f:c7:20:9f:96:74:cd:a5:35:24:c1:2f:af:81:e2:2d: af:23:ea:b9:eb:b7:a9:3d:23:ed:1c:76:4a:c9:bf:6a:ec:4f: 0a:f2:6a:89:40:1c:ef:d8:7e:4e:b7:0f:7c:ca:ed:fb:25:2f: 04:79:06:63:27:53:a2:cd:bb:79:fb:ee:85:7b:c9:3c:11:3f: 00:12:c9:a6:af:eb:db:db:ef:0b:e4:53:cc:13:0a:9b:8d:2b: b3:70:82:29:4c:59:b5:0e:de:e0:e5:da:32:3f:50:c3:be:e0: 7b:66:e7:25:11:8d:dc:06:36:69:24:5a:61:36:9d:d9:0c:f8: 7c:ff:da:83:78:d8:4b:92:9d:cf:29:59:87:32:7c:19:56:05: 1d:3b:6e:e2:40:4d:1d:29:eb:48:75:f9:32:c2:57:1c:b9:0f: 31:48:fe:35:5e:9a:53:49:b5:69:31:0b:e1:4c:c1:e3:25:90: 42:f8:12:6d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEi2NK4XpL+IOO0544AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDEzMDAyMzAwOVoXDTI1MDQzMDAxMzAwOVowLzEtMCsGA1UEAxMk YjU1NjUyMjAtMzU4My00YjEwLTk1N2MtYmZjNjgyOGU5YTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGl4og5REERTjcLVv9xp3Dfp+/x5weCoFsJr p0vYYUVR6Sxa8SzZ+0wQR8YnrHTMFIPc7Lg8gpp80deITdELSXt97oaQcA81nvsN SHYT+woxXYZy2gnoaBBF02p5aUUq6Pr+6w0+WuyQlaKs7PTpf3b+GUa9hPqMRJpJ buA7QKI6UyDibFzP6Nrke9mc027t3j0ixtQb2mxLEvRTXWzNkC4W1hIFRDqIgIR4 aWoIiSCsyytHeuN2Iz8YpFq5Mdm+/+SA69ZnLYWhc1IwHKuM5Bwz1mVgP73sXeLf td3g1OBCMLw+DKIKyj6Rb/rYmxyLQXBNlM6bovw9Vsoyl5CfZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEWP1DTqNM6YnuViLsgnR0s5VuhEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOGRiMmYzZGUtOWIzMi0z NTZhLTg0M2ItZDRlM2U3Y2ZhMTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL9mFBlfrgt6AhiC19tpIsAJKYWrvbqIGL7rKVGw/gL6TKipt5Y2 Xs82hwp5mlRmraNUW4ZckJ8Z8Qe37d+UnMqGXheJuT5Z84HpT8cgn5Z0zaU1JMEv r4HiLa8j6rnrt6k9I+0cdkrJv2rsTwryaolAHO/Yfk63D3zK7fslLwR5BmMnU6LN u3n77oV7yTwRPwASyaav69vb7wvkU8wTCpuNK7NwgilMWbUO3uDl2jI/UMO+4Htm 5yURjdwGNmkkWmE2ndkM+Hz/2oN42EuSnc8pWYcyfBlWBR07buJATR0p60h1+TLC Vxy5DzFI/jVemlNJtWkxC+FMweMlkEL4Em0= -----END CERTIFICATE-----Generated at Fri Mar 14 12:41:55 2025 by rpki-client