$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/90e20482-79a5-37be-bbf6-287a0959e7f8.roa File: 90e20482-79a5-37be-bbf6-287a0959e7f8.roa (raw, json) Hash identifier: d4V0SXTawFXSDF7UZY8JHasYKb5F5UuHpd7hNNEfGYU= Subject key identifier: 9C:93:3B:95:4C:1B:D7:89:51:80:E1:34:CC:A6:A6:B2:39:E6:40:8F Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858491D800097FD60C7B1516B5A50 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/90e20482-79a5-37be-bbf6-287a0959e7f8.roa Signing time: Sat 08 Mar 2025 02:30:11 +0000 ROA not before: Sat 08 Mar 2025 02:30:11 +0000 ROA not after: Fri 06 Jun 2025 01:30:11 +0000 asID: 23372 IP address blocks: 2001:470:90::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:80:00:97:fd:60:c7:b1:51:6b:5a:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 8 02:30:11 2025 GMT Not After : Jun 6 01:30:11 2025 GMT Subject: CN=389e20ec-f65b-4999-b2bd-fff4137549cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c4:3e:b5:24:df:b9:51:c0:77:26:a0:a4:0a: 27:0f:50:33:bb:17:ba:c7:4f:47:9b:3e:30:23:15: 8f:c0:c3:1c:ed:2e:b5:7d:c7:6f:61:77:67:1a:f6: cc:1c:dd:b3:cf:89:64:4d:9e:61:ef:0d:90:9f:16: 13:67:cc:62:d2:3f:6f:a5:ed:3d:51:23:7e:ef:70: 73:48:3d:76:30:a5:7d:a6:2c:2c:25:38:2b:9f:1c: a0:85:65:44:83:f1:f7:36:d7:34:a8:3b:50:d5:3d: ee:1c:04:8f:71:69:7d:73:8c:a0:11:f3:6e:ee:50: 22:61:30:67:26:8c:3c:2d:35:6f:ee:69:74:de:0b: 00:21:30:f8:c3:f8:24:44:f9:59:36:4f:84:09:30: da:99:f9:6c:2d:b0:9b:9e:2b:b4:04:08:fc:10:83: 78:7d:bd:88:6e:d9:49:16:4f:4e:db:55:d8:25:fc: 6c:4b:8c:78:25:f4:49:1d:8f:51:a6:0d:9a:7b:bd: c0:3d:dd:c6:03:1f:e5:34:f7:4b:ca:bc:f7:02:07: 34:22:09:c5:b6:9b:3b:db:2c:db:d5:be:df:1c:30: b8:fc:b2:02:df:5c:3b:3e:7d:cd:08:d8:85:30:86: 3b:ac:c5:24:66:fa:e8:3b:0e:0e:9d:49:48:61:16: 77:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:93:3B:95:4C:1B:D7:89:51:80:E1:34:CC:A6:A6:B2:39:E6:40:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/90e20482-79a5-37be-bbf6-287a0959e7f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:90::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:92:27:88:bb:26:ba:a1:ba:e9:ec:9d:ce:fb:d6:6b:92:84: a6:df:ee:7f:0f:b3:c4:e1:9a:ff:ea:fd:16:0c:5f:44:de:52: fe:41:b7:a4:a7:c9:39:59:c8:74:28:c4:21:88:94:0a:bd:41: d1:67:78:7b:3b:5a:e3:3e:a2:11:09:d4:0a:b2:c4:27:ff:91: 19:fd:b3:ba:6a:28:f4:bb:29:0a:95:6a:29:d3:17:a8:82:1b: 7e:46:52:2d:97:5d:52:72:9b:57:4e:84:f4:88:a9:ca:b4:98: 78:a7:d7:a7:d3:b7:5e:5d:23:9d:62:25:bf:5b:0b:78:63:7b: 4a:1e:8a:71:ed:83:48:7f:cd:dc:9b:ed:09:e3:9b:b0:42:a7: 94:4d:34:57:db:85:94:ee:ee:6c:a6:6f:10:cf:fc:6c:c3:c3: 3f:58:40:f4:dc:92:c0:46:53:61:7b:7e:b9:f4:df:78:73:93: e9:0f:13:a4:aa:93:c7:aa:a7:e7:8b:15:32:68:e0:77:20:a0: 8b:96:ee:48:27:20:7e:b1:e0:7b:49:f6:02:e4:b1:f0:20:2a: b6:6e:b9:d1:b2:37:4b:c2:45:9b:3e:2f:69:ac:45:1a:3d:04: 66:f5:76:4a:60:81:77:5d:60:ec:07:8a:a4:29:d1:cc:b5:ed: 11:39:2e:41 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkdgACX/WDHsVFrWlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMwODAyMzAxMVoXDTI1MDYwNjAxMzAxMVowLzEtMCsGA1UEAxMk Mzg5ZTIwZWMtZjY1Yi00OTk5LWIyYmQtZmZmNDEzNzU0OWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsQ+tSTfuVHAdyagpAonD1Azuxe6x09Hmz4w IxWPwMMc7S61fcdvYXdnGvbMHN2zz4lkTZ5h7w2QnxYTZ8xi0j9vpe09USN+73Bz SD12MKV9piwsJTgrnxyghWVEg/H3Ntc0qDtQ1T3uHASPcWl9c4ygEfNu7lAiYTBn Jow8LTVv7ml03gsAITD4w/gkRPlZNk+ECTDamflsLbCbniu0BAj8EIN4fb2IbtlJ Fk9O21XYJfxsS4x4JfRJHY9Rpg2ae73APd3GAx/lNPdLyrz3Agc0IgnFtps72yzb 1b7fHDC4/LIC31w7Pn3NCNiFMIY7rMUkZvroOw4OnUlIYRZ3bQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJyTO5VMG9eJUYDhNMymprI55kCPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTBlMjA0ODItNzlhNS0z N2JlLWJiZjYtMjg3YTA5NTllN2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHGSJ4i7Jrqhuunsnc771muShKbf7n8Ps8Thmv/q/RYMX0TeUv5B t6SnyTlZyHQoxCGIlAq9QdFneHs7WuM+ohEJ1AqyxCf/kRn9s7pqKPS7KQqVainT F6iCG35GUi2XXVJym1dOhPSIqcq0mHin16fTt15dI51iJb9bC3hje0oeinHtg0h/ zdyb7Qnjm7BCp5RNNFfbhZTu7mymbxDP/GzDwz9YQPTcksBGU2F7frn033hzk+kP E6Sqk8eqp+eLFTJo4HcgoIuW7kgnIH6x4HtJ9gLksfAgKrZuudGyN0vCRZs+L2ms RRo9BGb1dkpggXddYOwHiqQp0cy17RE5LkE= -----END CERTIFICATE-----Generated at Fri Apr 4 17:57:33 2025 by rpki-client