$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a1f36030-fa3a-3ad9-9f60-d3d099b05931.roa File: a1f36030-fa3a-3ad9-9f60-d3d099b05931.roa (raw, json) Hash identifier: Q//YSsunUewlkX4Ih3MGZ4oWoMAYPFWRaQ9zaUDQf+A= Subject key identifier: 26:F7:A0:89:15:B1:BE:F6:78:38:02:05:FC:3B:67:19:13:BD:EF:49 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858492F87CA92CED2352A98CAA840 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a1f36030-fa3a-3ad9-9f60-d3d099b05931.roa Signing time: Fri 14 Mar 2025 13:30:25 +0000 ROA not before: Fri 14 Mar 2025 13:30:25 +0000 ROA not after: Thu 12 Jun 2025 13:30:25 +0000 asID: 48006 IP address blocks: 2001:470:427::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2f:87:ca:92:ce:d2:35:2a:98:ca:a8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 14 13:30:25 2025 GMT Not After : Jun 12 13:30:25 2025 GMT Subject: CN=d13fd6f9-3726-4faf-bc24-a7a4177f1fb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3c:5d:d6:29:c9:bd:4c:ad:9e:9c:87:d3:30: 8b:77:bd:6b:f8:a0:c1:02:35:bf:4d:16:74:28:1c: d8:83:52:30:87:93:65:3e:a2:b2:6c:ee:15:70:17: 82:78:35:97:c0:d0:1e:dc:50:43:56:97:83:27:7c: 4f:32:e0:d9:d1:a3:17:f4:2f:66:1b:52:1a:88:7f: 24:f9:ad:59:6e:53:28:63:86:68:97:1f:de:3b:cc: e5:dc:6e:d1:f9:5b:08:63:31:03:af:fd:27:8b:6a: 1b:84:09:88:f5:37:9c:9b:aa:81:34:0c:4d:c3:fa: 16:a4:67:5c:47:10:63:15:ce:1c:4b:bb:64:d8:a6: 42:25:b9:d5:50:44:ed:7e:a3:8f:1a:3b:09:31:ec: bb:7d:3c:c5:13:23:76:08:26:da:08:9f:12:1e:9a: 69:f5:ed:68:03:ed:c6:22:3e:55:d6:09:a8:17:37: 22:8b:b7:4d:93:04:7b:d0:1b:28:de:6e:e5:5b:31: fc:e1:6c:ab:99:c4:f3:fd:e2:20:3d:3c:fc:f6:bd: db:63:59:e2:3d:c5:a8:0b:8d:82:29:14:0d:f3:58: b8:44:f7:27:88:8f:04:3c:f0:a0:a0:cb:17:76:43: d6:22:f6:d3:0f:e1:20:e8:69:c3:66:8f:10:c3:13: 82:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:F7:A0:89:15:B1:BE:F6:78:38:02:05:FC:3B:67:19:13:BD:EF:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a1f36030-fa3a-3ad9-9f60-d3d099b05931.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:427::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:3b:b9:b8:bc:8b:ef:dd:b9:2b:a2:f2:2a:3a:d7:17:79:c6: 21:c9:50:df:90:53:7d:bd:72:a2:b5:d9:ab:4b:77:90:88:32: a4:d8:58:c8:03:18:9a:18:7c:69:be:66:a4:c0:66:6f:dc:e1: 8c:41:5d:18:ac:18:47:76:1b:a7:bf:82:10:cf:d2:55:51:e8: c6:1c:b0:43:f5:8e:a6:19:fd:26:37:40:a2:47:46:e1:9f:56: 6c:bd:0c:2b:02:ad:73:e2:5c:e2:28:a7:31:02:a4:ed:8b:3f: 05:db:a0:91:68:f0:cd:03:12:76:1a:5f:99:1a:36:6a:ed:6c: 76:9f:93:61:d9:9d:0b:2b:ea:02:c8:c4:51:b2:87:ac:c1:4a: 8b:bd:da:4f:e7:e9:6b:90:d3:87:60:d6:d3:85:24:76:30:22: 84:17:30:53:38:47:5e:01:5b:f0:ee:ff:9f:15:e0:d3:02:3d: 51:fb:62:e2:67:2f:51:8f:83:15:0b:7a:af:6c:a3:05:aa:50: 20:7c:64:9e:79:8f:1f:e3:bb:e3:e4:ed:bc:90:8d:ba:7a:02: ec:24:27:ed:4a:87:a2:83:95:56:f9:cf:ed:a9:9d:18:cd:1b: 13:af:58:60:c7:2e:3e:5d:fc:b9:c0:52:ec:e6:fe:ac:13:a0: 5a:c5:00:bd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkvh8qSztI1KpjKqEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMxNDEzMzAyNVoXDTI1MDYxMjEzMzAyNVowLzEtMCsGA1UEAxMk ZDEzZmQ2ZjktMzcyNi00ZmFmLWJjMjQtYTdhNDE3N2YxZmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTxd1inJvUytnpyH0zCLd71r+KDBAjW/TRZ0 KBzYg1Iwh5NlPqKybO4VcBeCeDWXwNAe3FBDVpeDJ3xPMuDZ0aMX9C9mG1IaiH8k +a1ZblMoY4Zolx/eO8zl3G7R+VsIYzEDr/0ni2obhAmI9Tecm6qBNAxNw/oWpGdc RxBjFc4cS7tk2KZCJbnVUETtfqOPGjsJMey7fTzFEyN2CCbaCJ8SHppp9e1oA+3G Ij5V1gmoFzcii7dNkwR70Bso3m7lWzH84WyrmcTz/eIgPTz89r3bY1niPcWoC42C KRQN81i4RPcniI8EPPCgoMsXdkPWIvbTD+Eg6GnDZo8QwxOClQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCb3oIkVsb72eDgCBfw7ZxkTve9JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTFmMzYwMzAtZmEzYS0z YWQ5LTlmNjAtZDNkMDk5YjA1OTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACw7ubi8i+/duSui8io61xd5xiHJUN+QU329cqK12atLd5CIMqTY WMgDGJoYfGm+ZqTAZm/c4YxBXRisGEd2G6e/ghDP0lVR6MYcsEP1jqYZ/SY3QKJH RuGfVmy9DCsCrXPiXOIopzECpO2LPwXboJFo8M0DEnYaX5kaNmrtbHafk2HZnQsr 6gLIxFGyh6zBSou92k/n6WuQ04dg1tOFJHYwIoQXMFM4R14BW/Du/58V4NMCPVH7 YuJnL1GPgxULeq9sowWqUCB8ZJ55jx/ju+Pk7byQjbp6AuwkJ+1Kh6KDlVb5z+2p nRjNGxOvWGDHLj5d/LnAUuzm/qwToFrFAL0= -----END CERTIFICATE-----Generated at Fri Apr 4 17:47:03 2025 by rpki-client