$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b16c3b2d-1356-3441-875c-c10405f00fa6.roa File: b16c3b2d-1356-3441-875c-c10405f00fa6.roa (raw, json) Hash identifier: DzkrXRC34XdxokpGQhGCQFqLxolgl1i7TVv65uyGSzA= Subject key identifier: C3:41:0F:80:7C:02:17:D2:AC:F6:7B:7B:46:B3:F7:D4:5F:13:30:07 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926D2107E2078C7221FB320 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b16c3b2d-1356-3441-875c-c10405f00fa6.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 10947 IP address blocks: 2001:470:318::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:d2:10:7e:20:78:c7:22:1f:b3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=c46820e2-30c0-4e65-a40b-fd56308d50fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:93:1c:47:c8:21:69:54:e7:54:6e:4e:16:44: 21:ba:61:00:40:3c:77:5d:5a:d2:41:a4:6e:2c:a1: f4:66:0b:a4:89:8f:29:7b:79:95:e0:7e:b6:b4:ba: c6:20:2a:86:5d:07:f1:37:25:20:60:94:f7:f9:36: b3:34:b8:b8:78:57:fb:74:b7:4e:58:d0:78:60:94: 1c:cb:c2:b1:f6:20:25:f0:3b:98:de:f3:c0:ad:12: 19:56:ec:b4:b4:58:49:c5:c6:9c:b9:82:46:d3:79: e1:b6:84:df:77:2a:fc:12:ba:5f:a8:72:fe:0a:68: 6d:b1:a9:ed:ab:49:fd:ad:50:c1:35:80:18:57:f9: df:e7:61:fc:48:e7:9f:ab:c9:9d:f1:2b:5a:02:13: af:68:12:93:0d:92:1e:b6:a2:77:0f:86:fd:b3:6b: 11:e6:39:e5:f0:8b:89:0d:6f:68:ac:03:58:77:6d: 1a:ef:01:5b:f5:eb:fe:10:a8:45:cb:ff:22:b8:89: 64:9b:79:c1:f1:0b:59:4b:17:a5:74:f1:80:7b:1e: f6:e4:b1:3c:3d:39:11:17:44:48:84:67:62:a1:7e: d3:cb:cd:c4:11:f2:72:78:e9:37:ce:a7:f6:fa:30: b7:2c:83:4e:d2:ec:07:66:84:5c:53:77:aa:c2:38: f1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:41:0F:80:7C:02:17:D2:AC:F6:7B:7B:46:B3:F7:D4:5F:13:30:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b16c3b2d-1356-3441-875c-c10405f00fa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:318::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:f6:38:b7:64:5e:6f:56:a0:49:db:4c:e8:ed:71:10:5c:10: 9e:2b:72:d8:8e:7a:3f:e8:ca:13:58:ad:9a:1d:b8:5d:9c:a1: dc:cc:c7:5b:87:d3:bd:35:34:f5:b4:ce:2d:c5:d4:04:40:3c: 17:c3:4f:bf:3c:b8:f8:88:fd:5e:f8:0d:d5:85:f8:db:d3:d0: 1d:1d:e2:8e:bc:b2:1a:a7:9f:c6:8a:34:09:e9:ab:94:9f:3f: 7f:af:c4:d0:9d:d0:aa:ff:c9:84:d0:1d:a4:d3:98:66:2b:86: 3d:18:0d:53:92:51:6b:f4:45:5f:71:ea:eb:5e:29:2a:d0:f8: bd:19:06:69:43:30:26:9f:df:ad:38:90:cf:95:b8:ad:14:69: f5:19:aa:2e:e0:77:fc:41:53:70:d4:66:0f:60:c9:ca:98:a6: 8e:8a:c8:10:f0:d0:5d:cc:11:dd:a9:37:48:63:73:fe:f9:f3: 8e:f4:5a:61:ef:50:10:ca:fa:38:c3:4f:d6:2a:5a:48:f3:9e: 1f:5a:cb:35:40:46:fd:5b:b3:dd:fd:22:1c:3a:fc:d2:e1:f2: b9:dd:de:ae:f5:ca:60:fc:73:6b:a8:20:d9:91:d5:9e:b7:5e: b8:fa:38:9c:cc:59:f3:dc:69:c6:9b:4a:cb:d8:8b:49:5e:1c: e4:23:ed:6b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JtIQfiB4xyIfsyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk YzQ2ODIwZTItMzBjMC00ZTY1LWE0MGItZmQ1NjMwOGQ1MGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pMcR8ghaVTnVG5OFkQhumEAQDx3XVrSQaRu LKH0ZgukiY8pe3mV4H62tLrGICqGXQfxNyUgYJT3+TazNLi4eFf7dLdOWNB4YJQc y8Kx9iAl8DuY3vPArRIZVuy0tFhJxcacuYJG03nhtoTfdyr8ErpfqHL+Cmhtsant q0n9rVDBNYAYV/nf52H8SOefq8md8StaAhOvaBKTDZIetqJ3D4b9s2sR5jnl8IuJ DW9orANYd20a7wFb9ev+EKhFy/8iuIlkm3nB8QtZSxeldPGAex725LE8PTkRF0RI hGdioX7Ty83EEfJyeOk3zqf2+jC3LINO0uwHZoRcU3eqwjjxNQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMNBD4B8AhfSrPZ7e0az99RfEzAHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjE2YzNiMmQtMTM1Ni0z NDQxLTg3NWMtYzEwNDA1ZjAwZmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAMY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACr2OLdkXm9WoEnbTOjtcRBcEJ4rctiOej/oyhNYrZoduF2codzM x1uH0701NPW0zi3F1ARAPBfDT788uPiI/V74DdWF+NvT0B0d4o68shqnn8aKNAnp q5SfP3+vxNCd0Kr/yYTQHaTTmGYrhj0YDVOSUWv0RV9x6uteKSrQ+L0ZBmlDMCaf 3604kM+VuK0UafUZqi7gd/xBU3DUZg9gycqYpo6KyBDw0F3MEd2pN0hjc/758470 WmHvUBDK+jjDT9YqWkjznh9ayzVARv1bs939Ihw6/NLh8rnd3q71ymD8c2uoINmR 1Z63Xrj6OJzMWfPcacabSsvYi0leHOQj7Ws= -----END CERTIFICATE-----Generated at Fri Apr 4 17:51:19 2025 by rpki-client