$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b916f5f4-57c2-391a-992e-822e129a5b84.roa File: b916f5f4-57c2-391a-992e-822e129a5b84.roa (raw, json) Hash identifier: XFYT572/zp/rKc5dhxzTg0yIIJaSoxS7x4qFlJfcT4U= Subject key identifier: 51:79:A5:B9:B1:BA:DA:23:CE:00:0F:00:67:68:54:C8:8A:63:4F:4C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584913AC442BA1321A4C344826C8 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b916f5f4-57c2-391a-992e-822e129a5b84.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 11970 IP address blocks: 2001:470:393::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:44:2b:a1:32:1a:4c:34:48:26:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=afb706e6-9e7e-46b1-97d5-80644aae8609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:76:40:be:3f:d5:6b:52:6d:25:71:87:3c:02: 16:2f:9b:3d:89:a6:ef:13:cc:ec:25:17:5f:5e:2e: d1:f1:63:b6:af:b2:ae:52:93:06:7f:4d:93:22:d5: 10:14:69:44:54:5b:4e:c3:05:e4:a6:a7:99:2d:d5: 3e:ee:5f:de:92:87:f8:48:c3:83:4c:9f:d5:76:4d: c7:18:f8:d2:3e:7e:32:60:38:18:4f:f6:35:f9:b1: 9d:ab:4c:64:30:c0:8e:3e:6a:f8:32:55:27:6c:c8: 48:91:24:90:8b:56:7b:59:90:74:db:47:19:c5:dd: ad:8e:13:4b:8a:d0:cc:1e:75:d6:c8:e5:28:7e:c4: 8a:a6:d1:88:1c:04:7e:5c:ef:cc:8a:3b:40:f9:33: 1b:e1:0b:fe:3e:dc:d6:8a:4c:58:5a:d5:ab:64:77: f7:ec:6a:30:53:54:af:68:04:22:fe:4b:af:8f:68: b5:51:82:a6:97:2b:3e:fc:dd:b1:d0:4c:6a:02:99: f6:2c:2c:85:cf:8e:84:68:cd:4a:6f:c6:77:8c:7f: 9d:a1:68:47:bf:b2:7e:6d:3b:93:4e:e5:fd:1a:8f: 4d:d8:6d:f3:65:11:e3:12:97:3b:0f:b1:58:c6:dc: ad:76:f6:d2:69:6c:48:13:85:4f:29:42:99:7b:51: 70:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:79:A5:B9:B1:BA:DA:23:CE:00:0F:00:67:68:54:C8:8A:63:4F:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b916f5f4-57c2-391a-992e-822e129a5b84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:393::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:83:68:bc:49:02:3a:8c:04:5d:b2:a9:da:c1:87:3a:e0:5e: ab:62:17:23:5e:7b:7d:4a:7d:14:d5:18:ba:9a:4e:6e:67:3b: ff:e6:5f:0a:f3:d8:d9:22:69:72:29:b2:c8:ec:1d:23:4a:a1: 1e:4c:39:95:ed:e2:2d:52:09:34:7b:93:a6:23:5f:0b:19:43: 04:6d:b2:0f:7e:31:9c:6e:f4:e1:c0:10:86:73:c3:2a:bf:f7: b0:1c:62:bf:4b:44:ba:67:9e:8d:c2:6d:7d:75:d6:a5:cc:c7: f6:72:a6:c3:7c:c8:ae:25:a5:84:20:e7:7d:e5:aa:46:09:9b: 33:81:88:36:b1:88:73:49:ab:c5:6e:1b:be:c0:40:8c:48:9f: ea:c3:46:63:c1:33:c8:ef:84:01:f3:a4:85:ab:26:78:22:a4: a5:dd:58:1b:57:a8:21:88:40:74:dc:72:e5:b5:b3:c6:a6:26: b5:24:8c:08:1e:bb:d2:b6:36:c5:6a:59:f2:ad:1c:5b:85:a4: 54:9a:34:45:9e:e0:71:9c:e8:73:e6:e6:f5:ca:09:c5:0e:c3: ae:61:6a:29:6d:00:28:15:b9:e7:f8:45:6c:e5:b2:d8:77:22: ee:cc:77:36:9e:8d:2a:46:95:62:d1:a3:f0:22:26:dc:5d:0e: 5c:97:01:6c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkTrEQroTIaTDRIJsgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk YWZiNzA2ZTYtOWU3ZS00NmIxLTk3ZDUtODA2NDRhYWU4NjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnZAvj/Va1JtJXGHPAIWL5s9iabvE8zsJRdf Xi7R8WO2r7KuUpMGf02TItUQFGlEVFtOwwXkpqeZLdU+7l/ekof4SMODTJ/Vdk3H GPjSPn4yYDgYT/Y1+bGdq0xkMMCOPmr4MlUnbMhIkSSQi1Z7WZB020cZxd2tjhNL itDMHnXWyOUofsSKptGIHAR+XO/MijtA+TMb4Qv+PtzWikxYWtWrZHf37GowU1Sv aAQi/kuvj2i1UYKmlys+/N2x0ExqApn2LCyFz46EaM1Kb8Z3jH+doWhHv7J+bTuT TuX9Go9N2G3zZRHjEpc7D7FYxtytdvbSaWxIE4VPKUKZe1FwNQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFF5pbmxutojzgAPAGdoVMiKY09MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjkxNmY1ZjQtNTdjMi0z OTFhLTk5MmUtODIyZTEyOWE1Yjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOT MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAACDaLxJAjqMBF2yqdrBhzrgXqtiFyNee31KfRTVGLqaTm5nO//m Xwrz2NkiaXIpssjsHSNKoR5MOZXt4i1SCTR7k6YjXwsZQwRtsg9+MZxu9OHAEIZz wyq/97AcYr9LRLpnno3CbX111qXMx/ZypsN8yK4lpYQg533lqkYJmzOBiDaxiHNJ q8VuG77AQIxIn+rDRmPBM8jvhAHzpIWrJngipKXdWBtXqCGIQHTccuW1s8amJrUk jAgeu9K2NsVqWfKtHFuFpFSaNEWe4HGc6HPm5vXKCcUOw65hailtACgVuef4RWzl sth3Iu7MdzaejSpGlWLRo/AiJtxdDlyXAWw= -----END CERTIFICATE-----Generated at Fri Apr 4 17:52:18 2025 by rpki-client