$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c2350e38-16a2-3e40-a213-1d8f24f3661c.roa File: c2350e38-16a2-3e40-a213-1d8f24f3661c.roa (raw, json) Hash identifier: +tLo6XZ93YMzd21GjBOlIsOADP0iM3ZYE0HmrRkL0hw= Subject key identifier: BA:13:16:0D:99:98:7A:0F:84:A5:9C:08:69:F5:CB:B2:88:FC:FF:2E Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584910E187405D061E057C1300BA Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c2350e38-16a2-3e40-a213-1d8f24f3661c.roa Signing time: Mon 03 Mar 2025 14:00:53 +0000 ROA not before: Mon 03 Mar 2025 14:00:53 +0000 ROA not after: Sun 01 Jun 2025 13:00:53 +0000 asID: 6698 IP address blocks: 2001:470:38e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:10:e1:87:40:5d:06:1e:05:7c:13:00:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 3 14:00:53 2025 GMT Not After : Jun 1 13:00:53 2025 GMT Subject: CN=fd809ac3-b8c7-4655-941a-f4deae501585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d2:a8:3b:6c:8a:07:94:7e:b7:43:3e:3d:90: 0d:1c:f4:83:28:50:e0:83:51:9e:f2:f9:e8:6b:78: 43:9d:a8:7b:b0:4c:32:7d:22:c8:88:05:1f:80:d6: 39:62:e1:9f:0b:df:dc:9c:4e:c0:49:21:24:16:7f: 85:ba:24:6a:f5:de:82:dd:47:a3:92:5a:42:69:59: e9:ac:12:77:27:66:15:79:49:ae:a9:b2:ea:72:b4: f8:78:00:23:ac:95:80:a9:2c:fb:b0:ac:09:e2:a2: 11:f2:92:11:8e:af:6c:a0:4f:af:d9:8c:42:5e:df: 53:70:bf:55:40:33:38:1a:b7:fb:10:6a:33:51:85: a1:96:84:f5:0c:af:22:5a:4a:71:fa:97:98:21:c1: 25:e9:53:f2:1c:e3:61:d6:74:1c:2e:bb:fb:b3:d8: 2a:a5:be:f5:f5:ba:0b:dd:c9:95:ef:27:40:f1:48: 2f:df:91:76:37:ad:92:3a:32:a4:e4:32:da:94:99: fb:51:d1:74:ae:49:10:d1:50:70:ba:1c:47:aa:e9: e2:0f:54:1f:5d:3c:91:ad:05:a8:83:3b:ee:90:b6: 3c:a1:8d:84:68:f4:e9:2c:d9:71:d5:50:64:30:59: 5f:ea:e2:d9:e2:06:31:db:a9:a4:b2:4b:fe:a7:63: 19:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:13:16:0D:99:98:7A:0F:84:A5:9C:08:69:F5:CB:B2:88:FC:FF:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c2350e38-16a2-3e40-a213-1d8f24f3661c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:38e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:9c:32:00:ae:e9:4b:7e:b2:06:41:eb:63:df:c8:fd:52:49: c7:14:c7:a9:4f:d4:88:a6:a2:74:44:5c:14:62:5e:cf:8a:3e: 20:99:c2:71:62:d2:6c:1b:d4:33:66:05:6f:97:f3:fa:18:df: 8c:91:f0:f3:7b:42:c4:22:d4:c0:15:85:fb:08:5f:e0:53:48: 4c:68:ba:08:a3:9c:1e:05:80:73:01:82:78:bb:75:8d:3e:94: fb:f6:d3:88:a1:4e:73:7c:85:cb:62:44:90:43:f9:d9:bf:a7: c8:79:97:a8:7c:8d:ce:61:88:1a:69:2b:a4:d7:a5:d3:5c:df: 28:63:de:0c:d0:97:ed:ea:cb:dc:52:d8:3e:f3:00:d0:78:10: 9c:4b:1d:69:ab:de:a2:bd:31:dd:38:c8:c5:c6:e8:86:94:72: 35:32:7a:a1:ca:2a:56:e4:4d:4c:eb:80:53:c6:d9:95:bc:ab: b1:10:23:10:e4:31:57:f5:ea:e2:b6:e6:ac:0f:53:76:31:12: d2:1e:02:6e:3d:68:77:51:89:99:1d:3c:04:aa:4f:9d:79:c1: 57:00:95:6e:d6:bb:9e:ab:9e:3f:fe:45:e9:31:d1:25:26:44: 11:d2:c6:1d:41:67:71:24:32:ad:46:52:57:eb:b1:06:d0:73: 7f:0f:7f:83 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkQ4YdAXQYeBXwTALowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk ZmQ4MDlhYzMtYjhjNy00NjU1LTk0MWEtZjRkZWFlNTAxNTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9KoO2yKB5R+t0M+PZANHPSDKFDgg1Ge8vno a3hDnah7sEwyfSLIiAUfgNY5YuGfC9/cnE7ASSEkFn+FuiRq9d6C3UejklpCaVnp rBJ3J2YVeUmuqbLqcrT4eAAjrJWAqSz7sKwJ4qIR8pIRjq9soE+v2YxCXt9TcL9V QDM4Grf7EGozUYWhloT1DK8iWkpx+peYIcEl6VPyHONh1nQcLrv7s9gqpb719boL 3cmV7ydA8Ugv35F2N62SOjKk5DLalJn7UdF0rkkQ0VBwuhxHquniD1QfXTyRrQWo gzvukLY8oY2EaPTpLNlx1VBkMFlf6uLZ4gYx26mkskv+p2MZxwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLoTFg2ZmHoPhKWcCGn1y7KI/P8uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzIzNTBlMzgtMTZhMi0z ZTQwLWEyMTMtMWQ4ZjI0ZjM2NjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJicMgCu6Ut+sgZB62PfyP1SSccUx6lP1IimonREXBRiXs+KPiCZ wnFi0mwb1DNmBW+X8/oY34yR8PN7QsQi1MAVhfsIX+BTSExougijnB4FgHMBgni7 dY0+lPv204ihTnN8hctiRJBD+dm/p8h5l6h8jc5hiBppK6TXpdNc3yhj3gzQl+3q y9xS2D7zANB4EJxLHWmr3qK9Md04yMXG6IaUcjUyeqHKKlbkTUzrgFPG2ZW8q7EQ IxDkMVf16uK25qwPU3YxEtIeAm49aHdRiZkdPASqT515wVcAlW7Wu56rnj/+Rekx 0SUmRBHSxh1BZ3EkMq1GUlfrsQbQc38Pf4M= -----END CERTIFICATE-----Generated at Fri Apr 4 17:41:23 2025 by rpki-client