$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c321eb2a-dd70-3662-bea6-943e4ec5ad73.roa File: c321eb2a-dd70-3662-bea6-943e4ec5ad73.roa (raw, json) Hash identifier: Zgia+Ia/+xl287KmBnp4ftPHOhQdECWjFV1QDrFjSco= Subject key identifier: 01:2F:38:9C:10:15:3A:05:EB:62:42:DD:07:CC:F6:FC:D0:4A:D3:61 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926C71043D5B36BFE7329C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c321eb2a-dd70-3662-bea6-943e4ec5ad73.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 394256 IP address blocks: 2001:470:1ce::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:c7:10:43:d5:b3:6b:fe:73:29:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=1cf4ceb7-efc4-4e4e-bc30-47fd773f5323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e4:ee:25:13:d7:a1:25:bb:b1:8f:69:a7:40: f3:fa:93:2f:9f:20:46:27:ba:6f:f8:10:06:9a:9e: 39:68:a5:74:11:a5:95:29:1e:28:e5:83:eb:fe:fd: 82:59:6b:37:f2:b9:fa:da:c3:a7:88:bf:cd:33:f5: bd:15:06:b6:c3:f5:66:eb:44:da:a7:42:42:44:1a: 62:ec:b4:09:98:1b:39:59:e2:d1:96:72:ee:b1:7d: 6c:ce:20:cc:84:3d:28:c0:0c:e9:77:a0:f8:97:95: 87:ee:53:bf:d2:0a:fd:5a:7c:ce:1b:ed:30:a0:67: 84:78:36:d6:0c:6a:cf:66:07:d4:e5:b4:75:8e:9e: 1f:12:7c:b7:5b:e5:83:fa:c7:23:42:43:43:9d:18: b6:bc:7b:13:ee:13:a8:29:ed:95:ca:8c:47:9f:38: 61:34:5f:e6:3d:98:7e:ab:7d:d2:df:33:76:93:d3: e2:72:83:9f:2a:ee:e7:12:9f:39:68:7e:d0:8b:0b: 84:09:74:17:49:80:1e:95:31:51:00:1a:a2:6d:df: d3:f4:f8:9b:e9:65:cf:49:50:f2:9c:d7:35:99:66: 78:83:dc:b4:4f:38:db:b4:e9:7c:6b:6a:aa:0e:65: 7e:60:99:05:f5:11:6a:af:2c:f6:86:57:66:c3:e8: 5c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:2F:38:9C:10:15:3A:05:EB:62:42:DD:07:CC:F6:FC:D0:4A:D3:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c321eb2a-dd70-3662-bea6-943e4ec5ad73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1ce::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:08:ed:04:4f:bd:d8:ea:ef:2a:98:1a:92:d1:7a:db:79:cf: 42:91:9b:48:6e:89:4e:e1:64:4d:0e:ef:3d:32:8a:54:a1:ec: c3:41:bb:a9:4a:52:21:a1:48:53:a5:9c:a5:bf:1b:26:20:45: e4:01:d3:0b:17:f2:29:57:f0:5d:c1:15:46:a3:a0:85:f8:84: f6:af:dc:86:fd:c5:23:be:9f:d4:3a:6a:35:07:62:e3:62:cf: ae:1f:ac:21:ac:2a:94:9e:a5:e6:96:91:41:3e:a0:82:ca:5a: 49:db:dd:eb:e4:62:e2:63:7e:1b:93:eb:ee:9c:1a:02:68:06: b0:bc:b4:bc:5f:8a:f4:47:35:10:be:a8:44:16:39:85:f6:cb: 86:3c:24:8a:0f:72:0f:37:f1:93:04:2f:a4:30:10:24:76:07: 8a:7d:38:c4:cf:4b:c6:c5:31:20:3e:3d:3d:66:68:12:2f:ac: f1:83:5b:77:36:1f:b8:d3:f4:03:dc:5c:02:85:81:40:71:86: ae:75:87:2f:ed:1c:67:06:b0:12:e5:b0:22:e6:85:28:9a:35: 7b:28:20:1a:f1:49:c9:aa:69:b0:48:00:22:8e:75:a5:53:bc: 43:3e:b5:ac:cc:53:04:d0:a9:58:6a:ca:85:ae:e1:e9:e3:d4: 8b:d7:f6:62 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JscQQ9Wza/5zKcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk MWNmNGNlYjctZWZjNC00ZTRlLWJjMzAtNDdmZDc3M2Y1MzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOTuJRPXoSW7sY9pp0Dz+pMvnyBGJ7pv+BAG mp45aKV0EaWVKR4o5YPr/v2CWWs38rn62sOniL/NM/W9FQa2w/Vm60Tap0JCRBpi 7LQJmBs5WeLRlnLusX1sziDMhD0owAzpd6D4l5WH7lO/0gr9WnzOG+0woGeEeDbW DGrPZgfU5bR1jp4fEny3W+WD+scjQkNDnRi2vHsT7hOoKe2VyoxHnzhhNF/mPZh+ q33S3zN2k9PicoOfKu7nEp85aH7QiwuECXQXSYAelTFRABqibd/T9Pib6WXPSVDy nNc1mWZ4g9y0TzjbtOl8a2qqDmV+YJkF9RFqryz2hldmw+hcpwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAEvOJwQFToF62JC3QfM9vzQStNhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzMyMWViMmEtZGQ3MC0z NjYyLWJlYTYtOTQzZTRlYzVhZDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACoI7QRPvdjq7yqYGpLRett5z0KRm0huiU7hZE0O7z0yilSh7MNB u6lKUiGhSFOlnKW/GyYgReQB0wsX8ilX8F3BFUajoIX4hPav3Ib9xSO+n9Q6ajUH YuNiz64frCGsKpSepeaWkUE+oILKWknb3evkYuJjfhuT6+6cGgJoBrC8tLxfivRH NRC+qEQWOYX2y4Y8JIoPcg838ZMEL6QwECR2B4p9OMTPS8bFMSA+PT1maBIvrPGD W3c2H7jT9APcXAKFgUBxhq51hy/tHGcGsBLlsCLmhSiaNXsoIBrxScmqabBIACKO daVTvEM+tazMUwTQqVhqyoWu4enj1IvX9mI= -----END CERTIFICATE-----Generated at Fri Apr 4 17:54:59 2025 by rpki-client