$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8f6eb69-28f3-3774-b876-02e7d1a2f54d.roa File: c8f6eb69-28f3-3774-b876-02e7d1a2f54d.roa (raw, json) Hash identifier: 8y0Eafs6MYC+Wy/0jHh27APNuY8MKRcRAHm3FQSraFs= Subject key identifier: D6:3C:5D:02:2D:21:20:50:D4:9D:28:35:B1:93:83:A0:CF:DE:9D:76 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858495537EC4CFAB1A6A238E12890 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8f6eb69-28f3-3774-b876-02e7d1a2f54d.roa Signing time: Fri 28 Mar 2025 01:30:13 +0000 ROA not before: Fri 28 Mar 2025 01:30:13 +0000 ROA not after: Thu 26 Jun 2025 01:30:13 +0000 asID: 22332 IP address blocks: 2001:470:42e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:55:37:ec:4c:fa:b1:a6:a2:38:e1:28:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 28 01:30:13 2025 GMT Not After : Jun 26 01:30:13 2025 GMT Subject: CN=ebdfcff0-cef6-4fd4-9722-a13def1ef25c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e0:59:4e:63:44:79:4d:80:94:eb:69:aa:7c: aa:41:97:2a:0b:19:30:f6:70:d8:40:76:b2:b3:6c: 2a:9f:54:07:bb:45:8b:e3:15:8b:6b:16:c6:1a:03: a3:9b:9d:bd:30:96:54:6d:0f:13:ff:38:65:63:b6: 76:aa:ce:37:a7:3b:f7:64:ac:af:f0:37:77:33:c6: 1f:bd:c9:09:cb:9a:46:a2:45:e6:5f:84:25:1d:bb: 1f:c9:34:cb:9f:ef:00:93:36:9c:c7:a0:e6:d2:dd: d5:c4:0f:f4:ae:bb:df:eb:eb:43:07:d0:b4:51:21: 15:2e:e1:74:66:8e:e0:2a:30:54:df:8f:8f:7a:99: 84:bb:e6:82:81:87:b7:63:37:1d:d5:18:3a:59:5e: a5:b2:41:56:57:bb:89:8d:6b:c8:4c:d9:25:c0:48: 05:f9:b2:63:06:5c:11:b1:49:76:d4:66:5b:a2:a3: 68:0d:cd:b7:17:90:21:5f:f5:d1:d7:85:00:88:b6: 93:67:29:e6:23:12:eb:da:88:10:4d:8b:4b:5c:22: 16:11:9b:a8:51:42:38:8d:9c:54:dd:ab:8b:43:52: b1:02:3f:48:06:7c:00:55:fa:f1:8d:21:6f:46:0c: 5e:e4:22:e1:47:86:bd:9d:31:0b:04:c2:ba:7b:d1: e6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:3C:5D:02:2D:21:20:50:D4:9D:28:35:B1:93:83:A0:CF:DE:9D:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8f6eb69-28f3-3774-b876-02e7d1a2f54d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:42e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:e4:81:6e:6f:4e:62:8c:24:b7:c9:0b:66:6b:55:51:65:e1: 7e:b9:48:80:21:dd:61:bf:38:cc:0b:d1:22:e2:70:96:a2:8b: 1c:2b:d0:ad:72:92:ee:bb:fc:4f:82:63:c0:51:f9:e4:be:f9: 40:66:5e:82:c2:88:7a:91:e9:7d:5f:be:fe:a2:d9:5e:47:4a: 61:1f:3f:0c:77:05:e7:41:64:72:d0:f1:28:79:80:ec:45:e2: 7b:07:ca:68:67:01:37:ce:0b:13:5a:00:29:ac:8a:1c:f1:a4: 18:58:26:15:a8:01:c9:ca:23:ac:bd:28:f8:8b:0a:75:e1:fb: ed:6f:2e:06:46:e2:9a:a6:8a:e6:fd:23:5b:c7:4f:a5:81:ec: 6c:16:e3:19:d7:a0:4a:b1:36:a3:b4:b6:77:46:d3:e7:da:23: 53:4f:dd:71:30:4d:ec:14:f6:a9:de:20:39:9b:40:e8:c2:75: 33:1c:aa:54:44:e6:ad:f2:82:6f:d5:b2:7f:eb:0f:9d:03:f1: 5b:7b:03:11:2d:58:82:b0:e5:fb:12:a1:8a:6d:b8:ca:36:14: 14:72:fe:ce:9f:cd:37:f5:66:c3:a9:38:40:00:3c:71:e3:5c: 4e:23:7c:71:c1:3a:7e:31:7f:36:ee:2f:a5:74:1b:b4:d6:a3: 9f:b3:4d:a0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElVN+xM+rGmojjhKJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMyODAxMzAxM1oXDTI1MDYyNjAxMzAxM1owLzEtMCsGA1UEAxMk ZWJkZmNmZjAtY2VmNi00ZmQ0LTk3MjItYTEzZGVmMWVmMjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOBZTmNEeU2AlOtpqnyqQZcqCxkw9nDYQHay s2wqn1QHu0WL4xWLaxbGGgOjm529MJZUbQ8T/zhlY7Z2qs43pzv3ZKyv8Dd3M8Yf vckJy5pGokXmX4QlHbsfyTTLn+8Akzacx6Dm0t3VxA/0rrvf6+tDB9C0USEVLuF0 Zo7gKjBU34+PepmEu+aCgYe3Yzcd1Rg6WV6lskFWV7uJjWvITNklwEgF+bJjBlwR sUl21GZboqNoDc23F5AhX/XR14UAiLaTZynmIxLr2ogQTYtLXCIWEZuoUUI4jZxU 3auLQ1KxAj9IBnwAVfrxjSFvRgxe5CLhR4a9nTELBMK6e9HmiwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNY8XQItISBQ1J0oNbGTg6DP3p12MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzhmNmViNjktMjhmMy0z Nzc0LWI4NzYtMDJlN2QxYTJmNTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAfkgW5vTmKMJLfJC2ZrVVFl4X65SIAh3WG/OMwL0SLicJaiixwr 0K1yku67/E+CY8BR+eS++UBmXoLCiHqR6X1fvv6i2V5HSmEfPwx3BedBZHLQ8Sh5 gOxF4nsHymhnATfOCxNaACmsihzxpBhYJhWoAcnKI6y9KPiLCnXh++1vLgZG4pqm iub9I1vHT6WB7GwW4xnXoEqxNqO0tndG0+faI1NP3XEwTewU9qneIDmbQOjCdTMc qlRE5q3ygm/Vsn/rD50D8Vt7AxEtWIKw5fsSoYptuMo2FBRy/s6fzTf1ZsOpOEAA PHHjXE4jfHHBOn4xfzbuL6V0G7TWo5+zTaA= -----END CERTIFICATE-----Generated at Fri Apr 4 17:43:18 2025 by rpki-client