$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d8109e33-250d-3d73-8e2b-1ff6022e49e6.roa File: d8109e33-250d-3d73-8e2b-1ff6022e49e6.roa (raw, json) Hash identifier: vmoy1QVKHPCM4X/NePt96MYaZgTw5EpPxvODBNNlgt8= Subject key identifier: 10:55:8F:2B:B1:D3:D9:AC:9C:C6:07:28:7D:9B:27:E5:8E:64:0A:40 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584950F9579544D14F9BBA90FF00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d8109e33-250d-3d73-8e2b-1ff6022e49e6.roa Signing time: Wed 26 Mar 2025 13:00:53 +0000 ROA not before: Wed 26 Mar 2025 13:00:53 +0000 ROA not after: Tue 24 Jun 2025 13:00:53 +0000 asID: 400992 IP address blocks: 2001:470:3eb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:50:f9:57:95:44:d1:4f:9b:ba:90:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 26 13:00:53 2025 GMT Not After : Jun 24 13:00:53 2025 GMT Subject: CN=abed8cbf-4172-4d57-b00e-c2d9136bd5cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fe:67:7a:92:10:cc:da:87:8b:42:e2:83:31: fa:77:04:90:64:e5:34:61:bb:e8:1c:42:3e:07:fa: 41:d2:cd:a5:b3:1e:29:e7:c3:0a:6d:94:25:33:28: 5f:cc:30:e0:6b:a3:c1:9b:d4:c9:59:59:6e:23:a7: 49:5d:bf:66:a4:b1:d0:7b:56:7c:3f:68:00:07:12: c3:b1:15:25:60:f9:4d:e2:d7:88:9a:62:9e:98:da: 4c:66:9b:42:3d:0a:59:82:37:eb:9f:f3:52:81:5c: 86:3a:e0:44:4f:82:32:5d:73:e9:dc:b5:b1:9b:69: a1:db:57:3c:b8:47:f6:6e:39:4a:81:9c:04:c9:96: ef:89:4f:92:0a:bf:a3:88:9c:d2:1c:4d:8e:50:1e: 0d:24:45:1a:f5:86:7c:d7:4c:d9:7c:25:92:a7:b2: d0:b6:85:bd:3d:43:60:c4:95:be:e6:b8:44:96:24: 61:ba:f9:9e:87:c9:b0:22:30:b3:a5:16:31:be:2c: c9:ed:60:30:48:61:aa:4c:c5:98:bd:fa:df:8c:e4: a4:a5:0a:ad:04:4e:cd:bb:67:a7:04:7d:90:89:fc: 9e:9f:c2:b0:f9:bb:b3:ad:8d:be:a4:71:15:c2:dd: 27:6a:33:d6:6a:f7:39:38:89:1d:80:19:d9:68:db: 81:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:55:8F:2B:B1:D3:D9:AC:9C:C6:07:28:7D:9B:27:E5:8E:64:0A:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d8109e33-250d-3d73-8e2b-1ff6022e49e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3eb::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:d0:d5:cd:7c:36:18:24:79:a7:16:a9:e7:2a:d7:6b:a4:b2: f8:b1:72:07:dc:49:92:cd:39:56:25:6b:11:a4:8d:ad:21:0a: a6:15:f4:8d:31:49:7e:06:7b:3c:29:b7:b3:a5:56:49:16:38: 7b:e1:a3:c3:98:90:b2:2a:a0:32:97:cf:42:0a:09:80:83:d5: 80:49:3c:5b:ff:49:b9:90:e2:59:6b:58:44:f1:f0:28:c6:01: 72:6e:49:fa:d4:b1:97:ed:2e:15:10:68:dc:65:1a:e1:ba:86: 58:3e:26:d8:0a:8e:69:ae:54:16:3c:73:84:f7:ab:96:5c:f1: 63:bc:64:76:5a:7e:df:f2:79:8a:c3:9a:65:5c:23:aa:78:f3: c4:81:82:c2:d0:c9:a9:80:06:55:74:5e:79:8b:e8:74:ab:e4: 41:c9:a0:b9:73:02:72:1e:2d:f8:f9:2e:2c:58:bf:5b:0a:f6: 39:0e:97:e2:c7:81:38:d7:1a:37:80:9a:58:33:8e:29:20:9b: 6c:0d:ea:2d:70:0f:9c:a2:9a:4c:d6:c6:98:58:c7:ca:c7:15: 1d:c1:57:5a:02:de:5e:d0:ad:2a:4d:6f:7a:c5:11:d4:6a:09: 36:60:3d:92:ae:6b:fa:92:8f:b2:d9:90:7c:f5:86:e4:bd:24: 26:6e:3e:d0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElQ+VeVRNFPm7qQ/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMyNjEzMDA1M1oXDTI1MDYyNDEzMDA1M1owLzEtMCsGA1UEAxMk YWJlZDhjYmYtNDE3Mi00ZDU3LWIwMGUtYzJkOTEzNmJkNWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAof5nepIQzNqHi0LigzH6dwSQZOU0YbvoHEI+ B/pB0s2lsx4p58MKbZQlMyhfzDDga6PBm9TJWVluI6dJXb9mpLHQe1Z8P2gABxLD sRUlYPlN4teImmKemNpMZptCPQpZgjfrn/NSgVyGOuBET4IyXXPp3LWxm2mh21c8 uEf2bjlKgZwEyZbviU+SCr+jiJzSHE2OUB4NJEUa9YZ810zZfCWSp7LQtoW9PUNg xJW+5rhEliRhuvmeh8mwIjCzpRYxvizJ7WAwSGGqTMWYvfrfjOSkpQqtBE7Nu2en BH2Qifyen8Kw+buzrY2+pHEVwt0najPWavc5OIkdgBnZaNuBlQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBBVjyux09msnMYHKH2bJ+WOZApAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDgxMDllMzMtMjUwZC0z ZDczLThlMmItMWZmNjAyMmU0OWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMXQ1c18NhgkeacWqecq12uksvixcgfcSZLNOVYlaxGkja0hCqYV 9I0xSX4Gezwpt7OlVkkWOHvho8OYkLIqoDKXz0IKCYCD1YBJPFv/SbmQ4llrWETx 8CjGAXJuSfrUsZftLhUQaNxlGuG6hlg+JtgKjmmuVBY8c4T3q5Zc8WO8ZHZaft/y eYrDmmVcI6p488SBgsLQyamABlV0XnmL6HSr5EHJoLlzAnIeLfj5LixYv1sK9jkO l+LHgTjXGjeAmlgzjikgm2wN6i1wD5yimkzWxphYx8rHFR3BV1oC3l7QrSpNb3rF EdRqCTZgPZKua/qSj7LZkHz1huS9JCZuPtA= -----END CERTIFICATE-----Generated at Thu Apr 17 15:32:11 2025 by rpki-client