$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e2794a0f-04b2-3f30-9997-493db90290d9.roa File: e2794a0f-04b2-3f30-9997-493db90290d9.roa (raw, json) Hash identifier: 4jRRnHoBjKa04YYMnkA9YwVtXIL00CJablmsHsU5nAE= Subject key identifier: EB:08:7F:5D:C9:4B:B7:A0:D6:D4:56:B6:62:3A:B9:1C:3B:9C:BB:AD Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FC592889E649C4D912960 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e2794a0f-04b2-3f30-9997-493db90290d9.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 133905 IP address blocks: 2001:470:25a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:c5:92:88:9e:64:9c:4d:91:29:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=7f0580f7-d154-4d80-a731-3ffaffaef0a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:02:66:43:6d:0c:00:58:02:01:54:48:a2:66: c5:7e:85:24:9d:73:30:12:7f:ef:7a:e0:7c:d2:89: 1a:9c:50:11:5a:66:fe:a0:10:23:63:cb:ef:27:c5: 3e:38:8e:56:15:50:b1:36:0c:ec:af:e0:3b:0e:cf: e8:6c:a5:8c:cc:ab:ce:c3:9e:8d:30:7b:23:0c:4e: 11:3d:0f:f7:47:2c:62:5a:48:a9:86:4f:67:9d:e9: 59:e6:9b:8f:ac:78:9d:fa:9d:6f:fa:f4:68:17:e1: be:89:05:36:71:e5:37:36:c0:18:76:24:17:68:73: cd:55:8d:02:84:29:aa:fe:b5:f1:13:b6:89:18:36: c6:6e:be:a3:1d:f7:ed:91:d8:36:33:3a:ee:51:67: b0:97:2d:7d:3f:71:75:0a:91:13:bf:db:32:36:8a: a3:60:74:43:20:be:20:c2:b9:ee:05:43:b4:02:34: 64:7e:d0:db:0e:e2:02:0f:5d:84:76:c4:5d:66:1f: 53:98:4b:f9:a6:ce:3b:a9:38:33:e2:0b:26:46:af: b7:9c:b3:25:0c:74:cc:31:c1:a0:ca:b9:31:3f:fa: 2f:72:f7:b9:a0:d7:34:bb:1c:f8:78:b4:5a:06:08: ae:f7:73:10:95:4e:4d:17:54:c2:dc:29:a9:e1:ef: 07:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:08:7F:5D:C9:4B:B7:A0:D6:D4:56:B6:62:3A:B9:1C:3B:9C:BB:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e2794a0f-04b2-3f30-9997-493db90290d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:25a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:a1:c9:7c:ef:b6:6f:a0:f3:99:21:28:36:f2:88:f9:63:34: 3f:81:b4:bc:1f:fd:3e:ed:a8:42:39:47:30:d0:45:1f:be:df: 31:0e:59:27:41:e8:f1:48:06:9f:3e:25:73:c7:51:e8:8b:4e: 4f:91:ba:16:21:33:36:41:00:18:04:f7:77:df:93:e6:ee:16: a2:b2:81:be:42:6f:cc:9e:8e:f3:6a:08:c3:1e:7a:2f:00:1a: 2e:bd:b0:c4:b1:ee:3e:26:5f:72:09:89:b2:a4:2d:0b:97:8f: 3b:97:61:10:ab:86:22:3a:81:ce:7e:61:bb:3e:15:04:d3:c6: 16:0a:b8:b7:a0:85:d8:40:df:6b:4f:9c:3b:91:a4:b4:14:17: 1e:72:12:8d:40:c9:82:11:3e:91:24:8a:6a:38:06:4e:39:76: be:cb:9c:29:d4:9c:4c:53:d3:b8:0e:a1:71:19:9d:44:5c:07: be:01:29:26:70:c4:2d:32:d5:3e:77:34:af:2f:ce:86:f4:43: 3f:14:82:cb:6a:8e:77:fe:e7:6a:4d:61:ec:4f:e6:86:07:95: 78:9b:90:85:9a:a4:09:db:10:db:e7:a3:07:5a:17:63:03:a9: 3b:ec:3a:85:4b:9c:19:12:eb:ba:c1:1d:11:4e:51:ba:0a:9f: 36:6c:d6:89 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX8WSiJ5knE2RKWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk N2YwNTgwZjctZDE1NC00ZDgwLWE3MzEtM2ZmYWZmYWVmMGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQJmQ20MAFgCAVRIombFfoUknXMwEn/veuB8 0okanFARWmb+oBAjY8vvJ8U+OI5WFVCxNgzsr+A7Ds/obKWMzKvOw56NMHsjDE4R PQ/3RyxiWkiphk9nnelZ5puPrHid+p1v+vRoF+G+iQU2ceU3NsAYdiQXaHPNVY0C hCmq/rXxE7aJGDbGbr6jHfftkdg2MzruUWewly19P3F1CpETv9syNoqjYHRDIL4g wrnuBUO0AjRkftDbDuICD12EdsRdZh9TmEv5ps47qTgz4gsmRq+3nLMlDHTMMcGg yrkxP/ovcve5oNc0uxz4eLRaBgiu93MQlU5NF1TC3Cmp4e8H0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOsIf13JS7eg1tRWtmI6uRw7nLutMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZTI3OTRhMGYtMDRiMi0z ZjMwLTk5OTctNDkzZGI5MDI5MGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJa MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALuhyXzvtm+g85khKDbyiPljND+BtLwf/T7tqEI5RzDQRR++3zEO WSdB6PFIBp8+JXPHUeiLTk+RuhYhMzZBABgE93ffk+buFqKygb5Cb8yejvNqCMMe ei8AGi69sMSx7j4mX3IJibKkLQuXjzuXYRCrhiI6gc5+Ybs+FQTTxhYKuLeghdhA 32tPnDuRpLQUFx5yEo1AyYIRPpEkimo4Bk45dr7LnCnUnExT07gOoXEZnURcB74B KSZwxC0y1T53NK8vzob0Qz8Ugstqjnf+52pNYexP5oYHlXibkIWapAnbENvnowda F2MDqTvsOoVLnBkS67rBHRFOUboKnzZs1ok= -----END CERTIFICATE-----Generated at Thu Jun 5 18:34:44 2025 by rpki-client