$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e5e36007-a29d-3f51-ad1a-39edd7b18516.roa File: e5e36007-a29d-3f51-ad1a-39edd7b18516.roa (raw, json) Hash identifier: RbQHrDyxnJv9+pYqL3XqH/D65ZVVL8r9m1WrWDE8dkc= Subject key identifier: EE:B1:EE:67:CB:B2:2F:75:7F:66:4C:F7:DB:D3:BA:AC:68:88:51:46 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858492F87C71005D902353DD7BD00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e5e36007-a29d-3f51-ad1a-39edd7b18516.roa Signing time: Fri 14 Mar 2025 13:30:24 +0000 ROA not before: Fri 14 Mar 2025 13:30:24 +0000 ROA not after: Thu 12 Jun 2025 13:30:24 +0000 asID: 43633 IP address blocks: 2001:470:427::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2f:87:c7:10:05:d9:02:35:3d:d7:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 14 13:30:24 2025 GMT Not After : Jun 12 13:30:24 2025 GMT Subject: CN=c87fb42b-3057-4a58-aafa-747657af58eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4f:a1:b8:b5:ee:12:6d:69:c7:45:5a:c8:46: 04:2f:d0:5e:64:2e:23:36:8d:de:ec:23:4c:81:27: 35:e0:0a:f4:2b:0f:63:0e:04:a3:6f:8b:74:d8:fa: 0a:0d:0e:12:dc:ae:ed:ce:1d:5f:c0:c9:68:76:5d: 89:f0:1f:cc:16:69:ff:6e:d6:09:ac:6c:b7:14:8c: ce:37:2f:5d:33:0e:46:e0:1c:03:14:bc:14:a8:ef: 8c:1d:72:f7:45:be:0e:5d:b3:0b:bc:51:15:0b:95: dd:98:ae:2f:73:fe:81:7f:bc:b2:f1:d3:5a:ae:bd: 5c:62:2d:55:c4:35:b2:ab:9b:34:0e:cc:7f:cc:28: e0:a0:c9:03:72:dc:b0:83:fb:3e:c9:55:90:33:5a: 30:a6:5c:de:df:dc:84:b4:18:0c:f0:63:1f:36:50: 81:b5:38:74:7c:04:69:c0:ce:db:31:72:f4:80:5b: 78:0c:3d:e7:67:d6:ee:9f:8a:eb:36:09:1a:c3:c6: 71:16:44:2d:da:04:c0:7d:93:12:be:b1:9c:40:12: a5:82:1e:79:39:d4:3c:88:43:a3:84:2a:e4:34:5c: 84:2e:43:c1:ef:73:12:27:9b:64:c5:d9:b3:5a:79: ef:5a:e0:91:68:5e:3f:0b:4b:64:0a:c8:5a:df:46: 57:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:B1:EE:67:CB:B2:2F:75:7F:66:4C:F7:DB:D3:BA:AC:68:88:51:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e5e36007-a29d-3f51-ad1a-39edd7b18516.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:427::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:e5:f7:73:02:9c:b8:12:fd:b2:8a:04:de:1a:ba:e0:3c:99: 7f:cf:25:ad:62:15:77:76:cf:c3:50:a9:e8:1a:f4:93:e2:c0: 0d:f9:82:10:ad:ce:27:a1:79:2b:f2:19:e5:e8:19:eb:10:c6: 01:ee:0d:80:d2:e0:14:0d:df:d4:e5:d5:b6:ba:cc:1d:7b:9d: 2b:a8:97:34:ac:d1:f0:e7:03:1b:79:c1:1d:ce:0f:4b:1f:05: 45:c1:87:29:52:c7:a7:7a:c6:07:a9:e6:ee:1d:a6:49:aa:f2: ff:f6:f0:4a:ef:cf:04:fc:be:17:dd:42:ab:7c:07:33:6f:82: 40:99:74:0d:01:19:ed:2d:b9:d4:25:88:54:eb:39:4b:f5:75: 46:c0:c1:4f:4f:99:c0:1b:00:1b:81:7c:ae:89:f8:d8:3d:f0: de:04:0f:4c:40:02:41:5c:58:29:3b:62:74:e1:46:b1:e0:e1: a6:fc:f4:e7:d3:d1:af:80:85:de:ee:d3:1a:63:d6:f8:87:cc: 75:97:d3:6a:fd:ce:7f:bf:53:92:e4:d9:23:ce:d9:3d:c1:c3: 3e:6c:14:9a:6a:b2:5b:50:a8:61:cd:21:54:40:24:77:33:02: f9:05:52:b7:a0:12:cf:27:30:ee:db:15:50:c9:d4:43:16:40: f7:5c:78:3f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkvh8cQBdkCNT3XvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMxNDEzMzAyNFoXDTI1MDYxMjEzMzAyNFowLzEtMCsGA1UEAxMk Yzg3ZmI0MmItMzA1Ny00YTU4LWFhZmEtNzQ3NjU3YWY1OGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk+huLXuEm1px0VayEYEL9BeZC4jNo3e7CNM gSc14Ar0Kw9jDgSjb4t02PoKDQ4S3K7tzh1fwMlodl2J8B/MFmn/btYJrGy3FIzO Ny9dMw5G4BwDFLwUqO+MHXL3Rb4OXbMLvFEVC5XdmK4vc/6Bf7yy8dNarr1cYi1V xDWyq5s0Dsx/zCjgoMkDctywg/s+yVWQM1owplze39yEtBgM8GMfNlCBtTh0fARp wM7bMXL0gFt4DD3nZ9bun4rrNgkaw8ZxFkQt2gTAfZMSvrGcQBKlgh55OdQ8iEOj hCrkNFyELkPB73MSJ5tkxdmzWnnvWuCRaF4/C0tkCsha30ZXbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO6x7mfLsi91f2ZM99vTuqxoiFFGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZTVlMzYwMDctYTI5ZC0z ZjUxLWFkMWEtMzllZGQ3YjE4NTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEbl93MCnLgS/bKKBN4auuA8mX/PJa1iFXd2z8NQqega9JPiwA35 ghCtzieheSvyGeXoGesQxgHuDYDS4BQN39Tl1ba6zB17nSuolzSs0fDnAxt5wR3O D0sfBUXBhylSx6d6xgep5u4dpkmq8v/28ErvzwT8vhfdQqt8BzNvgkCZdA0BGe0t udQliFTrOUv1dUbAwU9PmcAbABuBfK6J+Ng98N4ED0xAAkFcWCk7YnThRrHg4ab8 9OfT0a+Ahd7u0xpj1viHzHWX02r9zn+/U5Lk2SPO2T3Bwz5sFJpqsltQqGHNIVRA JHczAvkFUregEs8nMO7bFVDJ1EMWQPdceD8= -----END CERTIFICATE-----Generated at Fri Apr 4 17:53:09 2025 by rpki-client