$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f0f23811-972b-35c9-8adc-bcfd78204c4b.roa File: f0f23811-972b-35c9-8adc-bcfd78204c4b.roa (raw, json) Hash identifier: cDkQB7RRuisfKr8HBQH/jBgzQaD0uyIAewAmL3ANTHA= Subject key identifier: D3:84:41:C4:31:33:47:C3:A6:BB:D2:46:2E:CB:DF:B4:53:B6:7C:88 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584925C24DD616CF711647A06340 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f0f23811-972b-35c9-8adc-bcfd78204c4b.roa Signing time: Tue 11 Mar 2025 01:30:14 +0000 ROA not before: Tue 11 Mar 2025 01:30:14 +0000 ROA not after: Mon 09 Jun 2025 01:30:14 +0000 asID: 12025 IP address blocks: 2001:470:422::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:25:c2:4d:d6:16:cf:71:16:47:a0:63:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 11 01:30:14 2025 GMT Not After : Jun 9 01:30:14 2025 GMT Subject: CN=d8580aeb-3470-4c79-b4df-653e513aece8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:af:61:98:bd:f7:9f:03:ef:56:8f:9a:50:ec: 5c:78:ac:3b:5a:d0:ac:59:23:ee:35:b8:cf:ce:5e: b1:48:c1:f7:82:18:59:e6:14:72:af:10:d3:d8:95: bf:d5:92:d9:6c:b2:7a:fa:af:50:e6:3f:c8:f7:84: d8:bf:f4:6b:13:13:17:4c:2a:78:db:f1:2c:b6:3c: 8d:33:72:7f:8d:3e:d2:32:7b:2e:1f:ba:f0:17:3e: 4c:19:82:de:45:96:eb:a0:84:a4:df:f7:e9:7a:f4: ca:a0:45:03:e2:88:68:5a:49:3c:8c:d3:b4:b8:96: a2:df:a9:36:02:13:db:a0:4f:7f:de:60:0e:b6:6d: c2:94:bc:87:80:d9:ed:54:a3:10:0b:05:ba:a7:ca: d2:b9:46:26:17:8e:f0:6f:5e:9a:c9:1b:60:8b:a1: e3:59:a9:5d:ab:b4:eb:52:90:09:74:62:b8:e9:48: 26:9f:7a:0d:c6:56:18:26:19:03:c7:0e:79:d6:51: 53:ce:23:18:8b:a9:af:31:3f:3a:ca:d0:4f:ea:55: fb:9b:68:a3:55:1d:67:1a:1d:ab:76:9b:79:1a:cc: fc:e6:3c:29:88:9d:60:80:ac:1c:e6:35:95:47:12: b6:d3:7a:fe:1c:1c:e6:3b:34:3b:57:6e:1e:a7:0f: c4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:84:41:C4:31:33:47:C3:A6:BB:D2:46:2E:CB:DF:B4:53:B6:7C:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f0f23811-972b-35c9-8adc-bcfd78204c4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:422::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:eb:7d:86:5d:ca:6b:bb:4b:c3:51:16:f4:4c:5f:f5:e8:71: a7:6b:b6:47:16:7d:30:11:54:70:aa:f0:ee:15:94:cc:db:ce: e5:12:f3:37:b5:22:56:3e:65:0f:ae:99:92:45:76:76:cb:fe: a2:2c:7c:23:68:31:c3:5d:8a:b1:65:f7:cc:76:c2:f7:b6:d4: cf:0b:64:91:0d:a0:64:92:34:e1:14:39:9d:f4:61:34:e4:1c: 54:23:f6:2c:a1:41:1e:dd:45:98:02:b7:c0:a7:2f:d1:10:7d: 17:80:1b:e3:5c:ed:4f:85:c9:60:7e:d1:b2:5d:4e:75:75:71: d1:80:e6:07:ee:ac:ec:61:9b:50:19:73:2a:3d:08:db:5b:16: d6:07:f2:f6:5b:a3:1a:6c:fd:2e:80:e9:99:bf:07:91:28:7a: 32:78:6a:1a:b8:73:96:d9:dc:f0:d8:be:6e:27:69:9c:1d:6b: 5a:79:59:99:f2:d3:2e:10:59:bb:9c:b0:d4:12:53:fa:e3:47: 5b:b8:96:38:75:35:8d:dd:6d:e7:d5:f4:50:b9:ab:4b:92:39: a4:15:5f:3d:b3:80:0c:8f:5f:d7:1c:8a:9c:eb:1d:9d:97:ce: 34:dd:b3:08:4c:8e:47:c2:6d:26:5f:91:0d:8d:d4:11:23:5d: 28:ea:0b:66 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEklwk3WFs9xFkegY0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMxMTAxMzAxNFoXDTI1MDYwOTAxMzAxNFowLzEtMCsGA1UEAxMk ZDg1ODBhZWItMzQ3MC00Yzc5LWI0ZGYtNjUzZTUxM2FlY2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA469hmL33nwPvVo+aUOxceKw7WtCsWSPuNbjP zl6xSMH3ghhZ5hRyrxDT2JW/1ZLZbLJ6+q9Q5j/I94TYv/RrExMXTCp42/EstjyN M3J/jT7SMnsuH7rwFz5MGYLeRZbroISk3/fpevTKoEUD4ohoWkk8jNO0uJai36k2 AhPboE9/3mAOtm3ClLyHgNntVKMQCwW6p8rSuUYmF47wb16ayRtgi6HjWaldq7Tr UpAJdGK46Ugmn3oNxlYYJhkDxw551lFTziMYi6mvMT86ytBP6lX7m2ijVR1nGh2r dpt5Gsz85jwpiJ1ggKwc5jWVRxK203r+HBzmOzQ7V24epw/EyQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNOEQcQxM0fDprvSRi7L37RTtnyIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjBmMjM4MTEtOTcyYi0z NWM5LThhZGMtYmNmZDc4MjA0YzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF/rfYZdymu7S8NRFvRMX/XocadrtkcWfTARVHCq8O4VlMzbzuUS 8ze1IlY+ZQ+umZJFdnbL/qIsfCNoMcNdirFl98x2wve21M8LZJENoGSSNOEUOZ30 YTTkHFQj9iyhQR7dRZgCt8CnL9EQfReAG+Nc7U+FyWB+0bJdTnV1cdGA5gfurOxh m1AZcyo9CNtbFtYH8vZboxps/S6A6Zm/B5EoejJ4ahq4c5bZ3PDYvm4naZwda1p5 WZny0y4QWbucsNQSU/rjR1u4ljh1NY3dbefV9FC5q0uSOaQVXz2zgAyPX9ccipzr HZ2XzjTdswhMjkfCbSZfkQ2N1BEjXSjqC2Y= -----END CERTIFICATE-----Generated at Fri Apr 4 17:46:11 2025 by rpki-client