$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff22bff8-79ed-3de1-a9fe-44b114229d0b.roa File: ff22bff8-79ed-3de1-a9fe-44b114229d0b.roa (raw, json) Hash identifier: UDo50KhQiMwDLx2tSpqLY0BtWclb3VHeW/S9v+VPnmI= Subject key identifier: CE:CE:E7:79:A6:EE:6F:D8:2A:84:0C:8E:C3:55:7E:A9:42:7E:4D:40 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848A83F429BDE06690FA7CA9000 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff22bff8-79ed-3de1-a9fe-44b114229d0b.roa Signing time: Sat 25 Jan 2025 02:30:09 +0000 ROA not before: Sat 25 Jan 2025 02:30:09 +0000 ROA not after: Fri 25 Apr 2025 01:30:09 +0000 asID: 25912 IP address blocks: 2001:470:3fc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:3f:42:9b:de:06:69:0f:a7:ca:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jan 25 02:30:09 2025 GMT Not After : Apr 25 01:30:09 2025 GMT Subject: CN=c0c05611-df31-4240-9ec0-40c8dcfca01d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7d:05:e1:c2:09:5b:f7:97:9a:ce:87:17:ff: 77:0f:a5:b4:db:69:ea:97:26:8e:1c:54:83:a2:9d: 11:7b:d9:3d:6a:0e:22:e6:6d:0a:6a:e2:c4:ac:02: d6:c9:bb:c6:9b:cc:74:7c:5b:00:61:fb:91:73:a0: 91:a1:c8:e2:ce:16:b5:8b:f5:8a:bb:d3:49:31:76: a0:13:2e:74:ee:c0:a3:96:93:8b:14:d7:ac:9c:57: 66:2f:76:07:53:4f:db:ef:02:93:6c:25:00:e4:5b: fe:c7:6f:ae:62:4d:e9:4e:9b:c9:e4:17:89:cc:10: 39:0a:d8:c5:7f:a9:26:ee:14:86:ca:79:9b:f6:62: 11:20:63:b6:11:50:ce:6b:88:17:59:56:68:73:24: 97:fa:a3:87:a0:d1:e0:05:3f:bd:ee:66:62:a2:a0: 0a:3c:34:d2:72:b4:69:31:32:54:7d:01:b4:4c:e2: 4a:86:c3:48:9e:43:a1:e0:93:ca:b8:b6:26:9a:eb: 83:64:c4:83:df:c6:23:ba:99:d8:8e:61:92:88:d5: a0:0e:5e:7d:ac:8d:c5:10:2a:fc:1c:8c:fb:27:1d: 34:7e:f6:24:4d:23:12:e6:91:27:fe:86:03:51:82: 4c:e5:33:2b:fb:09:29:00:21:b6:0b:31:0d:65:a0: a5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:CE:E7:79:A6:EE:6F:D8:2A:84:0C:8E:C3:55:7E:A9:42:7E:4D:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff22bff8-79ed-3de1-a9fe-44b114229d0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3fc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:c5:fa:4c:e0:e8:f4:24:f6:15:b6:e1:a5:3e:67:91:9d:28: 93:55:7f:48:54:49:4d:16:bf:f2:51:7c:a6:02:e5:8e:66:b2: 5b:61:4e:94:31:54:89:72:d0:2f:eb:91:5c:6f:29:94:43:12: 95:71:af:c1:0d:49:3a:3e:b6:b7:2a:d6:59:5a:28:47:a8:ca: b1:12:63:dc:f4:83:77:a0:ce:22:1f:af:9b:82:d7:da:29:7c: 05:fa:3a:26:8b:0b:9d:7d:c0:6f:b0:f7:4e:e5:73:7b:4b:97: c8:c1:39:86:2f:31:bf:0e:ba:9d:a4:02:9d:91:9f:0a:f5:a7: 26:b9:f9:4d:87:c3:cb:13:c9:f0:64:96:6d:82:6b:34:9c:3f: 0b:86:0b:ed:97:d5:3c:01:f0:a8:81:33:73:2b:f1:71:d2:c4: b5:1a:48:72:f4:0e:61:2a:88:6b:fe:e1:27:bc:b3:ec:4c:73: 62:6d:d6:24:15:6f:79:96:66:05:5b:9d:69:45:ef:89:67:3d: 84:38:b0:a2:b4:01:36:c4:ab:fa:b2:3a:00:77:4d:dd:c8:d7: d6:ad:69:c7:02:56:58:b6:c6:77:2e:55:4e:85:ca:88:fd:ec: e1:ed:c7:83:2b:2b:7b:0d:bc:1f:62:91:0b:17:72:a2:ef:4f: 22:66:fc:e0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEioP0Kb3gZpD6fKkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDEyNTAyMzAwOVoXDTI1MDQyNTAxMzAwOVowLzEtMCsGA1UEAxMk YzBjMDU2MTEtZGYzMS00MjQwLTllYzAtNDBjOGRjZmNhMDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmX0F4cIJW/eXms6HF/93D6W022nqlyaOHFSD op0Re9k9ag4i5m0KauLErALWybvGm8x0fFsAYfuRc6CRocjizha1i/WKu9NJMXag Ey507sCjlpOLFNesnFdmL3YHU0/b7wKTbCUA5Fv+x2+uYk3pTpvJ5BeJzBA5CtjF f6km7hSGynmb9mIRIGO2EVDOa4gXWVZocySX+qOHoNHgBT+97mZioqAKPDTScrRp MTJUfQG0TOJKhsNInkOh4JPKuLYmmuuDZMSD38YjupnYjmGSiNWgDl59rI3FECr8 HIz7Jx00fvYkTSMS5pEn/oYDUYJM5TMr+wkpACG2CzENZaCl0QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM7O53mm7m/YKoQMjsNVfqlCfk1AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZmYyMmJmZjgtNzllZC0z ZGUxLWE5ZmUtNDRiMTE0MjI5ZDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAP8 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALLF+kzg6PQk9hW24aU+Z5GdKJNVf0hUSU0Wv/JRfKYC5Y5mslth TpQxVIly0C/rkVxvKZRDEpVxr8ENSTo+trcq1llaKEeoyrESY9z0g3egziIfr5uC 19opfAX6OiaLC519wG+w907lc3tLl8jBOYYvMb8Oup2kAp2Rnwr1pya5+U2Hw8sT yfBklm2CazScPwuGC+2X1TwB8KiBM3Mr8XHSxLUaSHL0DmEqiGv+4Se8s+xMc2Jt 1iQVb3mWZgVbnWlF74lnPYQ4sKK0ATbEq/qyOgB3Td3I19ataccCVli2xncuVU6F yoj97OHtx4MrK3sNvB9ikQsXcqLvTyJm/OA= -----END CERTIFICATE-----Generated at Fri Apr 4 17:45:09 2025 by rpki-client