$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0517423c-c9c8-3d12-bea3-d6d745972426.roa File: 0517423c-c9c8-3d12-bea3-d6d745972426.roa (raw, json) Hash identifier: fRcaa3Ks/bOhNtyDwNqyk1kKrH07ub+x6op2KRsGSw4= Subject key identifier: 09:C6:94:B4:E9:FC:C5:28:61:8D:76:D8:15:14:7B:14:71:4D:1F:52 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584993F9FA76ACC8544281DE9C40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0517423c-c9c8-3d12-bea3-d6d745972426.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 18647 IP address blocks: 2001:470:36e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:fa:76:ac:c8:54:42:81:de:9c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=66bf1562-b5b1-481b-b1ca-85e247ac0d3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d7:1b:f8:07:93:8d:8e:ca:3b:50:38:b6:1a: 21:0a:0b:cf:e7:ae:73:77:8a:47:c4:b6:02:ec:7c: 87:2a:a9:ee:bf:11:a9:8c:54:9e:82:dc:aa:14:c8: 7f:78:21:45:b6:74:41:7e:4c:f3:ea:6d:bd:ff:a5: 56:dc:fe:f3:cd:75:d9:8b:57:99:fe:72:04:a2:3b: 32:4b:12:29:18:3d:1b:4f:ce:23:04:24:be:fa:3b: 26:65:8a:aa:d1:39:05:df:d9:8d:17:23:85:44:4a: 59:13:dc:0f:a9:bd:12:eb:2d:2a:df:b4:af:d8:0b: d9:03:48:ad:0b:99:69:bf:1a:13:ad:c2:6d:23:7b: d6:56:5e:bf:25:87:f6:0b:c6:76:cc:6c:2d:d8:2a: 24:30:62:b0:4e:3f:bc:3f:e7:4b:69:6e:59:2b:c1: 09:20:78:ae:66:d3:21:3d:49:2f:9a:e0:7f:54:3d: 14:ed:e4:2d:bb:36:3c:75:16:9d:10:47:1c:18:b3: b1:83:b0:fe:50:09:fb:a4:71:cb:03:9e:c7:c8:a1: d5:6c:07:d7:33:a7:45:e7:90:bb:f8:6b:b2:45:d7: f9:73:3b:21:e4:83:c8:72:53:45:0f:a2:f2:b4:38: a0:20:5d:1f:65:6e:79:77:3e:58:fd:cd:d4:5e:da: 13:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C6:94:B4:E9:FC:C5:28:61:8D:76:D8:15:14:7B:14:71:4D:1F:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0517423c-c9c8-3d12-bea3-d6d745972426.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:36e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:29:86:ca:a6:b4:ef:bb:7a:ac:6f:62:2c:7a:71:d7:42:f5: 95:e2:b7:e4:47:80:88:2e:0e:8a:76:a1:e2:a1:bc:1a:dd:76: 0e:52:e4:60:1b:7a:c8:e0:e6:c2:ca:94:5e:ed:d2:23:7a:9a: 56:5c:c4:30:d3:a1:62:4a:56:0c:e4:b9:ee:77:c4:ac:bb:34: 48:e0:8e:81:9e:39:e6:dc:1c:12:fa:cf:e7:94:8a:11:d9:f0: 2c:8a:c5:91:ee:db:ef:2d:d7:17:54:70:8d:9f:cb:ef:4b:f9: db:d6:17:f2:85:dd:3c:77:e4:2c:be:1f:5f:c9:9f:66:05:53: 4b:d8:8e:66:b5:f7:43:7b:4e:67:6b:65:bc:cd:3d:c4:10:3d: bd:9c:24:b7:55:2d:1c:63:37:7d:1a:60:d4:76:81:b9:61:12: 63:06:5c:f5:c4:05:8b:05:14:d8:65:56:26:72:c5:2e:21:18: c2:bb:28:e3:40:f6:21:9a:13:c4:da:a6:e9:69:a8:85:2a:6f: 3e:bd:fb:e4:d3:82:9d:2a:aa:a3:12:db:5c:8c:93:d7:49:4d: 76:6c:9a:bc:b8:9a:2a:81:07:56:e8:16:cf:b1:1d:6b:5d:81: 9a:e7:2c:d9:03:3e:92:26:93:f7:3d:48:a3:38:93:f4:04:3e: 62:09:05:cd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmT+fp2rMhUQoHenEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk NjZiZjE1NjItYjViMS00ODFiLWIxY2EtODVlMjQ3YWMwZDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltcb+AeTjY7KO1A4thohCgvP565zd4pHxLYC 7HyHKqnuvxGpjFSegtyqFMh/eCFFtnRBfkzz6m29/6VW3P7zzXXZi1eZ/nIEojsy SxIpGD0bT84jBCS++jsmZYqq0TkF39mNFyOFREpZE9wPqb0S6y0q37Sv2AvZA0it C5lpvxoTrcJtI3vWVl6/JYf2C8Z2zGwt2CokMGKwTj+8P+dLaW5ZK8EJIHiuZtMh PUkvmuB/VD0U7eQtuzY8dRadEEccGLOxg7D+UAn7pHHLA57HyKHVbAfXM6dF55C7 +GuyRdf5czsh5IPIclNFD6LytDigIF0fZW55dz5Y/c3UXtoTaQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAnGlLTp/MUoYY122BUUexRxTR9SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDUxNzQyM2MtYzljOC0z ZDEyLWJlYTMtZDZkNzQ1OTcyNDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcANu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABcphsqmtO+7eqxvYix6cddC9ZXit+RHgIguDop2oeKhvBrddg5S 5GAbesjg5sLKlF7t0iN6mlZcxDDToWJKVgzkue53xKy7NEjgjoGeOebcHBL6z+eU ihHZ8CyKxZHu2+8t1xdUcI2fy+9L+dvWF/KF3Tx35Cy+H1/Jn2YFU0vYjma190N7 TmdrZbzNPcQQPb2cJLdVLRxjN30aYNR2gblhEmMGXPXEBYsFFNhlViZyxS4hGMK7 KONA9iGaE8TapulpqIUqbz69++TTgp0qqqMS21yMk9dJTXZsmry4miqBB1boFs+x HWtdgZrnLNkDPpImk/c9SKM4k/QEPmIJBc0= -----END CERTIFICATE-----Generated at Mon May 5 04:14:11 2025 by rpki-client