$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/584301c1-15b5-3123-ad92-46d1ae136fab.roa File: 584301c1-15b5-3123-ad92-46d1ae136fab.roa (raw, json) Hash identifier: rfb8oJx3D+8b/5xh3EGq8xevycItKeEwcN5k05I3mTc= Subject key identifier: DA:15:37:4C:DD:FE:D1:AB:20:3D:9C:EB:76:E9:A7:1B:3A:94:04:1B Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926DEBE0BC248F21503F700 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/584301c1-15b5-3123-ad92-46d1ae136fab.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 394256 IP address blocks: 2001:470:1d1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:de:be:0b:c2:48:f2:15:03:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=d7116bd4-7074-45af-b483-da222657cfe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:54:53:9c:d4:2e:8d:01:9f:b0:da:fd:0d:cc: 80:70:00:e1:d7:ed:5c:01:19:40:14:5f:d0:ad:5c: 4b:97:df:64:c8:86:23:97:fb:18:bd:cd:b6:7e:58: 5c:38:ad:d5:0a:6b:d9:69:45:15:70:a0:2a:61:2a: 10:aa:36:f1:7a:74:e6:6d:0e:8f:fd:af:44:14:3b: 5e:1f:e5:69:26:6d:79:94:93:c8:d2:5f:7d:ea:be: 5e:e1:7b:e4:82:77:63:28:6f:26:9c:5c:b1:28:64: ca:9d:ab:0b:6d:23:f8:12:a0:59:db:fe:c9:ef:dc: e0:d2:62:c2:c2:54:97:3a:79:52:0d:fc:22:a3:c1: ff:a7:c1:6b:cb:16:e5:f3:18:33:3a:3f:59:9d:06: cb:b7:49:0b:33:bb:b5:23:c6:a6:28:2b:0f:74:97: b7:35:74:19:12:9e:4a:1c:a9:7a:e2:95:43:c2:38: 3a:f4:95:62:8f:b0:b2:10:2f:40:ad:fd:42:49:0b: 8d:99:08:be:5c:e2:b6:58:ee:ad:36:32:1a:d1:f1: b7:54:85:8d:f6:88:12:47:75:31:34:90:22:a8:23: 58:6a:8e:ea:a7:9f:85:0a:3e:90:29:ea:9b:e6:d7: c9:b8:12:c7:5a:dd:df:f0:e7:ee:5f:f2:80:89:bc: 07:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:15:37:4C:DD:FE:D1:AB:20:3D:9C:EB:76:E9:A7:1B:3A:94:04:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/584301c1-15b5-3123-ad92-46d1ae136fab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1d1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:8a:85:99:a2:4d:e8:8e:c7:68:94:89:5b:5d:7a:43:c0:1d: 9c:98:d4:d0:af:4b:43:7b:89:1f:50:e5:f5:b5:85:5c:a8:0c: 1f:ae:b3:09:89:a5:75:2f:34:9e:47:29:2b:ce:72:50:92:1b: 25:d0:b2:87:4d:c0:61:b4:e2:84:a4:c8:8e:57:d0:05:77:1a: 6a:93:61:5e:ee:7d:ce:70:49:28:81:17:81:90:48:d7:de:c5: 8b:2e:81:c7:b7:d6:43:bc:df:77:00:8d:15:bf:d1:17:c1:24: a3:44:17:50:9a:67:98:3f:0b:c7:6b:b1:4d:d9:67:ea:47:c3: e7:53:36:e1:dd:2a:4f:5a:07:a5:38:42:e9:17:3c:09:06:fd: f0:ca:eb:28:15:02:2f:ed:18:52:fe:fd:48:26:60:47:0a:38: 6b:59:4a:a2:e6:23:b1:6f:13:7f:7a:9b:cc:80:35:f0:58:d9: 5a:4b:cb:3f:a3:06:65:2f:f6:0b:d2:82:85:37:18:e4:c5:92: 25:8b:2a:88:9f:5a:7c:9e:b4:e0:66:31:82:ee:52:81:e0:24: af:a3:a8:89:bb:33:d9:ac:9d:87:1d:e0:b1:a7:9f:ee:80:f2: 40:f6:db:09:e5:5f:0b:0a:a3:c4:5f:2a:e3:33:92:47:7d:cc: 54:65:05:c2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5Jt6+C8JI8hUD9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk ZDcxMTZiZDQtNzA3NC00NWFmLWI0ODMtZGEyMjI2NTdjZmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1RTnNQujQGfsNr9DcyAcADh1+1cARlAFF/Q rVxLl99kyIYjl/sYvc22flhcOK3VCmvZaUUVcKAqYSoQqjbxenTmbQ6P/a9EFDte H+VpJm15lJPI0l996r5e4XvkgndjKG8mnFyxKGTKnasLbSP4EqBZ2/7J79zg0mLC wlSXOnlSDfwio8H/p8Fryxbl8xgzOj9ZnQbLt0kLM7u1I8amKCsPdJe3NXQZEp5K HKl64pVDwjg69JVij7CyEC9Arf1CSQuNmQi+XOK2WO6tNjIa0fG3VIWN9ogSR3Ux NJAiqCNYao7qp5+FCj6QKeqb5tfJuBLHWt3f8OfuX/KAibwHQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNoVN0zd/tGrID2c63bppxs6lAQbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTg0MzAxYzEtMTViNS0z MTIzLWFkOTItNDZkMWFlMTM2ZmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAECKhZmiTeiOx2iUiVtdekPAHZyY1NCvS0N7iR9Q5fW1hVyoDB+u swmJpXUvNJ5HKSvOclCSGyXQsodNwGG04oSkyI5X0AV3GmqTYV7ufc5wSSiBF4GQ SNfexYsugce31kO833cAjRW/0RfBJKNEF1CaZ5g/C8drsU3ZZ+pHw+dTNuHdKk9a B6U4QukXPAkG/fDK6ygVAi/tGFL+/UgmYEcKOGtZSqLmI7FvE396m8yANfBY2VpL yz+jBmUv9gvSgoU3GOTFkiWLKoifWnyetOBmMYLuUoHgJK+jqIm7M9msnYcd4LGn n+6A8kD22wnlXwsKo8RfKuMzkkd9zFRlBcI= -----END CERTIFICATE-----Generated at Mon May 5 12:29:51 2025 by rpki-client