$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/597057d6-5ef3-3986-8707-2461f46b159b.roa File: 597057d6-5ef3-3986-8707-2461f46b159b.roa (raw, json) Hash identifier: LIcsIhvtjN/6WfszJnbFn9IxSUNuwp25OY1EFOx3gp0= Subject key identifier: 05:8B:F2:5F:3B:11:6B:E3:58:B5:58:3F:3D:38:00:A1:1A:D5:F6:DB Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849AD19FC0484616E08BE913C80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/597057d6-5ef3-3986-8707-2461f46b159b.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 16679 IP address blocks: 2001:470:410::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:19:fc:04:84:61:6e:08:be:91:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=9349d78a-7b15-46a4-9ba3-5f1ff7eab07d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:83:61:db:e1:e2:31:ee:76:d1:72:3c:3e:23: 56:e4:eb:8b:7a:68:ff:33:34:6a:5f:74:0b:28:73: b3:39:04:8b:f1:b5:06:8c:f2:74:6d:3c:b5:87:c4: 06:cf:e9:c7:16:fb:11:b0:04:51:9e:e7:e7:da:3e: ce:a8:e2:75:f6:ba:56:a0:15:10:aa:b4:ba:dc:10: b7:b1:e5:b4:e2:ab:bb:22:62:49:0a:a2:d3:46:c8: 76:06:56:32:a6:e3:39:1b:c4:ce:3d:52:ef:7d:3b: 82:1b:5f:8b:cd:b0:7f:b4:a0:8f:c4:7b:23:80:c8: 21:75:25:b6:9d:b1:48:0e:13:7e:e4:72:b9:1d:a4: a0:9b:1b:0f:ec:65:40:d5:fc:b5:b0:87:65:ad:08: 34:4d:dd:94:74:ea:53:d4:32:11:58:ba:71:f7:a7: b5:2c:56:55:b9:0e:82:b0:48:cc:22:c7:46:e4:a9: e2:68:f1:b8:1f:f9:b1:47:97:fe:48:19:0c:db:8a: f6:6e:9f:e4:3d:d4:c3:e5:c4:2e:54:7e:9d:14:82: cc:b1:6e:02:1d:b5:9c:fc:17:e7:e3:e1:ca:69:33: b2:27:8e:fd:17:26:5f:56:e4:d4:09:16:20:63:b1: 80:6d:da:c7:1f:f6:c6:70:fa:39:85:1d:d6:c7:75: 05:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:8B:F2:5F:3B:11:6B:E3:58:B5:58:3F:3D:38:00:A1:1A:D5:F6:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/597057d6-5ef3-3986-8707-2461f46b159b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:410::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:5e:df:0d:ea:35:1f:17:0e:ad:f3:d2:83:0e:cf:7b:7d:2c: a9:29:e8:fa:fc:a0:59:1e:92:6c:57:65:e2:4e:10:60:2e:7f: b4:d1:73:1f:b1:61:db:0b:fd:36:79:19:b8:c6:f2:a9:84:10: 31:88:c8:2b:38:a7:dc:05:1a:0b:35:ac:ce:ea:ab:b9:85:71: cd:85:6a:c1:7e:09:9e:c3:cb:9f:ed:5b:e1:58:82:42:67:c7: 86:b4:4a:5c:b4:11:2c:e0:93:a6:79:e5:01:54:54:75:86:92: 1c:3d:20:81:9f:9f:56:6d:bf:a1:ba:70:30:4b:e8:f9:a0:6c: 9d:a4:d0:24:75:77:be:84:73:d4:02:ed:3d:d9:da:35:cd:0d: bf:1f:fc:d6:85:fc:32:4c:13:b5:6d:52:ba:d7:ab:b6:52:36: 2c:0d:76:bc:c0:0e:08:49:29:2f:9f:12:d0:68:7e:03:7f:f8: f8:14:0f:71:44:35:0b:bf:dc:ce:f2:ee:da:ce:33:db:f1:af: 3a:a1:90:59:bd:e9:1b:1d:ad:44:c5:51:bb:6f:3a:5a:7d:4a: 61:13:06:b4:3d:96:a9:cf:ce:24:6a:2b:aa:1c:ea:2b:98:80: 86:75:7b:1c:0c:d3:d3:26:90:cc:d9:28:28:fb:db:60:ff:87: a8:43:33:db -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmtGfwEhGFuCL6RPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk OTM0OWQ3OGEtN2IxNS00NmE0LTliYTMtNWYxZmY3ZWFiMDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuINh2+HiMe520XI8PiNW5OuLemj/MzRqX3QL KHOzOQSL8bUGjPJ0bTy1h8QGz+nHFvsRsARRnufn2j7OqOJ19rpWoBUQqrS63BC3 seW04qu7ImJJCqLTRsh2BlYypuM5G8TOPVLvfTuCG1+LzbB/tKCPxHsjgMghdSW2 nbFIDhN+5HK5HaSgmxsP7GVA1fy1sIdlrQg0Td2UdOpT1DIRWLpx96e1LFZVuQ6C sEjMIsdG5KniaPG4H/mxR5f+SBkM24r2bp/kPdTD5cQuVH6dFILMsW4CHbWc/Bfn 4+HKaTOyJ479FyZfVuTUCRYgY7GAbdrHH/bGcPo5hR3Wx3UFNQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAWL8l87EWvjWLVYPz04AKEa1fbbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTk3MDU3ZDYtNWVmMy0z OTg2LTg3MDctMjQ2MWY0NmIxNTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFNe3w3qNR8XDq3z0oMOz3t9LKkp6Pr8oFkekmxXZeJOEGAuf7TR cx+xYdsL/TZ5GbjG8qmEEDGIyCs4p9wFGgs1rM7qq7mFcc2FasF+CZ7Dy5/tW+FY gkJnx4a0Sly0ESzgk6Z55QFUVHWGkhw9IIGfn1Ztv6G6cDBL6PmgbJ2k0CR1d76E c9QC7T3Z2jXNDb8f/NaF/DJME7VtUrrXq7ZSNiwNdrzADghJKS+fEtBofgN/+PgU D3FENQu/3M7y7trOM9vxrzqhkFm96RsdrUTFUbtvOlp9SmETBrQ9lqnPziRqK6oc 6iuYgIZ1exwM09MmkMzZKCj722D/h6hDM9s= -----END CERTIFICATE-----Generated at Mon May 5 02:48:25 2025 by rpki-client