$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/814315cb-21d5-3186-af0c-7aed6d449a67.roa File: 814315cb-21d5-3186-af0c-7aed6d449a67.roa (raw, json) Hash identifier: ZQkEUqJSR5qIWnBYve6HAkBDsSmE9jHLb/yWauyfULg= Subject key identifier: 63:A5:10:03:49:10:8E:96:09:3D:A5:24:1A:87:05:17:24:18:47:CF Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858499C5A1538D91AA86904C00980 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/814315cb-21d5-3186-af0c-7aed6d449a67.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 13943 IP address blocks: 2001:470:89::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:5a:15:38:d9:1a:a8:69:04:c0:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=b9a976cd-fde6-44fc-a7fe-dc61545f64d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e6:74:db:23:5e:c9:d3:51:1c:5c:6b:aa:1e: ef:87:52:c4:0e:da:e4:7c:6e:e1:62:31:73:1e:02: 8b:88:c0:59:bc:30:bf:4b:40:65:80:9a:43:23:25: be:6b:48:3e:b3:c7:78:ef:0b:08:8b:fe:93:bb:cc: dd:02:fc:be:ab:31:15:e4:76:0c:13:32:2d:7a:8d: 79:06:1e:a2:ad:47:1b:ec:6a:2f:89:90:3b:da:84: d4:19:8f:22:06:0f:ce:da:55:44:90:b6:3a:60:c1: 2d:60:bc:b6:8a:0f:0b:36:e7:a1:90:57:a4:28:e5: b2:12:7f:d1:91:12:b4:a5:88:e0:6e:42:67:38:41: 29:22:a0:33:d1:8b:60:1c:cc:28:ad:a1:a8:cc:7c: f9:c1:e6:5e:e1:6c:5d:ca:df:5a:22:b7:76:7b:1b: 7e:9e:9b:38:ca:c6:10:1e:5f:8c:ce:42:cc:cc:9c: 60:e6:b8:8e:84:d6:1a:70:4c:4c:4d:86:06:d6:93: 12:34:12:8a:e8:bb:16:2e:b3:b6:09:01:48:c2:74: ba:8a:86:2c:af:58:f4:29:ea:24:f0:90:a9:d7:80: e7:cb:df:07:a2:ca:7b:11:e8:a2:24:03:4c:b5:43: c3:93:c7:50:f6:02:65:f1:f0:cd:7e:b6:d1:8a:c5: 22:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:A5:10:03:49:10:8E:96:09:3D:A5:24:1A:87:05:17:24:18:47:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/814315cb-21d5-3186-af0c-7aed6d449a67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:89::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:1b:b3:81:8d:80:79:fb:0d:a1:bb:b0:c9:7d:e8:2c:dd:0a: be:c8:33:67:b7:72:e2:1a:68:1d:0d:db:b2:32:12:0a:e5:09: bd:28:45:9f:1d:5e:15:f0:b3:f7:31:4f:e0:f9:a2:ec:77:98: 0b:81:48:5d:ed:45:1b:85:8c:ba:4c:27:04:7f:ca:ef:8d:c4: 01:bb:62:86:29:9e:4e:1a:df:74:9e:c6:6d:eb:9a:b5:ad:83: 49:71:ad:3e:af:2f:d8:fb:f5:88:3b:8e:f9:10:f2:d5:ad:b7: 23:81:16:ca:0a:76:75:1b:e0:48:39:15:4c:6d:54:4b:b8:a7: 8d:07:5f:ef:57:55:f8:95:d6:0f:ef:6d:6f:2b:cc:f6:c1:74: a1:4a:74:df:f9:76:56:92:c1:e3:88:fd:fa:2e:c5:77:a5:dc: 13:dd:87:f2:1b:ba:aa:3b:38:21:e6:43:e2:8b:f7:bc:fc:3c: d7:8c:e0:39:d3:37:5f:3b:ba:10:62:43:fe:f5:79:ae:1e:79: 6d:61:4f:85:eb:e7:21:87:27:19:d7:d4:83:a0:e8:4f:41:06: d6:d7:98:22:7b:f7:07:b1:45:d5:6c:e7:7e:42:9c:2a:b9:32: 29:49:da:fc:44:61:f9:14:43:72:6b:a6:fd:b4:af:dc:9f:9a: 0f:ed:cb:c1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmcWhU42RqoaQTACYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk YjlhOTc2Y2QtZmRlNi00NGZjLWE3ZmUtZGM2MTU0NWY2NGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguZ02yNeydNRHFxrqh7vh1LEDtrkfG7hYjFz HgKLiMBZvDC/S0BlgJpDIyW+a0g+s8d47wsIi/6Tu8zdAvy+qzEV5HYMEzIteo15 Bh6irUcb7GoviZA72oTUGY8iBg/O2lVEkLY6YMEtYLy2ig8LNuehkFekKOWyEn/R kRK0pYjgbkJnOEEpIqAz0YtgHMworaGozHz5weZe4Wxdyt9aIrd2ext+nps4ysYQ Hl+MzkLMzJxg5riOhNYacExMTYYG1pMSNBKK6LsWLrO2CQFIwnS6ioYsr1j0Keok 8JCp14Dny98Hosp7EeiiJANMtUPDk8dQ9gJl8fDNfrbRisUinwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGOlEANJEI6WCT2lJBqHBRckGEfPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODE0MzE1Y2ItMjFkNS0z MTg2LWFmMGMtN2FlZDZkNDQ5YTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEMbs4GNgHn7DaG7sMl96CzdCr7IM2e3cuIaaB0N27IyEgrlCb0o RZ8dXhXws/cxT+D5oux3mAuBSF3tRRuFjLpMJwR/yu+NxAG7YoYpnk4a33Sexm3r mrWtg0lxrT6vL9j79Yg7jvkQ8tWttyOBFsoKdnUb4Eg5FUxtVEu4p40HX+9XVfiV 1g/vbW8rzPbBdKFKdN/5dlaSweOI/fouxXel3BPdh/Ibuqo7OCHmQ+KL97z8PNeM 4DnTN187uhBiQ/71ea4eeW1hT4Xr5yGHJxnX1IOg6E9BBtbXmCJ79wexRdVs535C nCq5MilJ2vxEYfkUQ3Jrpv20r9yfmg/ty8E= -----END CERTIFICATE-----Generated at Mon May 5 12:25:56 2025 by rpki-client