$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d63e6218-406c-37f2-b76e-d912ad9a70f5.roa File: d63e6218-406c-37f2-b76e-d912ad9a70f5.roa (raw, json) Hash identifier: JHmblUQrXKBZX1g+6Wl/B6UmHf+JxGwCwPjYUTvEaQk= Subject key identifier: 01:91:BE:43:9E:0B:88:FD:F7:FD:91:9F:CC:96:1F:56:D4:6C:77:EB Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858498769A4AA263EAEC89815BB80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d63e6218-406c-37f2-b76e-d912ad9a70f5.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 9416 IP address blocks: 2001:470:3fd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:a4:aa:26:3e:ae:c8:98:15:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=0ee3bdd5-f749-40fe-877b-280f6bf45da8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:11:a6:fb:56:76:dc:d3:a4:d7:75:37:f5:eb: 13:29:d3:b2:6a:d7:9e:8c:36:8c:f8:68:5d:7f:05: 69:cd:75:44:c1:87:e1:fe:f3:73:64:4a:31:04:e7: e8:85:7a:93:29:27:07:1c:4f:89:bf:20:c1:7e:c7: 7f:9b:a7:93:cf:c3:82:3d:c8:d5:cc:ed:3a:4d:0e: cf:db:4e:9a:fd:99:ad:34:36:bf:d1:74:76:9e:cf: 74:83:80:df:71:f3:31:b8:b0:70:d7:38:df:d5:e2: 86:d2:b2:30:42:01:82:23:b0:52:fa:e2:4e:1c:be: 77:8a:67:05:c4:f0:2e:55:8d:db:15:96:e3:27:e9: 96:29:dd:95:90:12:d5:cc:d7:20:86:72:f1:c8:67: da:be:20:f6:de:dc:1c:70:8a:d5:d6:2f:21:30:69: 9a:6f:23:af:52:d3:dc:b9:74:53:36:63:fd:73:04: bd:0a:c2:8a:13:ce:ac:95:01:d4:9a:f0:37:8d:20: 45:a0:a7:97:9c:0d:86:94:f1:6b:24:2f:86:43:f7: a7:25:9c:ce:56:dd:20:e1:dd:30:f7:cf:22:f9:60: 44:4b:01:cf:d8:5c:f0:1e:fb:c4:fc:4c:bc:0a:0f: dd:2a:ef:a6:ee:86:bd:39:90:8f:8d:c9:36:6d:f6: 94:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:91:BE:43:9E:0B:88:FD:F7:FD:91:9F:CC:96:1F:56:D4:6C:77:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d63e6218-406c-37f2-b76e-d912ad9a70f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3fd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:12:1b:3c:e3:cc:2d:3b:b4:ed:b2:d4:57:0d:08:34:7f:a4: 5b:08:db:74:ce:ea:52:4e:2b:22:5c:0f:d4:1e:a8:b9:12:9b: 28:2a:24:32:9e:91:79:3e:19:fb:a4:e5:68:b6:5a:13:74:c0: d2:50:72:cb:4d:02:58:eb:87:e0:85:58:fc:90:00:62:4e:20: 40:d2:8d:18:42:c3:fc:9d:11:e8:6c:68:6d:13:cb:69:20:2e: 29:98:a2:c7:0f:a7:87:ee:9c:6e:32:8f:fe:4f:aa:ec:7f:fc: 5f:07:36:3c:d3:05:03:c1:7e:77:fe:6b:5c:fc:2c:39:ea:28: f6:ea:37:5d:22:43:cd:fc:11:af:de:ee:8f:4e:74:ef:c5:b0: d5:47:3e:71:0b:62:82:13:e1:c3:82:b8:a5:56:0e:77:1e:65: a8:d6:79:e9:04:e5:3b:99:03:db:d1:48:fc:98:fd:cb:3d:c8: 11:ed:90:55:10:4f:46:45:e0:f4:69:9f:5a:cb:c7:0c:d8:51: 38:8b:37:28:38:72:75:25:d2:7c:78:27:62:3e:38:6d:d1:b3: 69:1f:fe:8f:40:f1:81:96:9d:f0:ab:3e:be:da:3c:30:2c:13: 27:4e:2b:e4:db:27:39:82:aa:3e:57:ac:9c:b4:8f:bd:18:c5: e8:70:0f:1a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmHaaSqJj6uyJgVu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk MGVlM2JkZDUtZjc0OS00MGZlLTg3N2ItMjgwZjZiZjQ1ZGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhGm+1Z23NOk13U39esTKdOyateejDaM+Ghd fwVpzXVEwYfh/vNzZEoxBOfohXqTKScHHE+JvyDBfsd/m6eTz8OCPcjVzO06TQ7P 206a/ZmtNDa/0XR2ns90g4DfcfMxuLBw1zjf1eKG0rIwQgGCI7BS+uJOHL53imcF xPAuVY3bFZbjJ+mWKd2VkBLVzNcghnLxyGfaviD23twccIrV1i8hMGmabyOvUtPc uXRTNmP9cwS9CsKKE86slQHUmvA3jSBFoKeXnA2GlPFrJC+GQ/enJZzOVt0g4d0w 988i+WBESwHP2FzwHvvE/Ey8Cg/dKu+m7oa9OZCPjck2bfaUwQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAGRvkOeC4j99/2Rn8yWH1bUbHfrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDYzZTYyMTgtNDA2Yy0z N2YyLWI3NmUtZDkxMmFkOWE3MGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAP9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKYSGzzjzC07tO2y1FcNCDR/pFsI23TO6lJOKyJcD9QeqLkSmygq JDKekXk+Gfuk5Wi2WhN0wNJQcstNAljrh+CFWPyQAGJOIEDSjRhCw/ydEehsaG0T y2kgLimYoscPp4funG4yj/5Pqux//F8HNjzTBQPBfnf+a1z8LDnqKPbqN10iQ838 Ea/e7o9OdO/FsNVHPnELYoIT4cOCuKVWDnceZajWeekE5TuZA9vRSPyY/cs9yBHt kFUQT0ZF4PRpn1rLxwzYUTiLNyg4cnUl0nx4J2I+OG3Rs2kf/o9A8YGWnfCrPr7a PDAsEydOK+TbJzmCqj5XrJy0j70YxehwDxo= -----END CERTIFICATE-----Generated at Mon May 5 06:30:56 2025 by rpki-client