$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f4bed3ab-44be-32ad-8d1b-e3a2319568f3.roa File: f4bed3ab-44be-32ad-8d1b-e3a2319568f3.roa (raw, json) Hash identifier: iGB1WEf0xgHhz4HxOitG3ufdkuszX7LCfGyOCzJjdec= Subject key identifier: A9:DD:CA:89:9B:D8:C5:6A:4D:6A:A2:4D:DA:1C:D2:F4:BC:F6:97:96 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849CA78A09653A8214E40EAB980 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f4bed3ab-44be-32ad-8d1b-e3a2319568f3.roa Signing time: Fri 09 May 2025 01:30:10 +0000 ROA not before: Fri 09 May 2025 01:30:10 +0000 ROA not after: Thu 07 Aug 2025 01:30:10 +0000 asID: 36493 IP address blocks: 2001:470:45f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ca:78:a0:96:53:a8:21:4e:40:ea:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 9 01:30:10 2025 GMT Not After : Aug 7 01:30:10 2025 GMT Subject: CN=19b9caa5-6b68-4af7-ad3c-77ba8e653111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ae:42:26:57:9f:68:42:49:08:87:34:f3:f1: 94:93:0d:6d:9e:1a:55:98:14:af:b7:88:c1:84:ab: 19:f4:7f:83:43:2a:e7:6b:f5:fd:72:18:89:7b:b4: 4c:5b:e9:b3:55:c2:28:9c:8c:13:7c:9a:b4:6f:84: 98:3e:18:ba:e4:47:d9:10:bf:25:3e:2b:10:60:76: 0a:da:61:b6:e0:06:db:3a:f4:0b:cb:8e:b0:ec:30: 5b:9b:8c:7b:cb:cd:e0:3c:e0:a9:c9:78:66:ad:ba: 23:f3:62:a0:83:b1:9e:ef:0b:05:b5:09:11:c5:cd: 26:ca:83:c0:13:d1:f3:e0:28:db:60:85:b7:35:6a: 8c:20:2b:d5:ff:68:a0:1e:09:d2:3d:3d:b9:08:f3: a1:e2:2b:78:7c:39:98:81:65:69:65:01:0d:8c:28: 2c:34:8d:b8:15:c0:63:81:00:b9:e5:ae:16:38:b3: ae:ce:91:8f:7d:44:b3:99:76:8a:59:80:1e:ca:19: 11:35:c5:79:dc:bb:4a:ef:4a:f4:de:5a:d5:21:11: 0d:b7:79:f8:8c:9e:83:cb:ab:c1:ae:68:f3:2f:13: 59:ac:2f:aa:ce:d2:82:f3:dd:a7:bc:48:d6:c6:5a: ac:3a:85:b7:85:e0:60:07:ad:76:a2:52:9d:fa:c4: 42:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:DD:CA:89:9B:D8:C5:6A:4D:6A:A2:4D:DA:1C:D2:F4:BC:F6:97:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f4bed3ab-44be-32ad-8d1b-e3a2319568f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:45f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:e6:2b:44:3e:82:ed:46:6e:42:b6:75:0a:62:6e:2c:4f:0d: cf:19:04:d1:6c:8b:ee:89:2c:84:2d:8f:dd:15:c1:e6:d1:8c: 00:bd:67:21:8c:96:91:52:c8:71:5c:b6:3c:0d:53:27:e1:d5: 4e:31:65:c9:f3:ae:8c:e8:9a:89:26:cd:33:d7:18:f2:5e:be: 67:8d:d7:6c:09:f7:f0:aa:78:71:2d:5e:d0:1d:b5:6e:a4:d6: 32:20:30:5c:7a:75:33:d9:e6:78:a7:81:b7:62:16:09:1d:c8: d3:54:ac:1a:8f:e6:3c:5b:be:58:85:a7:eb:1b:41:1b:76:a1: 3a:cc:f6:71:9b:18:e6:06:70:f9:a5:db:03:6f:0d:3e:b0:0e: a4:22:c8:3c:53:aa:1e:51:06:ac:ba:7c:91:69:23:6c:89:b7: 4e:bd:4c:2e:a1:8a:0a:1b:c8:3c:50:35:80:be:a9:26:4a:19: 4c:41:3a:54:c8:71:27:88:3a:f5:03:61:19:8a:c2:01:b5:d2: 2b:30:e4:d5:95:5e:0c:fe:be:15:56:38:66:95:5f:15:e9:8c: 37:51:2b:fe:fb:83:cd:0d:94:2b:02:21:89:15:7b:f8:aa:9a: f0:b7:ff:33:8a:6e:6c:f0:a3:f4:64:8a:5b:9d:e6:c8:01:91: 15:a3:7e:8b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnKeKCWU6ghTkDquYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUwOTAxMzAxMFoXDTI1MDgwNzAxMzAxMFowLzEtMCsGA1UEAxMk MTliOWNhYTUtNmI2OC00YWY3LWFkM2MtNzdiYThlNjUzMTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAva5CJlefaEJJCIc08/GUkw1tnhpVmBSvt4jB hKsZ9H+DQyrna/X9chiJe7RMW+mzVcIonIwTfJq0b4SYPhi65EfZEL8lPisQYHYK 2mG24AbbOvQLy46w7DBbm4x7y83gPOCpyXhmrboj82Kgg7Ge7wsFtQkRxc0myoPA E9Hz4CjbYIW3NWqMICvV/2igHgnSPT25CPOh4it4fDmYgWVpZQENjCgsNI24FcBj gQC55a4WOLOuzpGPfUSzmXaKWYAeyhkRNcV53LtK70r03lrVIRENt3n4jJ6Dy6vB rmjzLxNZrC+qztKC892nvEjWxlqsOoW3heBgB612olKd+sRCewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKndyomb2MVqTWqiTdoc0vS89peWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjRiZWQzYWItNDRiZS0z MmFkLThkMWItZTNhMjMxOTU2OGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcARf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMPmK0Q+gu1GbkK2dQpibixPDc8ZBNFsi+6JLIQtj90VwebRjAC9 ZyGMlpFSyHFctjwNUyfh1U4xZcnzrozomokmzTPXGPJevmeN12wJ9/CqeHEtXtAd tW6k1jIgMFx6dTPZ5ningbdiFgkdyNNUrBqP5jxbvliFp+sbQRt2oTrM9nGbGOYG cPml2wNvDT6wDqQiyDxTqh5RBqy6fJFpI2yJt069TC6higobyDxQNYC+qSZKGUxB OlTIcSeIOvUDYRmKwgG10isw5NWVXgz+vhVWOGaVXxXpjDdRK/77g80NlCsCIYkV e/iqmvC3/zOKbmzwo/Rkilud5sgBkRWjfos= -----END CERTIFICATE-----Generated at Sat May 10 20:33:47 2025 by rpki-client