$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fff9ea91-21f3-3786-be09-fd1a98051694.roa File: fff9ea91-21f3-3786-be09-fd1a98051694.roa (raw, json) Hash identifier: eKH1knsqTJyUFWSsCskrW3GPlvtrEgSeumqVcFntP9w= Subject key identifier: 87:0C:82:4B:D5:F1:17:26:00:F2:B6:D8:74:65:C1:7D:FD:C8:2A:0F Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858498A42ECC85F340E5EA1E88600 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fff9ea91-21f3-3786-be09-fd1a98051694.roa Signing time: Wed 16 Apr 2025 01:30:13 +0000 ROA not before: Wed 16 Apr 2025 01:30:13 +0000 ROA not after: Tue 15 Jul 2025 01:30:13 +0000 asID: 17717 IP address blocks: 2001:470:3fd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8a:42:ec:c8:5f:34:0e:5e:a1:e8:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 16 01:30:13 2025 GMT Not After : Jul 15 01:30:13 2025 GMT Subject: CN=204f4a85-1abf-4da6-a194-6889fe25862d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:14:89:8d:44:6e:81:86:22:9a:bc:db:d1:42: f2:64:fa:2b:a1:0b:64:45:c1:01:06:79:2c:15:b0: 29:9a:b4:86:21:5a:5f:a4:27:4c:0a:bf:d5:73:46: 71:64:82:fc:aa:f2:d7:e1:23:bd:12:c4:6b:b6:1c: db:1a:3f:ba:7b:ea:39:ce:d8:ba:50:5d:51:b3:49: ec:d9:75:65:f4:97:fb:f0:6e:76:82:00:c0:f2:ba: 90:8b:40:68:b4:6a:29:a4:79:9f:ee:6d:cf:ef:c1: 0e:70:36:17:fb:e7:03:47:22:1a:a0:d8:63:14:c8: 1c:fa:df:b9:c6:5b:1d:dc:32:fb:20:67:86:fb:01: 14:30:4d:fb:60:22:5e:c4:14:22:14:6a:f9:52:8a: 61:d9:7e:1f:3e:9f:0b:a3:8e:b4:8d:f1:7d:09:f3: ea:73:5f:e2:d9:86:52:4c:06:8b:68:82:39:a0:24: 8c:a8:76:41:9c:4b:a3:46:b5:2d:ab:cc:48:19:21: 51:f9:00:d8:16:81:4e:21:e5:70:67:f2:a0:24:d3: 8c:cb:a3:49:e2:9a:df:29:44:51:e8:a2:c8:25:56: c6:a1:f4:cc:dc:69:fe:10:dc:fc:ac:72:f4:fc:58: 74:14:e9:13:4c:a2:6e:a2:26:05:7f:c6:54:58:1a: 86:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:0C:82:4B:D5:F1:17:26:00:F2:B6:D8:74:65:C1:7D:FD:C8:2A:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fff9ea91-21f3-3786-be09-fd1a98051694.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3fd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:4c:be:4b:ec:e4:75:33:a9:65:69:aa:7f:01:b5:fd:73:4f: 44:da:4a:19:b6:23:44:83:5c:c5:4a:63:9e:d9:1f:18:d9:62: 91:45:53:d1:64:fe:e8:07:ca:e3:e5:05:14:d7:f0:59:a2:20: f9:fd:57:70:d5:7d:d6:29:4b:ff:2b:74:51:83:f8:c9:0b:26: 1e:b5:09:7c:4b:bd:aa:d8:3d:85:82:49:f3:ee:df:a9:df:89: 70:c5:21:06:fb:6e:0d:ab:06:35:0a:c1:d5:3d:19:81:e3:20: e1:7b:64:4d:4a:02:4e:bb:cf:2f:b2:fc:79:e2:f6:d1:d5:d7: 81:ca:3d:d6:2c:1b:b5:35:c8:5c:12:b5:88:59:d7:24:43:c2: 25:65:84:db:4b:46:1f:c3:84:39:f3:df:31:5d:50:af:bb:67: c5:f9:f6:3a:77:14:2b:94:b6:ab:96:48:d3:78:67:5c:e8:8b: ee:76:5c:0f:be:7a:55:20:c8:d3:7a:15:bc:c0:eb:92:a9:8a: 9a:4f:78:76:55:16:f6:38:92:50:c5:78:95:43:c5:44:9e:dc: a1:6f:7e:c3:91:8d:4b:54:e4:a8:dd:fb:06:20:88:11:82:8c: cf:fb:91:0d:51:12:0d:d9:7c:90:38:47:b8:76:b7:64:85:6d: be:91:42:31 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmKQuzIXzQOXqHohgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDQxNjAxMzAxM1oXDTI1MDcxNTAxMzAxM1owLzEtMCsGA1UEAxMk MjA0ZjRhODUtMWFiZi00ZGE2LWExOTQtNjg4OWZlMjU4NjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRSJjURugYYimrzb0ULyZPoroQtkRcEBBnks FbApmrSGIVpfpCdMCr/Vc0ZxZIL8qvLX4SO9EsRrthzbGj+6e+o5zti6UF1Rs0ns 2XVl9Jf78G52ggDA8rqQi0BotGoppHmf7m3P78EOcDYX++cDRyIaoNhjFMgc+t+5 xlsd3DL7IGeG+wEUME37YCJexBQiFGr5Uoph2X4fPp8Lo460jfF9CfPqc1/i2YZS TAaLaII5oCSMqHZBnEujRrUtq8xIGSFR+QDYFoFOIeVwZ/KgJNOMy6NJ4prfKURR 6KLIJVbGofTM3Gn+ENz8rHL0/Fh0FOkTTKJuoiYFf8ZUWBqGWQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIcMgkvV8RcmAPK22HRlwX39yCoPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZmZmOWVhOTEtMjFmMy0z Nzg2LWJlMDktZmQxYTk4MDUxNjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAP9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG5Mvkvs5HUzqWVpqn8Btf1zT0TaShm2I0SDXMVKY57ZHxjZYpFF U9Fk/ugHyuPlBRTX8FmiIPn9V3DVfdYpS/8rdFGD+MkLJh61CXxLvarYPYWCSfPu 36nfiXDFIQb7bg2rBjUKwdU9GYHjIOF7ZE1KAk67zy+y/Hni9tHV14HKPdYsG7U1 yFwStYhZ1yRDwiVlhNtLRh/DhDnz3zFdUK+7Z8X59jp3FCuUtquWSNN4Z1zoi+52 XA++elUgyNN6FbzA65KpippPeHZVFvY4klDFeJVDxUSe3KFvfsORjUtU5Kjd+wYg iBGCjM/7kQ1REg3ZfJA4R7h2t2SFbb6RQjE= -----END CERTIFICATE-----Generated at Fri May 9 15:31:57 2025 by rpki-client