$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/46458d7f-8248-3067-a79d-c45984ab3f0a.roa File: 46458d7f-8248-3067-a79d-c45984ab3f0a.roa (raw, json) Hash identifier: wXS3CJPUIGzcDZsoXRr+CA3eLm2Bn9CyUElWI8Mlv5k= Subject key identifier: 70:F5:62:6A:ED:03:2C:37:3C:2C:DD:F1:60:2C:0C:85:0E:D7:32:46 Certificate issuer: /CN=473aba48-e57f-40d4-b25e-8e59a1171ae8 Certificate serial: 010D0C9F432858498339EEA82C72BE1C8508EEC0 Authority key identifier: 31:D8:E4:89:EF:82:5A:7B:E9:37:04:AB:E6:B3:60:F1:3C:92:1D:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/46458d7f-8248-3067-a79d-c45984ab3f0a.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 399331 IP address blocks: 2606:25c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/473aba48-e57f-40d4-b25e-8e59a1171ae8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/473aba48-e57f-40d4-b25e-8e59a1171ae8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:ee:a8:2c:72:be:1c:85:08:ee:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473aba48-e57f-40d4-b25e-8e59a1171ae8 Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=b4f109ff-28b5-474a-bd5d-c5358c39af3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c0:29:01:f6:cb:47:fe:e6:f8:60:e3:d2:d1: dd:6f:10:75:fc:f8:30:2f:f6:ce:0a:5d:7d:2f:44: e2:96:34:c7:70:3b:12:ef:e8:98:40:70:bd:88:5f: 8e:f8:97:1a:dc:b8:b0:65:b6:97:54:45:82:c6:45: 42:82:d3:6f:b3:9e:b8:ff:00:11:5b:69:74:3f:c8: 6f:44:a7:68:ad:91:a0:31:ab:32:32:38:be:1f:1f: ab:5d:6c:36:e9:f9:2c:ff:fb:5d:ae:77:8a:a5:a5: d7:c4:3f:87:81:28:17:05:e2:ff:de:3f:d1:69:c2: 5c:48:1a:de:e1:ea:a5:4d:7f:84:d8:65:08:bf:b7: f9:cb:3e:2a:a2:30:f6:13:46:3e:99:34:17:5c:df: b6:5a:25:e6:48:ad:9a:22:21:26:ea:f9:0f:69:49: 51:3c:4a:68:16:a3:af:c7:44:87:3c:22:55:3a:ef: 5e:85:1c:aa:90:28:d1:ba:2c:83:cc:ef:2c:0a:48: 4b:4d:1e:c3:bc:24:61:c6:1c:24:14:c9:e2:1d:ca: 95:8b:54:88:71:5f:45:73:4b:77:d4:64:b3:52:a3: 14:d2:5f:c5:59:38:9a:36:45:9f:d0:67:56:f3:82: fc:f7:99:aa:47:13:8a:e6:f2:30:2b:86:b9:2e:ee: 19:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F5:62:6A:ED:03:2C:37:3C:2C:DD:F1:60:2C:0C:85:0E:D7:32:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/46458d7f-8248-3067-a79d-c45984ab3f0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/473aba48-e57f-40d4-b25e-8e59a1171ae8.crl X509v3 Authority Key Identifier: keyid:31:D8:E4:89:EF:82:5A:7B:E9:37:04:AB:E6:B3:60:F1:3C:92:1D:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8.cer sbgp-ipAddrBlock: critical IPv6: 2606:25c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:92:43:f8:b3:0a:f1:27:4d:47:09:e5:bc:73:2f:91:56:65: a9:8c:ad:7e:90:cf:bf:6c:51:03:68:37:86:2f:b8:1d:30:e4: da:cd:a8:f0:56:37:c8:51:69:11:3b:b8:84:a8:5c:89:6d:4f: 58:60:ab:63:97:bc:48:5e:0f:1c:75:3d:79:54:d2:cb:f9:4b: c6:7a:28:6a:84:8d:49:27:72:dc:55:7b:d2:a2:74:01:c6:95: 18:8a:fc:bd:86:84:6a:07:30:f2:67:1a:5e:cf:a1:ae:11:55: a6:18:0b:9a:e6:2a:74:2e:d2:ed:75:1e:07:01:5f:24:56:4b: 36:11:f4:14:a3:89:b2:05:14:4a:ce:71:19:d5:d1:a6:96:8c: df:c5:c9:f3:82:54:d6:30:36:82:bd:19:bc:13:12:49:a8:bc: 2e:29:07:cc:a1:11:d0:3b:d5:78:79:fa:70:d6:a0:5e:e5:3b: 8c:42:ae:71:13:79:c8:dd:10:c6:70:54:25:08:81:37:b9:e6: e4:2d:86:c5:e5:d2:f6:f9:44:07:51:2a:84:d1:f0:53:07:72: 04:aa:e4:41:47:58:49:17:f7:ed:ab:46:f5:8c:71:9d:8f:b0: 3e:26:00:23:55:58:23:b6:8f:31:e5:9e:a9:3e:61:03:c3:10: a5:af:fa:44 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmDOe6oLHK+HIUI7sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDczYWJhNDgtZTU3Zi00MGQ0LWIyNWUtOGU1OWExMTcx YWU4MB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk YjRmMTA5ZmYtMjhiNS00NzRhLWJkNWQtYzUzNThjMzlhZjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsApAfbLR/7m+GDj0tHdbxB1/PgwL/bOCl19 L0TiljTHcDsS7+iYQHC9iF+O+Jca3LiwZbaXVEWCxkVCgtNvs564/wARW2l0P8hv RKdorZGgMasyMji+Hx+rXWw26fks//tdrneKpaXXxD+HgSgXBeL/3j/RacJcSBre 4eqlTX+E2GUIv7f5yz4qojD2E0Y+mTQXXN+2WiXmSK2aIiEm6vkPaUlRPEpoFqOv x0SHPCJVOu9ehRyqkCjRuiyDzO8sCkhLTR7DvCRhxhwkFMniHcqVi1SIcV9Fc0t3 1GSzUqMU0l/FWTiaNkWf0GdW84L895mqRxOK5vIwK4a5Lu4ZSQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHD1YmrtAyw3PCzd8WAsDIUO1zJGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NzNh YmE0OC1lNTdmLTQwZDQtYjI1ZS04ZTU5YTExNzFhZTgvNDY0NThkN2YtODI0OC0z MDY3LWE3OWQtYzQ1OTg0YWIzZjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDczYWJhNDgtZTU3Zi00MGQ0LWIy NWUtOGU1OWExMTcxYWU4LzQ3M2FiYTQ4LWU1N2YtNDBkNC1iMjVlLThlNTlhMTE3 MWFlOC5jcmwwHwYDVR0jBBgwFoAUMdjkie+CWnvpNwSr5rNg8TySHUowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NzNhYmE0OC1lNTdmLTQwZDQtYjI1ZS04ZTU5 YTExNzFhZTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgYlwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQClkkP4swrxJ01HCeW8cy+RVmWpjK1+kM+/bFEDaDeGL7gdMOTazajw VjfIUWkRO7iEqFyJbU9YYKtjl7xIXg8cdT15VNLL+UvGeihqhI1JJ3LcVXvSonQB xpUYivy9hoRqBzDyZxpez6GuEVWmGAua5ip0LtLtdR4HAV8kVks2EfQUo4myBRRK znEZ1dGmlozfxcnzglTWMDaCvRm8ExJJqLwuKQfMoRHQO9V4efpw1qBe5TuMQq5x E3nI3RDGcFQlCIE3uebkLYbF5dL2+UQHUSqE0fBTB3IEquRBR1hJF/ftq0b1jHGd j7A+JgAjVVgjto8x5Z6pPmEDwxClr/pE -----END CERTIFICATE-----Generated at Tue Apr 29 06:35:41 2025 by rpki-client