$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/09dda9a6-e41c-32e4-b194-7c3666a087a3.roa File: 09dda9a6-e41c-32e4-b194-7c3666a087a3.roa (raw, json) Hash identifier: nFfdGdwZcjFN3WLkKG8CBd5j1xLYudZd9mrDgzlQu6E= Subject key identifier: 13:B7:C5:1C:13:57:81:3D:E6:78:A1:A3:E5:A9:C9:9F:93:22:C2:79 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FDE7920ECD1B7B97BFE80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/09dda9a6-e41c-32e4-b194-7c3666a087a3.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 54118 IP address blocks: 2001:470:79::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:de:79:20:ec:d1:b7:b9:7b:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=a7396d39-1b78-49bf-8f71-a40a7a4f010f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0f:5a:f8:8e:a2:e8:12:de:18:ba:6a:af:80: 6a:52:32:5d:5f:4f:b7:8b:5a:16:8e:d6:08:b8:51: 85:7d:3b:8a:c2:4d:a4:1c:05:60:c0:22:f8:12:ab: 59:1f:36:63:59:5a:39:93:11:fc:30:f1:2d:1f:65: b5:a6:f4:a0:8d:54:7c:1b:69:d7:ef:0d:79:31:5c: 8f:10:c5:a0:07:40:ba:45:0a:c8:40:16:68:09:69: b7:cc:f2:9d:7f:18:49:84:8e:18:26:d5:a1:5a:a6: 9f:cd:08:10:94:d8:72:54:25:7e:d8:12:63:7d:77: 42:7a:87:c8:19:b9:c1:07:ac:fd:b7:5a:2f:4f:b8: 86:aa:76:f5:25:3b:15:44:c7:0e:36:5d:46:c3:af: cd:c6:43:44:ed:fd:27:ec:62:74:25:e8:0e:1a:29: b1:be:32:48:91:e7:f5:a4:2c:02:a7:bc:06:d8:1c: 79:8e:d1:c8:c9:32:2b:b1:ba:6a:37:a9:f3:ff:6f: 80:d0:a1:d8:4f:0a:40:e9:19:f2:2c:62:30:f9:e0: 1c:53:59:c9:71:b2:f1:54:a2:16:11:05:c2:45:73: 11:08:52:62:28:fb:90:b3:cf:dc:78:7d:0f:7c:b7: 68:34:f4:53:c1:86:f9:9c:bb:34:50:9b:e7:83:52: 8b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B7:C5:1C:13:57:81:3D:E6:78:A1:A3:E5:A9:C9:9F:93:22:C2:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/09dda9a6-e41c-32e4-b194-7c3666a087a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:79::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:ae:ef:61:8d:8c:57:e1:56:d4:79:73:71:ac:e6:38:42:49: ea:97:95:1c:9b:9a:18:0a:92:0a:a9:21:d9:70:27:b2:51:d3: a4:93:a2:91:55:e6:d1:c2:e6:fa:89:4d:6c:97:ee:e5:90:ab: 0b:6e:01:f1:1a:19:2c:84:62:94:2c:cb:df:cd:97:42:b5:09: 21:ba:89:07:94:65:d6:07:be:fe:c2:86:16:ca:53:82:29:74: 9a:c5:10:dc:95:79:73:d9:f5:cc:6e:c7:e1:c3:6f:51:57:2e: 03:cc:af:88:59:df:38:f8:d5:9a:c4:e9:52:fa:94:56:f7:7a: ed:0e:d8:25:9c:ac:ea:94:63:8f:58:54:ce:69:2c:18:0c:bf: ce:c3:77:93:ef:a2:5d:24:89:53:ea:99:6b:30:70:69:e3:2b: 25:cb:ac:44:b1:1b:0f:b9:2d:0d:68:71:16:67:23:bc:0a:54: 64:63:9d:84:f6:bb:dd:06:95:29:f7:dc:76:fa:99:22:04:c3: ad:76:12:f4:47:f0:68:2a:92:d3:f4:68:2c:2e:02:b8:1c:86: cf:68:04:28:40:78:d1:0e:92:07:93:5d:f6:cd:a7:df:92:fa: 8d:06:8f:e4:fd:8a:1d:65:27:b3:30:78:7c:23:ad:5b:42:f5: dc:3e:f3:11 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX955IOzRt7l7/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk YTczOTZkMzktMWI3OC00OWJmLThmNzEtYTQwYTdhNGYwMTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvg9a+I6i6BLeGLpqr4BqUjJdX0+3i1oWjtYI uFGFfTuKwk2kHAVgwCL4EqtZHzZjWVo5kxH8MPEtH2W1pvSgjVR8G2nX7w15MVyP EMWgB0C6RQrIQBZoCWm3zPKdfxhJhI4YJtWhWqafzQgQlNhyVCV+2BJjfXdCeofI GbnBB6z9t1ovT7iGqnb1JTsVRMcONl1Gw6/NxkNE7f0n7GJ0JegOGimxvjJIkef1 pCwCp7wG2Bx5jtHIyTIrsbpqN6nz/2+A0KHYTwpA6RnyLGIw+eAcU1nJcbLxVKIW EQXCRXMRCFJiKPuQs8/ceH0PfLdoNPRTwYb5nLs0UJvng1KLDQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBO3xRwTV4E95niho+WpyZ+TIsJ5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDlkZGE5YTYtZTQxYy0z MmU0LWIxOTQtN2MzNjY2YTA4N2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAB5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJmu72GNjFfhVtR5c3Gs5jhCSeqXlRybmhgKkgqpIdlwJ7JR06ST opFV5tHC5vqJTWyX7uWQqwtuAfEaGSyEYpQsy9/Nl0K1CSG6iQeUZdYHvv7ChhbK U4IpdJrFENyVeXPZ9cxux+HDb1FXLgPMr4hZ3zj41ZrE6VL6lFb3eu0O2CWcrOqU Y49YVM5pLBgMv87Dd5Pvol0kiVPqmWswcGnjKyXLrESxGw+5LQ1ocRZnI7wKVGRj nYT2u90GlSn33Hb6mSIEw612EvRH8GgqktP0aCwuArgchs9oBChAeNEOkgeTXfbN p9+S+o0Gj+T9ih1lJ7MweHwjrVtC9dw+8xE= -----END CERTIFICATE-----Generated at Sun Jun 15 23:10:54 2025 by rpki-client