$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0b05eb78-2aaa-3987-a6f3-07411f6d073c.roa File: 0b05eb78-2aaa-3987-a6f3-07411f6d073c.roa (raw, json) Hash identifier: FRk+4oCPcp8HhTmEsQSpNZt3OkOrbC1Aa8WEYe2j8lE= Subject key identifier: 4B:F2:F0:DB:1D:C1:87:D2:59:8C:EB:B8:51:87:84:A4:5B:11:2A:BD Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849675D58A010A7128CAD31E240 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0b05eb78-2aaa-3987-a6f3-07411f6d073c.roa Signing time: Thu 03 Apr 2025 13:30:10 +0000 ROA not before: Thu 03 Apr 2025 13:30:10 +0000 ROA not after: Wed 02 Jul 2025 13:30:10 +0000 asID: 51790 IP address blocks: 2001:470:1eb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:5d:58:a0:10:a7:12:8c:ad:31:e2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 3 13:30:10 2025 GMT Not After : Jul 2 13:30:10 2025 GMT Subject: CN=eae27f19-bf96-4a80-a61d-9863d2e3b721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:09:0c:25:ce:78:9c:bd:af:79:b9:5d:28:f3: cf:5f:d2:04:d8:cf:61:f1:31:2b:ad:ce:20:64:fa: d4:d3:dd:b3:08:7a:03:b9:69:2d:8c:99:c0:fa:2a: fe:b2:a1:d6:48:8c:8d:51:95:59:39:52:d5:e3:fe: 84:37:c2:97:aa:4f:02:84:84:07:c1:f1:9c:11:05: 1f:67:50:4d:b8:62:5a:29:17:48:ef:86:96:fc:09: f2:95:80:db:3d:23:5b:de:64:66:19:49:84:1d:7c: 24:6e:de:35:72:4a:d5:fa:e9:1b:1a:b6:87:49:4a: 8c:90:32:93:be:00:3e:51:1b:a7:31:b4:37:17:a5: 1f:c1:02:31:a7:d9:62:05:fd:d8:90:38:eb:47:ba: d6:d8:e9:55:45:bc:08:58:c3:40:9e:0f:a8:72:12: 7b:54:7e:1e:09:49:f8:52:f9:e0:e5:89:e6:4b:08: a0:b3:4f:7f:39:cc:7b:c3:76:15:7a:b6:34:5d:12: b4:36:f5:05:e7:60:87:10:58:36:53:b3:fd:03:db: 1d:47:eb:41:48:60:bc:81:2d:f3:7c:67:4d:2f:0c: fc:00:09:4a:2f:c1:28:16:e4:1c:ca:0f:a0:09:7d: 2f:5e:c5:db:2e:68:64:a7:3b:59:c9:65:4b:e4:ed: cc:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F2:F0:DB:1D:C1:87:D2:59:8C:EB:B8:51:87:84:A4:5B:11:2A:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0b05eb78-2aaa-3987-a6f3-07411f6d073c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1eb::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:04:65:dd:13:82:e4:09:f2:eb:7c:b2:c5:3b:2d:7c:4a:de: 8c:24:f2:1c:28:a4:e7:cf:32:9b:cf:43:39:5d:6f:ef:5d:04: e5:f6:0d:00:fd:d9:55:fc:ee:96:b7:c7:40:5d:05:e4:1e:ab: f5:2c:6b:ae:69:fa:85:79:69:5c:d4:82:ca:85:63:21:43:20: 7a:f3:14:8f:9c:92:20:89:ca:73:17:80:03:6f:a3:a0:f4:e6: 9b:87:bb:74:cd:49:f5:84:f3:64:7c:23:2b:c6:d4:ae:bd:37: 59:50:ab:63:d7:46:74:95:b1:de:f3:a2:bc:da:2c:ed:34:61: 5b:57:6e:57:e6:66:7d:b9:30:67:c2:d7:68:ef:9c:31:db:72: 89:95:84:ee:c8:64:6a:3c:0f:ac:36:7a:34:02:fb:a0:7f:1f: a3:0d:ab:9f:2c:16:7f:5e:c7:b3:64:62:6d:2a:50:59:db:36: 0d:a3:0a:04:bf:a1:42:b0:ca:7e:bc:82:a6:dd:b6:e9:2d:b6: b1:0d:0b:1a:3b:da:b5:85:77:6d:e5:8d:2e:06:36:12:1b:36: c7:93:26:18:8e:31:97:43:e5:d6:34:24:1a:e8:e4:d4:84:f6: 8f:31:f5:d3:12:04:0e:a0:a2:f8:22:29:c8:93:a4:33:24:be: a1:cc:3e:59 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElnXVigEKcSjK0x4kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDQwMzEzMzAxMFoXDTI1MDcwMjEzMzAxMFowLzEtMCsGA1UEAxMk ZWFlMjdmMTktYmY5Ni00YTgwLWE2MWQtOTg2M2QyZTNiNzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAkMJc54nL2vebldKPPPX9IE2M9h8TErrc4g ZPrU092zCHoDuWktjJnA+ir+sqHWSIyNUZVZOVLV4/6EN8KXqk8ChIQHwfGcEQUf Z1BNuGJaKRdI74aW/AnylYDbPSNb3mRmGUmEHXwkbt41ckrV+ukbGraHSUqMkDKT vgA+URunMbQ3F6UfwQIxp9liBf3YkDjrR7rW2OlVRbwIWMNAng+ochJ7VH4eCUn4 Uvng5YnmSwigs09/Ocx7w3YVerY0XRK0NvUF52CHEFg2U7P9A9sdR+tBSGC8gS3z fGdNLwz8AAlKL8EoFuQcyg+gCX0vXsXbLmhkpztZyWVL5O3MaQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEvy8NsdwYfSWYzruFGHhKRbESq9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMGIwNWViNzgtMmFhYS0z OTg3LWE2ZjMtMDc0MTFmNmQwNzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADAEZd0TguQJ8ut8ssU7LXxK3owk8hwopOfPMpvPQzldb+9dBOX2 DQD92VX87pa3x0BdBeQeq/Usa65p+oV5aVzUgsqFYyFDIHrzFI+ckiCJynMXgANv o6D05puHu3TNSfWE82R8IyvG1K69N1lQq2PXRnSVsd7zorzaLO00YVtXblfmZn25 MGfC12jvnDHbcomVhO7IZGo8D6w2ejQC+6B/H6MNq58sFn9ex7NkYm0qUFnbNg2j CgS/oUKwyn68gqbdtukttrENCxo72rWFd23ljS4GNhIbNseTJhiOMZdD5dY0JBro 5NSE9o8x9dMSBA6govgiKciTpDMkvqHMPlk= -----END CERTIFICATE-----Generated at Sat Apr 26 21:17:11 2025 by rpki-client