$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/211e541b-a489-3085-9583-5ef6d8a55b16.roa File: 211e541b-a489-3085-9583-5ef6d8a55b16.roa (raw, json) Hash identifier: SDm6BCsTcR79sGEE7he3FRU5ig8Xd1XqKD5wQoJExo8= Subject key identifier: 1D:48:29:05:8F:3D:C4:95:02:6E:9F:CE:6B:F0:DD:60:F0:DD:FB:61 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584953C44F6BF1E4A45D89BC3D00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/211e541b-a489-3085-9583-5ef6d8a55b16.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 43957 IP address blocks: 2001:470:34a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:4f:6b:f1:e4:a4:5d:89:bc:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=c06195bc-e071-4c37-bfa8-d11c77387eda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:69:81:16:08:cf:d0:12:81:b2:63:8e:bd:a4: 2c:1c:f8:d3:25:bb:04:69:50:a9:17:89:56:5d:8a: 93:1e:90:91:52:d2:2f:26:00:93:01:8b:53:b8:fa: 1a:08:92:e1:e4:76:dd:40:7a:97:29:30:53:63:91: db:29:fc:c5:1a:f1:d6:64:2f:e8:58:6b:89:e3:83: c1:62:2f:ce:4d:dd:2f:58:db:f4:2b:6d:ac:88:47: cc:8f:76:dd:e4:9d:3a:56:9c:a6:46:e1:cf:8f:09: f8:38:2d:f4:16:87:b9:50:b1:5b:6b:9e:f0:9d:84: 00:74:2a:6c:09:f7:69:6d:b5:76:bd:82:0c:54:e4: 9d:62:2d:dc:9c:25:c6:9c:6a:03:1a:c4:7d:fd:12: a2:4c:40:ad:6e:a2:fd:6e:54:bb:a1:06:2f:fc:92: 45:66:4c:74:cb:9e:e6:91:d8:f6:f0:14:14:fd:45: 57:de:cf:11:df:cc:20:d3:db:ee:4b:f9:c5:fe:5e: 14:81:36:40:20:c1:f1:65:91:1b:f6:7d:ab:f7:a4: de:f9:e7:ee:0d:0a:8a:03:5d:e2:f3:de:92:54:62: 89:5e:81:f0:c2:8e:7f:d1:ee:85:7d:99:8c:66:db: e7:07:6f:16:33:6d:b8:be:00:1a:f3:50:db:3a:ab: f5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:48:29:05:8F:3D:C4:95:02:6E:9F:CE:6B:F0:DD:60:F0:DD:FB:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/211e541b-a489-3085-9583-5ef6d8a55b16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:34a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:ad:67:50:93:dc:22:76:c0:30:2e:25:c7:c3:57:60:71:61: 4d:19:47:8f:2f:5e:73:dd:b0:0d:a8:a8:7f:a8:07:fa:19:f4: 14:e8:e7:be:71:f0:18:5f:ad:1f:b5:a2:1f:9b:a8:7f:29:8d: c1:3f:a0:1e:15:27:17:6e:a5:36:b8:23:bd:31:4e:29:38:70: 91:71:1d:72:3c:ef:10:ee:ef:a1:8a:ad:ac:01:5d:54:0a:28: 6e:65:1c:a5:20:99:c8:d9:8e:11:e1:bd:d9:ec:20:9b:67:12: a2:fc:6c:49:23:48:f2:f3:a0:1b:6c:85:f7:e5:ff:0e:15:93: 44:b8:6a:fa:6a:e4:2d:3c:73:9b:eb:ba:2e:6a:7f:81:43:cd: 41:b1:c1:ab:0c:cc:55:0c:d4:4c:3b:2d:2b:49:bf:75:4d:03: a6:2f:76:d4:bc:5f:09:74:0f:fc:13:cc:9f:bb:13:9c:12:ef: cd:15:a7:8d:9f:98:9b:18:49:29:eb:5a:97:4b:74:fa:79:24: ff:f1:94:49:e2:73:6f:00:c6:71:04:5e:0f:4b:2e:01:62:45: 6f:55:79:5b:65:8e:b6:1b:e1:2e:8c:ef:81:23:0c:05:df:7d: 2a:dd:b6:c2:c2:d2:30:8a:57:6a:10:57:d5:cc:50:32:86:7e: b1:9a:20:99 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElTxE9r8eSkXYm8PQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk YzA2MTk1YmMtZTA3MS00YzM3LWJmYTgtZDExYzc3Mzg3ZWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGmBFgjP0BKBsmOOvaQsHPjTJbsEaVCpF4lW XYqTHpCRUtIvJgCTAYtTuPoaCJLh5HbdQHqXKTBTY5HbKfzFGvHWZC/oWGuJ44PB Yi/OTd0vWNv0K22siEfMj3bd5J06VpymRuHPjwn4OC30Foe5ULFba57wnYQAdCps CfdpbbV2vYIMVOSdYi3cnCXGnGoDGsR9/RKiTECtbqL9blS7oQYv/JJFZkx0y57m kdj28BQU/UVX3s8R38wg09vuS/nF/l4UgTZAIMHxZZEb9n2r96Te+efuDQqKA13i 896SVGKJXoHwwo5/0e6FfZmMZtvnB28WM224vgAa81DbOqv16QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB1IKQWPPcSVAm6fzmvw3WDw3fthMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjExZTU0MWItYTQ4OS0z MDg1LTk1ODMtNWVmNmQ4YTU1YjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcANK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADGtZ1CT3CJ2wDAuJcfDV2BxYU0ZR48vXnPdsA2oqH+oB/oZ9BTo 575x8BhfrR+1oh+bqH8pjcE/oB4VJxdupTa4I70xTik4cJFxHXI87xDu76GKrawB XVQKKG5lHKUgmcjZjhHhvdnsIJtnEqL8bEkjSPLzoBtshffl/w4Vk0S4avpq5C08 c5vrui5qf4FDzUGxwasMzFUM1Ew7LStJv3VNA6YvdtS8Xwl0D/wTzJ+7E5wS780V p42fmJsYSSnrWpdLdPp5JP/xlEnic28AxnEEXg9LLgFiRW9VeVtljrYb4S6M74Ej DAXffSrdtsLC0jCKV2oQV9XMUDKGfrGaIJk= -----END CERTIFICATE-----Generated at Mon Apr 28 14:27:46 2025 by rpki-client