$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/22845774-85e2-3a81-8e7e-f042762050ff.roa File: 22845774-85e2-3a81-8e7e-f042762050ff.roa (raw, json) Hash identifier: 3qUGQvLC40GBgpZamx01yZ7IMtrNXZMhVDMDGy/MgZ8= Subject key identifier: DD:2C:B9:00:40:B2:69:84:20:07:A9:1C:D0:87:CD:D1:50:FB:51:13 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926E4ECFB2B18FF99B335C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/22845774-85e2-3a81-8e7e-f042762050ff.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 7480 IP address blocks: 2001:470:299::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:e4:ec:fb:2b:18:ff:99:b3:35:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=040e5713-62ef-4be7-867e-97261456f42f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:40:e2:19:0e:bb:6e:5a:5f:4c:80:56:d5:98: 26:d2:5e:cb:ae:ed:f9:14:04:34:bc:82:8b:9e:db: 22:85:c9:21:b4:18:51:8d:8e:34:dd:a0:5f:e2:16: 17:d0:85:ac:d3:62:03:a1:c6:30:da:87:1f:5f:8a: 90:1e:48:ac:de:17:ce:57:c9:25:81:13:60:5c:4f: d5:f5:7b:53:0a:74:34:86:70:f4:98:07:a7:01:32: 3d:7d:c6:69:7d:d7:f4:2b:04:c2:f6:66:96:41:91: 01:17:5e:36:3c:49:ec:12:26:fe:6d:5c:da:ff:12: 73:cf:42:2c:03:0a:98:27:57:30:d4:cf:af:91:4b: 04:f2:2b:e6:59:41:83:35:5f:7a:39:db:29:2f:08: 80:b0:f4:74:64:66:8b:f7:5e:5c:d1:1d:1e:ee:d1: 51:a2:8d:f6:9c:b1:25:d4:90:dc:bb:a9:0e:45:85: 67:42:9c:bf:97:0f:55:07:39:60:03:53:d0:cf:ca: 45:e8:dc:4e:19:9b:aa:2a:ca:77:89:0c:2a:96:aa: 47:4b:e5:96:44:01:23:e2:05:ed:c2:97:da:d1:3e: 1b:8f:18:e0:e5:8d:af:bb:7a:36:84:75:87:41:0f: c7:20:06:c3:2a:cc:60:9f:d0:9c:a8:bb:6d:42:5c: 68:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:2C:B9:00:40:B2:69:84:20:07:A9:1C:D0:87:CD:D1:50:FB:51:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/22845774-85e2-3a81-8e7e-f042762050ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:299::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:be:a5:e8:80:cc:41:fc:7e:20:80:cc:5f:23:47:34:58:42: 11:e9:cb:20:a8:a1:86:83:da:2c:c4:75:59:d1:98:59:92:39: a0:f2:12:11:23:bd:e6:59:3c:a6:5a:a9:1c:61:a7:f4:0b:3c: e4:a9:48:1a:92:d8:68:fe:86:a9:7a:2a:73:f2:c0:eb:cc:8a: 65:b0:47:03:90:7a:fc:36:d5:75:e4:43:fc:05:be:ad:74:54: 17:9c:ed:b3:2a:20:74:08:98:af:4b:97:e3:d6:46:dc:c6:16: 8d:f6:20:86:21:db:69:9a:67:99:7b:16:7a:5b:87:98:b7:ab: 99:94:40:1d:3c:c6:48:95:d6:e5:32:65:34:cd:53:5a:1c:ab: 49:cd:91:02:06:10:4a:36:9d:ad:a3:92:bb:20:80:2a:4a:bb: ef:ad:2f:59:88:df:50:83:17:2c:4a:bf:6e:25:67:8c:d8:01: 17:4b:78:62:25:66:b5:96:fb:69:b5:f0:1f:fc:8f:7f:49:64: cb:80:3a:9c:e2:d7:38:2a:31:19:54:d1:c6:ea:d0:c8:2e:5d: ab:64:2c:11:3b:0b:0d:fc:74:4a:56:9b:de:05:97:87:fd:71: 88:44:92:3d:c6:0c:1a:1e:eb:87:01:d1:6a:f8:d2:5b:04:12: 17:4e:05:34 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JuTs+ysY/5mzNcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk MDQwZTU3MTMtNjJlZi00YmU3LTg2N2UtOTcyNjE0NTZmNDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEDiGQ67blpfTIBW1Zgm0l7Lru35FAQ0vIKL ntsihckhtBhRjY403aBf4hYX0IWs02IDocYw2ocfX4qQHkis3hfOV8klgRNgXE/V 9XtTCnQ0hnD0mAenATI9fcZpfdf0KwTC9maWQZEBF142PEnsEib+bVza/xJzz0Is AwqYJ1cw1M+vkUsE8ivmWUGDNV96OdspLwiAsPR0ZGaL915c0R0e7tFRoo32nLEl 1JDcu6kORYVnQpy/lw9VBzlgA1PQz8pF6NxOGZuqKsp3iQwqlqpHS+WWRAEj4gXt wpfa0T4bjxjg5Y2vu3o2hHWHQQ/HIAbDKsxgn9CcqLttQlxorwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN0suQBAsmmEIAepHNCHzdFQ+1ETMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjI4NDU3NzQtODVlMi0z YTgxLThlN2UtZjA0Mjc2MjA1MGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKZ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFe+peiAzEH8fiCAzF8jRzRYQhHpyyCooYaD2izEdVnRmFmSOaDy EhEjveZZPKZaqRxhp/QLPOSpSBqS2Gj+hql6KnPywOvMimWwRwOQevw21XXkQ/wF vq10VBec7bMqIHQImK9Ll+PWRtzGFo32IIYh22maZ5l7Fnpbh5i3q5mUQB08xkiV 1uUyZTTNU1ocq0nNkQIGEEo2na2jkrsggCpKu++tL1mI31CDFyxKv24lZ4zYARdL eGIlZrWW+2m18B/8j39JZMuAOpzi1zgqMRlU0cbq0MguXatkLBE7Cw38dEpWm94F l4f9cYhEkj3GDBoe64cB0Wr40lsEEhdOBTQ= -----END CERTIFICATE-----Generated at Sat Apr 26 19:15:51 2025 by rpki-client