$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4aeccb8c-8405-396e-a62f-9cc8bea913e4.roa File: 4aeccb8c-8405-396e-a62f-9cc8bea913e4.roa (raw, json) Hash identifier: iSoyhiEmfiYHb8jaQlOVwmL70xuhBc1hNAdtzfSrw3A= Subject key identifier: 7C:B7:FE:E1:16:B3:E2:C6:EF:A3:6A:8F:7D:48:B8:7A:19:43:91:38 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858492F87C599FF563351FD77BC00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4aeccb8c-8405-396e-a62f-9cc8bea913e4.roa Signing time: Fri 14 Mar 2025 13:30:23 +0000 ROA not before: Fri 14 Mar 2025 13:30:23 +0000 ROA not after: Thu 12 Jun 2025 13:30:23 +0000 asID: 41435 IP address blocks: 2001:470:427::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2f:87:c5:99:ff:56:33:51:fd:77:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 14 13:30:23 2025 GMT Not After : Jun 12 13:30:23 2025 GMT Subject: CN=e59188f7-a7d0-479b-9da0-d1a3c30201b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:da:d7:f1:55:85:f9:04:ed:85:9d:f1:01:4f: 80:51:8c:7f:b7:7f:c9:25:5d:2e:60:48:b4:55:04: be:5f:b1:9f:c5:aa:1f:7c:59:ff:f1:50:2e:27:b8: 45:1f:ac:f9:3c:f3:f9:87:d6:ff:92:a2:30:c4:1d: 3f:13:57:3c:f9:b2:48:08:06:6e:ae:b0:77:85:7b: 3b:e9:5e:99:63:45:2d:1e:ea:ec:2c:fe:43:c5:3d: fb:e4:9e:8c:cf:c0:cd:fe:96:a8:e9:f8:32:82:42: 6e:82:d0:db:72:12:f0:a3:28:01:d4:70:a0:30:84: 6b:6c:dd:64:89:92:9f:49:4a:88:19:4e:c2:54:6c: 2a:42:dc:78:26:59:a0:59:55:c0:a8:38:60:11:4c: 00:84:89:f0:8f:15:e4:44:1f:87:3b:88:c3:cd:3b: 61:82:08:9d:6c:b0:7e:f0:2c:0b:e5:c4:e5:33:48: de:d0:14:96:bf:fd:95:57:f9:fb:81:c2:e0:63:47: 82:42:4b:68:ad:0c:d8:52:45:7b:3a:03:7e:a7:c6: 45:dd:31:1d:42:44:a4:42:b7:92:71:3e:6c:3d:2a: a4:c1:ed:47:47:19:ee:f4:0d:4b:3c:a3:b3:9a:14: 51:7d:82:a8:01:a9:17:52:eb:4c:2d:b2:32:e6:64: b4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B7:FE:E1:16:B3:E2:C6:EF:A3:6A:8F:7D:48:B8:7A:19:43:91:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4aeccb8c-8405-396e-a62f-9cc8bea913e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:427::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:7e:34:27:54:38:46:45:44:3b:91:f8:52:2f:06:ce:d5:c6: 59:a9:ec:ff:34:86:12:a7:70:70:9e:91:ee:fb:95:69:34:88: c8:af:dd:98:d1:7f:2f:13:cc:5e:19:b6:cd:55:16:1a:fc:b4: d6:99:79:65:b1:be:4c:ff:8b:00:22:84:20:53:62:b0:2b:01: 4a:f1:31:ff:65:5e:b3:c9:02:6e:fa:dd:ac:34:ea:03:92:b8: 7a:30:59:22:a4:9c:a8:e4:7f:55:99:25:d9:df:75:9c:ed:74: c4:7f:39:56:7d:8c:53:ab:3a:a8:8b:69:b4:a4:c6:e0:58:c5: af:c8:7e:81:e2:17:0e:86:dd:c9:14:ab:4a:05:0d:0d:47:0a: ad:c1:ae:f8:cf:4a:5e:0a:92:be:d1:b4:7d:67:9b:9e:a4:76: f8:4c:0f:a8:28:8e:3a:7c:30:02:22:c2:a3:ed:a3:d7:3f:e4: 33:25:9d:9d:05:2c:13:83:d8:f9:14:d3:0a:d1:88:cf:db:48: cd:ba:f7:0c:29:5b:3a:1d:33:f8:cb:d1:cd:91:f4:f8:75:7a: 96:13:81:5b:91:04:5d:ab:b3:8d:75:db:a8:b3:8f:22:81:7d: a8:c2:4b:8e:b9:5a:a9:20:cd:ab:1e:f3:39:55:6c:97:61:47: c0:aa:40:b5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkvh8WZ/1YzUf13vAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMxNDEzMzAyM1oXDTI1MDYxMjEzMzAyM1owLzEtMCsGA1UEAxMk ZTU5MTg4ZjctYTdkMC00NzliLTlkYTAtZDFhM2MzMDIwMWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdrX8VWF+QTthZ3xAU+AUYx/t3/JJV0uYEi0 VQS+X7GfxaoffFn/8VAuJ7hFH6z5PPP5h9b/kqIwxB0/E1c8+bJICAZurrB3hXs7 6V6ZY0UtHursLP5DxT375J6Mz8DN/pao6fgygkJugtDbchLwoygB1HCgMIRrbN1k iZKfSUqIGU7CVGwqQtx4JlmgWVXAqDhgEUwAhInwjxXkRB+HO4jDzTthggidbLB+ 8CwL5cTlM0je0BSWv/2VV/n7gcLgY0eCQktorQzYUkV7OgN+p8ZF3TEdQkSkQreS cT5sPSqkwe1HRxnu9A1LPKOzmhRRfYKoAakXUutMLbIy5mS0NwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHy3/uEWs+LG76Nqj31IuHoZQ5E4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNGFlY2NiOGMtODQwNS0z OTZlLWE2MmYtOWNjOGJlYTkxM2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD9+NCdUOEZFRDuR+FIvBs7Vxlmp7P80hhKncHCeke77lWk0iMiv 3ZjRfy8TzF4Zts1VFhr8tNaZeWWxvkz/iwAihCBTYrArAUrxMf9lXrPJAm763aw0 6gOSuHowWSKknKjkf1WZJdnfdZztdMR/OVZ9jFOrOqiLabSkxuBYxa/IfoHiFw6G 3ckUq0oFDQ1HCq3BrvjPSl4Kkr7RtH1nm56kdvhMD6gojjp8MAIiwqPto9c/5DMl nZ0FLBOD2PkU0wrRiM/bSM269wwpWzodM/jL0c2R9Ph1epYTgVuRBF2rs41126iz jyKBfajCS465Wqkgzase8zlVbJdhR8CqQLU= -----END CERTIFICATE-----Generated at Mon Apr 28 06:10:55 2025 by rpki-client