$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5bace19e-e348-3bf3-8622-1e0955200773.roa File: 5bace19e-e348-3bf3-8622-1e0955200773.roa (raw, json) Hash identifier: X6xBHF1/HNCaf0Y/WsFOd+D2J7QrSTveG/rV7Fk2MKg= Subject key identifier: 42:42:C8:74:8E:7F:50:36:D8:AB:DA:BF:72:F2:7F:D5:DF:EC:A7:30 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858498E64B5961D123C1504BCAE80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5bace19e-e348-3bf3-8622-1e0955200773.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 139804 IP address blocks: 2001:470:230::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:b5:96:1d:12:3c:15:04:bc:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=f49ff01b-a2dc-47c7-9411-7e9813cfce52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ff:55:7c:f8:63:80:90:21:52:c4:be:0e:20: c1:d5:33:1f:79:fa:7e:27:54:69:18:be:27:f3:0c: 05:90:32:0d:3e:7a:d0:6c:91:7c:0c:88:ff:16:80: 0f:3b:2e:b3:b9:1f:c1:cb:9e:4e:62:32:b2:2a:5b: 8e:f8:34:bd:2e:68:f5:5c:24:7f:27:28:ed:29:88: ad:82:eb:36:2f:37:85:a2:ea:0a:cf:4e:60:de:45: dd:16:6f:b6:a9:39:5c:ee:3b:db:05:8f:8b:94:3c: 9d:2c:be:f5:8f:a8:c7:1e:fc:55:96:b2:b7:3f:04: a1:39:5a:66:bc:6f:a3:9e:16:4a:6a:13:db:25:47: fe:0e:7b:fd:23:3c:2a:98:64:f8:4a:f8:9b:78:fc: 05:4c:f2:d1:28:40:44:f3:86:1c:f5:38:3e:cf:f8: bb:62:3b:be:55:55:1d:cc:30:39:68:fc:2e:79:ac: 80:ad:8f:43:45:e6:0c:11:ed:6c:6d:54:3b:8a:e2: 4c:c8:81:43:dd:1d:cd:37:c6:5d:77:fe:30:1c:6c: 7a:b8:b4:34:1c:79:36:9e:2a:a2:59:d6:b0:1c:d5: 81:c8:7f:6e:51:bd:87:67:28:3c:1c:81:a7:4a:b5: 93:e2:ec:3e:2d:42:46:2b:fd:08:e7:c9:81:95:39: 36:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:42:C8:74:8E:7F:50:36:D8:AB:DA:BF:72:F2:7F:D5:DF:EC:A7:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5bace19e-e348-3bf3-8622-1e0955200773.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:230::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:7d:a0:21:8f:43:c4:e7:44:03:f8:a2:b1:32:cc:93:bc:23: 0d:ae:08:85:9d:50:9c:f5:4d:a2:2e:0e:4d:42:2b:f5:4c:e6: d5:43:7a:88:de:cf:24:bf:b8:59:74:85:7e:29:3b:c9:bd:38: 7f:07:5e:27:f2:02:ba:83:e2:5f:cd:6d:30:3c:ed:74:ad:68: fb:50:45:d9:4b:a1:f2:74:b9:26:e2:03:bb:44:6a:f1:b7:9a: 4a:bc:d4:5e:e5:04:38:04:b8:19:bd:17:e7:ed:fc:7f:6a:51: cf:e8:c0:5b:0e:81:8a:27:35:27:e9:eb:38:ce:e9:69:9e:c6: e8:d6:8e:9a:08:56:59:2e:14:a7:cd:4b:a1:7f:98:61:27:b1: d5:49:2e:1a:a5:36:c3:bd:74:0b:64:ef:ed:68:21:d3:34:59: 6c:ca:9c:54:e5:32:e9:3a:42:69:83:45:51:00:42:1e:91:f4: 2c:ad:44:68:1d:b1:ff:9d:cc:31:09:20:a5:f7:d2:b0:43:65: c1:d9:6d:19:e8:84:c5:c7:7d:02:5f:1e:dd:28:35:08:69:9a: e3:ad:38:fa:8a:02:bd:c9:9f:85:7e:13:15:0b:bd:2f:82:f6: 31:5c:e2:50:ad:cf:36:8d:fe:f5:6e:f8:3a:fb:e6:91:3f:23: 90:27:f1:c3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmOZLWWHRI8FQS8roAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk ZjQ5ZmYwMWItYTJkYy00N2M3LTk0MTEtN2U5ODEzY2ZjZTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/9VfPhjgJAhUsS+DiDB1TMfefp+J1RpGL4n 8wwFkDINPnrQbJF8DIj/FoAPOy6zuR/By55OYjKyKluO+DS9Lmj1XCR/JyjtKYit gus2LzeFouoKz05g3kXdFm+2qTlc7jvbBY+LlDydLL71j6jHHvxVlrK3PwShOVpm vG+jnhZKahPbJUf+Dnv9IzwqmGT4SvibePwFTPLRKEBE84Yc9Tg+z/i7Yju+VVUd zDA5aPwueayArY9DReYMEe1sbVQ7iuJMyIFD3R3NN8Zdd/4wHGx6uLQ0HHk2niqi WdawHNWByH9uUb2HZyg8HIGnSrWT4uw+LUJGK/0I58mBlTk2NQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEJCyHSOf1A22Kvav3Lyf9Xf7KcwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNWJhY2UxOWUtZTM0OC0z YmYzLTg2MjItMWUwOTU1MjAwNzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAIw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGd9oCGPQ8TnRAP4orEyzJO8Iw2uCIWdUJz1TaIuDk1CK/VM5tVD eojezyS/uFl0hX4pO8m9OH8HXifyArqD4l/NbTA87XStaPtQRdlLofJ0uSbiA7tE avG3mkq81F7lBDgEuBm9F+ft/H9qUc/owFsOgYonNSfp6zjO6WmexujWjpoIVlku FKfNS6F/mGEnsdVJLhqlNsO9dAtk7+1oIdM0WWzKnFTlMuk6QmmDRVEAQh6R9Cyt RGgdsf+dzDEJIKX30rBDZcHZbRnohMXHfQJfHt0oNQhpmuOtOPqKAr3Jn4V+ExUL vS+C9jFc4lCtzzaN/vVu+Dr75pE/I5An8cM= -----END CERTIFICATE-----Generated at Sun Apr 27 00:05:23 2025 by rpki-client