$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/623aea91-4a9d-3710-82b9-9f413b674520.roa File: 623aea91-4a9d-3710-82b9-9f413b674520.roa (raw, json) Hash identifier: kCRQYD77ty+9f8GFmIOBJEUYstgKRmGfFfVJiEzv8RE= Subject key identifier: 6B:79:27:6D:EA:B9:AD:9F:EF:23:34:C4:D9:38:BC:C7:FA:FE:75:89 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858497DA5B9A4AFB8D5B5A9E7F100 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/623aea91-4a9d-3710-82b9-9f413b674520.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 399381 IP address blocks: 2001:470:363::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a5:b9:a4:af:b8:d5:b5:a9:e7:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=c7fdb7d0-410b-4224-aacb-ac310d9f1604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:53:69:20:2b:59:23:49:66:bd:fe:be:b2:0d: f9:53:94:c9:45:ef:cf:3d:16:1f:67:45:28:6e:38: a1:05:df:5e:e9:3b:00:28:14:67:ab:46:8a:90:02: 19:94:27:4e:44:44:ed:f3:df:b8:4f:8e:c6:e4:4a: e5:d3:62:4b:8d:c0:55:19:60:73:fb:7a:f7:04:88: 54:1a:9e:cd:3e:b6:40:e4:c6:86:ae:25:82:bb:3a: 37:74:f8:d6:11:0f:30:2e:7b:73:42:d6:6e:9b:ca: b0:df:1d:bf:f1:d8:85:95:86:f5:12:54:1a:89:9b: 5e:5b:60:80:28:f7:4d:0f:8a:a4:32:14:36:3a:29: 22:b5:78:69:e3:15:df:89:b0:15:d4:f0:53:50:86: a0:28:e0:32:1b:f4:c8:71:30:4f:35:08:0f:69:2b: 32:8d:c1:07:0f:e2:5f:3b:20:0e:ff:7a:13:94:0b: cb:0f:15:cd:a7:a8:cf:80:76:d5:43:3b:97:24:17: 9b:88:fb:e6:a7:b4:10:7e:be:b7:0e:b4:06:d0:82: 63:5b:b3:42:62:1d:32:38:4d:11:af:1b:57:05:50: 6a:3c:b5:78:e3:8a:f9:64:62:cb:ad:f8:3d:82:42: cc:fa:3e:f1:58:5e:83:53:c2:a8:ce:46:25:9a:3a: 59:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:79:27:6D:EA:B9:AD:9F:EF:23:34:C4:D9:38:BC:C7:FA:FE:75:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/623aea91-4a9d-3710-82b9-9f413b674520.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:363::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:e5:3f:a6:e5:d6:a0:46:ca:f4:67:bb:90:f4:1f:ed:48:c7: 54:0b:30:27:09:f8:16:f8:55:27:7e:ad:cc:26:5c:fd:da:69: 35:98:1d:21:54:8a:72:0b:b5:b7:e4:21:2f:ff:3d:68:75:11: e5:97:0f:ab:5b:6b:25:fb:0d:b6:ec:c6:58:26:ec:bb:60:33: 64:95:c8:5b:2c:69:39:da:28:cc:5b:85:6d:ac:92:ad:e5:d8: eb:68:29:56:ac:21:cb:d1:76:53:20:1d:3a:b4:11:5a:22:ed: 47:22:e3:30:d4:49:39:09:ed:75:7f:1f:2c:49:0c:0c:1a:70: 4e:84:8a:bf:dd:7f:16:b2:bd:31:11:80:6b:3f:49:39:40:4d: a8:90:8b:64:52:be:cc:10:12:04:78:96:e5:30:ee:f8:fb:bc: b0:a4:63:fb:e8:80:3c:80:f0:a2:ce:4a:88:e1:8e:c1:52:0e: 57:ce:f1:8b:5f:6f:6a:02:60:17:a2:35:38:7f:d3:e1:78:00: f7:db:7f:c0:de:f7:d7:ed:b6:d8:fc:a9:b1:40:ef:75:43:c9: 99:f3:ac:0c:96:6f:e4:73:19:6c:66:00:c5:1d:ee:72:a8:c6: 61:4e:a9:9e:33:bf:5e:f7:18:41:1d:e7:d2:af:78:cf:de:26: 33:d0:1c:23 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9pbmkr7jVtann8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk YzdmZGI3ZDAtNDEwYi00MjI0LWFhY2ItYWMzMTBkOWYxNjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFNpICtZI0lmvf6+sg35U5TJRe/PPRYfZ0Uo bjihBd9e6TsAKBRnq0aKkAIZlCdORETt89+4T47G5Erl02JLjcBVGWBz+3r3BIhU Gp7NPrZA5MaGriWCuzo3dPjWEQ8wLntzQtZum8qw3x2/8diFlYb1ElQaiZteW2CA KPdND4qkMhQ2OikitXhp4xXfibAV1PBTUIagKOAyG/TIcTBPNQgPaSsyjcEHD+Jf OyAO/3oTlAvLDxXNp6jPgHbVQzuXJBebiPvmp7QQfr63DrQG0IJjW7NCYh0yOE0R rxtXBVBqPLV444r5ZGLLrfg9gkLM+j7xWF6DU8KozkYlmjpZhwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGt5J23qua2f7yM0xNk4vMf6/nWJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNjIzYWVhOTEtNGE5ZC0z NzEwLTgyYjktOWY0MTNiNjc0NTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcANj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACLlP6bl1qBGyvRnu5D0H+1Ix1QLMCcJ+Bb4VSd+rcwmXP3aaTWY HSFUinILtbfkIS//PWh1EeWXD6tbayX7Dbbsxlgm7LtgM2SVyFssaTnaKMxbhW2s kq3l2OtoKVasIcvRdlMgHTq0EVoi7Uci4zDUSTkJ7XV/HyxJDAwacE6Eir/dfxay vTERgGs/STlATaiQi2RSvswQEgR4luUw7vj7vLCkY/vogDyA8KLOSojhjsFSDlfO 8Ytfb2oCYBeiNTh/0+F4APfbf8De99ftttj8qbFA73VDyZnzrAyWb+RzGWxmAMUd 7nKoxmFOqZ4zv173GEEd59KveM/eJjPQHCM= -----END CERTIFICATE-----Generated at Sun Apr 27 10:33:59 2025 by rpki-client