$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a39ab1a0-a874-3aa1-861b-719fb945be59.roa File: a39ab1a0-a874-3aa1-861b-719fb945be59.roa (raw, json) Hash identifier: 5qeHRaHuBKrvKFe+VbKannVAghohKArkTN6KGFR9trA= Subject key identifier: 40:2B:B6:6D:63:19:D9:88:3A:78:8E:FB:EE:0C:C7:A6:91:2F:F3:03 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849A4BB7E01FB9087D4FBA67440 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a39ab1a0-a874-3aa1-861b-719fb945be59.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 397545 IP address blocks: 2001:470:3cb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:7e:01:fb:90:87:d4:fb:a6:74:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=a3c1b9ee-5c90-4b74-ad47-98ffac0f7b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fa:10:e8:87:d4:3b:d7:db:2a:60:09:bf:1c: 25:b2:ce:04:37:f7:f8:d4:95:a7:5b:f9:3c:2f:71: 15:78:e6:51:66:50:9b:db:f2:8d:7d:56:25:66:e7: 86:f0:4e:6c:e0:5c:05:64:5a:dd:39:35:cd:33:61: 70:4e:10:19:e8:ce:16:06:30:31:5c:30:ad:05:7e: 18:3d:e6:12:25:e8:17:aa:04:85:77:53:f1:01:73: e5:9a:1f:38:aa:8f:98:ce:d0:40:5e:96:81:b7:1f: b0:93:e9:b3:63:b8:30:51:8b:58:10:1c:62:17:94: 82:45:2b:38:1c:79:aa:94:d8:ff:38:5a:2c:6f:eb: 11:a8:46:91:95:83:86:34:ff:5b:b8:1d:02:5d:91: 0f:71:4c:e2:32:ae:fa:27:7e:ca:97:e2:f6:2b:50: 8b:50:35:98:90:7c:c2:51:dd:da:8e:e0:70:80:28: 22:02:d9:9f:38:04:de:59:57:92:bf:33:11:d8:e2: a6:ae:00:04:36:a0:03:74:3f:61:6a:75:c4:49:ff: f1:b6:e0:70:30:53:fe:fb:ef:17:64:15:46:36:d1: 6f:24:71:a9:63:05:35:13:a5:07:d3:64:bd:ab:b4: 5d:de:07:01:3f:6d:cc:ee:44:9d:8a:d7:78:b5:cd: 0f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:2B:B6:6D:63:19:D9:88:3A:78:8E:FB:EE:0C:C7:A6:91:2F:F3:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a39ab1a0-a874-3aa1-861b-719fb945be59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3cb::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:94:ee:af:e1:af:f2:1a:cc:20:6c:30:e4:82:ce:57:47:7f: 25:cf:30:c0:28:86:18:29:9c:a6:f2:1f:fb:c1:c4:a5:23:2a: 5a:6d:6c:bf:95:95:5f:dc:e2:08:91:09:0b:69:a1:7a:4f:18: 1e:b9:46:7e:ea:9f:fd:23:61:d5:6b:59:07:80:34:20:f7:8e: d9:70:48:5b:8a:67:9b:7c:cf:96:42:c4:7c:89:10:66:43:7c: a9:2e:a9:17:35:e1:96:38:9b:fe:5b:79:9f:4e:72:f4:f9:3c: d6:ee:25:71:87:37:2a:f6:c6:0e:72:af:95:a5:8e:37:01:66: 6d:b0:d3:04:40:c3:9f:74:86:7b:15:fd:b3:c4:9c:21:eb:c1: d2:72:38:11:bf:c9:57:d9:db:a9:83:49:c6:83:78:f0:59:b1: f0:ef:c1:26:8b:c5:0a:1e:cd:0d:9d:33:aa:94:98:0c:07:c4: e3:9e:7a:f8:6e:d2:13:3a:c2:15:da:44:fa:63:e1:65:71:60: 6d:4a:40:de:13:84:77:68:de:fb:8e:b1:f3:7d:61:3b:2e:7b: c9:04:90:10:8b:eb:7a:76:2d:08:33:80:15:bb:c7:7d:ac:6c: e6:49:d4:08:14:00:1f:39:aa:ef:c3:c1:79:b8:76:3a:64:bd: d8:bd:b1:9a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmku34B+5CH1PumdEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YTNjMWI5ZWUtNWM5MC00Yjc0LWFkNDctOThmZmFjMGY3YjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/oQ6IfUO9fbKmAJvxwlss4EN/f41JWnW/k8 L3EVeOZRZlCb2/KNfVYlZueG8E5s4FwFZFrdOTXNM2FwThAZ6M4WBjAxXDCtBX4Y PeYSJegXqgSFd1PxAXPlmh84qo+YztBAXpaBtx+wk+mzY7gwUYtYEBxiF5SCRSs4 HHmqlNj/OFosb+sRqEaRlYOGNP9buB0CXZEPcUziMq76J37Kl+L2K1CLUDWYkHzC Ud3ajuBwgCgiAtmfOATeWVeSvzMR2OKmrgAENqADdD9hanXESf/xtuBwMFP+++8X ZBVGNtFvJHGpYwU1E6UH02S9q7Rd3gcBP23M7kSditd4tc0PeQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEArtm1jGdmIOniO++4Mx6aRL/MDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTM5YWIxYTAtYTg3NC0z YWExLTg2MWItNzE5ZmI5NDViZTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH+U7q/hr/IazCBsMOSCzldHfyXPMMAohhgpnKbyH/vBxKUjKlpt bL+VlV/c4giRCQtpoXpPGB65Rn7qn/0jYdVrWQeANCD3jtlwSFuKZ5t8z5ZCxHyJ EGZDfKkuqRc14ZY4m/5beZ9OcvT5PNbuJXGHNyr2xg5yr5WljjcBZm2w0wRAw590 hnsV/bPEnCHrwdJyOBG/yVfZ26mDScaDePBZsfDvwSaLxQoezQ2dM6qUmAwHxOOe evhu0hM6whXaRPpj4WVxYG1KQN4ThHdo3vuOsfN9YTsue8kEkBCL63p2LQgzgBW7 x32sbOZJ1AgUAB85qu/DwXm4djpkvdi9sZo= -----END CERTIFICATE-----Generated at Sun Apr 27 07:31:17 2025 by rpki-client