$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f7e78ee1-a8e3-32ee-8d2d-0e2effd3325b.roa File: f7e78ee1-a8e3-32ee-8d2d-0e2effd3325b.roa (raw, json) Hash identifier: vNUMJkhakoKIDl+84mCNiWPcO58J9D+Wy5S3bX7xJxk= Subject key identifier: 66:52:4A:18:A6:2C:BD:53:46:9D:0B:F9:7F:F2:5C:2B:54:FD:DC:F5 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858492F87B681E36E2704DA53A600 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f7e78ee1-a8e3-32ee-8d2d-0e2effd3325b.roa Signing time: Fri 14 Mar 2025 13:30:16 +0000 ROA not before: Fri 14 Mar 2025 13:30:16 +0000 ROA not after: Thu 12 Jun 2025 13:30:16 +0000 asID: 201754 IP address blocks: 2001:470:427::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2f:87:b6:81:e3:6e:27:04:da:53:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 14 13:30:16 2025 GMT Not After : Jun 12 13:30:16 2025 GMT Subject: CN=661f8500-fb47-4e2a-a8f7-323ec0953adc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:98:ba:f8:1e:99:4a:f2:ab:d5:5c:7c:6b:b6: d7:d9:3e:cf:eb:04:f1:48:55:e7:ac:7a:0c:46:c8: da:d5:98:ea:2a:be:53:5a:3d:0b:c2:85:55:06:42: 8b:a6:20:02:d0:24:5b:30:c3:c1:69:54:26:66:25: 31:31:9e:5f:bb:36:06:82:24:9c:ae:00:c5:fe:07: 89:94:a7:52:53:15:7e:45:66:52:11:9a:14:ec:11: 73:a4:26:39:6c:5b:56:16:ea:f2:da:d8:51:d6:95: ee:71:3f:40:3c:c3:e3:ea:4f:18:6a:1d:c8:66:9e: f9:da:7d:f4:99:ae:ff:bd:03:07:6a:94:a5:67:d3: e1:f7:92:e8:6d:53:64:46:b3:3e:62:c8:0e:50:6b: 05:b9:08:a0:44:37:5c:3c:bd:79:ea:df:b3:97:c1: 0f:19:3d:bd:55:9b:56:0d:7b:d9:da:20:63:cf:42: f9:69:3b:3a:9f:20:13:38:c6:c0:73:92:b2:be:67: a9:cf:f6:04:c9:e0:f2:56:56:0c:53:f9:59:e9:94: b8:c7:21:b4:60:54:c4:33:6f:aa:d6:c2:50:a1:d9: 0c:95:25:32:af:57:c5:2f:53:3a:8a:d8:90:0b:74: e7:8d:27:df:25:e4:81:63:a1:0c:30:53:c2:aa:b3: 13:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:52:4A:18:A6:2C:BD:53:46:9D:0B:F9:7F:F2:5C:2B:54:FD:DC:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f7e78ee1-a8e3-32ee-8d2d-0e2effd3325b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:427::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:a5:f2:4e:bb:89:9d:81:7c:6d:bd:3f:ac:37:49:a7:01:72: 28:3b:c2:cf:43:cf:ca:f3:ad:d4:49:6f:3b:b2:0c:99:50:c1: 47:cb:7a:6c:42:dc:e4:e5:3d:dc:3c:f4:0f:60:6f:8e:e1:af: 6f:87:95:10:ff:f7:75:f5:6a:37:6d:cb:92:fa:b2:51:e9:a4: ea:75:79:ed:3b:27:7f:96:38:e9:f4:ab:b4:79:28:b2:f6:84: 15:14:03:a8:67:6e:95:1e:69:7a:d9:d7:19:66:35:18:fe:34: 90:c5:cd:65:6e:ba:da:73:e4:fb:8b:bc:89:8b:e2:0b:2f:d5: a0:c0:cb:e7:44:94:2c:c8:d7:58:80:f8:45:2c:6a:74:ed:17: 6b:9d:3b:cf:3f:21:55:fb:d5:13:84:dc:67:36:c8:60:5b:f0: 11:8f:60:ff:01:e2:1c:df:bd:d9:a4:2f:3e:43:f5:6c:d9:c1: 30:1b:63:dd:e8:c5:51:93:f5:e7:e3:70:b8:6d:c1:0c:54:9b: a7:26:ee:3b:9a:62:57:1b:9c:33:6e:de:0f:a4:30:5d:6f:7f: a1:d9:c6:40:8d:28:19:28:2e:25:c4:4c:97:e1:cd:69:ba:15: d1:43:44:d0:f7:6e:47:01:43:34:ca:dd:38:13:ae:29:ed:83: 95:86:7b:84 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkvh7aB424nBNpTpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMxNDEzMzAxNloXDTI1MDYxMjEzMzAxNlowLzEtMCsGA1UEAxMk NjYxZjg1MDAtZmI0Ny00ZTJhLWE4ZjctMzIzZWMwOTUzYWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5i6+B6ZSvKr1Vx8a7bX2T7P6wTxSFXnrHoM Rsja1ZjqKr5TWj0LwoVVBkKLpiAC0CRbMMPBaVQmZiUxMZ5fuzYGgiScrgDF/geJ lKdSUxV+RWZSEZoU7BFzpCY5bFtWFury2thR1pXucT9APMPj6k8Yah3IZp752n30 ma7/vQMHapSlZ9Ph95LobVNkRrM+YsgOUGsFuQigRDdcPL156t+zl8EPGT29VZtW DXvZ2iBjz0L5aTs6nyATOMbAc5Kyvmepz/YEyeDyVlYMU/lZ6ZS4xyG0YFTEM2+q 1sJQodkMlSUyr1fFL1M6itiQC3TnjSffJeSBY6EMMFPCqrMTXwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGZSShimLL1TRp0L+X/yXCtU/dz1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjdlNzhlZTEtYThlMy0z MmVlLThkMmQtMGUyZWZmZDMzMjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHql8k67iZ2BfG29P6w3SacBcig7ws9Dz8rzrdRJbzuyDJlQwUfL emxC3OTlPdw89A9gb47hr2+HlRD/93X1ajdty5L6slHppOp1ee07J3+WOOn0q7R5 KLL2hBUUA6hnbpUeaXrZ1xlmNRj+NJDFzWVuutpz5PuLvImL4gsv1aDAy+dElCzI 11iA+EUsanTtF2udO88/IVX71ROE3Gc2yGBb8BGPYP8B4hzfvdmkLz5D9WzZwTAb Y93oxVGT9efjcLhtwQxUm6cm7juaYlcbnDNu3g+kMF1vf6HZxkCNKBkoLiXETJfh zWm6FdFDRND3bkcBQzTK3TgTrintg5WGe4Q= -----END CERTIFICATE-----Generated at Sun Apr 27 00:35:13 2025 by rpki-client