$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/019525f1-33bf-3d29-bfd7-a8730f63de30.roa File: 019525f1-33bf-3d29-bfd7-a8730f63de30.roa (raw, json) Hash identifier: us0x0eicfNWL3L0MW76u1oxxfQJiqZdAjn+0Jy8p88A= Subject key identifier: B1:83:91:EF:87:6C:7E:B9:F5:9F:89:EE:2F:93:4D:E6:5C:9B:B1:EB Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A2ABAFAED129DE1209D21E980 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/019525f1-33bf-3d29-bfd7-a8730f63de30.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 4474 IP address blocks: 2001:470:3a9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:fa:ed:12:9d:e1:20:9d:21:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=f24ee8f2-05c2-47ae-9553-423419ae2163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a1:b3:08:81:a8:8a:17:c9:25:41:1d:a7:07: 53:6c:56:ab:c6:76:8f:57:aa:9d:6f:44:d5:88:80: bb:86:f7:fc:6f:86:76:a0:11:ec:39:fb:7c:74:2e: 44:f3:66:55:14:85:9a:9d:13:83:84:8c:d4:3d:6a: f8:aa:04:a7:f0:f9:60:05:0c:d5:b9:f2:b1:76:90: a2:ba:18:3a:bb:5c:72:13:93:df:0f:38:51:20:38: 3b:27:ee:6c:d5:f9:f2:c6:d5:ef:5e:7c:e4:ea:19: d5:86:3f:ca:b4:42:99:61:61:57:93:d8:c5:2e:cd: ae:6e:6a:6f:27:26:e3:1d:5a:b3:20:90:af:2c:67: e6:44:c4:58:06:f4:84:72:fd:f0:fe:df:fa:65:d3: 6d:bf:3f:75:f9:fb:19:d4:4c:4d:59:f9:31:06:5f: 7c:db:a6:e6:4d:44:a9:47:1c:eb:cf:42:91:97:27: 43:58:5d:30:05:4a:26:db:d2:0c:52:2f:f7:17:4f: 16:6f:a8:fb:04:a3:a7:47:81:4e:b5:0e:bd:57:99: c7:cb:2f:eb:44:6a:7a:ce:3c:a3:1f:5d:c5:f5:92: 7c:65:77:d3:0f:2a:c6:8a:19:e5:a9:91:c6:44:96: de:5b:8a:2b:32:fa:18:c1:c5:22:83:02:0f:80:48: 4c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:83:91:EF:87:6C:7E:B9:F5:9F:89:EE:2F:93:4D:E6:5C:9B:B1:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/019525f1-33bf-3d29-bfd7-a8730f63de30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3a9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:3e:32:be:86:63:0d:9e:34:e6:1a:ed:b5:be:4b:cb:37:17: c0:66:71:3d:bd:42:9e:d6:0e:bc:fb:d5:05:13:c5:e3:0a:f9: c6:5f:b2:c6:4f:b8:87:8a:b6:1c:c6:e3:87:11:60:a8:00:73: 80:9f:4c:3c:10:fe:72:5f:67:02:26:f0:cd:af:a4:92:00:93: af:6a:3a:17:08:44:3b:0f:b1:2b:46:e0:d1:bd:3d:26:cb:f8: 34:6b:46:6c:20:a3:da:73:fe:91:69:f0:34:a9:31:72:42:99: 71:97:35:3c:36:51:db:9d:82:f9:ef:b9:45:6f:55:19:ca:7d: e4:5e:32:e5:b0:aa:01:9f:81:99:bf:a6:a0:59:e6:e3:d1:a7: 73:6f:76:c2:65:f8:6e:cc:f8:5e:af:5f:d3:75:5c:a6:07:6d: 59:48:43:e0:52:76:6e:a9:32:48:e2:ba:3a:f8:e4:8c:a4:80: 9b:a0:9b:69:01:32:e7:7a:ac:20:f0:18:0b:e3:4b:37:ac:fd: 86:8c:b5:b1:1a:d7:72:b6:a3:89:93:43:cc:e6:f2:71:bb:ab: 4a:1b:ac:30:fa:e3:f5:e4:f1:34:cb:56:51:88:fa:11:e4:98: 4e:3d:ba:69:47:6e:77:ab:cc:63:10:5c:da:96:48:f5:6a:ae: 30:cf:f2:16 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoquvrtEp3hIJ0h6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk ZjI0ZWU4ZjItMDVjMi00N2FlLTk1NTMtNDIzNDE5YWUyMTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6GzCIGoihfJJUEdpwdTbFarxnaPV6qdb0TV iIC7hvf8b4Z2oBHsOft8dC5E82ZVFIWanRODhIzUPWr4qgSn8PlgBQzVufKxdpCi uhg6u1xyE5PfDzhRIDg7J+5s1fnyxtXvXnzk6hnVhj/KtEKZYWFXk9jFLs2ubmpv JybjHVqzIJCvLGfmRMRYBvSEcv3w/t/6ZdNtvz91+fsZ1ExNWfkxBl9826bmTUSp Rxzrz0KRlydDWF0wBUom29IMUi/3F08Wb6j7BKOnR4FOtQ69V5nHyy/rRGp6zjyj H13F9ZJ8ZXfTDyrGihnlqZHGRJbeW4orMvoYwcUigwIPgEhMVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLGDke+HbH659Z+J7i+TTeZcm7HrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDE5NTI1ZjEtMzNiZi0z ZDI5LWJmZDctYTg3MzBmNjNkZTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOp MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACI+Mr6GYw2eNOYa7bW+S8s3F8BmcT29Qp7WDrz71QUTxeMK+cZf ssZPuIeKthzG44cRYKgAc4CfTDwQ/nJfZwIm8M2vpJIAk69qOhcIRDsPsStG4NG9 PSbL+DRrRmwgo9pz/pFp8DSpMXJCmXGXNTw2UdudgvnvuUVvVRnKfeReMuWwqgGf gZm/pqBZ5uPRp3NvdsJl+G7M+F6vX9N1XKYHbVlIQ+BSdm6pMkjiujr45IykgJug m2kBMud6rCDwGAvjSzes/YaMtbEa13K2o4mTQ8zm8nG7q0obrDD64/Xk8TTLVlGI +hHkmE49umlHbnerzGMQXNqWSPVqrjDP8hY= -----END CERTIFICATE-----Generated at Sun Jun 15 15:06:51 2025 by rpki-client