$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0cca8601-9088-3d08-8999-e00a75425820.roa File: 0cca8601-9088-3d08-8999-e00a75425820.roa (raw, json) Hash identifier: FVm/BoExhvA71nHS12apWAq4hfctw9/t/2tG/DRtrek= Subject key identifier: F8:8C:D6:77:ED:43:D3:92:1E:59:25:B0:0B:D1:BD:B5:2E:50:CC:48 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A03A56944E992121F68145140 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0cca8601-9088-3d08-8999-e00a75425820.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 400341 IP address blocks: 2001:470:238::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:69:44:e9:92:12:1f:68:14:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=bd4e4c9d-a869-4b48-b9cb-1f4edf9d1f9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a3:6c:f9:56:0e:ff:7e:fc:52:9d:67:13:23: d2:be:da:53:3a:28:65:8e:0e:e3:05:b3:41:81:f2: 68:cc:26:0a:88:3e:cb:b5:37:36:f7:d0:c9:31:bc: 4a:e4:f7:1d:59:39:04:f5:bf:1e:2c:a3:b3:95:cb: b7:b8:3c:a0:fb:3c:80:cc:b8:02:4b:9e:70:8c:27: 5e:1a:3b:95:8c:71:a8:04:2f:67:55:99:64:f2:88: 42:ae:f9:fc:ad:c0:a4:20:56:7b:33:17:4e:38:04: 6e:77:49:62:96:42:c1:ee:05:0e:5a:1b:df:02:66: 96:b0:a7:30:5c:d6:a2:a8:08:f8:d4:07:98:11:ae: 00:63:85:3e:b5:9b:41:b6:c5:5e:2f:ff:de:dd:66: bd:06:ee:cc:72:4e:7d:64:e1:c4:ca:09:2e:ad:bf: 77:3b:8f:16:50:d7:94:9a:5d:e1:27:f4:66:c8:6d: da:b1:7f:1d:a7:4e:35:85:75:cf:3b:f3:20:9c:32: 73:18:c0:96:4a:e8:55:8d:bf:57:d1:b4:39:2d:2a: 08:08:64:fa:65:5f:ea:1b:d2:fc:6e:5d:f6:3c:27: 86:1a:e9:3c:4d:b1:ae:31:ae:45:18:75:e6:30:27: 30:a9:26:f2:97:73:1d:a1:15:c1:54:b7:ac:4a:86: 6b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:8C:D6:77:ED:43:D3:92:1E:59:25:B0:0B:D1:BD:B5:2E:50:CC:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0cca8601-9088-3d08-8999-e00a75425820.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:238::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:41:e9:ee:62:4f:62:fe:84:b8:cf:a1:bc:a6:40:7c:3a:a2: 92:ca:63:33:46:7d:b1:4e:d2:e1:60:06:5f:8b:90:36:5a:59: 5b:c2:64:d6:bd:cd:68:62:5a:8a:eb:66:16:36:84:5f:b2:95: 97:29:6b:63:50:0f:36:07:65:ef:28:7f:a7:7b:25:47:cf:77: f7:40:0b:7a:ee:0b:28:ea:de:6a:1d:11:6b:4d:b3:04:ad:42: ea:50:80:0c:ab:79:af:39:96:38:75:83:70:14:37:72:37:59: 73:dc:ff:9c:9f:36:d7:af:b9:72:3f:cb:f1:f3:e0:ab:ce:57: 67:1d:4c:82:8f:d5:94:78:df:83:a9:93:b7:de:23:01:b3:e1: 90:1a:42:99:f6:b4:64:d7:88:76:02:96:86:0a:1d:00:b5:61: f7:5b:b9:79:ed:23:e7:5d:9e:82:4b:73:6f:87:50:c8:72:22: b3:9e:bf:7c:f2:81:8f:45:18:74:bd:1d:c6:83:60:ce:16:d7: 4d:9a:89:4c:15:66:df:0b:54:70:15:5e:5e:e5:d2:2a:33:5d: cd:56:d4:64:47:67:06:c1:a0:4c:f5:79:74:5a:96:4c:52:bc: 38:4a:51:b7:48:80:1b:fc:85:54:41:5b:f9:7a:f0:d1:d9:4e: 25:03:00:47 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoDpWlE6ZISH2gUUUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk YmQ0ZTRjOWQtYTg2OS00YjQ4LWI5Y2ItMWY0ZWRmOWQxZjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqNs+VYO/378Up1nEyPSvtpTOihljg7jBbNB gfJozCYKiD7LtTc299DJMbxK5PcdWTkE9b8eLKOzlcu3uDyg+zyAzLgCS55wjCde GjuVjHGoBC9nVZlk8ohCrvn8rcCkIFZ7MxdOOARud0lilkLB7gUOWhvfAmaWsKcw XNaiqAj41AeYEa4AY4U+tZtBtsVeL//e3Wa9Bu7Mck59ZOHEygkurb93O48WUNeU ml3hJ/RmyG3asX8dp041hXXPO/MgnDJzGMCWSuhVjb9X0bQ5LSoICGT6ZV/qG9L8 bl32PCeGGuk8TbGuMa5FGHXmMCcwqSbyl3MdoRXBVLesSoZraQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPiM1nftQ9OSHlklsAvRvbUuUMxIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMGNjYTg2MDEtOTA4OC0z ZDA4LTg5OTktZTAwYTc1NDI1ODIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFBB6e5iT2L+hLjPobymQHw6opLKYzNGfbFO0uFgBl+LkDZaWVvC ZNa9zWhiWorrZhY2hF+ylZcpa2NQDzYHZe8of6d7JUfPd/dAC3ruCyjq3modEWtN swStQupQgAyrea85ljh1g3AUN3I3WXPc/5yfNtevuXI/y/Hz4KvOV2cdTIKP1ZR4 34Opk7feIwGz4ZAaQpn2tGTXiHYCloYKHQC1YfdbuXntI+ddnoJLc2+HUMhyIrOe v3zygY9FGHS9HcaDYM4W102aiUwVZt8LVHAVXl7l0iozXc1W1GRHZwbBoEz1eXRa lkxSvDhKUbdIgBv8hVRBW/l68NHZTiUDAEc= -----END CERTIFICATE-----Generated at Sun Jun 15 17:38:38 2025 by rpki-client