$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e476da5-17c2-3908-b3b1-ded8f4368450.roa File: 0e476da5-17c2-3908-b3b1-ded8f4368450.roa (raw, json) Hash identifier: tlBtdSlPcjB64jwnSyGNxboGL7TGSvdBoGtSdjKcfYE= Subject key identifier: 1A:EF:BF:B0:A6:E5:8B:30:1B:75:B0:C8:B5:73:6B:A2:AC:76:51:F9 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A23C020AB73106674B6CB0800 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e476da5-17c2-3908-b3b1-ded8f4368450.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 59953 IP address blocks: 2001:470:1eb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:20:ab:73:10:66:74:b6:cb:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=672f1fa0-f944-4612-ac76-5b23b14d9150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:c2:d3:c7:41:fc:8b:6c:a1:f4:a2:44:5b:c1: 60:f9:1e:b4:67:90:9f:79:2e:77:73:90:fe:9e:86: 1c:9e:73:3d:9e:72:15:fd:e0:92:1a:f9:c8:bf:34: 2c:bb:2f:82:c1:22:90:c8:0c:ac:2f:52:cc:5c:8c: 85:f5:db:b7:57:dc:c1:03:4e:a6:a4:b1:da:d5:f2: 33:cf:c2:60:73:87:38:19:f9:a6:78:97:7c:7f:e4: 9f:7d:2d:91:d7:48:2b:62:86:4f:52:d6:16:e5:0e: eb:11:5f:65:4c:f2:db:ef:6d:64:e0:f1:ad:90:c5: e3:3e:03:12:6c:01:1c:09:24:95:1f:fe:b6:15:01: 3f:77:c1:a5:9f:7e:a1:ca:64:3c:ab:1e:aa:14:71: ed:e5:f8:18:d0:cb:fa:5e:79:39:a4:f3:36:6f:53: be:48:23:4f:00:8c:15:6c:12:f3:c3:6e:77:a7:23: d9:96:00:46:49:08:69:9d:c7:e4:ca:d4:81:33:93: 7e:33:a8:9f:f9:33:7d:78:0d:54:f4:1d:01:86:cf: 1f:3e:ba:30:2e:70:62:32:56:71:b4:2b:66:6a:a8: 5d:e8:ba:b8:39:0a:14:23:53:db:4f:e9:69:a2:9b: a8:53:36:4f:d9:da:47:1e:24:37:ef:11:21:93:f4: 6b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:EF:BF:B0:A6:E5:8B:30:1B:75:B0:C8:B5:73:6B:A2:AC:76:51:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e476da5-17c2-3908-b3b1-ded8f4368450.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1eb::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:5a:04:1c:cc:9b:92:4e:8d:0d:02:b5:39:7f:12:93:ae:7f: 8f:79:36:ec:56:e9:15:bc:4c:4b:10:19:7e:1d:44:71:68:b4: a1:0b:08:01:d5:96:0e:d0:1b:44:c6:a5:47:a8:57:09:d5:77: 34:a0:5d:da:c8:80:9e:e0:08:21:61:be:02:8c:84:67:e9:6e: c5:71:73:21:33:e0:cf:28:5c:96:da:bd:40:3d:bf:84:80:e8: 90:36:ef:4f:e9:16:e6:e1:56:3a:d7:dd:e8:12:27:25:8b:7c: 29:0a:6f:01:fe:61:59:2c:f8:75:04:2b:7b:78:58:fd:90:41: 39:b4:5f:d0:04:07:48:94:3d:23:ec:52:c8:9f:e6:20:b3:c3: 70:54:5b:8d:f6:66:cc:55:27:a6:b7:ab:3a:27:a7:e2:2d:40: 5b:8e:d5:9c:74:42:83:c0:1a:71:9f:29:9f:a7:42:61:c3:7b: 41:bc:87:ef:fd:01:15:60:b1:46:37:d7:d4:13:46:f3:68:3d: 6f:25:21:52:97:ba:91:30:28:8f:8c:80:4d:71:9f:64:99:43: 0b:e6:0f:b1:d3:50:46:73:79:3d:da:6a:6d:02:a1:d3:f4:12: 4d:0f:a1:07:18:3c:7f:76:6d:09:54:0d:28:6d:60:9b:28:bf: 0d:52:a9:e1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEojwCCrcxBmdLbLCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk NjcyZjFmYTAtZjk0NC00NjEyLWFjNzYtNWIyM2IxNGQ5MTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMLTx0H8i2yh9KJEW8Fg+R60Z5CfeS53c5D+ noYcnnM9nnIV/eCSGvnIvzQsuy+CwSKQyAysL1LMXIyF9du3V9zBA06mpLHa1fIz z8Jgc4c4GfmmeJd8f+SffS2R10grYoZPUtYW5Q7rEV9lTPLb721k4PGtkMXjPgMS bAEcCSSVH/62FQE/d8Gln36hymQ8qx6qFHHt5fgY0Mv6Xnk5pPM2b1O+SCNPAIwV bBLzw253pyPZlgBGSQhpncfkytSBM5N+M6if+TN9eA1U9B0Bhs8fProwLnBiMlZx tCtmaqhd6Lq4OQoUI1PbT+lpopuoUzZP2dpHHiQ37xEhk/Rr9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBrvv7Cm5YswG3WwyLVza6KsdlH5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMGU0NzZkYTUtMTdjMi0z OTA4LWIzYjEtZGVkOGY0MzY4NDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEFaBBzMm5JOjQ0CtTl/EpOuf495NuxW6RW8TEsQGX4dRHFotKEL CAHVlg7QG0TGpUeoVwnVdzSgXdrIgJ7gCCFhvgKMhGfpbsVxcyEz4M8oXJbavUA9 v4SA6JA270/pFubhVjrX3egSJyWLfCkKbwH+YVks+HUEK3t4WP2QQTm0X9AEB0iU PSPsUsif5iCzw3BUW432ZsxVJ6a3qzonp+ItQFuO1Zx0QoPAGnGfKZ+nQmHDe0G8 h+/9ARVgsUY319QTRvNoPW8lIVKXupEwKI+MgE1xn2SZQwvmD7HTUEZzeT3aam0C odP0Ek0PoQcYPH92bQlUDShtYJsovw1SqeE= -----END CERTIFICATE-----Generated at Sun Jun 15 17:27:35 2025 by rpki-client