$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1415974a-b36b-3aa7-b524-34d84f5e2f50.roa File: 1415974a-b36b-3aa7-b524-34d84f5e2f50.roa (raw, json) Hash identifier: qfdAMPVjVwOhCPi3+cVdjeVTopQ6jkIn+0ZH/wJOTj0= Subject key identifier: 3C:30:22:8E:B9:3B:78:EE:BF:32:AF:F4:2A:7F:48:18:AC:35:FB:7F Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FD70126614AF3C7022000 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1415974a-b36b-3aa7-b524-34d84f5e2f50.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 14160 IP address blocks: 2001:470:95::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:d7:01:26:61:4a:f3:c7:02:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=a2426c8c-b15d-427b-a24f-b742812a5c62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8b:8a:89:a1:18:7e:ff:07:50:da:2c:d7:d9: 64:d2:33:0b:a6:fa:02:fd:32:2b:7e:16:6d:34:4a: c0:2a:e9:a2:3d:44:f4:96:6e:93:85:82:20:f3:d2: b8:e0:3a:2b:0c:d3:82:1a:bf:c4:b0:cd:6f:4d:f6: 5c:58:f7:14:c8:c3:5f:46:b2:f1:3a:bd:c5:d4:37: 4e:cc:60:08:da:00:24:5a:e1:8c:42:6f:bd:cc:12: c9:79:95:11:52:a2:6a:cc:b1:08:92:8c:e6:0b:0a: 10:f7:0e:f4:44:51:9c:9b:2b:24:ef:35:3f:b6:a5: 77:42:1d:98:2a:3e:5c:15:ea:de:51:c3:56:0a:46: e9:be:e1:ae:a0:85:d8:5b:71:5b:f8:29:ad:df:b2: e2:ee:d1:d5:44:05:80:f0:f8:63:dc:a9:4d:c6:9e: 98:1c:b4:05:34:d1:6c:76:56:a8:a9:24:0a:3d:db: e2:73:95:0b:d0:b4:1a:b1:92:13:b7:fc:37:cc:81: 4f:ba:9a:89:3d:9c:e8:14:e9:30:ae:e3:50:00:8f: a1:a2:68:23:c4:cf:30:4b:01:f5:6a:62:9e:1f:70: ae:48:f0:3d:c0:71:04:8b:16:7e:a8:58:a0:78:d3: 36:9d:f3:cd:bc:87:0a:ef:63:e4:eb:d3:02:2c:be: bc:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:30:22:8E:B9:3B:78:EE:BF:32:AF:F4:2A:7F:48:18:AC:35:FB:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1415974a-b36b-3aa7-b524-34d84f5e2f50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:95::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:87:02:08:e8:3c:b9:ab:57:d9:fa:32:2f:3c:5d:ad:c6:6c: 41:03:c9:67:e3:a9:5b:5e:70:47:c4:9d:04:58:d4:8b:09:0c: 2b:64:39:5c:f0:70:35:0a:3e:51:0b:1e:7a:e4:ec:ab:87:4c: 01:44:b6:0d:50:3d:12:5c:ac:6a:94:9e:eb:32:5e:fd:e6:5e: 0e:2e:5d:8f:71:3b:35:35:49:cf:08:f8:6a:3e:3c:25:b0:b2: 86:bf:ab:b2:06:90:59:a3:7b:f3:ec:8a:56:39:0b:63:91:86: d6:0b:d7:47:08:38:f9:5f:cd:40:64:04:d6:3e:00:f9:6c:a0: 70:6b:b5:28:61:ca:fa:cf:35:8f:7e:aa:f1:5a:a3:ce:6a:c6: bc:21:6f:63:bb:20:f0:ca:b4:95:c8:2a:4c:23:11:09:33:7d: 99:57:d0:91:ec:be:66:93:4a:12:64:17:86:43:a6:af:e7:7a: d4:e4:33:1e:1e:b3:df:f6:21:06:85:75:97:29:d9:b2:9e:4f: 82:07:e4:01:16:37:56:b8:15:85:1d:80:95:a6:aa:06:9a:3e: 43:98:a0:a0:52:74:cb:fa:f0:0a:bc:1b:d2:6e:b3:be:60:1b: 7f:5d:ea:45:0a:d6:5b:37:a4:dc:44:28:2b:76:e7:9f:31:b0: 5a:4b:cb:75 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX9cBJmFK88cCIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk YTI0MjZjOGMtYjE1ZC00MjdiLWEyNGYtYjc0MjgxMmE1YzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkouKiaEYfv8HUNos19lk0jMLpvoC/TIrfhZt NErAKumiPUT0lm6ThYIg89K44DorDNOCGr/EsM1vTfZcWPcUyMNfRrLxOr3F1DdO zGAI2gAkWuGMQm+9zBLJeZURUqJqzLEIkozmCwoQ9w70RFGcmysk7zU/tqV3Qh2Y Kj5cFereUcNWCkbpvuGuoIXYW3Fb+Cmt37Li7tHVRAWA8Phj3KlNxp6YHLQFNNFs dlaoqSQKPdvic5UL0LQasZITt/w3zIFPupqJPZzoFOkwruNQAI+homgjxM8wSwH1 amKeH3CuSPA9wHEEixZ+qFigeNM2nfPNvIcK72Pk69MCLL686QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDwwIo65O3juvzKv9Cp/SBisNft/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMTQxNTk3NGEtYjM2Yi0z YWE3LWI1MjQtMzRkODRmNWUyZjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL+HAgjoPLmrV9n6Mi88Xa3GbEEDyWfjqVtecEfEnQRY1IsJDCtk OVzwcDUKPlELHnrk7KuHTAFEtg1QPRJcrGqUnusyXv3mXg4uXY9xOzU1Sc8I+Go+ PCWwsoa/q7IGkFmje/PsilY5C2ORhtYL10cIOPlfzUBkBNY+APlsoHBrtShhyvrP NY9+qvFao85qxrwhb2O7IPDKtJXIKkwjEQkzfZlX0JHsvmaTShJkF4ZDpq/netTk Mx4es9/2IQaFdZcp2bKeT4IH5AEWN1a4FYUdgJWmqgaaPkOYoKBSdMv68Aq8G9Ju s75gG39d6kUK1ls3pNxEKCt2558xsFpLy3U= -----END CERTIFICATE-----Generated at Sun Jun 15 15:55:12 2025 by rpki-client