$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/156f98ff-e026-36d5-9220-a6f870eaa4ac.roa File: 156f98ff-e026-36d5-9220-a6f870eaa4ac.roa (raw, json) Hash identifier: mC3fooyue9SXupjPhIMV/lVSQ6v/uwF8lFzFxX+y1kA= Subject key identifier: F1:E0:AC:4E:DB:A9:11:0F:63:6A:48:75:61:E9:12:51:8D:EA:99:10 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A10352FFD4A5272F990830940 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/156f98ff-e026-36d5-9220-a6f870eaa4ac.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 212754 IP address blocks: 2001:470:427::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:2f:fd:4a:52:72:f9:90:83:09:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=1b10d705-9302-4773-9782-6c2e32676b8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:44:18:0c:fa:9f:0b:2c:8e:d2:b9:64:07:e6: bd:1a:9a:ee:4f:f5:61:7c:12:ae:15:61:9b:2f:a9: b4:3a:f0:19:21:a0:9a:3a:4b:b4:12:be:87:65:85: 52:39:d4:4e:05:46:18:3e:1e:f1:5d:bf:38:1e:4f: a5:c7:94:f1:2b:b2:3e:ab:2d:62:a8:d3:0a:66:db: 06:3e:d1:57:f6:55:3c:e0:81:09:9c:7e:20:3b:7f: 87:29:be:db:52:0f:ea:a9:03:16:7e:95:af:fd:19: 72:01:b1:ba:b4:f9:cc:f2:70:d1:86:0e:c0:2e:00: 24:e3:93:fb:a7:2a:29:41:d0:e0:56:4e:ee:85:10: 40:f2:e3:ff:92:37:93:62:e6:0b:fb:a5:e8:cc:89: 69:81:3f:39:80:f5:5e:ed:66:86:63:c1:8f:70:c1: bb:e7:fd:09:d8:69:3f:4a:93:d1:ce:4c:07:52:24: 52:54:4d:5b:51:ed:3f:60:d9:62:44:3c:38:67:10: 36:24:c0:8a:af:79:cd:34:77:e0:3a:f2:32:fb:73: 1f:34:84:92:c4:55:b1:ec:4e:02:33:bd:8c:e0:2c: 4f:65:8d:e0:f8:bd:18:d4:ab:e9:bc:b1:44:70:5c: 12:c0:0e:d8:18:b6:d2:95:9e:be:3a:60:1a:c0:c8: 84:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E0:AC:4E:DB:A9:11:0F:63:6A:48:75:61:E9:12:51:8D:EA:99:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/156f98ff-e026-36d5-9220-a6f870eaa4ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:427::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:d9:c9:8d:63:7f:63:fb:ae:02:79:3a:40:fc:fa:75:4c:c5: 66:c0:f6:be:2d:37:f3:b7:64:b1:31:7a:e1:09:61:a8:5c:46: 04:8a:75:37:0b:51:92:b1:71:d0:9f:c2:33:a9:d4:ed:08:67: 43:06:9f:71:c3:e7:da:91:fe:f9:af:78:5b:58:bc:c8:90:b0: ea:1e:3c:23:4b:70:d3:50:d1:a3:3c:d4:8b:35:1b:06:3e:72: 6c:2f:20:2f:02:30:09:c6:39:d2:f1:d1:e5:c3:c2:a8:02:08: fa:19:e3:42:c2:58:f0:69:7c:14:b5:3d:82:20:68:01:74:90: 82:d3:3b:a5:57:fa:9f:f8:37:48:ee:19:85:f0:ef:51:4b:3b: 9f:09:ad:6c:fc:b9:c9:aa:36:f1:e1:3d:c8:37:72:68:7d:86: 65:5a:8a:ba:b6:be:f4:c3:74:c0:a4:ab:29:31:27:31:28:9c: 98:d1:8f:14:c2:dc:0f:83:80:fa:eb:c2:78:69:59:3a:17:64: 4b:60:ca:a4:14:49:81:15:9f:fb:ea:e3:0f:81:cf:c7:52:87: 09:3b:c2:ca:ec:d8:26:c7:94:af:c2:67:60:3c:f6:1d:b3:d5: 3f:8c:12:90:8b:4e:ae:a9:6b:bf:cb:9a:76:21:70:ce:52:94: 73:a1:e7:07 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoQNS/9SlJy+ZCDCUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk MWIxMGQ3MDUtOTMwMi00NzczLTk3ODItNmMyZTMyNjc2YjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0QYDPqfCyyO0rlkB+a9GpruT/VhfBKuFWGb L6m0OvAZIaCaOku0Er6HZYVSOdROBUYYPh7xXb84Hk+lx5TxK7I+qy1iqNMKZtsG PtFX9lU84IEJnH4gO3+HKb7bUg/qqQMWfpWv/RlyAbG6tPnM8nDRhg7ALgAk45P7 pyopQdDgVk7uhRBA8uP/kjeTYuYL+6XozIlpgT85gPVe7WaGY8GPcMG75/0J2Gk/ SpPRzkwHUiRSVE1bUe0/YNliRDw4ZxA2JMCKr3nNNHfgOvIy+3MfNISSxFWx7E4C M72M4CxPZY3g+L0Y1KvpvLFEcFwSwA7YGLbSlZ6+OmAawMiExQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPHgrE7bqREPY2pIdWHpElGN6pkQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMTU2Zjk4ZmYtZTAyNi0z NmQ1LTkyMjAtYTZmODcwZWFhNGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKfZyY1jf2P7rgJ5OkD8+nVMxWbA9r4tN/O3ZLExeuEJYahcRgSK dTcLUZKxcdCfwjOp1O0IZ0MGn3HD59qR/vmveFtYvMiQsOoePCNLcNNQ0aM81Is1 GwY+cmwvIC8CMAnGOdLx0eXDwqgCCPoZ40LCWPBpfBS1PYIgaAF0kILTO6VX+p/4 N0juGYXw71FLO58JrWz8ucmqNvHhPcg3cmh9hmVairq2vvTDdMCkqykxJzEonJjR jxTC3A+DgPrrwnhpWToXZEtgyqQUSYEVn/vq4w+Bz8dShwk7wsrs2CbHlK/CZ2A8 9h2z1T+MEpCLTq6pa7/LmnYhcM5SlHOh5wc= -----END CERTIFICATE-----Generated at Sun Jun 15 16:09:15 2025 by rpki-client