$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1f77b53a-4236-3f0b-a07b-0ab0bf5b57ee.roa File: 1f77b53a-4236-3f0b-a07b-0ab0bf5b57ee.roa (raw, json) Hash identifier: 8ym1mtnyLMQzbOt/5IvD9Csta8MUgqk+8ltKBChLWmM= Subject key identifier: 47:BE:95:B2:16:14:56:90:06:1A:A7:3B:37:1B:30:2F:69:9B:EC:4C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FE2C7B9FCC0743000A560 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1f77b53a-4236-3f0b-a07b-0ab0bf5b57ee.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 21805 IP address blocks: 2001:470:20c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:e2:c7:b9:fc:c0:74:30:00:a5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=c82d082e-1cfd-4c20-8775-1e9612f36e03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0a:66:5d:4a:30:4e:d1:c6:69:f3:4c:ce:9e: 98:a1:c1:44:6d:06:9d:dc:4d:ac:96:56:ee:ed:14: ef:bf:f6:52:94:e2:6b:96:91:50:a6:d1:3d:ae:f1: 2f:0e:1b:16:11:49:0b:36:10:93:9c:c3:6b:f2:18: f6:82:c4:03:1f:0d:f5:8b:1a:12:b8:24:d3:c6:99: 8b:1b:a5:7e:36:59:3f:0f:aa:86:3f:5a:e6:d9:ad: 96:62:d2:41:bc:b3:80:d6:30:a7:50:8c:8b:54:77: 0a:bb:21:97:6d:c6:19:d4:e8:52:5a:ca:86:cd:b5: 43:61:55:f2:f9:51:f8:61:e7:8a:aa:14:bf:79:5e: 03:fd:ff:d2:4f:06:cf:d1:53:d8:82:0b:58:91:8c: 64:0d:7d:d1:b7:3b:35:2b:27:89:e6:ff:ba:52:4d: 7c:e6:e9:90:f0:20:d0:0d:93:d6:94:7f:46:bd:8e: 2b:ff:0a:d6:47:5a:d2:9e:74:76:c5:18:33:f3:fb: 31:66:3d:7c:24:46:c2:ed:8c:38:79:fd:d5:f1:3a: 51:d6:20:e7:0f:df:13:35:e8:e4:df:61:87:88:2d: 0e:1c:49:ed:e3:17:a2:83:39:8a:76:00:13:e4:1e: 1e:e2:ba:f6:8f:ca:3c:87:1b:45:1d:38:c7:8c:36: 89:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:BE:95:B2:16:14:56:90:06:1A:A7:3B:37:1B:30:2F:69:9B:EC:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1f77b53a-4236-3f0b-a07b-0ab0bf5b57ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:20c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:b6:46:c1:c5:19:b5:5a:c2:78:d9:d6:7c:f8:44:0b:48:2b: fc:8e:f7:e2:54:1f:9d:61:28:24:97:7c:04:fc:45:da:5d:83: 8c:6b:74:49:16:ca:79:76:60:11:27:47:d5:c1:52:d0:02:a5: 7c:f6:c5:3d:54:d9:79:25:f8:69:73:01:45:cc:6c:dc:62:63: 7c:28:55:6a:f5:47:ab:c9:78:97:2d:2d:8f:98:3e:0c:75:12: 9e:9c:b0:5a:f0:39:b9:5f:b8:fa:e5:85:34:54:38:0a:8e:89: 42:89:94:19:28:ff:1e:0c:35:dd:fd:4b:84:8c:5a:dd:fe:1c: 7d:a6:45:e6:57:94:01:0e:db:5c:cd:0a:b3:f7:2f:db:db:66: 0f:c1:02:f1:17:44:6b:f7:0f:5a:0d:e8:b7:65:b4:61:13:80: 07:77:13:e9:e6:0e:53:24:49:b7:cb:5e:d7:bb:a3:4e:b6:45: 15:34:0d:43:db:e8:d5:2e:2c:98:18:3f:74:bb:f9:2e:c0:ac: df:46:89:29:ed:0b:2e:84:00:8a:46:5f:55:76:72:1e:2d:d2: 2a:17:d2:ac:5d:8c:fe:88:3d:d9:b2:2c:1d:08:d5:a4:b9:69: f5:cc:29:67:ae:05:87:dc:de:a8:25:9a:1d:35:ac:66:b3:2a: fb:01:4d:c6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX+LHufzAdDAApWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk YzgyZDA4MmUtMWNmZC00YzIwLTg3NzUtMWU5NjEyZjM2ZTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ApmXUowTtHGafNMzp6YocFEbQad3E2sllbu 7RTvv/ZSlOJrlpFQptE9rvEvDhsWEUkLNhCTnMNr8hj2gsQDHw31ixoSuCTTxpmL G6V+Nlk/D6qGP1rm2a2WYtJBvLOA1jCnUIyLVHcKuyGXbcYZ1OhSWsqGzbVDYVXy +VH4YeeKqhS/eV4D/f/STwbP0VPYggtYkYxkDX3Rtzs1KyeJ5v+6Uk185umQ8CDQ DZPWlH9GvY4r/wrWR1rSnnR2xRgz8/sxZj18JEbC7Yw4ef3V8TpR1iDnD98TNejk 32GHiC0OHEnt4xeigzmKdgAT5B4e4rr2j8o8hxtFHTjHjDaJswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEe+lbIWFFaQBhqnOzcbMC9pm+xMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMWY3N2I1M2EtNDIzNi0z ZjBiLWEwN2ItMGFiMGJmNWI1N2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAIM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFW2RsHFGbVawnjZ1nz4RAtIK/yO9+JUH51hKCSXfAT8Rdpdg4xr dEkWynl2YBEnR9XBUtACpXz2xT1U2Xkl+GlzAUXMbNxiY3woVWr1R6vJeJctLY+Y Pgx1Ep6csFrwOblfuPrlhTRUOAqOiUKJlBko/x4MNd39S4SMWt3+HH2mReZXlAEO 21zNCrP3L9vbZg/BAvEXRGv3D1oN6LdltGETgAd3E+nmDlMkSbfLXte7o062RRU0 DUPb6NUuLJgYP3S7+S7ArN9GiSntCy6EAIpGX1V2ch4t0ioX0qxdjP6IPdmyLB0I 1aS5afXMKWeuBYfc3qglmh01rGazKvsBTcY= -----END CERTIFICATE-----Generated at Mon Jun 16 03:19:51 2025 by rpki-client