$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/25b45474-d9f3-30d7-af14-7920e9d69bf9.roa File: 25b45474-d9f3-30d7-af14-7920e9d69bf9.roa (raw, json) Hash identifier: Nc0exO6J9CstiyQF8hf2hSBCHxXr/0UmIbIUAcGuMfs= Subject key identifier: 04:14:34:B4:F2:38:09:FA:70:05:55:44:56:EE:AF:64:E5:BE:69:DF Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FBEF7BBA5E4F46D019D00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/25b45474-d9f3-30d7-af14-7920e9d69bf9.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 396106 IP address blocks: 2001:470:db::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:be:f7:bb:a5:e4:f4:6d:01:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=aa71b0b3-5079-4f77-83c1-5ac292f11615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:fd:bb:b0:23:4a:24:46:a1:de:47:12:22:cb: ce:e5:f5:dc:c8:20:aa:c1:4e:0f:c0:a8:49:17:31: 98:12:88:d0:f7:28:58:01:91:e6:78:b2:e5:bc:07: f0:8e:77:dc:d6:e3:4e:a2:c7:92:07:34:55:b6:3d: a3:13:7a:0f:d2:f8:a0:9f:b5:dd:66:8a:59:5e:6f: b5:28:98:96:28:fe:ba:5e:09:27:33:3b:34:17:87: f7:0f:08:85:68:45:4d:3f:7e:7d:ee:ea:8c:ca:72: 6a:67:c2:f1:d4:b2:ec:32:18:63:26:f3:01:f3:b8: c3:a4:c2:0e:0b:a9:9d:db:31:aa:42:7f:6e:cf:57: e7:dd:a0:5e:52:78:04:9e:5c:ab:3a:23:e2:61:2c: f4:89:6d:91:26:5a:af:ef:b7:ed:af:7e:d5:d5:0f: 42:0e:2f:f4:71:4e:56:8b:0c:65:17:cf:d1:d2:0b: 33:6f:0e:1f:46:6b:10:b0:9c:7b:38:0b:af:b1:45: 7f:15:e5:6a:8c:29:af:0e:54:ae:89:90:c6:28:4e: d5:35:9b:c1:8c:31:ed:9e:d7:6b:2d:7b:73:02:6f: 09:4e:63:3c:3b:68:2e:95:f7:d1:5e:41:25:66:2d: 91:a6:b3:9c:20:6d:d4:7b:57:35:f9:80:3d:21:d7: 22:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:14:34:B4:F2:38:09:FA:70:05:55:44:56:EE:AF:64:E5:BE:69:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/25b45474-d9f3-30d7-af14-7920e9d69bf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:db::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:a6:95:63:a8:75:fc:c0:09:0a:0b:09:3c:2e:4b:e5:5e:50: 3d:a7:41:2a:02:d7:4e:9b:a6:09:8a:f9:1f:cd:09:f7:89:60: 27:5c:2e:1f:1a:19:22:86:ef:68:da:2b:f4:9e:ce:41:71:39: 8a:a1:b4:d1:69:b7:47:14:42:74:bc:aa:6c:20:32:fc:d0:0c: 64:29:00:17:29:39:71:bb:a6:c8:a4:66:56:51:ef:87:0c:13: 87:4c:ce:33:b6:85:08:d0:b1:3f:dd:e7:ce:c5:74:fb:47:b6: 86:67:16:12:8a:d0:41:03:b9:b9:33:e0:d5:0c:5c:64:87:49: 1f:a8:cb:e5:1f:72:65:b3:dd:ab:c5:5b:fe:44:e3:29:c1:a8: 75:11:86:3b:89:db:f3:0a:f4:43:a2:89:fe:72:fc:10:61:7e: 54:97:3d:9f:ee:31:ce:f2:5b:e9:10:f9:7e:b2:4d:a5:22:df: f2:99:93:09:ab:1b:59:fa:33:cf:1e:67:18:ee:c9:8d:b4:84: 58:55:f4:b0:fd:61:4c:50:1f:c4:e5:30:f1:1d:2a:aa:8e:a2: e6:6b:07:8c:dd:f5:68:d5:d1:a7:54:1e:a7:46:2a:f7:d1:f6: 07:70:e7:15:d5:7c:86:eb:3a:42:9e:06:df:95:61:d0:5b:41: 98:df:64:7a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX773u6Xk9G0BnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk YWE3MWIwYjMtNTA3OS00Zjc3LTgzYzEtNWFjMjkyZjExNjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/27sCNKJEah3kcSIsvO5fXcyCCqwU4PwKhJ FzGYEojQ9yhYAZHmeLLlvAfwjnfc1uNOoseSBzRVtj2jE3oP0vign7XdZopZXm+1 KJiWKP66XgknMzs0F4f3DwiFaEVNP3597uqMynJqZ8Lx1LLsMhhjJvMB87jDpMIO C6md2zGqQn9uz1fn3aBeUngEnlyrOiPiYSz0iW2RJlqv77ftr37V1Q9CDi/0cU5W iwxlF8/R0gszbw4fRmsQsJx7OAuvsUV/FeVqjCmvDlSuiZDGKE7VNZvBjDHtntdr LXtzAm8JTmM8O2gulffRXkElZi2RprOcIG3Ue1c1+YA9IdciSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAQUNLTyOAn6cAVVRFbur2TlvmnfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjViNDU0NzQtZDlmMy0z MGQ3LWFmMTQtNzkyMGU5ZDY5YmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGGmlWOodfzACQoLCTwuS+VeUD2nQSoC106bpgmK+R/NCfeJYCdc Lh8aGSKG72jaK/SezkFxOYqhtNFpt0cUQnS8qmwgMvzQDGQpABcpOXG7psikZlZR 74cME4dMzjO2hQjQsT/d587FdPtHtoZnFhKK0EEDubkz4NUMXGSHSR+oy+UfcmWz 3avFW/5E4ynBqHURhjuJ2/MK9EOiif5y/BBhflSXPZ/uMc7yW+kQ+X6yTaUi3/KZ kwmrG1n6M88eZxjuyY20hFhV9LD9YUxQH8TlMPEdKqqOouZrB4zd9WjV0adUHqdG KvfR9gdw5xXVfIbrOkKeBt+VYdBbQZjfZHo= -----END CERTIFICATE-----Generated at Sun Jun 15 15:10:38 2025 by rpki-client