$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2cf4cb12-1642-3c7a-920f-da665acf4ab4.roa File: 2cf4cb12-1642-3c7a-920f-da665acf4ab4.roa (raw, json) Hash identifier: MteJJWpkEpvqdPJS0IQ76yopARV2jbyDdjJ2kd2xE8I= Subject key identifier: C2:6C:E2:DA:02:90:1F:3C:E7:BB:80:15:6A:91:31:7A:3E:78:3B:93 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A19FABC8E465C5B3853C97500 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2cf4cb12-1642-3c7a-920f-da665acf4ab4.roa Signing time: Fri 06 Jun 2025 13:01:04 +0000 ROA not before: Fri 06 Jun 2025 13:01:04 +0000 ROA not after: Thu 04 Sep 2025 13:01:04 +0000 asID: 393301 IP address blocks: 2001:470:3e8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:19:fa:bc:8e:46:5c:5b:38:53:c9:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 6 13:01:04 2025 GMT Not After : Sep 4 13:01:04 2025 GMT Subject: CN=516d7582-573d-47d8-9764-ece96280be88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e7:a6:67:57:af:61:e1:73:c0:65:6f:71:a5: 78:a8:71:39:46:bd:9f:e4:bd:a8:e2:d8:b4:98:39: ae:17:db:b0:4c:83:23:b1:4c:82:34:a9:a9:4a:58: 3c:69:a0:3d:d9:71:78:6c:91:da:9a:1c:ee:90:98: 40:c0:ce:7e:cb:99:9c:b4:cc:10:c9:8f:31:c1:92: fb:29:f1:f5:06:b1:33:43:65:6d:e8:8d:74:e2:d0: ba:d2:aa:af:76:20:77:ac:09:48:99:ff:7b:5f:cf: 97:cb:8f:ab:69:a4:ea:b1:de:71:a3:3c:28:a2:08: 62:f5:4a:22:dd:8c:40:4d:ab:76:70:be:f6:15:99: f1:c2:f5:74:eb:a1:39:ec:ff:10:84:b3:ea:36:cc: 5f:a9:47:9f:38:ca:55:25:15:9d:b2:50:ed:94:a0: 5d:48:29:c4:67:74:33:cd:aa:66:40:13:da:00:b5: 15:c2:23:a6:69:cc:9f:51:be:08:a5:8a:db:84:26: c2:3a:c4:15:a9:f0:4b:df:6c:e2:6d:5c:ad:28:a6: e0:b1:87:e9:71:7d:35:9b:41:9b:3e:bb:20:c8:ca: d6:e9:b6:1c:e6:26:64:9a:5d:0f:dd:81:13:90:4e: c0:1d:55:20:1a:e3:4d:1a:25:23:1d:e9:89:f4:bd: f3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:6C:E2:DA:02:90:1F:3C:E7:BB:80:15:6A:91:31:7A:3E:78:3B:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2cf4cb12-1642-3c7a-920f-da665acf4ab4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3e8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:1a:33:f2:99:4e:e0:36:3f:b7:1a:05:24:d7:8c:ad:bf:c8: b7:e9:6f:1b:b0:3d:4a:2b:03:5a:7f:3b:aa:39:a4:e3:b3:49: 48:d6:1c:6c:42:ec:1c:04:38:92:5a:b9:ed:62:b4:6f:33:e1: 0b:a6:d9:d4:f2:3a:91:2b:d2:c8:c5:76:44:32:07:21:4a:4b: 37:d2:42:72:6c:0b:bf:a4:58:27:ae:e4:a3:50:c2:02:40:a2: 8a:aa:74:f0:58:b0:50:f3:f8:f4:99:2a:5f:e5:25:81:56:09: e9:86:db:30:17:89:01:70:37:be:fd:fc:d5:0f:77:33:96:7b: 23:ea:dd:01:00:57:43:70:c1:7c:ea:2c:f1:2c:23:18:c5:d5: 33:03:9d:0a:bb:ad:bc:cc:2a:20:3d:15:e1:69:63:02:35:e2: 46:f3:90:ad:59:5c:7f:be:86:16:3e:08:c1:cc:55:c3:dd:27: 3c:85:f1:c2:5a:2d:be:48:25:ef:a5:70:07:7c:d5:bf:f7:ed: a6:98:cb:cf:92:51:4e:63:08:66:d8:17:1a:16:8a:d6:8e:20: 14:86:be:b3:0f:8c:11:ae:cc:53:b5:51:7b:2d:54:0a:7a:48: 0f:8b:d0:41:d3:78:6b:16:75:6e:af:2e:36:af:94:18:93:4a: fc:5b:50:c2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoZ+ryORlxbOFPJdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDYwNjEzMDEwNFoXDTI1MDkwNDEzMDEwNFowLzEtMCsGA1UEAxMk NTE2ZDc1ODItNTczZC00N2Q4LTk3NjQtZWNlOTYyODBiZTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuemZ1evYeFzwGVvcaV4qHE5Rr2f5L2o4ti0 mDmuF9uwTIMjsUyCNKmpSlg8aaA92XF4bJHamhzukJhAwM5+y5mctMwQyY8xwZL7 KfH1BrEzQ2Vt6I104tC60qqvdiB3rAlImf97X8+Xy4+raaTqsd5xozwooghi9Uoi 3YxATat2cL72FZnxwvV066E57P8QhLPqNsxfqUefOMpVJRWdslDtlKBdSCnEZ3Qz zapmQBPaALUVwiOmacyfUb4IpYrbhCbCOsQVqfBL32zibVytKKbgsYfpcX01m0Gb PrsgyMrW6bYc5iZkml0P3YETkE7AHVUgGuNNGiUjHemJ9L3zywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMJs4toCkB8857uAFWqRMXo+eDuTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMmNmNGNiMTItMTY0Mi0z YzdhLTkyMGYtZGE2NjVhY2Y0YWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFsaM/KZTuA2P7caBSTXjK2/yLfpbxuwPUorA1p/O6o5pOOzSUjW HGxC7BwEOJJaue1itG8z4Qum2dTyOpEr0sjFdkQyByFKSzfSQnJsC7+kWCeu5KNQ wgJAooqqdPBYsFDz+PSZKl/lJYFWCemG2zAXiQFwN779/NUPdzOWeyPq3QEAV0Nw wXzqLPEsIxjF1TMDnQq7rbzMKiA9FeFpYwI14kbzkK1ZXH++hhY+CMHMVcPdJzyF 8cJaLb5IJe+lcAd81b/37aaYy8+SUU5jCGbYFxoWitaOIBSGvrMPjBGuzFO1UXst VAp6SA+L0EHTeGsWdW6vLjavlBiTSvxbUMI= -----END CERTIFICATE-----Generated at Sun Jun 15 16:09:58 2025 by rpki-client