$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2cf8eca0-6c8b-344c-8a99-4b8ad446f7b8.roa File: 2cf8eca0-6c8b-344c-8a99-4b8ad446f7b8.roa (raw, json) Hash identifier: Y1vsHybC5QpKiw9rwfJ9km8xPCnwWjKk92J3LWvYXD8= Subject key identifier: 7C:E5:D3:2F:14:A7:DF:D5:E7:FF:EF:BF:97:2D:11:CF:C2:87:17:16 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FE6FC5D77AFADC0DDD800 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2cf8eca0-6c8b-344c-8a99-4b8ad446f7b8.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 43525 IP address blocks: 2001:470:2a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:e6:fc:5d:77:af:ad:c0:dd:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=6b251d3c-d87c-45c3-b7c0-5a1dfdff61d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0e:05:9f:4f:19:06:c3:b6:55:06:17:68:46: 02:2b:87:61:5d:39:4e:f7:ea:a9:81:1f:a4:89:93: 98:72:f5:56:22:a2:c2:5d:dd:ab:5a:6c:c8:d7:b3: fb:a4:2c:bc:69:42:57:60:9d:7a:43:86:6b:e4:b7: 07:02:27:6e:e3:e5:49:4d:b3:5a:05:43:3a:da:8a: 4a:05:c6:14:6d:16:36:ab:39:ed:ca:e8:f4:18:ef: e6:0b:59:55:82:ee:88:62:c0:20:5f:ee:44:5b:55: 80:4c:03:f7:de:5c:91:14:42:76:58:7e:29:93:c5: 2e:cc:42:ec:24:99:06:9a:32:e0:49:8a:bd:e1:e6: a2:cd:ca:2d:b5:b6:1a:7e:47:1e:6c:0c:29:2d:43: 7a:9a:89:a7:60:0b:de:80:ed:bd:21:f2:99:6c:c9: c5:12:13:1c:a7:bf:49:4c:c8:18:04:f0:27:ef:7f: 02:24:96:ab:e8:03:c0:1f:4b:8e:3f:fe:f6:69:b3: 3b:ff:8a:20:f0:5c:71:d7:67:e7:d5:3b:5f:09:75: ff:09:9c:50:b9:05:ec:4d:41:55:7a:f3:52:ca:35: b9:58:99:74:2e:67:04:a6:bb:a7:59:f2:67:71:43: c5:ec:a9:65:9b:50:29:74:55:d6:ef:81:77:67:20: 3c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:E5:D3:2F:14:A7:DF:D5:E7:FF:EF:BF:97:2D:11:CF:C2:87:17:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2cf8eca0-6c8b-344c-8a99-4b8ad446f7b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:13:3f:9c:22:f0:9a:4d:0f:f8:c0:55:f0:cc:ca:f8:e2:03: 63:ef:00:3a:02:bc:7b:f2:3c:69:35:3e:fd:a3:37:e6:73:47: 25:28:0d:c1:b5:98:f8:46:bc:b9:98:13:0e:41:dd:db:f7:68: 1b:94:7d:68:17:38:9d:ff:88:65:c3:a7:c1:0f:ed:62:cd:e8: 70:48:c9:5e:56:14:0d:bd:28:c2:7c:b6:b4:07:e2:59:37:b5: e3:13:1a:1c:8d:4e:27:76:a5:ea:ae:da:70:a8:34:de:46:5d: b4:67:8d:a7:7b:1d:92:98:0d:7d:54:10:91:34:3b:70:f5:ac: 89:a3:1e:99:5d:e3:a8:39:96:03:3c:14:2b:6e:ed:5b:26:ec: a8:70:9c:42:b9:b8:18:75:e8:b5:3a:44:d8:a9:6f:ee:7e:5a: e8:2f:11:26:0e:04:53:d6:ec:5f:55:a0:e1:00:3f:65:38:6b: 56:99:43:a8:2e:ad:69:c8:db:db:4c:00:58:15:06:23:50:90: ba:a5:10:41:53:a6:45:94:8c:f4:af:5c:16:ef:a5:ff:7c:9c: 59:39:7a:8a:08:34:de:9f:93:92:af:08:91:4c:2c:97:fc:a5: d9:26:cf:61:9e:68:ea:78:09:cd:a9:46:11:bf:e5:bd:f9:03: 9a:29:56:2e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX+b8XXevrcDd2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk NmIyNTFkM2MtZDg3Yy00NWMzLWI3YzAtNWExZGZkZmY2MWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtA4Fn08ZBsO2VQYXaEYCK4dhXTlO9+qpgR+k iZOYcvVWIqLCXd2rWmzI17P7pCy8aUJXYJ16Q4Zr5LcHAidu4+VJTbNaBUM62opK BcYUbRY2qzntyuj0GO/mC1lVgu6IYsAgX+5EW1WATAP33lyRFEJ2WH4pk8UuzELs JJkGmjLgSYq94eaizcottbYafkcebAwpLUN6momnYAvegO29IfKZbMnFEhMcp79J TMgYBPAn738CJJar6APAH0uOP/72abM7/4og8Fxx12fn1TtfCXX/CZxQuQXsTUFV evNSyjW5WJl0LmcEprunWfJncUPF7Kllm1ApdFXW74F3ZyA8sQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHzl0y8Up9/V5//vv5ctEc/ChxcWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMmNmOGVjYTAtNmM4Yi0z NDRjLThhOTktNGI4YWQ0NDZmN2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADgTP5wi8JpND/jAVfDMyvjiA2PvADoCvHvyPGk1Pv2jN+ZzRyUo DcG1mPhGvLmYEw5B3dv3aBuUfWgXOJ3/iGXDp8EP7WLN6HBIyV5WFA29KMJ8trQH 4lk3teMTGhyNTid2pequ2nCoNN5GXbRnjad7HZKYDX1UEJE0O3D1rImjHpld46g5 lgM8FCtu7Vsm7KhwnEK5uBh16LU6RNipb+5+WugvESYOBFPW7F9VoOEAP2U4a1aZ Q6gurWnI29tMAFgVBiNQkLqlEEFTpkWUjPSvXBbvpf98nFk5eooINN6fk5KvCJFM LJf8pdkmz2GeaOp4Cc2pRhG/5b35A5opVi4= -----END CERTIFICATE-----Generated at Sun Jun 15 14:55:52 2025 by rpki-client