$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2f89687b-f121-332d-b3ad-525f229fc577.roa File: 2f89687b-f121-332d-b3ad-525f229fc577.roa (raw, json) Hash identifier: aV6xf9JlUEQXpfUawTsiL4a7imjXnwibesBTTF0/HPM= Subject key identifier: 75:1F:61:23:0E:5E:BE:C5:9B:D0:B7:9F:18:A1:BD:E9:20:83:BD:E4 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A0C0924F2896D3F951F1F5140 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2f89687b-f121-332d-b3ad-525f229fc577.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 58945 IP address blocks: 2001:470:39f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:09:24:f2:89:6d:3f:95:1f:1f:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=8580efd4-fad7-4ce3-9a54-73d7ef95508d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c6:51:22:64:30:f0:0e:55:fd:16:e0:35:f7: 82:ab:c4:27:c7:d4:0e:a8:ad:27:15:0b:53:25:a8: 3d:60:fb:2d:d0:d2:04:47:05:35:d4:26:da:e0:cc: 77:ae:dd:6f:53:61:7c:c7:f0:5f:c8:8a:12:3f:db: f2:4e:ca:e5:b0:01:94:7b:4b:6e:36:f4:48:40:45: 09:4d:24:6c:16:f0:69:bb:94:98:d1:da:e8:d8:a4: dd:a6:35:f5:40:77:85:96:1d:08:96:4f:44:bf:1c: ea:30:6e:8f:25:a7:41:06:ef:50:4d:82:c9:f9:da: 68:45:bc:09:eb:67:8e:67:89:92:e3:c2:15:95:69: df:47:8d:f9:3e:0d:92:57:06:60:eb:b7:e8:b2:79: fc:17:52:9b:08:3d:16:91:41:a5:db:89:08:c1:a9: c6:a0:3e:af:de:68:52:fb:b5:7f:a5:8b:3a:0e:9a: 07:67:ad:f7:49:75:8d:9c:91:a2:27:8d:5c:fe:d8: 8b:eb:a9:2a:b4:cb:18:ab:35:bc:83:d1:e0:71:1b: 4a:51:8b:78:30:e8:6d:6f:3d:d4:5c:07:fb:4f:fa: 2c:00:e5:a3:ea:6d:1a:8e:50:d4:3d:1b:fe:c1:3c: e5:e2:b8:26:bb:f6:56:39:75:d0:46:cc:2e:97:4a: 41:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:1F:61:23:0E:5E:BE:C5:9B:D0:B7:9F:18:A1:BD:E9:20:83:BD:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2f89687b-f121-332d-b3ad-525f229fc577.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:39f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:d0:52:ed:39:c4:a4:c6:b3:c8:69:43:1f:6e:57:38:da:c6: 7b:69:2e:aa:7e:6d:20:7d:fe:63:09:fa:88:f9:5e:21:9f:1b: b8:39:4d:a3:55:92:f2:5f:c5:29:58:3c:f1:40:63:c6:12:8a: 4f:be:0d:b3:27:0c:d8:6e:0d:54:c4:e6:42:e6:78:a6:1d:48: 69:3f:4d:6b:1c:5f:d4:09:82:0d:68:fb:4e:56:ba:15:a2:1c: 62:67:51:29:f6:02:b3:60:f7:cb:34:5c:74:36:5d:a2:d3:cf: d3:84:2a:4e:37:ad:76:3f:63:ba:3a:b7:69:9f:15:a3:53:4c: 4d:ad:29:19:60:17:31:14:c4:f6:25:89:88:8c:6b:51:ba:74: b1:df:e8:43:36:31:7a:26:59:cc:3f:d9:17:82:fe:8c:cf:de: 77:5e:33:41:7a:ed:d7:32:16:42:d5:8a:b5:3a:3c:f4:06:37: bb:54:e8:a4:02:35:73:1f:79:e1:45:eb:52:13:6f:32:30:a9: 43:5a:f5:de:75:9d:24:2b:7b:61:46:f2:bb:d1:a7:6e:7f:cb: d5:24:1b:26:0a:d6:12:e4:8e:3e:e5:5c:06:7d:a0:d7:06:55: ab:5b:89:99:d7:1e:18:16:5e:94:cb:46:ae:1d:bb:67:18:8b: 6d:ab:68:d4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoMCSTyiW0/lR8fUUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk ODU4MGVmZDQtZmFkNy00Y2UzLTlhNTQtNzNkN2VmOTU1MDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcZRImQw8A5V/RbgNfeCq8Qnx9QOqK0nFQtT Jag9YPst0NIERwU11Cba4Mx3rt1vU2F8x/BfyIoSP9vyTsrlsAGUe0tuNvRIQEUJ TSRsFvBpu5SY0dro2KTdpjX1QHeFlh0Ilk9EvxzqMG6PJadBBu9QTYLJ+dpoRbwJ 62eOZ4mS48IVlWnfR435Pg2SVwZg67fosnn8F1KbCD0WkUGl24kIwanGoD6v3mhS +7V/pYs6DpoHZ633SXWNnJGiJ41c/tiL66kqtMsYqzW8g9HgcRtKUYt4MOhtbz3U XAf7T/osAOWj6m0ajlDUPRv+wTzl4rgmu/ZWOXXQRswul0pBDwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHUfYSMOXr7Fm9C3nxihvekgg73kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMmY4OTY4N2ItZjEyMS0z MzJkLWIzYWQtNTI1ZjIyOWZjNTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGjQUu05xKTGs8hpQx9uVzjaxntpLqp+bSB9/mMJ+oj5XiGfG7g5 TaNVkvJfxSlYPPFAY8YSik++DbMnDNhuDVTE5kLmeKYdSGk/TWscX9QJgg1o+05W uhWiHGJnUSn2ArNg98s0XHQ2XaLTz9OEKk43rXY/Y7o6t2mfFaNTTE2tKRlgFzEU xPYliYiMa1G6dLHf6EM2MXomWcw/2ReC/ozP3ndeM0F67dcyFkLVirU6PPQGN7tU 6KQCNXMfeeFF61ITbzIwqUNa9d51nSQre2FG8rvRp25/y9UkGyYK1hLkjj7lXAZ9 oNcGVatbiZnXHhgWXpTLRq4du2cYi22raNQ= -----END CERTIFICATE-----Generated at Mon Jun 16 03:27:33 2025 by rpki-client