$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/340bb89b-bff7-33c5-9516-1f6aefbb7b38.roa File: 340bb89b-bff7-33c5-9516-1f6aefbb7b38.roa (raw, json) Hash identifier: 4XGIxUijvlmnyU4DQYmRWivZLyZ1FUuBBzQHMQJuWSk= Subject key identifier: 02:86:48:B3:54:7C:47:33:77:25:B6:FA:39:EB:4E:55:9B:50:04:7E Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FB411023DD80E22362500 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/340bb89b-bff7-33c5-9516-1f6aefbb7b38.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 21589 IP address blocks: 2001:470:f0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:b4:11:02:3d:d8:0e:22:36:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=ad26ae78-548f-4e1a-bd65-9ef41cc3cc52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:61:43:03:7f:28:87:fd:5f:e2:ae:a1:aa:fb: 42:ed:b2:2c:76:bf:c9:be:32:2d:73:a7:de:c6:e6: 23:16:3c:88:17:7a:71:9d:71:72:b4:f0:71:0a:b7: 24:31:ba:2a:8e:50:24:57:6f:8e:c4:57:9b:28:68: b2:10:d4:2d:9a:6b:45:4f:04:05:7e:80:b4:29:1e: 3b:66:29:d4:00:ee:5a:2b:65:4e:e0:2f:7c:ea:1b: bb:f6:5f:38:22:78:18:f2:7a:14:b1:f4:8f:5b:9c: 1d:29:fd:9c:ac:97:48:72:f9:a9:2c:95:47:db:4e: 0e:96:d2:36:bf:d0:4c:df:24:89:bb:23:52:d3:3a: 02:64:cf:de:58:72:db:41:e2:c1:02:52:79:b4:7a: 22:7f:de:45:03:95:14:88:c2:fa:46:c3:cb:9d:a4: 7d:f9:06:37:07:53:0f:0d:7b:4c:25:63:ab:9e:17: 4b:75:58:1a:b9:d7:1e:a8:ab:81:9d:f6:17:4f:1a: d8:dd:54:34:94:b1:49:97:25:e6:a3:e8:6a:a7:ed: 1c:69:16:e0:6d:c9:7a:63:8d:02:80:1c:fe:22:27: 35:fb:38:b2:b2:06:85:41:c4:f4:a6:92:9e:5f:e2: 7f:76:1b:50:f0:b9:5f:85:3c:b6:1f:77:de:3e:da: aa:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:86:48:B3:54:7C:47:33:77:25:B6:FA:39:EB:4E:55:9B:50:04:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/340bb89b-bff7-33c5-9516-1f6aefbb7b38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:f0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:6d:a2:ff:ba:aa:30:9b:8e:1d:f2:c3:a3:28:a7:f4:b7:9a: 2d:60:ce:6c:91:e3:2e:3a:79:42:6f:b8:ad:5a:97:c5:0a:a4: 64:e1:4b:87:82:28:e0:f1:32:bd:94:e7:ba:99:4a:8e:e7:e0: f5:cc:35:e5:aa:47:36:0b:c2:39:c1:41:aa:c8:ac:f0:1f:0d: dd:29:e7:81:3f:91:79:c6:0b:87:1f:be:a6:0f:45:71:49:78: 2f:6a:53:5a:66:c9:95:91:12:8d:f9:90:ac:36:1d:52:61:14: 1b:1d:80:c5:72:c0:e3:19:4b:7f:52:aa:3e:28:78:a5:62:fe: 91:49:ef:32:67:46:43:85:89:08:20:9b:a7:d2:fe:1b:6c:e2: 29:b4:7a:bb:a6:6e:57:58:a9:25:a2:ee:d5:2f:34:6b:83:5c: 99:ea:18:cf:b2:e9:77:c9:0e:61:37:74:88:aa:0b:8c:63:da: 9d:d6:6b:58:ca:6f:5b:44:2e:48:e7:a9:50:2a:e2:15:83:4d: 13:d2:48:13:d8:6a:e7:c5:f4:76:3d:ed:49:91:79:95:7f:9d: 9f:d3:76:31:93:61:9b:f9:c3:10:29:67:ea:c2:13:47:e0:83: d7:0c:12:9c:b5:d6:12:f1:e9:bf:b6:d0:0e:a4:6b:30:c8:d9: 72:43:e0:d0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX7QRAj3YDiI2JQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk YWQyNmFlNzgtNTQ4Zi00ZTFhLWJkNjUtOWVmNDFjYzNjYzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGFDA38oh/1f4q6hqvtC7bIsdr/JvjItc6fe xuYjFjyIF3pxnXFytPBxCrckMboqjlAkV2+OxFebKGiyENQtmmtFTwQFfoC0KR47 ZinUAO5aK2VO4C986hu79l84IngY8noUsfSPW5wdKf2crJdIcvmpLJVH204OltI2 v9BM3ySJuyNS0zoCZM/eWHLbQeLBAlJ5tHoif95FA5UUiML6RsPLnaR9+QY3B1MP DXtMJWOrnhdLdVgaudceqKuBnfYXTxrY3VQ0lLFJlyXmo+hqp+0caRbgbcl6Y40C gBz+Iic1+ziysgaFQcT0ppKeX+J/dhtQ8LlfhTy2H3fePtqqAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAKGSLNUfEczdyW2+jnrTlWbUAR+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzQwYmI4OWItYmZmNy0z M2M1LTk1MTYtMWY2YWVmYmI3YjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGVtov+6qjCbjh3yw6Mop/S3mi1gzmyR4y46eUJvuK1al8UKpGTh S4eCKODxMr2U57qZSo7n4PXMNeWqRzYLwjnBQarIrPAfDd0p54E/kXnGC4cfvqYP RXFJeC9qU1pmyZWREo35kKw2HVJhFBsdgMVywOMZS39Sqj4oeKVi/pFJ7zJnRkOF iQggm6fS/hts4im0erumbldYqSWi7tUvNGuDXJnqGM+y6XfJDmE3dIiqC4xj2p3W a1jKb1tELkjnqVAq4hWDTRPSSBPYaufF9HY97UmReZV/nZ/TdjGTYZv5wxApZ+rC E0fgg9cMEpy11hLx6b+20A6kazDI2XJD4NA= -----END CERTIFICATE-----Generated at Sun Jun 15 15:16:52 2025 by rpki-client