$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4083e462-20aa-3a3d-9351-277f5d3e760a.roa File: 4083e462-20aa-3a3d-9351-277f5d3e760a.roa (raw, json) Hash identifier: VTqy15cyK8pJchxvl6kPjPR6lsNQgDakRgYw0esho3c= Subject key identifier: 6D:D5:DE:EA:1C:7E:4A:58:13:F0:73:96:7A:FD:51:3E:33:57:AE:F1 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A2ABAFAFCC70361EDC77152C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4083e462-20aa-3a3d-9351-277f5d3e760a.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 4474 IP address blocks: 2001:470:3aa::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:fa:fc:c7:03:61:ed:c7:71:52:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=0e52251f-04ff-4ccb-895a-c2f7c36c6f91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:02:7a:fd:9f:75:c5:5a:36:68:c7:c5:2b:cd: de:19:7e:a8:0c:8f:8a:e6:a8:e6:5f:7d:a4:a7:94: 53:85:99:3b:99:f2:0b:b8:e4:a8:7a:69:32:69:37: 1e:67:92:a1:69:2b:db:d5:d7:93:d1:ab:6e:04:7a: e1:ce:38:1a:51:be:97:0f:87:6e:47:4c:cc:3d:c0: 13:eb:1d:57:8a:12:e9:43:5a:18:71:16:e0:2f:32: eb:75:e8:3c:f6:e3:77:aa:96:8c:d9:c9:8a:0e:2c: 2a:51:49:d7:6f:6a:38:9f:df:80:05:d8:dc:70:72: 4e:e7:c0:7b:e9:13:36:89:7a:57:a4:c1:64:0b:51: 50:b5:b1:b1:8a:f7:d6:0a:f8:90:ef:d9:ba:65:5f: 57:ae:ce:27:86:4d:d1:9a:5f:81:06:b2:7b:96:40: d5:01:da:ec:f6:32:4d:7d:d7:b8:5d:3c:1c:55:06: d9:00:3d:5d:f3:c9:54:e8:16:51:24:83:ce:0f:60: 82:be:dc:62:8b:f8:c1:df:9c:c8:0e:e2:d6:f7:c1: 02:a9:75:c5:aa:2d:c3:6e:eb:1f:85:c9:7c:87:e9: 6e:bb:b7:2b:25:7f:eb:be:04:5b:62:98:e0:01:23: 29:1a:aa:2a:c2:97:3e:c6:70:04:5e:88:e9:f4:d2: 77:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D5:DE:EA:1C:7E:4A:58:13:F0:73:96:7A:FD:51:3E:33:57:AE:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4083e462-20aa-3a3d-9351-277f5d3e760a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3aa::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:73:9d:8c:f9:e6:81:15:07:86:88:18:68:2b:ed:63:eb:f2: 59:80:e3:25:09:f8:d5:de:9b:7c:a6:e6:a2:aa:49:f3:ea:e5: 41:37:49:d7:88:19:03:90:86:fb:08:03:10:98:60:45:0e:4c: e7:8e:08:bd:5d:22:c2:23:1c:ff:76:88:9c:76:f6:d1:10:89: 7d:5b:c3:7d:e6:3c:19:35:9c:92:e9:d5:b2:07:f2:d6:cb:a1: ea:7c:e3:7b:74:6c:72:6f:57:d8:06:a8:8a:52:dc:c8:d0:ed: 8c:6c:d1:70:47:84:93:ba:0a:86:e0:92:18:99:6a:88:ff:ca: 08:85:a8:d1:72:d3:51:fa:34:c1:eb:f9:38:30:22:b3:5d:f6: e0:32:bd:dc:91:78:b3:4f:17:b7:23:dc:b1:b3:0b:9d:1c:74: b4:49:31:f5:6b:9c:8e:ff:4a:c2:b5:19:17:07:d9:2b:b7:4f: 6f:4a:76:b2:00:f2:29:e0:78:4c:8e:4a:bb:61:62:50:63:15: 3a:ec:74:21:d0:7d:c2:c6:db:1b:58:a3:d1:c7:a4:5b:13:26: 24:70:16:f5:ee:c4:2f:ca:64:00:56:8e:c9:d9:94:3a:44:2b: d3:53:e5:8f:8f:cc:54:a2:87:65:23:5f:d2:7f:50:8f:54:30: 3c:99:71:1f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoquvr8xwNh7cdxUsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk MGU1MjI1MWYtMDRmZi00Y2NiLTg5NWEtYzJmN2MzNmM2ZjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QJ6/Z91xVo2aMfFK83eGX6oDI+K5qjmX32k p5RThZk7mfILuOSoemkyaTceZ5KhaSvb1deT0atuBHrhzjgaUb6XD4duR0zMPcAT 6x1XihLpQ1oYcRbgLzLrdeg89uN3qpaM2cmKDiwqUUnXb2o4n9+ABdjccHJO58B7 6RM2iXpXpMFkC1FQtbGxivfWCviQ79m6ZV9Xrs4nhk3Rml+BBrJ7lkDVAdrs9jJN fde4XTwcVQbZAD1d88lU6BZRJIPOD2CCvtxii/jB35zIDuLW98ECqXXFqi3Dbusf hcl8h+luu7crJX/rvgRbYpjgASMpGqoqwpc+xnAEXojp9NJ3JwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG3V3uocfkpYE/Bzlnr9UT4zV67xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDA4M2U0NjItMjBhYS0z YTNkLTkzNTEtMjc3ZjVkM2U3NjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJxznYz55oEVB4aIGGgr7WPr8lmA4yUJ+NXem3ym5qKqSfPq5UE3 SdeIGQOQhvsIAxCYYEUOTOeOCL1dIsIjHP92iJx29tEQiX1bw33mPBk1nJLp1bIH 8tbLoep843t0bHJvV9gGqIpS3MjQ7Yxs0XBHhJO6CobgkhiZaoj/ygiFqNFy01H6 NMHr+TgwIrNd9uAyvdyReLNPF7cj3LGzC50cdLRJMfVrnI7/SsK1GRcH2Su3T29K drIA8ingeEyOSrthYlBjFTrsdCHQfcLG2xtYo9HHpFsTJiRwFvXuxC/KZABWjsnZ lDpEK9NT5Y+PzFSih2UjX9J/UI9UMDyZcR8= -----END CERTIFICATE-----Generated at Sun Jun 15 19:14:58 2025 by rpki-client