$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4cc6f688-b1c0-3f95-8c31-f91cb39b1501.roa File: 4cc6f688-b1c0-3f95-8c31-f91cb39b1501.roa (raw, json) Hash identifier: /78O2KvcOZvEHO+bVbh1D0bxVfWuRd8crvTSUPl8Z28= Subject key identifier: B7:D9:2D:E9:20:11:EC:E0:F0:7D:14:68:E6:00:36:10:63:42:55:6E Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FD70FC6A3BE5BDEA81280 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4cc6f688-b1c0-3f95-8c31-f91cb39b1501.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 18638 IP address blocks: 2001:470:8c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:d7:0f:c6:a3:be:5b:de:a8:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=bc20d878-cc9e-499b-a6b9-a7b4fe6b5117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f1:9e:7f:5c:40:cd:e0:be:bb:1a:7b:c3:50: bb:d6:5d:10:07:9e:61:ab:59:73:6c:46:1d:1c:77: cf:73:7f:d3:33:1d:44:63:88:b7:e5:44:88:d2:32: c7:69:7d:9d:bd:d8:dd:f6:6a:e1:39:6e:de:96:f2: 35:67:9f:bc:06:33:9c:36:eb:7e:26:61:b9:f2:a6: 6d:bc:f5:19:cf:d8:bb:79:91:1d:60:44:35:6c:6a: 24:8f:50:34:bd:47:63:1a:b0:0b:6f:d5:bc:e9:d4: aa:b2:be:26:41:b9:fb:56:9f:e7:38:81:ba:12:93: e9:ad:bb:47:fd:ad:05:c3:af:c9:92:e6:c1:35:6b: 10:5e:83:31:15:e4:61:53:8d:ec:f3:ea:ea:07:d3: 44:b6:b9:9a:a8:66:71:9d:2d:36:8f:05:66:15:7d: eb:c5:a1:39:e6:85:29:ef:c3:e8:ad:27:6a:c9:02: 94:7b:92:e6:6b:28:f2:61:f2:4e:df:8f:a2:c5:e9: 60:08:7c:23:85:44:ac:ff:59:93:94:c8:6e:32:5c: d2:d8:e6:81:14:0c:75:b3:4d:48:aa:d3:d5:7e:3d: 02:a9:11:67:c1:7d:53:02:df:38:06:76:32:6a:83: 96:de:28:a0:8d:30:08:dc:cb:e9:84:28:28:bb:ea: fc:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D9:2D:E9:20:11:EC:E0:F0:7D:14:68:E6:00:36:10:63:42:55:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4cc6f688-b1c0-3f95-8c31-f91cb39b1501.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:8c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:ae:49:b8:d6:12:58:ab:2c:ce:27:4f:4e:f8:47:b0:7b:e6: 72:77:46:c1:73:24:12:76:c4:1b:cd:24:5d:a1:83:a2:31:1d: 4e:2a:09:bc:1b:55:3f:7e:f6:2f:7f:55:81:08:84:05:ff:f5: b3:17:47:4d:9f:ce:89:6d:04:3d:1c:14:5d:30:e5:61:ea:c1: 00:f8:81:7a:76:1d:bc:f4:30:a6:26:a1:4b:fe:59:c0:ae:49: 02:9a:ea:bd:44:df:92:e6:cb:19:16:e5:db:ef:7f:ba:79:44: 10:17:41:0b:d1:c9:bd:98:91:c6:23:21:bd:32:4d:8f:21:0b: 4f:2a:b2:10:d9:7a:db:7b:09:f3:8f:09:a3:aa:c0:9d:a7:a7: 00:6d:26:cd:7b:ff:c6:9e:91:87:19:65:91:b2:e6:a1:59:dc: 24:4d:d3:b7:e9:b7:d9:e7:1e:9a:36:35:48:19:55:80:1e:9d: d6:5d:2b:6e:86:87:3c:be:94:f5:39:76:27:61:a7:23:81:a1: 98:2d:60:aa:f0:dd:28:c6:86:ee:af:0e:2f:5f:9d:75:a2:f3: 51:c7:52:8c:8f:0d:0c:95:81:25:a3:80:5d:30:6e:d6:e5:11: 32:70:98:8a:d8:77:5c:b5:ec:a8:22:c3:fd:8f:04:4d:fa:15: 42:8e:89:95 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX9cPxqO+W96oEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk YmMyMGQ4NzgtY2M5ZS00OTliLWE2YjktYTdiNGZlNmI1MTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifGef1xAzeC+uxp7w1C71l0QB55hq1lzbEYd HHfPc3/TMx1EY4i35USI0jLHaX2dvdjd9mrhOW7elvI1Z5+8BjOcNut+JmG58qZt vPUZz9i7eZEdYEQ1bGokj1A0vUdjGrALb9W86dSqsr4mQbn7Vp/nOIG6EpPprbtH /a0Fw6/JkubBNWsQXoMxFeRhU43s8+rqB9NEtrmaqGZxnS02jwVmFX3rxaE55oUp 78PorSdqyQKUe5LmayjyYfJO34+ixelgCHwjhUSs/1mTlMhuMlzS2OaBFAx1s01I qtPVfj0CqRFnwX1TAt84BnYyaoOW3iigjTAI3MvphCgou+r86QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLfZLekgEezg8H0UaOYANhBjQlVuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNGNjNmY2ODgtYjFjMC0z Zjk1LThjMzEtZjkxY2IzOWIxNTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGGuSbjWElirLM4nT074R7B75nJ3RsFzJBJ2xBvNJF2hg6IxHU4q CbwbVT9+9i9/VYEIhAX/9bMXR02fzoltBD0cFF0w5WHqwQD4gXp2Hbz0MKYmoUv+ WcCuSQKa6r1E35LmyxkW5dvvf7p5RBAXQQvRyb2YkcYjIb0yTY8hC08qshDZett7 CfOPCaOqwJ2npwBtJs17/8aekYcZZZGy5qFZ3CRN07fpt9nnHpo2NUgZVYAendZd K26Ghzy+lPU5didhpyOBoZgtYKrw3SjGhu6vDi9fnXWi81HHUoyPDQyVgSWjgF0w btblETJwmIrYd1y17Kgiw/2PBE36FUKOiZU= -----END CERTIFICATE-----Generated at Sun Jun 15 15:44:53 2025 by rpki-client