$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4d40b93d-acec-38dd-9713-18db9799f2d9.roa File: 4d40b93d-acec-38dd-9713-18db9799f2d9.roa (raw, json) Hash identifier: XFWFDB8vg1WhaUfp3UXpwB8Wu5mok/hfXdb1XAuir/I= Subject key identifier: 83:D6:4B:BE:D9:C8:70:89:9F:40:E2:D3:A8:61:88:C1:0D:ED:9E:62 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FC7EA23370E6920326200 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4d40b93d-acec-38dd-9713-18db9799f2d9.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 20432 IP address blocks: 2001:470:295::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:c7:ea:23:37:0e:69:20:32:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=ed3d312b-564d-4cee-9d43-2af19a7a290b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:cd:98:65:b0:34:ed:2a:f6:e2:6f:ad:6e:b7: e9:86:e8:df:6a:19:5c:7a:2c:ac:f7:1a:86:f9:0c: a2:b2:65:05:ca:ab:f1:92:84:53:d3:77:a5:13:c5: 35:1f:6d:9a:bb:ce:5c:4e:bb:96:9f:2e:71:fe:2f: be:69:2f:40:09:50:31:a5:db:66:86:e9:23:1b:05: 14:70:06:8a:67:bb:0d:b6:3d:9e:f3:89:14:ec:c9: ba:b0:53:35:fe:07:12:42:08:7a:f5:4c:a1:93:94: 62:07:7c:97:5f:1c:00:74:f7:f3:1a:65:b3:f4:04: ff:2e:d7:42:f1:82:aa:bf:04:78:8e:9c:93:1f:11: d9:e0:1e:4d:d5:1e:fa:f0:24:7e:23:b4:7e:b8:f9: 0d:ea:2e:18:29:80:36:64:b3:e8:82:1a:5e:e9:a8: 04:c1:4b:35:db:05:e3:90:dd:b2:5e:51:23:e0:d7: 9d:a0:63:b7:d6:5d:86:ce:34:8b:d5:65:8f:b7:25: a8:ec:18:d1:09:e4:1d:2d:87:5d:e4:81:21:14:da: 07:81:3c:89:96:42:e8:4d:8d:a3:09:1d:71:48:b3: 2f:a5:0a:c0:d8:78:eb:e9:50:f2:ca:d2:ec:6d:49: 99:c8:8c:b2:11:b5:a0:bf:0e:f8:e4:5d:48:46:80: 7b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:D6:4B:BE:D9:C8:70:89:9F:40:E2:D3:A8:61:88:C1:0D:ED:9E:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4d40b93d-acec-38dd-9713-18db9799f2d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:295::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:80:1d:d4:6e:1c:c4:37:23:51:f1:0c:6d:23:43:f0:84:7c: 2e:5b:88:27:eb:74:f4:69:55:ba:9d:28:eb:11:1c:15:91:e3: bd:68:49:60:ff:24:1b:01:37:52:20:35:48:5f:b4:ea:12:c4: c4:1a:c7:fa:d5:de:3c:32:76:be:d4:da:98:35:73:ad:a0:54: 55:d3:81:d2:c8:32:02:44:92:fd:35:2a:ff:0e:29:6d:f2:60: 18:9b:04:b7:ee:fd:97:5e:3e:82:d7:87:df:f9:5c:ed:4f:82: 34:2a:b8:0b:65:9c:f1:8d:90:4c:21:54:85:d1:a3:a4:84:fc: 1f:29:fe:79:47:c6:29:c2:54:d3:28:4a:93:5a:64:29:bc:66: c0:30:2e:19:61:51:69:64:a7:da:d8:59:50:64:a1:f0:5e:92: 81:64:dd:f5:df:99:1f:80:c4:c6:6d:71:6f:6e:3c:43:7b:cc: 85:47:70:7d:b7:62:76:f6:81:b6:33:48:cf:3c:f3:ac:04:e3: ca:37:b8:3a:41:7e:c7:7b:90:18:b5:ac:da:a6:b5:7f:2a:a6: 12:be:3d:9d:1c:74:7c:95:50:e7:80:87:25:73:9a:e1:2a:1b: aa:02:27:74:c0:d6:14:a1:06:57:11:7f:f0:ef:f5:00:cd:93: 0b:fd:7a:15 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX8fqIzcOaSAyYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk ZWQzZDMxMmItNTY0ZC00Y2VlLTlkNDMtMmFmMTlhN2EyOTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA482YZbA07Sr24m+tbrfphujfahlceiys9xqG +QyismUFyqvxkoRT03elE8U1H22au85cTruWny5x/i++aS9ACVAxpdtmhukjGwUU cAaKZ7sNtj2e84kU7Mm6sFM1/gcSQgh69Uyhk5RiB3yXXxwAdPfzGmWz9AT/LtdC 8YKqvwR4jpyTHxHZ4B5N1R768CR+I7R+uPkN6i4YKYA2ZLPoghpe6agEwUs12wXj kN2yXlEj4NedoGO31l2GzjSL1WWPtyWo7BjRCeQdLYdd5IEhFNoHgTyJlkLoTY2j CR1xSLMvpQrA2Hjr6VDyytLsbUmZyIyyEbWgvw745F1IRoB7KQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIPWS77ZyHCJn0Di06hhiMEN7Z5iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNGQ0MGI5M2QtYWNlYy0z OGRkLTk3MTMtMThkYjk3OTlmMmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAuAHdRuHMQ3I1HxDG0jQ/CEfC5biCfrdPRpVbqdKOsRHBWR471o SWD/JBsBN1IgNUhftOoSxMQax/rV3jwydr7U2pg1c62gVFXTgdLIMgJEkv01Kv8O KW3yYBibBLfu/ZdePoLXh9/5XO1PgjQquAtlnPGNkEwhVIXRo6SE/B8p/nlHxinC VNMoSpNaZCm8ZsAwLhlhUWlkp9rYWVBkofBekoFk3fXfmR+AxMZtcW9uPEN7zIVH cH23Ynb2gbYzSM8886wE48o3uDpBfsd7kBi1rNqmtX8qphK+PZ0cdHyVUOeAhyVz muEqG6oCJ3TA1hShBlcRf/Dv9QDNkwv9ehU= -----END CERTIFICATE-----Generated at Sun Jun 15 15:38:20 2025 by rpki-client