$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5221f45d-61dd-37ff-abd8-3a4f7e974a40.roa File: 5221f45d-61dd-37ff-abd8-3a4f7e974a40.roa (raw, json) Hash identifier: oyzQLKh7j85aYAxcQSWZTffpbPomDZJOjzHIQHKfwSs= Subject key identifier: 8F:2D:6F:26:7F:9E:90:1B:DD:95:C3:42:53:9C:19:23:31:72:25:78 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FC3A764D1D3F83C4358C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5221f45d-61dd-37ff-abd8-3a4f7e974a40.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 46383 IP address blocks: 2001:470:1f1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:c3:a7:64:d1:d3:f8:3c:43:58:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=5efb7f3f-843e-41a5-8e64-63b13f271d6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c8:0a:6a:5a:10:70:eb:75:38:91:d7:87:b3: 44:cf:af:4c:45:9e:f7:21:3e:cd:30:75:76:0d:b5: e5:3e:7c:65:8d:41:12:50:73:61:c9:69:e2:e9:c9: 95:08:42:d5:d2:c9:44:0c:5d:15:bd:17:da:de:52: 1d:9b:01:83:4f:1c:ca:d4:34:4f:6a:4c:77:fb:22: 83:39:ab:fd:1b:2f:8a:78:64:f5:53:e3:ac:e2:40: 3e:b1:3b:05:7a:31:c1:ad:a2:7c:13:f9:eb:96:a2: 03:06:00:60:41:56:00:ef:d6:8b:7c:41:54:c2:57: 54:22:f4:60:1f:b4:6d:89:ed:23:06:9d:87:12:39: b7:dc:fb:d3:a0:6a:70:96:0b:92:85:d5:0c:5c:03: 5d:0a:85:a0:b0:6c:77:ce:f6:62:73:d6:d8:4d:91: b8:9a:5d:22:2c:b3:37:fe:e7:ef:af:cb:14:f3:e4: ad:ac:c8:f0:34:19:c3:c8:e8:45:fb:fc:14:06:3e: ad:50:ae:33:71:48:67:ca:01:bd:a6:e4:5a:52:0c: fc:ab:8d:69:34:6b:95:82:84:f8:28:0b:d1:31:cd: f2:84:85:20:b9:e0:58:74:73:84:3f:82:2f:67:33: 0f:50:2c:ff:5b:81:13:40:96:97:8a:97:cf:51:aa: ff:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:2D:6F:26:7F:9E:90:1B:DD:95:C3:42:53:9C:19:23:31:72:25:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5221f45d-61dd-37ff-abd8-3a4f7e974a40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1f1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:4d:8a:2d:18:b0:63:b3:96:62:73:e6:9e:aa:74:d5:42:ee: f5:4c:b5:10:eb:96:fc:57:78:9d:a3:38:4b:5d:0c:8d:19:79: 75:80:63:cf:5c:8c:f6:0f:a8:22:ec:0c:ce:c8:0e:6d:07:19: 55:78:59:00:87:fe:1b:49:75:8b:b6:39:04:02:19:b6:44:08: 9f:a0:53:b9:98:6a:f5:ed:aa:4e:14:aa:3b:d2:fc:19:82:37: 73:a3:df:d4:d0:59:70:2b:c6:2c:22:4f:f4:2b:b1:8e:cc:13: ce:ed:b4:64:f6:55:d7:2b:77:04:a4:a9:a0:77:33:61:0a:97: e0:15:69:ef:55:06:ce:4f:6a:05:4a:cc:a4:d7:ec:2d:f3:a1: 53:d4:73:97:e4:ad:49:80:3e:bf:c5:28:89:93:7e:38:1d:e4: cd:b4:d8:f2:78:73:3e:b7:53:c2:4c:44:a9:7c:a3:e2:4b:f7: a0:e2:19:b4:29:49:10:5c:23:ff:7f:c5:18:37:11:c9:86:d7: 4c:d8:37:9f:e4:45:6c:d7:05:ed:33:ba:87:8e:9f:3f:2b:66: 40:ba:1b:bc:88:e5:5f:a2:a5:57:79:54:b9:96:bb:4b:27:ea: fe:75:3b:10:3f:2c:3d:69:84:8a:62:a2:32:83:01:f7:29:bf: c5:62:0f:78 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX8OnZNHT+DxDWMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk NWVmYjdmM2YtODQzZS00MWE1LThlNjQtNjNiMTNmMjcxZDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsgKaloQcOt1OJHXh7NEz69MRZ73IT7NMHV2 DbXlPnxljUESUHNhyWni6cmVCELV0slEDF0VvRfa3lIdmwGDTxzK1DRPakx3+yKD Oav9Gy+KeGT1U+Os4kA+sTsFejHBraJ8E/nrlqIDBgBgQVYA79aLfEFUwldUIvRg H7Rtie0jBp2HEjm33PvToGpwlguShdUMXANdCoWgsGx3zvZic9bYTZG4ml0iLLM3 /ufvr8sU8+StrMjwNBnDyOhF+/wUBj6tUK4zcUhnygG9puRaUgz8q41pNGuVgoT4 KAvRMc3yhIUgueBYdHOEP4IvZzMPUCz/W4ETQJaXipfPUar/+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI8tbyZ/npAb3ZXDQlOcGSMxciV4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTIyMWY0NWQtNjFkZC0z N2ZmLWFiZDgtM2E0ZjdlOTc0YTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADRNii0YsGOzlmJz5p6qdNVC7vVMtRDrlvxXeJ2jOEtdDI0ZeXWA Y89cjPYPqCLsDM7IDm0HGVV4WQCH/htJdYu2OQQCGbZECJ+gU7mYavXtqk4UqjvS /BmCN3Oj39TQWXArxiwiT/QrsY7ME87ttGT2VdcrdwSkqaB3M2EKl+AVae9VBs5P agVKzKTX7C3zoVPUc5fkrUmAPr/FKImTfjgd5M202PJ4cz63U8JMRKl8o+JL96Di GbQpSRBcI/9/xRg3EcmG10zYN5/kRWzXBe0zuoeOnz8rZkC6G7yI5V+ipVd5VLmW u0sn6v51OxA/LD1phIpiojKDAfcpv8ViD3g= -----END CERTIFICATE-----Generated at Sun Jun 15 14:31:47 2025 by rpki-client