$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/523b0bc4-df4e-3208-8cdf-04020832b3b3.roa File: 523b0bc4-df4e-3208-8cdf-04020832b3b3.roa (raw, json) Hash identifier: 8EcXbgvEiahuXwlk3RQjlPWrAUnnitd5EyFmQce+3eM= Subject key identifier: 4B:A1:A2:40:B6:13:2A:84:E8:D8:F5:F3:70:9F:29:C1:20:DF:5E:CC Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FCAF858A9580A879C6580 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/523b0bc4-df4e-3208-8cdf-04020832b3b3.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 400790 IP address blocks: 2001:470:43::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:ca:f8:58:a9:58:0a:87:9c:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=509f95af-caf5-4e9b-b4f3-651771b6197e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:80:69:9f:9d:8f:1e:49:1f:57:7d:f8:bb:4b: e4:18:ab:98:64:14:c4:82:a4:a0:70:41:e5:b7:6a: ba:9e:9a:7f:3d:30:01:8a:75:ac:15:24:a0:54:3f: e0:90:20:a9:ad:fd:83:a5:4e:df:cb:93:29:b4:f4: 42:db:8b:cb:56:1a:1d:a6:93:36:e4:41:cb:22:fb: 32:8e:a4:e9:99:d5:80:20:c9:74:0e:c2:6e:16:06: f7:b6:b1:01:27:84:0f:83:66:89:56:c5:2c:46:f4: b1:ba:81:31:79:f3:36:a7:4d:24:08:48:7e:26:0f: 0a:33:4a:38:bf:f2:6a:47:a3:3f:d2:55:ef:d6:dd: eb:e6:d5:cb:6c:ea:e1:3c:17:50:19:78:d0:20:80: e5:24:61:4c:36:d5:e5:14:94:76:51:4a:80:02:d7: 38:17:a9:98:6f:38:ff:d0:a5:15:1f:b5:dc:db:b5: 3a:70:ce:8c:d0:d3:70:d6:c6:dc:db:30:1c:2d:2f: 78:f3:f7:f5:f0:19:b7:b4:7b:15:b3:57:9a:ba:aa: ee:86:25:59:4d:b4:6c:15:6e:06:11:cd:b6:24:ce: e0:09:e1:28:56:d1:27:15:7f:94:b8:2f:14:00:46: e1:da:77:91:bb:bc:f0:a0:8e:a3:79:61:a1:34:9c: 72:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:A1:A2:40:B6:13:2A:84:E8:D8:F5:F3:70:9F:29:C1:20:DF:5E:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/523b0bc4-df4e-3208-8cdf-04020832b3b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:43::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:ef:c0:81:f8:15:cb:ff:13:41:b6:0c:ed:cc:3b:d8:8e:fa: 87:92:28:7a:16:32:2a:19:9e:04:2b:d7:51:58:a2:79:2f:77: b0:8f:9e:66:5c:d9:30:2a:c9:29:bf:f8:b2:61:f8:f2:e1:07: e4:37:a3:5a:84:5e:f7:08:47:0e:0b:ed:5a:5f:fe:92:fe:b3: 76:38:ce:00:59:c5:3d:46:e7:ef:fd:05:0f:c2:83:b4:90:fb: 2b:52:e7:db:60:b8:bf:87:d1:45:6c:00:1c:05:42:2c:50:90: 3b:63:b2:79:f3:5c:1c:a2:ea:b4:08:25:67:09:de:ac:51:dd: 33:8e:d0:0d:4a:c6:8a:78:d7:2e:38:01:3f:2c:66:b1:2f:96: e9:86:b4:6f:9c:a2:bb:1a:54:54:64:48:45:48:ef:86:cf:24: 56:c9:77:97:0e:c1:8d:c6:39:ff:f9:06:75:58:59:f7:f4:11: 59:d1:04:a2:c8:8d:df:5d:32:eb:8f:f1:40:40:65:31:d6:70: 58:f8:19:07:39:8e:5f:25:dc:f4:e5:42:15:dd:56:2b:06:12: 17:a1:70:ab:46:62:aa:bb:d6:37:86:21:da:f9:d4:a8:cb:2a: f3:62:f0:e1:13:e2:1c:49:35:3a:97:93:de:fb:a7:e0:3c:b8: 3f:49:cb:7c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX8r4WKlYCoecZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk NTA5Zjk1YWYtY2FmNS00ZTliLWI0ZjMtNjUxNzcxYjYxOTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoBpn52PHkkfV334u0vkGKuYZBTEgqSgcEHl t2q6npp/PTABinWsFSSgVD/gkCCprf2DpU7fy5MptPRC24vLVhodppM25EHLIvsy jqTpmdWAIMl0DsJuFgb3trEBJ4QPg2aJVsUsRvSxuoExefM2p00kCEh+Jg8KM0o4 v/JqR6M/0lXv1t3r5tXLbOrhPBdQGXjQIIDlJGFMNtXlFJR2UUqAAtc4F6mYbzj/ 0KUVH7Xc27U6cM6M0NNw1sbc2zAcLS948/f18Bm3tHsVs1eauqruhiVZTbRsFW4G Ec22JM7gCeEoVtEnFX+UuC8UAEbh2neRu7zwoI6jeWGhNJxyXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEuhokC2EyqE6Nj183CfKcEg317MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTIzYjBiYzQtZGY0ZS0z MjA4LThjZGYtMDQwMjA4MzJiM2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcABD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFPvwIH4Fcv/E0G2DO3MO9iO+oeSKHoWMioZngQr11FYonkvd7CP nmZc2TAqySm/+LJh+PLhB+Q3o1qEXvcIRw4L7Vpf/pL+s3Y4zgBZxT1G5+/9BQ/C g7SQ+ytS59tguL+H0UVsABwFQixQkDtjsnnzXByi6rQIJWcJ3qxR3TOO0A1Kxop4 1y44AT8sZrEvlumGtG+corsaVFRkSEVI74bPJFbJd5cOwY3GOf/5BnVYWff0EVnR BKLIjd9dMuuP8UBAZTHWcFj4GQc5jl8l3PTlQhXdVisGEhehcKtGYqq71jeGIdr5 1KjLKvNi8OET4hxJNTqXk977p+A8uD9Jy3w= -----END CERTIFICATE-----Generated at Mon Jun 16 03:19:21 2025 by rpki-client