$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5be87f8b-4fa2-38f0-a875-eafc67c02d9b.roa File: 5be87f8b-4fa2-38f0-a875-eafc67c02d9b.roa (raw, json) Hash identifier: bwNs9zd3UYEDrMAqxWL1o2VauqQkAoB9SSQ+sjjO+X0= Subject key identifier: A8:DE:39:54:D2:EC:0E:74:AF:97:D6:90:0F:16:50:98:4F:4F:AD:B9 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FB9DF6B45E9CDA0FD9870 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5be87f8b-4fa2-38f0-a875-eafc67c02d9b.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 62538 IP address blocks: 2001:470:ee::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:b9:df:6b:45:e9:cd:a0:fd:98:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=d2317483-2bf8-4e68-9afe-612e71b0dd90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a8:ae:1d:d5:ef:3a:39:79:4b:9d:c3:6e:0c: 51:d4:96:8e:fa:cf:18:7a:85:9d:ea:cb:31:66:72: 77:b7:7f:fc:23:cc:39:ca:c7:0f:f3:35:d4:ac:eb: f5:1e:a7:2f:da:59:ac:05:4b:f7:0f:ca:10:cb:e3: 88:40:d9:a6:21:75:1e:fc:69:59:6e:8f:75:d8:23: 4a:3a:96:9a:54:0b:b3:cd:5a:e4:b0:7a:32:92:5d: 56:8c:fa:a3:94:6d:b6:21:51:ee:6d:89:10:e7:c1: 02:82:f8:ca:b2:da:fe:d5:0c:c3:0d:26:b9:b9:e0: 6d:94:ec:72:36:75:63:8b:42:b2:fc:3a:86:12:8c: 89:ef:28:04:28:e0:3c:0d:ec:9c:46:b2:a3:3f:12: b8:56:64:44:55:f8:f1:5c:ee:e6:9d:01:15:72:16: 49:0e:a4:e8:9b:e8:01:81:72:ad:09:f9:0c:b7:01: 7d:75:35:cd:5c:25:77:30:bd:1a:97:28:69:bb:15: 2e:83:65:84:9d:c4:26:dd:14:c5:70:e9:3f:af:86: ac:52:1f:f5:f0:5a:77:69:a8:db:31:d7:5d:07:30: b4:bc:a0:9b:41:c3:27:b9:33:69:ac:93:50:9f:07: 3b:2a:dd:de:38:36:cc:6b:aa:e6:ed:13:ce:09:3b: 0e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:DE:39:54:D2:EC:0E:74:AF:97:D6:90:0F:16:50:98:4F:4F:AD:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5be87f8b-4fa2-38f0-a875-eafc67c02d9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:ee::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:7c:04:9e:08:dd:24:09:1d:93:f5:bc:ea:7d:5c:26:94:b2: f0:ee:6b:86:b6:3d:75:d8:b4:91:fd:18:66:30:5b:cc:17:69: 0b:63:aa:ea:cf:5a:e5:bd:e5:c3:a6:06:8f:19:5f:53:f9:4b: 0f:3b:77:c1:64:4c:7e:f6:b2:49:16:69:aa:a0:fa:6c:f0:6c: 50:52:ab:7b:40:9f:7c:25:cf:e5:25:9f:fe:81:a8:0d:d3:5d: ae:a6:f7:b3:27:3e:10:44:f3:b5:8b:58:8c:fe:7c:2c:25:25: 46:27:1d:fa:ab:aa:79:5c:80:bc:cd:85:2f:df:f9:c1:cf:e9: 32:8e:d2:f1:4c:0f:f8:8b:62:b7:7e:f8:67:26:c0:6b:51:e7: fe:22:62:1f:5c:13:63:19:cd:9d:38:03:b9:e4:76:09:a9:42: a5:39:5f:b0:43:47:02:8f:ad:d7:89:ad:4b:b4:1e:24:b2:33: ac:0d:a4:96:15:49:27:24:9f:cc:87:c1:8e:28:9e:5a:c7:db: 40:7a:76:e6:a1:15:31:9f:d8:a4:c9:95:b3:c9:54:95:bd:c5: b2:39:fe:d7:db:cc:fb:79:3f:fc:6f:cf:d2:1f:46:de:67:72: 7f:2b:90:96:7e:de:b1:c5:ac:3d:38:2f:6a:7b:28:20:66:45: 17:6c:e7:7c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX7nfa0XpzaD9mHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk ZDIzMTc0ODMtMmJmOC00ZTY4LTlhZmUtNjEyZTcxYjBkZDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qiuHdXvOjl5S53DbgxR1JaO+s8YeoWd6ssx ZnJ3t3/8I8w5yscP8zXUrOv1Hqcv2lmsBUv3D8oQy+OIQNmmIXUe/GlZbo912CNK OpaaVAuzzVrksHoykl1WjPqjlG22IVHubYkQ58ECgvjKstr+1QzDDSa5ueBtlOxy NnVji0Ky/DqGEoyJ7ygEKOA8DeycRrKjPxK4VmREVfjxXO7mnQEVchZJDqTom+gB gXKtCfkMtwF9dTXNXCV3ML0alyhpuxUug2WEncQm3RTFcOk/r4asUh/18Fp3aajb MdddBzC0vKCbQcMnuTNprJNQnwc7Kt3eODbMa6rm7RPOCTsOhwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKjeOVTS7A50r5fWkA8WUJhPT625MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNWJlODdmOGItNGZhMi0z OGYwLWE4NzUtZWFmYzY3YzAyZDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK98BJ4I3SQJHZP1vOp9XCaUsvDua4a2PXXYtJH9GGYwW8wXaQtj qurPWuW95cOmBo8ZX1P5Sw87d8FkTH72skkWaaqg+mzwbFBSq3tAn3wlz+Uln/6B qA3TXa6m97MnPhBE87WLWIz+fCwlJUYnHfqrqnlcgLzNhS/f+cHP6TKO0vFMD/iL Yrd++GcmwGtR5/4iYh9cE2MZzZ04A7nkdgmpQqU5X7BDRwKPrdeJrUu0HiSyM6wN pJYVSSckn8yHwY4onlrH20B6duahFTGf2KTJlbPJVJW9xbI5/tfbzPt5P/xvz9If Rt5ncn8rkJZ+3rHFrD04L2p7KCBmRRds53w= -----END CERTIFICATE-----Generated at Mon Jun 16 12:25:30 2025 by rpki-client