$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5c8cb131-3314-3c54-bc89-56e52d45561a.roa File: 5c8cb131-3314-3c54-bc89-56e52d45561a.roa (raw, json) Hash identifier: TZ9zMO0Oxffn7O34hxeNcOuKiNoSLXgA2hTxW3lNJz4= Subject key identifier: 01:94:B8:0D:3B:B7:68:06:09:04:A6:42:D1:1C:B2:EE:42:80:C4:D8 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FBA0BE2A8C635F2580040 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5c8cb131-3314-3c54-bc89-56e52d45561a.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 398297 IP address blocks: 2001:470:81::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:ba:0b:e2:a8:c6:35:f2:58:00:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=f657dbc0-53b7-447a-95ef-adf9ac6dc7d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a7:e3:f1:de:9f:49:ac:43:69:45:7a:57:fe: 2e:59:98:89:21:d2:e1:e9:11:3d:48:a5:8e:85:40: e5:c5:08:b7:5a:37:1e:a8:bd:ad:63:92:66:85:81: 86:f9:54:e5:32:6c:67:55:8c:13:b3:ac:c3:0b:a9: e2:7b:66:c2:f0:27:82:71:46:ee:fe:17:ad:6c:f9: 3d:ff:b1:c1:43:40:94:25:9f:b7:3a:b0:dd:a3:73: 9c:9c:4e:a8:cc:d7:a7:fe:1a:4f:c3:0f:55:c6:f2: 56:72:e5:12:1c:b5:0e:d2:cb:0c:97:8c:36:b2:5d: 8a:f4:32:64:88:98:58:b4:7b:e6:b2:98:7e:fb:4c: e8:a0:f2:d8:02:31:05:24:6d:48:7a:5c:1d:44:0e: 58:ee:3b:46:22:a8:7d:3b:db:8b:ef:99:25:a4:2c: b0:f1:27:2c:5d:25:09:8f:e3:df:14:89:74:9f:cf: 6c:87:19:e3:29:1c:2c:1e:aa:2c:1c:07:c0:70:9f: a3:5c:3f:ad:2d:d7:a9:4c:1f:ed:ca:75:8d:6f:0b: ff:d4:16:32:6d:60:44:b7:68:89:8b:d1:c1:21:6f: 07:3f:77:d5:da:65:b7:98:de:88:5a:09:e2:2b:09: 8d:13:5f:25:8d:cb:be:e1:65:da:cb:3d:dd:72:0e: c0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:94:B8:0D:3B:B7:68:06:09:04:A6:42:D1:1C:B2:EE:42:80:C4:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5c8cb131-3314-3c54-bc89-56e52d45561a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:81::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:03:7e:7a:8d:4a:2a:7f:f8:d5:77:a8:cf:f5:9e:fe:76:d4: 0b:b8:f7:a8:f4:c0:24:b0:86:e7:a7:81:c4:cd:ee:d8:10:6e: 55:f9:cd:f3:17:ef:3f:9e:3a:0f:40:f8:af:b8:e3:79:f8:93: 36:2c:5c:7f:2a:71:93:ce:b3:6e:2d:7e:ac:74:5f:c0:97:b2: f7:b9:7b:8a:9b:a6:b1:8f:88:08:0f:a7:39:b9:bc:fa:3d:33: 20:78:b9:f0:9b:71:bd:f9:9c:87:89:b1:5f:f8:9d:85:34:b6: f1:be:9e:23:3b:7d:0c:da:41:5c:94:12:b9:9b:40:52:18:fd: cf:1c:52:06:41:c5:06:fa:c9:ac:88:52:16:e3:28:22:1e:67: 7a:b0:d5:3c:6e:4b:c8:27:cc:6e:5a:f1:95:9b:63:50:50:25: 7c:76:67:a3:02:a0:92:18:1a:2a:11:c8:52:75:be:bb:ba:81: 77:7e:0b:f8:9b:5f:ea:79:31:5a:20:b4:e1:d5:48:1f:9c:3a: 7e:00:f0:c6:b5:0f:e2:56:2d:d1:94:59:ed:47:09:8b:50:06: af:39:4d:1e:c7:d2:45:29:fc:93:49:a2:90:a4:65:f0:f3:ba: 51:31:0a:9e:a9:7a:67:e8:5d:2d:74:77:18:c7:ad:d3:a3:03: 52:b4:0d:88 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX7oL4qjGNfJYAEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk ZjY1N2RiYzAtNTNiNy00NDdhLTk1ZWYtYWRmOWFjNmRjN2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqfj8d6fSaxDaUV6V/4uWZiJIdLh6RE9SKWO hUDlxQi3WjceqL2tY5JmhYGG+VTlMmxnVYwTs6zDC6nie2bC8CeCcUbu/hetbPk9 /7HBQ0CUJZ+3OrDdo3OcnE6ozNen/hpPww9VxvJWcuUSHLUO0ssMl4w2sl2K9DJk iJhYtHvmsph++0zooPLYAjEFJG1IelwdRA5Y7jtGIqh9O9uL75klpCyw8ScsXSUJ j+PfFIl0n89shxnjKRwsHqosHAfAcJ+jXD+tLdepTB/tynWNbwv/1BYybWBEt2iJ i9HBIW8HP3fV2mW3mN6IWgniKwmNE18ljcu+4WXayz3dcg7AZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAGUuA07t2gGCQSmQtEcsu5CgMTYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNWM4Y2IxMzEtMzMxNC0z YzU0LWJjODktNTZlNTJkNDU1NjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALcDfnqNSip/+NV3qM/1nv521Au496j0wCSwhuengcTN7tgQblX5 zfMX7z+eOg9A+K+443n4kzYsXH8qcZPOs24tfqx0X8CXsve5e4qbprGPiAgPpzm5 vPo9MyB4ufCbcb35nIeJsV/4nYU0tvG+niM7fQzaQVyUErmbQFIY/c8cUgZBxQb6 yayIUhbjKCIeZ3qw1TxuS8gnzG5a8ZWbY1BQJXx2Z6MCoJIYGioRyFJ1vru6gXd+ C/ibX+p5MVogtOHVSB+cOn4A8Ma1D+JWLdGUWe1HCYtQBq85TR7H0kUp/JNJopCk ZfDzulExCp6pemfoXS10dxjHrdOjA1K0DYg= -----END CERTIFICATE-----Generated at Sun Jun 15 20:46:25 2025 by rpki-client