$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/623b1340-4e4d-3017-8588-b5e6e41a04ce.roa File: 623b1340-4e4d-3017-8588-b5e6e41a04ce.roa (raw, json) Hash identifier: XYVLI0hOhzhfqnVcgNPzG8Fznw8XGqyZffLV/Cs0o2w= Subject key identifier: 3B:48:FC:8A:51:E4:C5:C7:76:2B:81:C9:99:E9:3B:19:7B:D4:03:CB Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FE258A48606C3F299DF80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/623b1340-4e4d-3017-8588-b5e6e41a04ce.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 17210 IP address blocks: 2001:470:202::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:e2:58:a4:86:06:c3:f2:99:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=22c61ee6-e71c-496a-82e4-a3f144751682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a6:4a:70:23:5f:b7:2f:d0:c2:c0:c7:f0:2c: 84:cd:44:7e:59:aa:0a:16:b2:5d:a1:75:2c:f1:26: 5c:42:07:66:43:a1:00:16:7d:0e:fe:d2:71:24:ab: b8:70:ea:fd:ab:6f:51:4b:64:61:07:54:80:a4:e5: 20:74:e5:a4:a5:a3:07:4f:89:62:c0:f3:70:bb:eb: 64:f7:56:b8:75:6b:d1:1d:cd:9f:a7:2a:6e:f2:73: b7:4e:6e:90:99:08:6e:07:c2:2c:83:00:97:29:9d: 4c:5f:db:e4:e2:a3:42:1a:9d:ca:8b:53:48:97:93: af:b4:34:40:7c:39:ad:0b:56:b6:e2:85:db:1c:2d: 9f:68:4d:c5:2d:35:52:4f:61:ab:44:f2:21:ac:3b: e0:f4:3f:1a:c1:35:e6:c1:c3:68:50:e1:b4:30:2a: 69:55:73:d2:b1:c1:66:27:37:ba:06:70:aa:2d:99: 84:23:6f:c4:82:cc:5b:4f:40:2e:a2:a7:27:50:e3: bb:60:c6:b8:9a:35:57:40:46:a7:83:13:9f:7b:4a: fc:b2:53:42:80:6e:f5:58:1e:08:80:ec:5b:4d:30: 9a:a8:cc:88:f0:24:7e:df:a8:32:95:f8:29:3e:71: 37:f5:25:aa:45:04:c9:aa:f6:10:3a:11:1d:3a:0d: 5d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:48:FC:8A:51:E4:C5:C7:76:2B:81:C9:99:E9:3B:19:7B:D4:03:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/623b1340-4e4d-3017-8588-b5e6e41a04ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:202::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:d2:42:07:b8:26:83:93:b1:0a:60:ce:fa:9e:de:ca:95:a8: 97:83:45:b0:95:14:03:2c:ca:93:57:3b:dc:6e:4a:ec:0e:79: cf:9c:3d:8d:e3:76:54:f4:d8:71:32:c9:05:7d:96:44:0d:75: 60:27:fb:c1:dc:24:1a:48:8c:24:21:3b:f3:93:fa:40:54:88: 14:20:51:ac:bf:f8:37:fb:02:17:00:e8:73:cf:92:0f:13:ea: df:78:de:84:7e:b0:9f:ce:52:4e:6b:ff:fd:07:1f:f7:f1:8f: 8d:c8:b8:10:ba:1e:61:e1:a9:35:f0:6a:c3:c3:07:4a:c6:fa: 63:2f:a8:be:4a:9d:4e:ee:1b:4e:9a:46:44:10:3e:36:45:18: ef:78:56:0f:25:e2:7e:40:8e:44:19:b8:d2:9e:0f:65:6e:2b: 1c:b1:39:67:99:92:1c:e6:d5:16:39:f4:03:88:4e:17:a7:83: 00:cf:d9:ad:30:7f:95:44:41:76:0c:03:7d:82:33:9f:ac:c5: 1b:8c:dd:1b:a4:42:20:ee:c7:a6:6b:fb:7d:ce:49:0d:2b:9b: 6a:16:c9:3e:56:13:22:bd:4b:1d:8b:fc:a5:cb:f7:4a:da:cf: 54:89:83:81:fd:f6:45:5a:36:f5:12:19:0d:e4:a2:42:26:5d: bb:e8:a2:d1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX+JYpIYGw/KZ34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk MjJjNjFlZTYtZTcxYy00OTZhLTgyZTQtYTNmMTQ0NzUxNjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKZKcCNfty/QwsDH8CyEzUR+WaoKFrJdoXUs 8SZcQgdmQ6EAFn0O/tJxJKu4cOr9q29RS2RhB1SApOUgdOWkpaMHT4liwPNwu+tk 91a4dWvRHc2fpypu8nO3Tm6QmQhuB8IsgwCXKZ1MX9vk4qNCGp3Ki1NIl5OvtDRA fDmtC1a24oXbHC2faE3FLTVST2GrRPIhrDvg9D8awTXmwcNoUOG0MCppVXPSscFm Jze6BnCqLZmEI2/EgsxbT0AuoqcnUOO7YMa4mjVXQEangxOfe0r8slNCgG71WB4I gOxbTTCaqMyI8CR+36gylfgpPnE39SWqRQTJqvYQOhEdOg1dBQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDtI/IpR5MXHdiuByZnpOxl71APLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNjIzYjEzNDAtNGU0ZC0z MDE3LTg1ODgtYjVlNmU0MWEwNGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAIC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHDSQge4JoOTsQpgzvqe3sqVqJeDRbCVFAMsypNXO9xuSuwOec+c PY3jdlT02HEyyQV9lkQNdWAn+8HcJBpIjCQhO/OT+kBUiBQgUay/+Df7AhcA6HPP kg8T6t943oR+sJ/OUk5r//0HH/fxj43IuBC6HmHhqTXwasPDB0rG+mMvqL5KnU7u G06aRkQQPjZFGO94Vg8l4n5AjkQZuNKeD2VuKxyxOWeZkhzm1RY59AOIThengwDP 2a0wf5VEQXYMA32CM5+sxRuM3RukQiDux6Zr+33OSQ0rm2oWyT5WEyK9Sx2L/KXL 90raz1SJg4H99kVaNvUSGQ3kokImXbvootE= -----END CERTIFICATE-----Generated at Sun Jun 15 17:20:50 2025 by rpki-client