$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6a47b96e-8e1b-3287-9626-eb798f7ee10e.roa File: 6a47b96e-8e1b-3287-9626-eb798f7ee10e.roa (raw, json) Hash identifier: bhycMWbWJAey7MCud37aIk+NC8FMZrFD4mH6z0o2F+A= Subject key identifier: BC:9B:EB:6A:48:50:6B:75:2A:FF:32:A7:CC:FF:DB:41:BB:25:79:C0 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A225AB9EFD7805D9D8A807900 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6a47b96e-8e1b-3287-9626-eb798f7ee10e.roa Signing time: Mon 09 Jun 2025 13:01:01 +0000 ROA not before: Mon 09 Jun 2025 13:01:01 +0000 ROA not after: Sun 07 Sep 2025 13:01:01 +0000 asID: 32953 IP address blocks: 2001:470:428::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:22:5a:b9:ef:d7:80:5d:9d:8a:80:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 9 13:01:01 2025 GMT Not After : Sep 7 13:01:01 2025 GMT Subject: CN=a9f071e2-c080-4449-8e45-4d2ca0bbb1c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:61:8b:b7:8f:0f:0f:f5:22:78:ba:0c:cf:8e: 77:9b:8f:bc:a9:dd:be:b1:cf:4b:c8:8a:5f:c6:64: de:f4:fb:38:4f:8f:6f:b8:bd:02:8f:29:6c:63:7d: b6:95:77:d3:ea:e8:63:d7:0b:c3:d5:df:ad:9e:3b: 6f:6e:19:7e:91:d3:ec:02:88:92:e0:99:cd:fd:84: 8f:42:26:37:b0:00:8f:7b:ff:5b:fa:22:a3:66:cf: 6d:31:5c:f0:41:31:dc:00:86:58:d2:5a:5c:ae:1e: cc:49:9d:a6:24:97:93:2c:a6:7a:b9:74:44:59:d3: 76:79:d3:86:36:19:b6:68:f8:ad:3e:f4:0c:be:42: 03:71:87:f5:93:c0:1e:3d:34:87:a6:85:6f:ba:09: e0:3b:ac:5f:1f:e3:ae:27:04:3c:41:04:08:9b:ac: de:2e:94:fa:13:10:de:92:c4:2e:0a:1a:00:8d:1c: 77:95:c2:20:56:7e:54:06:e4:c7:22:0e:a7:f2:6a: 0b:52:96:ce:eb:43:da:5d:86:af:26:c0:29:80:bc: cf:1e:f3:ba:c3:e8:18:6e:18:aa:6a:6f:a1:4c:46: f1:4f:5b:00:c1:f0:a9:29:25:91:b0:7d:ba:3d:5f: c4:a8:f9:4c:4b:2e:0a:3d:d8:d2:30:41:3b:e9:12: ca:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:9B:EB:6A:48:50:6B:75:2A:FF:32:A7:CC:FF:DB:41:BB:25:79:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6a47b96e-8e1b-3287-9626-eb798f7ee10e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:428::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:ec:d4:1a:2b:85:02:d0:0a:b1:0d:18:c7:f3:46:1a:37:79: 62:c9:c9:06:2e:5a:d8:c4:ca:4c:78:0d:71:01:8e:96:f1:6c: 88:f5:33:ca:4f:67:dd:30:b4:65:21:6e:51:38:e3:fa:7b:db: 13:ce:09:38:75:0e:98:6e:88:d0:d1:a6:f3:ec:b7:af:4e:c2: ee:07:7c:6c:ac:27:0f:8b:52:ee:25:3f:d7:1f:65:49:a2:2b: 27:49:cc:e0:fb:6c:91:7c:d4:9d:4f:b3:8f:3f:db:17:ff:f6: 9a:a5:c7:e5:81:eb:3e:ab:80:76:18:ac:ea:6d:7b:72:60:4c: ee:fd:d9:d9:1a:ce:e9:74:28:db:35:27:64:7b:db:47:17:34: 61:ec:ca:e4:fe:8d:5a:fe:36:95:d7:36:91:06:4e:71:b1:2a: 8d:9e:eb:34:5b:69:98:c6:d9:5d:f8:16:89:ba:a2:27:0c:56: 1d:24:3c:0f:a8:e0:20:bb:a1:0b:44:2e:f9:dd:ec:3c:23:ba: df:6c:d9:d6:da:1c:c9:75:a4:fd:2d:9c:d1:38:5f:91:bf:ef: f0:48:32:a2:da:09:eb:30:c4:ff:c0:6b:1c:e2:fd:85:da:02: 33:94:df:0b:15:bd:23:c4:10:e0:35:75:71:86:5d:be:0c:93: 81:84:c4:90 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoiWrnv14BdnYqAeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDYwOTEzMDEwMVoXDTI1MDkwNzEzMDEwMVowLzEtMCsGA1UEAxMk YTlmMDcxZTItYzA4MC00NDQ5LThlNDUtNGQyY2EwYmJiMWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGGLt48PD/UieLoMz453m4+8qd2+sc9LyIpf xmTe9Ps4T49vuL0CjylsY322lXfT6uhj1wvD1d+tnjtvbhl+kdPsAoiS4JnN/YSP QiY3sACPe/9b+iKjZs9tMVzwQTHcAIZY0lpcrh7MSZ2mJJeTLKZ6uXREWdN2edOG Nhm2aPitPvQMvkIDcYf1k8AePTSHpoVvugngO6xfH+OuJwQ8QQQIm6zeLpT6ExDe ksQuChoAjRx3lcIgVn5UBuTHIg6n8moLUpbO60PaXYavJsApgLzPHvO6w+gYbhiq am+hTEbxT1sAwfCpKSWRsH26PV/EqPlMSy4KPdjSMEE76RLKqQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLyb62pIUGt1Kv8yp8z/20G7JXnAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNmE0N2I5NmUtOGUxYi0z Mjg3LTk2MjYtZWI3OThmN2VlMTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHPs1BorhQLQCrENGMfzRho3eWLJyQYuWtjEykx4DXEBjpbxbIj1 M8pPZ90wtGUhblE44/p72xPOCTh1DphuiNDRpvPst69Owu4HfGysJw+LUu4lP9cf ZUmiKydJzOD7bJF81J1Ps48/2xf/9pqlx+WB6z6rgHYYrOpte3JgTO792dkazul0 KNs1J2R720cXNGHsyuT+jVr+NpXXNpEGTnGxKo2e6zRbaZjG2V34Fom6oicMVh0k PA+o4CC7oQtELvnd7Dwjut9s2dbaHMl1pP0tnNE4X5G/7/BIMqLaCeswxP/Aaxzi /YXaAjOU3wsVvSPEEOA1dXGGXb4Mk4GExJA= -----END CERTIFICATE-----Generated at Mon Jun 16 12:26:56 2025 by rpki-client