$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/704445ba-6dda-306b-9a4a-64db2b1238b1.roa File: 704445ba-6dda-306b-9a4a-64db2b1238b1.roa (raw, json) Hash identifier: QVOhp3oAQ8Oie4fQZB9tnbf+BwD6D+cZfBpFzbCx8JU= Subject key identifier: B3:92:6A:0F:49:C4:FA:59:7B:BF:BD:42:1D:43:B1:55:0D:EA:BE:22 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FC5860DD2F8537622A7F8 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/704445ba-6dda-306b-9a4a-64db2b1238b1.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 394330 IP address blocks: 2001:470:2f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:c5:86:0d:d2:f8:53:76:22:a7:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=153c498a-0d4b-4684-a28b-63783ecc10da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f5:f7:d3:43:b0:ab:0f:52:20:3c:dc:92:c4: fd:56:3b:76:42:ab:a2:be:77:9c:ec:25:aa:b2:ee: b0:f3:ee:ff:dc:c4:c1:c8:cd:61:08:2d:27:12:dc: 6b:ed:71:95:3d:79:2d:74:4e:4d:49:47:3e:e6:63: ed:67:c0:04:38:09:86:45:3e:60:81:d2:6a:22:d2: bb:39:7a:cd:77:0a:21:12:7c:28:bb:d5:7e:75:1d: b8:01:53:f5:f5:68:32:3b:3d:49:1e:9e:73:10:cf: 22:d0:da:2c:39:52:6e:fa:ba:e1:48:34:41:54:4c: 11:38:4f:e8:fa:62:51:ba:b0:25:b9:7f:3f:22:83: ec:b4:9d:bd:6c:01:f6:03:5e:26:60:ad:85:4d:d7: 60:26:05:ef:5d:ff:b5:96:d4:df:b3:b3:66:2b:7a: 73:6d:90:b7:20:b5:34:ca:20:78:e9:1c:1b:41:18: 94:c2:21:f7:e1:85:d6:d4:cc:01:e7:e3:98:e3:f7: cd:8f:41:42:98:2a:95:f3:10:93:25:ce:7b:1e:f7: a5:a0:eb:7e:1d:bd:19:55:77:02:d6:da:ab:b0:f6: 0f:64:28:96:27:25:5f:b9:d1:3e:55:07:bd:34:2a: 3a:a6:16:78:50:9c:00:e9:cc:1b:f1:c4:eb:1a:2a: 83:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:92:6A:0F:49:C4:FA:59:7B:BF:BD:42:1D:43:B1:55:0D:EA:BE:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/704445ba-6dda-306b-9a4a-64db2b1238b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:64:37:f6:c7:86:ee:10:37:1d:ad:79:bd:c2:bd:9c:15:aa: 7d:3c:06:eb:02:b7:d6:e0:7c:a6:22:44:ba:92:1b:20:66:fd: 0c:8f:81:d4:f3:a8:1b:05:12:e5:89:8d:05:e2:71:94:40:57: a4:5f:da:60:a3:37:11:e7:7f:5a:91:50:84:09:a2:8a:84:04: c2:dd:70:6c:a0:7c:5a:a9:65:f5:9e:9e:0a:27:4e:47:7f:e1: 55:fb:eb:73:ae:02:8b:e9:e0:4a:20:75:c2:20:d4:ad:10:3e: 73:ff:15:1d:80:f7:d9:17:1a:63:f9:e6:6c:e4:de:46:8c:8d: 52:2d:e1:4e:a4:d4:0d:d8:05:c6:2a:02:0c:ca:f8:b0:ba:46: 04:90:d5:59:d6:d9:57:54:fb:8f:06:bd:a8:d1:3b:13:cd:c6: a8:79:bb:86:57:e0:22:91:99:2d:3a:cd:5f:bf:50:7c:d9:71: 1b:3a:c5:ba:fa:81:a3:98:7c:72:c1:fe:57:e3:4a:7e:7f:2f: bc:f4:1e:8f:e0:c4:14:f2:d3:9a:96:0c:a1:6c:cd:09:97:08: 1f:5a:2c:c4:b9:86:8f:f0:80:a6:ac:94:ad:7d:c6:c7:5d:fb: 33:e6:ae:db:70:bd:13:52:c4:ff:6d:bc:0e:0c:fc:3a:73:b4: 7d:ed:36:fa -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX8WGDdL4U3Yip/gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk MTUzYzQ5OGEtMGQ0Yi00Njg0LWEyOGItNjM3ODNlY2MxMGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfX300Owqw9SIDzcksT9Vjt2Qquivnec7CWq su6w8+7/3MTByM1hCC0nEtxr7XGVPXktdE5NSUc+5mPtZ8AEOAmGRT5ggdJqItK7 OXrNdwohEnwou9V+dR24AVP19WgyOz1JHp5zEM8i0NosOVJu+rrhSDRBVEwROE/o +mJRurAluX8/IoPstJ29bAH2A14mYK2FTddgJgXvXf+1ltTfs7NmK3pzbZC3ILU0 yiB46RwbQRiUwiH34YXW1MwB5+OY4/fNj0FCmCqV8xCTJc57HveloOt+Hb0ZVXcC 1tqrsPYPZCiWJyVfudE+VQe9NCo6phZ4UJwA6cwb8cTrGiqD5wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLOSag9JxPpZe7+9Qh1DsVUN6r4iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNzA0NDQ1YmEtNmRkYS0z MDZiLTlhNGEtNjRkYjJiMTIzOGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAAv MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALFkN/bHhu4QNx2teb3CvZwVqn08BusCt9bgfKYiRLqSGyBm/QyP gdTzqBsFEuWJjQXicZRAV6Rf2mCjNxHnf1qRUIQJooqEBMLdcGygfFqpZfWengon Tkd/4VX763OuAovp4EogdcIg1K0QPnP/FR2A99kXGmP55mzk3kaMjVIt4U6k1A3Y BcYqAgzK+LC6RgSQ1VnW2VdU+48GvajROxPNxqh5u4ZX4CKRmS06zV+/UHzZcRs6 xbr6gaOYfHLB/lfjSn5/L7z0Ho/gxBTy05qWDKFszQmXCB9aLMS5ho/wgKaslK19 xsdd+zPmrttwvRNSxP9tvA4M/DpztH3tNvo= -----END CERTIFICATE-----Generated at Sun Jun 15 17:53:29 2025 by rpki-client