$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/77a72dae-2a76-3508-a887-4c1e1b83b1ec.roa File: 77a72dae-2a76-3508-a887-4c1e1b83b1ec.roa (raw, json) Hash identifier: ZbYrkk1ycFJO/T3DW+RH7BLTTajpzBXNJng5kx4qHOs= Subject key identifier: 67:38:F1:2D:0C:0F:AD:B6:B7:32:62:5B:F1:33:ED:02:DB:3D:1B:BC Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FDD38343DDD8DF67F0300 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/77a72dae-2a76-3508-a887-4c1e1b83b1ec.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 399082 IP address blocks: 2001:470:5d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:dd:38:34:3d:dd:8d:f6:7f:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=035c2dc2-0dd0-4eec-84fa-8287fa86101c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:00:e8:e5:e4:54:ac:2a:34:cf:35:44:39:46: 09:d3:ec:34:3e:93:10:a3:c8:f0:0a:f4:f6:7b:ca: 85:06:c6:e1:00:50:86:0e:77:21:38:94:bc:ae:9f: f3:01:9a:0a:1f:a2:57:40:82:85:b9:3f:67:05:f7: cd:50:8e:af:15:5d:8b:af:6b:46:45:81:26:3e:01: 96:6c:cd:53:4b:b1:25:21:9e:da:8b:04:22:aa:bd: 93:17:be:bf:26:fe:4c:e8:f5:50:bc:6d:4a:b6:d0: e1:1e:5c:4e:7a:22:c1:1f:92:1b:74:dd:97:a1:3f: 40:2e:59:c4:a4:22:67:a8:a3:5b:0c:35:04:fc:5e: 0f:4b:2d:82:8e:1a:c9:56:e0:64:bd:23:f6:93:98: 90:1c:bc:5b:7b:46:db:8d:bc:f0:2a:66:1f:9e:29: 2f:04:53:e2:f0:25:a4:55:67:b9:3b:c0:b8:2c:2f: 54:1e:4f:4f:f7:df:11:8d:2b:5a:a6:f2:42:77:fa: af:77:16:44:8b:f0:9b:b1:e1:85:41:4d:ef:6f:58: 66:6a:e9:5f:58:89:96:94:db:28:0c:38:12:df:f0: 8e:9b:ea:7a:a4:5a:84:f8:bb:0e:9f:e2:7f:f4:14: a1:90:5a:1c:c6:2b:fe:8c:23:15:30:b3:ec:f1:40: 21:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:38:F1:2D:0C:0F:AD:B6:B7:32:62:5B:F1:33:ED:02:DB:3D:1B:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/77a72dae-2a76-3508-a887-4c1e1b83b1ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:5d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:87:61:6b:3f:4d:b8:49:e9:3c:5b:17:01:ea:59:31:06:71: cc:cf:f8:69:dc:50:85:a1:26:32:d8:a1:cd:89:8e:22:63:b0: a8:b9:67:5a:a0:76:59:de:1d:88:f0:d3:f9:ac:0b:94:87:43: ec:5b:a0:a5:b3:56:8f:64:df:73:f4:fa:2f:6e:87:c2:2e:dc: e6:54:71:70:65:ce:0c:c6:91:33:31:f2:64:9f:60:7f:e3:b2: b9:12:52:ed:80:7a:2b:0a:a5:1a:4a:21:78:2b:8f:36:c3:6f: 86:31:80:4c:5c:46:a2:23:58:39:8f:af:cb:51:59:3c:0c:ac: f4:0c:7b:22:69:ab:72:60:b6:37:d3:6d:e1:4d:b4:ab:1a:26: d1:e6:d0:9f:75:5d:86:3f:94:74:30:86:23:4b:1b:a6:2f:cb: 6c:24:c6:65:57:dc:26:2b:8f:04:47:25:1a:72:0f:11:69:1d: 29:13:bf:c2:f2:0e:84:30:14:db:16:7d:55:c9:98:bc:44:28: d1:92:b8:14:1f:4e:bf:b9:37:59:b2:52:41:95:f0:1f:74:1d: d3:01:15:85:10:26:1d:a0:2a:79:81:03:36:9c:b2:d2:1a:80: b8:68:ab:90:ea:50:03:af:63:7f:38:8d:57:d3:5d:cb:84:e7: aa:0d:55:f0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX904ND3djfZ/AwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk MDM1YzJkYzItMGRkMC00ZWVjLTg0ZmEtODI4N2ZhODYxMDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQDo5eRUrCo0zzVEOUYJ0+w0PpMQo8jwCvT2 e8qFBsbhAFCGDnchOJS8rp/zAZoKH6JXQIKFuT9nBffNUI6vFV2Lr2tGRYEmPgGW bM1TS7ElIZ7aiwQiqr2TF76/Jv5M6PVQvG1KttDhHlxOeiLBH5IbdN2XoT9ALlnE pCJnqKNbDDUE/F4PSy2CjhrJVuBkvSP2k5iQHLxbe0bbjbzwKmYfnikvBFPi8CWk VWe5O8C4LC9UHk9P998RjStapvJCd/qvdxZEi/CbseGFQU3vb1hmaulfWImWlNso DDgS3/COm+p6pFqE+LsOn+J/9BShkFocxiv+jCMVMLPs8UAhfQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGc48S0MD622tzJiW/Ez7QLbPRu8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNzdhNzJkYWUtMmE3Ni0z NTA4LWE4ODctNGMxZTFiODNiMWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcABd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJiHYWs/TbhJ6TxbFwHqWTEGcczP+GncUIWhJjLYoc2JjiJjsKi5 Z1qgdlneHYjw0/msC5SHQ+xboKWzVo9k33P0+i9uh8Iu3OZUcXBlzgzGkTMx8mSf YH/jsrkSUu2AeisKpRpKIXgrjzbDb4YxgExcRqIjWDmPr8tRWTwMrPQMeyJpq3Jg tjfTbeFNtKsaJtHm0J91XYY/lHQwhiNLG6Yvy2wkxmVX3CYrjwRHJRpyDxFpHSkT v8LyDoQwFNsWfVXJmLxEKNGSuBQfTr+5N1myUkGV8B90HdMBFYUQJh2gKnmBAzac stIagLhoq5DqUAOvY384jVfTXcuE56oNVfA= -----END CERTIFICATE-----Generated at Sun Jun 15 15:02:22 2025 by rpki-client