$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8482ed52-5c1a-3f8d-a5c4-30103edb138e.roa File: 8482ed52-5c1a-3f8d-a5c4-30103edb138e.roa (raw, json) Hash identifier: G2VZn5gd3i8TlQdYKeGxmDXIfXoGQHFnkPVHPRCraBU= Subject key identifier: 94:18:6E:13:E0:CB:EE:D1:A1:27:0E:62:69:1E:4C:11:14:7C:FB:A3 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A25256DBDE989F6759AC97880 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8482ed52-5c1a-3f8d-a5c4-30103edb138e.roa Signing time: Tue 10 Jun 2025 13:01:03 +0000 ROA not before: Tue 10 Jun 2025 13:01:03 +0000 ROA not after: Mon 08 Sep 2025 13:01:03 +0000 asID: 399055 IP address blocks: 2001:470:42a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:25:25:6d:bd:e9:89:f6:75:9a:c9:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 10 13:01:03 2025 GMT Not After : Sep 8 13:01:03 2025 GMT Subject: CN=2bf529ca-25e6-4bf1-b207-b92711cc80db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:89:78:40:d2:76:dd:b8:75:aa:db:19:5f:09: 67:53:fa:5a:c8:17:3c:da:04:f2:97:84:79:7c:55: a8:82:54:91:b3:2a:e1:b6:bc:c0:11:ab:48:b3:73: fd:a2:90:9d:01:cc:97:4d:28:98:f9:5d:03:22:0e: e8:2d:2b:d0:53:13:6f:75:1d:d1:8a:57:5a:7b:ce: 51:b5:ac:1b:15:dc:be:8b:0a:b2:49:f9:57:3e:54: fd:55:46:ae:a8:7a:f5:bc:93:cf:80:22:2e:66:03: d8:44:b6:e3:94:40:02:69:0f:76:56:de:3e:cd:1e: 63:ca:8a:b4:e6:ca:04:8b:72:67:ac:18:7e:92:8a: 2d:c3:60:83:8d:06:5b:d8:06:aa:79:d6:e6:94:12: 89:4f:fb:e7:b9:ce:cd:ce:e8:dd:50:44:3d:a8:88: 4b:d3:7e:6a:c5:09:4a:77:db:4b:eb:f4:7d:fc:bc: a3:f3:b5:35:c3:68:10:1f:1c:53:46:b7:a3:d2:e7: d9:8c:78:e3:8b:d4:e8:e8:33:6a:c5:cf:92:19:15: 42:62:c3:e7:fc:19:dc:b6:24:75:b0:cf:a0:27:69: 36:f7:34:86:43:fc:0f:8f:f2:4b:6d:00:ac:4a:09: b3:ba:6e:17:7e:a7:09:37:d6:1b:ff:03:d8:70:83: ad:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:18:6E:13:E0:CB:EE:D1:A1:27:0E:62:69:1E:4C:11:14:7C:FB:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8482ed52-5c1a-3f8d-a5c4-30103edb138e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:42a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:0b:e1:23:e1:63:87:85:88:f5:7f:23:d5:bd:88:15:a7:bd: 91:41:55:66:c4:9a:9d:ad:19:8d:b8:d5:f1:a8:1e:f0:69:c8: 05:a3:be:26:8e:2b:58:48:3f:34:f9:ac:5c:48:34:65:43:3d: b3:8c:1d:91:7b:32:7a:be:c8:15:2f:5d:74:98:2e:8d:73:1f: d9:e5:23:1e:58:b8:3c:f0:1c:58:43:a4:c7:1b:18:12:6c:2a: ba:08:ed:85:e1:29:e6:8f:8d:fa:3e:7f:9d:8a:1f:7d:c9:53: 5a:61:d7:a3:4c:2f:00:a4:50:bc:64:06:77:0b:83:42:bc:00: c1:2d:84:c3:17:8b:4a:6b:bb:71:54:e7:ea:d4:64:70:ba:fe: 41:05:bd:9f:b0:98:2e:45:44:89:16:25:a9:da:ab:1d:14:a9: 9f:38:7b:0f:3a:9a:d5:58:63:6f:7f:34:e9:6d:82:40:49:94: e4:f9:dd:cf:07:29:d0:9b:6b:10:3d:e3:71:38:bc:cb:7d:0d: 32:89:6a:e5:4b:22:57:aa:35:cb:c5:7c:bc:73:b7:3d:49:05: 8a:f3:59:63:37:29:3d:26:79:fb:1f:3a:f2:ff:26:ea:27:b6: 3a:47:68:8c:9c:e8:eb:50:ca:99:49:d6:49:57:7b:95:e0:08: 5c:50:b0:34 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEolJW296Yn2dZrJeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDYxMDEzMDEwM1oXDTI1MDkwODEzMDEwM1owLzEtMCsGA1UEAxMk MmJmNTI5Y2EtMjVlNi00YmYxLWIyMDctYjkyNzExY2M4MGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqol4QNJ23bh1qtsZXwlnU/payBc82gTyl4R5 fFWoglSRsyrhtrzAEatIs3P9opCdAcyXTSiY+V0DIg7oLSvQUxNvdR3Rildae85R tawbFdy+iwqySflXPlT9VUauqHr1vJPPgCIuZgPYRLbjlEACaQ92Vt4+zR5jyoq0 5soEi3JnrBh+kootw2CDjQZb2AaqedbmlBKJT/vnuc7NzujdUEQ9qIhL035qxQlK d9tL6/R9/Lyj87U1w2gQHxxTRrej0ufZjHjji9To6DNqxc+SGRVCYsPn/BnctiR1 sM+gJ2k29zSGQ/wPj/JLbQCsSgmzum4XfqcJN9Yb/wPYcIOt8QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJQYbhPgy+7RoScOYmkeTBEUfPujMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODQ4MmVkNTItNWMxYS0z ZjhkLWE1YzQtMzAxMDNlZGIxMzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKEL4SPhY4eFiPV/I9W9iBWnvZFBVWbEmp2tGY241fGoHvBpyAWj viaOK1hIPzT5rFxINGVDPbOMHZF7Mnq+yBUvXXSYLo1zH9nlIx5YuDzwHFhDpMcb GBJsKroI7YXhKeaPjfo+f52KH33JU1ph16NMLwCkULxkBncLg0K8AMEthMMXi0pr u3FU5+rUZHC6/kEFvZ+wmC5FRIkWJanaqx0UqZ84ew86mtVYY29/NOltgkBJlOT5 3c8HKdCbaxA943E4vMt9DTKJauVLIleqNcvFfLxztz1JBYrzWWM3KT0mefsfOvL/ JuontjpHaIyc6OtQyplJ1klXe5XgCFxQsDQ= -----END CERTIFICATE-----Generated at Mon Jun 16 11:58:02 2025 by rpki-client