$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8548d5b6-7fde-3477-bcab-373c3b8c36d6.roa File: 8548d5b6-7fde-3477-bcab-373c3b8c36d6.roa (raw, json) Hash identifier: 49iHb+IOG0R0aCmDaOPIo+L+QKQuB+657wEIaSNCpv4= Subject key identifier: 90:40:50:6D:0F:12:DC:27:75:3A:C7:13:B7:1F:47:7C:62:4B:F1:48 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A2963E3CA62100AFEF87E8E20 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8548d5b6-7fde-3477-bcab-373c3b8c36d6.roa Signing time: Thu 12 Jun 2025 01:30:10 +0000 ROA not before: Thu 12 Jun 2025 01:30:10 +0000 ROA not after: Wed 10 Sep 2025 01:30:10 +0000 asID: 4128 IP address blocks: 2001:470:2c5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:29:63:e3:ca:62:10:0a:fe:f8:7e:8e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 12 01:30:10 2025 GMT Not After : Sep 10 01:30:10 2025 GMT Subject: CN=2493fe73-c239-441a-93c9-aeb3f693546b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:af:30:79:8d:98:96:8d:35:fd:c8:7c:18:e3: 08:53:04:54:c6:c7:7f:c6:f5:c2:f4:a8:61:4e:ab: 89:9e:e5:18:34:8a:35:45:8f:0c:bf:d1:f2:c9:f2: 42:29:d8:13:b0:e3:40:f0:47:dd:26:55:91:69:5f: 88:de:54:08:aa:11:ef:79:23:a2:99:bc:c1:19:0e: 7c:ca:2b:e5:d0:74:b7:22:a1:22:c7:65:f2:7a:c8: c2:36:cf:7a:ec:cf:39:78:a8:8e:5a:14:1d:c1:b6: 21:63:6d:e0:87:9d:59:8b:b0:cb:88:d1:68:c4:4e: 05:cb:14:57:35:f0:76:40:6a:1e:99:80:ae:0a:05: 0a:b1:7b:10:cb:28:58:74:d1:cf:85:ab:d4:58:a7: 2f:ef:cc:d8:73:5d:f6:45:41:db:46:a5:4d:3d:28: e2:60:60:6e:c5:63:62:40:05:54:5e:da:83:4e:37: 9a:a7:62:3a:3d:aa:1e:e5:c9:0e:ed:db:f0:d8:b1: 6e:97:62:74:aa:11:a2:09:e5:b3:e9:d0:ed:6e:18: 3d:27:5d:1e:fb:fe:5a:2b:7c:db:3b:82:40:ea:6a: 83:46:54:84:b7:a2:b2:9d:42:fd:29:95:d8:dc:d2: a7:62:a6:21:49:ac:04:6c:16:20:24:3c:a0:90:0d: cd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:40:50:6D:0F:12:DC:27:75:3A:C7:13:B7:1F:47:7C:62:4B:F1:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8548d5b6-7fde-3477-bcab-373c3b8c36d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2c5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:fb:6f:a2:8e:e4:25:61:2f:59:74:58:50:21:c7:7c:78:c6: 0b:eb:e8:69:e1:df:34:bd:61:d4:52:2c:26:13:69:f9:0a:18: 1b:00:60:fe:f9:f9:eb:23:db:f0:19:61:dc:d4:6d:12:da:25: 65:0d:0c:b1:84:85:63:57:4e:cb:eb:68:b2:97:5d:76:0b:df: 41:fd:74:f3:e7:83:88:39:04:a6:37:9e:0d:a7:87:75:b7:58: ec:46:28:69:31:ef:d4:98:b8:6b:93:56:20:84:80:a2:26:7a: a8:e6:e3:9d:62:5f:2f:94:80:66:51:fc:0c:58:70:74:02:b9: 66:19:67:08:3b:30:1e:cf:c6:c1:27:39:90:49:bf:f0:f2:43: 06:81:90:62:a3:14:24:04:f4:d5:0b:cf:ad:5c:65:1e:6f:05: aa:8b:ce:2c:93:a6:17:ba:34:e9:8d:90:38:86:23:65:4a:9c: 54:40:63:d3:4e:81:7a:d5:63:de:96:a5:4f:41:57:d5:ed:45: 18:e3:5a:fa:f2:a0:5f:5a:db:80:d6:a8:15:3d:3b:3c:05:4e: 44:03:7c:3e:58:cc:dd:17:a3:81:76:8c:9f:1f:6e:99:a0:53: f6:10:34:14:0a:33:7c:60:97:51:67:c1:0c:62:cd:62:25:4b: fa:e4:3b:9b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEopY+PKYhAK/vh+jiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDYxMjAxMzAxMFoXDTI1MDkxMDAxMzAxMFowLzEtMCsGA1UEAxMk MjQ5M2ZlNzMtYzIzOS00NDFhLTkzYzktYWViM2Y2OTM1NDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq68weY2Ylo01/ch8GOMIUwRUxsd/xvXC9Khh TquJnuUYNIo1RY8Mv9HyyfJCKdgTsONA8EfdJlWRaV+I3lQIqhHveSOimbzBGQ58 yivl0HS3IqEix2XyesjCNs967M85eKiOWhQdwbYhY23gh51Zi7DLiNFoxE4FyxRX NfB2QGoemYCuCgUKsXsQyyhYdNHPhavUWKcv78zYc132RUHbRqVNPSjiYGBuxWNi QAVUXtqDTjeap2I6Paoe5ckO7dvw2LFul2J0qhGiCeWz6dDtbhg9J10e+/5aK3zb O4JA6mqDRlSEt6KynUL9KZXY3NKnYqYhSawEbBYgJDygkA3N0QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJBAUG0PEtwndTrHE7cfR3xiS/FIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODU0OGQ1YjYtN2ZkZS0z NDc3LWJjYWItMzczYzNiOGMzNmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABX7b6KO5CVhL1l0WFAhx3x4xgvr6Gnh3zS9YdRSLCYTafkKGBsA YP75+esj2/AZYdzUbRLaJWUNDLGEhWNXTsvraLKXXXYL30H9dPPng4g5BKY3ng2n h3W3WOxGKGkx79SYuGuTViCEgKImeqjm451iXy+UgGZR/AxYcHQCuWYZZwg7MB7P xsEnOZBJv/DyQwaBkGKjFCQE9NULz61cZR5vBaqLziyTphe6NOmNkDiGI2VKnFRA Y9NOgXrVY96WpU9BV9XtRRjjWvryoF9a24DWqBU9OzwFTkQDfD5YzN0Xo4F2jJ8f bpmgU/YQNBQKM3xgl1FnwQxizWIlS/rkO5s= -----END CERTIFICATE-----Generated at Sun Jun 15 15:57:16 2025 by rpki-client