$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/86a91b17-bd9c-3d20-8cfc-3bc7a1db9b72.roa File: 86a91b17-bd9c-3d20-8cfc-3bc7a1db9b72.roa (raw, json) Hash identifier: i9n8Jr6WzXQbZgy3cMNlTPEz5wNWOAoOrMT6dPgI97Y= Subject key identifier: 3B:37:94:B1:50:6B:47:94:3C:16:DE:D2:34:71:00:84:25:1D:B1:5B Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FB354DEDD4D44982CF800 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/86a91b17-bd9c-3d20-8cfc-3bc7a1db9b72.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 17085 IP address blocks: 2001:470:f5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:b3:54:de:dd:4d:44:98:2c:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=0fc19ead-37ea-40ff-88ad-ee212826b145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:22:ec:92:81:b6:85:27:47:7d:12:f6:30:8f: 45:1c:12:59:54:10:47:d3:6c:0a:5c:04:c9:c7:0f: df:94:e2:1c:e1:78:33:d4:8c:0b:ab:17:38:a4:62: 9e:fe:56:bf:a0:18:10:a8:8e:1b:48:a6:c9:36:96: ba:01:84:62:de:1f:5f:25:42:85:34:3b:7a:5e:5b: c2:8d:73:cf:94:a1:33:b5:99:5b:0d:3b:87:19:37: 56:45:e9:48:9f:70:57:40:40:0b:aa:6d:b8:0c:9f: 99:4e:d8:76:a5:96:21:e9:7d:4a:85:03:80:c1:89: f7:87:55:9e:74:31:a8:6d:65:27:4f:6a:3e:8b:95: 5b:17:9e:96:1c:ca:94:1e:0e:48:46:3e:4e:77:b6: e7:58:85:ab:dd:0f:ea:a1:de:ef:9c:2c:56:68:fb: a3:7e:4f:ab:3b:67:4d:71:17:04:e6:f6:7b:d7:53: 4e:5e:3a:83:6c:34:31:35:66:0b:1d:df:f1:ec:03: ce:fd:4b:4c:99:60:b1:0f:61:d7:2a:3c:e0:72:f6: d1:a3:26:06:a9:2c:21:d9:3a:79:6f:d1:c4:62:09: 25:01:5e:ba:11:76:61:b0:84:ac:4c:73:56:0c:68: 26:84:dd:b3:d2:4f:c2:e4:e8:91:76:e6:ef:6b:91: 3b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:37:94:B1:50:6B:47:94:3C:16:DE:D2:34:71:00:84:25:1D:B1:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/86a91b17-bd9c-3d20-8cfc-3bc7a1db9b72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:f5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:1b:67:dd:a8:b9:39:18:d1:74:0a:f3:e4:52:85:7a:fd:16: 31:1e:6b:bc:02:98:bd:49:7a:12:3f:8b:5a:ad:e7:1a:09:1c: 07:8c:2e:67:d2:bb:63:f6:6b:66:78:22:9c:24:31:f7:57:d7: d3:f2:00:fe:7c:fa:19:a8:d1:c5:32:07:1a:17:92:bd:b4:5a: f8:3f:3b:9e:7f:58:c8:34:c6:78:8d:47:4e:38:c7:c8:da:1a: 72:0e:83:d7:b2:0a:b3:46:13:68:5d:c2:49:c8:3e:6a:7e:22: a6:29:e9:02:ba:0d:b6:fb:bc:1f:72:bc:f9:88:34:20:8b:45: e4:ed:a3:9b:31:ce:bb:75:1f:47:b0:b7:d4:83:5c:03:d9:b9: e5:2f:8a:8f:50:81:4f:48:3f:8b:5e:19:25:ac:8e:11:d7:6a: 0a:04:5e:01:fc:98:d8:cc:e0:01:a6:7b:a6:dd:f4:71:ef:92: 10:b1:03:cf:1d:ea:e1:09:e7:da:cb:34:dc:0f:2b:26:95:bb: 70:eb:f8:ae:5e:63:e9:7c:77:9d:f3:37:34:ed:c8:53:68:80: cb:dd:ed:72:39:a2:cc:78:2d:5f:9a:04:92:7e:4b:eb:65:55: 75:c9:e7:f8:4b:41:86:31:40:f4:cd:52:16:ee:90:e6:1b:5e: c7:f8:74:3b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX7NU3t1NRJgs+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk MGZjMTllYWQtMzdlYS00MGZmLTg4YWQtZWUyMTI4MjZiMTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiLskoG2hSdHfRL2MI9FHBJZVBBH02wKXATJ xw/flOIc4Xgz1IwLqxc4pGKe/la/oBgQqI4bSKbJNpa6AYRi3h9fJUKFNDt6XlvC jXPPlKEztZlbDTuHGTdWRelIn3BXQEALqm24DJ+ZTth2pZYh6X1KhQOAwYn3h1We dDGobWUnT2o+i5VbF56WHMqUHg5IRj5Od7bnWIWr3Q/qod7vnCxWaPujfk+rO2dN cRcE5vZ711NOXjqDbDQxNWYLHd/x7APO/UtMmWCxD2HXKjzgcvbRoyYGqSwh2Tp5 b9HEYgklAV66EXZhsISsTHNWDGgmhN2z0k/C5OiRdubva5E7UwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDs3lLFQa0eUPBbe0jRxAIQlHbFbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODZhOTFiMTctYmQ5Yy0z ZDIwLThjZmMtM2JjN2ExZGI5YjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAD1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMcbZ92ouTkY0XQK8+RShXr9FjEea7wCmL1JehI/i1qt5xoJHAeM LmfSu2P2a2Z4IpwkMfdX19PyAP58+hmo0cUyBxoXkr20Wvg/O55/WMg0xniNR044 x8jaGnIOg9eyCrNGE2hdwknIPmp+IqYp6QK6Dbb7vB9yvPmINCCLReTto5sxzrt1 H0ewt9SDXAPZueUvio9QgU9IP4teGSWsjhHXagoEXgH8mNjM4AGme6bd9HHvkhCx A88d6uEJ59rLNNwPKyaVu3Dr+K5eY+l8d53zNzTtyFNogMvd7XI5osx4LV+aBJJ+ S+tlVXXJ5/hLQYYxQPTNUhbukOYbXsf4dDs= -----END CERTIFICATE-----Generated at Mon Jun 16 04:28:37 2025 by rpki-client