$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/873ce473-2f5d-3d45-ad0f-68394fc387aa.roa File: 873ce473-2f5d-3d45-ad0f-68394fc387aa.roa (raw, json) Hash identifier: Y487bza7TB+90yJ/a8TB7Yc1Wgiapy8dtasHKRTeP1w= Subject key identifier: 01:66:BF:1B:7C:47:6C:2F:EB:4F:BA:02:B3:83:84:43:EE:DA:3C:7A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FBAD8CF98390624B71B80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/873ce473-2f5d-3d45-ad0f-68394fc387aa.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 3855 IP address blocks: 2001:470:b6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:ba:d8:cf:98:39:06:24:b7:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=f9cb30d3-7d49-48e2-8c05-811e0551b8b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8b:95:e5:85:85:af:8e:11:86:b1:b8:c5:9b: d3:8a:c4:34:ea:88:71:74:da:b1:a5:37:96:a3:af: ff:4b:e8:3a:0c:ce:83:49:86:61:1f:c2:18:08:f3: 64:b0:0e:6d:96:5e:ab:ac:7c:16:35:16:9d:2c:ec: 92:d1:c5:07:e5:7f:b8:c6:d2:d6:86:ab:76:65:cf: 8c:1a:95:0f:40:b3:fc:a6:89:31:0f:89:d9:88:bf: 79:b7:87:ba:b7:6c:cb:88:2a:70:e8:c8:0c:ab:3c: 7a:dd:f1:c4:4d:f5:42:80:14:94:2f:bf:e8:ae:07: b0:41:be:74:e7:1f:a1:da:a6:56:a5:8c:37:6a:fc: 38:15:00:f6:4b:7e:c8:95:89:d5:cc:cc:dd:55:34: 0e:68:0f:a0:7c:6f:31:41:bc:a1:cf:fd:86:94:dd: e9:c2:f3:c8:d0:4d:5a:27:fc:7c:ee:61:b5:be:88: 12:a2:6b:22:84:fb:81:ca:50:83:d5:5d:e7:19:74: 1a:a6:1d:df:8f:38:39:76:1a:01:a7:39:d4:81:cb: e6:c1:6d:3e:4a:9d:2d:6b:3b:a6:08:b8:4d:41:77: f6:1d:5f:c0:82:a1:55:3c:cc:1e:77:75:b5:88:c0: 06:b8:20:06:e9:61:83:21:ab:90:5e:61:39:ef:9c: d6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:66:BF:1B:7C:47:6C:2F:EB:4F:BA:02:B3:83:84:43:EE:DA:3C:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/873ce473-2f5d-3d45-ad0f-68394fc387aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:b6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:6b:42:e3:5d:30:2d:57:ff:03:08:41:6a:8a:dc:65:e9:21: eb:87:c6:ce:40:49:a3:06:9f:17:bf:5a:96:d8:a7:09:d4:1d: f8:59:34:f4:57:6d:16:01:bd:a3:18:18:bb:fd:a5:4d:e8:84: 36:e5:f7:08:9d:3c:8b:ed:84:04:b1:2d:14:5d:55:a3:82:d3: a9:62:35:56:7f:0d:f1:b0:a3:81:44:7a:13:82:bd:f0:8d:17: 11:7c:f9:c9:76:49:e5:f0:4a:18:b4:2e:f4:af:19:b9:4e:52: d2:cd:a7:c7:b3:c7:f9:78:96:7a:d1:d8:56:3d:dc:98:69:a2: 34:fe:a0:2a:bb:32:f6:bb:02:4b:49:f6:c0:eb:07:69:47:d9: e7:60:04:ef:fc:8e:aa:c2:70:45:4d:a0:e8:df:ff:70:4c:12: d3:30:47:89:7d:38:f4:de:21:81:4c:21:4e:49:88:56:e4:46: 5d:02:45:3f:2c:f6:83:5e:b5:c3:03:ca:0a:f0:7d:32:7b:60: 2f:5e:09:ca:0c:59:8f:3b:6d:14:a2:b6:c2:ad:d0:1a:58:12: 28:f7:d9:12:3a:1d:7e:75:36:62:0d:b6:a2:a8:1d:42:04:e1: 55:26:8c:c9:27:81:04:52:fc:f4:c8:db:8b:6f:57:44:28:4a: 7f:10:80:e8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX7rYz5g5BiS3G4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk ZjljYjMwZDMtN2Q0OS00OGUyLThjMDUtODExZTA1NTFiOGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIuV5YWFr44RhrG4xZvTisQ06ohxdNqxpTeW o6//S+g6DM6DSYZhH8IYCPNksA5tll6rrHwWNRadLOyS0cUH5X+4xtLWhqt2Zc+M GpUPQLP8pokxD4nZiL95t4e6t2zLiCpw6MgMqzx63fHETfVCgBSUL7/orgewQb50 5x+h2qZWpYw3avw4FQD2S37IlYnVzMzdVTQOaA+gfG8xQbyhz/2GlN3pwvPI0E1a J/x87mG1vogSomsihPuBylCD1V3nGXQaph3fjzg5dhoBpznUgcvmwW0+Sp0tazum CLhNQXf2HV/AgqFVPMwed3W1iMAGuCAG6WGDIauQXmE575zWdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAFmvxt8R2wv60+6ArODhEPu2jx6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODczY2U0NzMtMmY1ZC0z ZDQ1LWFkMGYtNjgzOTRmYzM4N2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAC2 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFRrQuNdMC1X/wMIQWqK3GXpIeuHxs5ASaMGnxe/WpbYpwnUHfhZ NPRXbRYBvaMYGLv9pU3ohDbl9widPIvthASxLRRdVaOC06liNVZ/DfGwo4FEehOC vfCNFxF8+cl2SeXwShi0LvSvGblOUtLNp8ezx/l4lnrR2FY93JhpojT+oCq7Mva7 AktJ9sDrB2lH2edgBO/8jqrCcEVNoOjf/3BMEtMwR4l9OPTeIYFMIU5JiFbkRl0C RT8s9oNetcMDygrwfTJ7YC9eCcoMWY87bRSitsKt0BpYEij32RI6HX51NmINtqKo HUIE4VUmjMkngQRS/PTI24tvV0QoSn8QgOg= -----END CERTIFICATE-----Generated at Sun Jun 15 16:25:19 2025 by rpki-client