$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/880a8b84-3f33-3b50-b847-5f1781073bac.roa File: 880a8b84-3f33-3b50-b847-5f1781073bac.roa (raw, json) Hash identifier: OY2RERR78kE/Y6bwu48EEjfhGqgF78FLexOGVFGySJ8= Subject key identifier: E2:76:C7:23:C2:6A:05:A3:81:CA:DF:40:A8:25:A9:B8:D3:D6:12:4D Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FB27EC2D506173A529D00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/880a8b84-3f33-3b50-b847-5f1781073bac.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 133959 IP address blocks: 2001:470:14f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:b2:7e:c2:d5:06:17:3a:52:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=3c35c3b2-2a14-4fc6-ba27-f7eb3ca2a524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:44:ad:3e:d0:67:3f:90:de:91:0f:32:84:5d: 3f:57:93:ad:36:f7:41:2c:2a:fc:6e:50:30:e6:02: 17:9b:77:22:86:82:b8:98:86:c5:c9:62:2b:79:be: 72:14:45:46:e6:f1:5a:22:60:63:77:19:5a:e6:2b: 20:56:70:79:4f:0f:08:67:31:c8:a8:24:c8:48:80: 84:d6:9b:e0:0c:41:87:3d:c0:6c:0c:58:7e:2b:f7: 72:c1:69:01:e9:e7:bf:4b:88:53:71:8b:c2:42:c9: 75:69:1f:72:a0:1d:05:03:dd:83:38:a9:e3:28:b7: 6a:c6:3e:54:e6:4f:b2:df:36:93:d1:74:65:a1:a9: 6c:fc:38:ba:88:a8:70:95:c5:ff:57:bb:76:32:a0: c8:b2:ac:1e:38:25:55:42:d4:af:84:10:ac:27:3b: ad:4d:01:1e:5d:6a:6f:6f:fb:27:58:69:d0:6d:77: 86:39:08:d8:35:41:a4:86:53:66:01:79:3e:d3:2a: 70:90:e9:9d:a4:d4:8c:6e:f1:58:1b:5d:e5:9b:c5: 59:f7:2d:e4:fb:27:b9:ca:e1:de:5f:e6:24:55:2d: 38:da:19:c2:41:49:27:35:7f:c6:5d:93:46:42:92: 89:b0:10:b3:8d:1b:8c:64:08:21:1e:aa:f2:8e:7b: bb:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:76:C7:23:C2:6A:05:A3:81:CA:DF:40:A8:25:A9:B8:D3:D6:12:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/880a8b84-3f33-3b50-b847-5f1781073bac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:14f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:a2:86:30:b6:e9:cd:ac:cf:89:ba:02:81:cb:b5:74:9c:45: 48:cc:0e:10:06:aa:f4:f1:cf:67:01:a3:93:c9:79:ae:6c:a6: 28:a5:c2:a3:ae:98:3e:78:0e:74:cd:53:cd:53:93:12:dc:cd: a1:5d:cf:be:a3:50:40:57:82:ac:42:79:c2:5e:6e:c3:7b:4a: f4:0e:77:4a:5a:3c:a1:1c:3f:33:81:98:51:6d:f9:75:f0:2f: b1:e3:c8:e5:16:03:eb:6f:58:72:d4:1a:08:7c:58:d3:02:48: 93:c7:42:2a:0c:53:a1:95:af:b4:46:1a:fd:2a:ec:fd:56:38: 6b:2e:ee:67:06:48:b6:97:77:51:96:4c:35:2e:ca:64:11:45: af:33:04:dd:95:44:39:9c:06:ef:78:95:8f:d3:1b:5c:dc:ea: 68:bf:b7:85:aa:d6:ca:36:37:4a:00:d4:c2:48:a2:06:e2:58: fb:b6:60:57:dd:ff:39:1a:c3:28:a6:2d:b7:76:2f:4e:32:e0: ef:d6:03:3d:bc:94:07:1e:90:cd:9c:a8:4f:be:3d:8b:8a:d4: 8a:ed:54:e7:e6:5e:d0:76:5c:47:b4:0f:40:26:06:39:77:22: ab:19:0e:34:df:e2:14:2a:14:bd:95:1a:79:a3:7d:df:bf:9a: b0:41:d8:96 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX7J+wtUGFzpSnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk M2MzNWMzYjItMmExNC00ZmM2LWJhMjctZjdlYjNjYTJhNTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkStPtBnP5DekQ8yhF0/V5OtNvdBLCr8blAw 5gIXm3cihoK4mIbFyWIreb5yFEVG5vFaImBjdxla5isgVnB5Tw8IZzHIqCTISICE 1pvgDEGHPcBsDFh+K/dywWkB6ee/S4hTcYvCQsl1aR9yoB0FA92DOKnjKLdqxj5U 5k+y3zaT0XRloals/Di6iKhwlcX/V7t2MqDIsqweOCVVQtSvhBCsJzutTQEeXWpv b/snWGnQbXeGOQjYNUGkhlNmAXk+0ypwkOmdpNSMbvFYG13lm8VZ9y3k+ye5yuHe X+YkVS042hnCQUknNX/GXZNGQpKJsBCzjRuMZAghHqryjnu7EQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOJ2xyPCagWjgcrfQKglqbjT1hJNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODgwYThiODQtM2YzMy0z YjUwLWI4NDctNWYxNzgxMDczYmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAFP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHGihjC26c2sz4m6AoHLtXScRUjMDhAGqvTxz2cBo5PJea5spiil wqOumD54DnTNU81TkxLczaFdz76jUEBXgqxCecJebsN7SvQOd0paPKEcPzOBmFFt +XXwL7HjyOUWA+tvWHLUGgh8WNMCSJPHQioMU6GVr7RGGv0q7P1WOGsu7mcGSLaX d1GWTDUuymQRRa8zBN2VRDmcBu94lY/TG1zc6mi/t4Wq1so2N0oA1MJIogbiWPu2 YFfd/zkawyimLbd2L04y4O/WAz28lAcekM2cqE++PYuK1IrtVOfmXtB2XEe0D0Am Bjl3IqsZDjTf4hQqFL2VGnmjfd+/mrBB2JY= -----END CERTIFICATE-----Generated at Sun Jun 15 16:05:07 2025 by rpki-client