$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8afd3ef0-698d-334e-bd79-3cd5f07aefe7.roa File: 8afd3ef0-698d-334e-bd79-3cd5f07aefe7.roa (raw, json) Hash identifier: ZAgxs0uJTZE9bQVcOq37B0BYHBJojSR0u6ZSLW58JzI= Subject key identifier: F1:1A:72:DB:42:2E:D2:5C:DC:F5:07:40:F1:0C:88:DD:49:B8:57:EA Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A0A9FD4414D2B5F5047400700 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8afd3ef0-698d-334e-bd79-3cd5f07aefe7.roa Signing time: Sun 01 Jun 2025 01:00:49 +0000 ROA not before: Sun 01 Jun 2025 01:00:49 +0000 ROA not after: Sat 30 Aug 2025 01:00:49 +0000 asID: 16578 IP address blocks: 2001:470:3e6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0a:9f:d4:41:4d:2b:5f:50:47:40:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 1 01:00:49 2025 GMT Not After : Aug 30 01:00:49 2025 GMT Subject: CN=05d4b3bc-871b-4b69-9dd3-35e63ec3acd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e2:dc:e4:72:c6:b9:03:c6:5a:fa:5b:97:ca: 9d:c8:5f:ae:1e:47:71:45:06:89:dc:5a:dc:d6:71: 56:57:1b:59:7b:e3:40:21:6b:37:cc:c9:71:fe:c7: a9:82:e8:52:a3:be:bd:e9:f4:24:9f:5e:06:d7:57: ae:39:aa:a9:8b:c0:ea:5c:25:00:38:58:bd:43:81: f7:7c:85:53:c5:8a:54:cf:57:02:e7:da:22:c9:98: 47:a2:95:14:7e:1a:6a:7c:d7:e9:fe:cc:a8:e8:6e: f6:94:ad:f3:45:5b:62:69:5b:61:eb:2f:3a:95:0f: cd:4a:c0:01:b6:9a:0e:a2:65:1a:92:66:8a:96:6a: 2c:b2:d5:c8:46:77:3e:1e:f8:07:7a:d5:2e:f9:28: c7:66:5b:7f:ca:be:00:83:d0:ad:59:b3:95:4d:50: b4:ed:64:60:bf:ca:7d:03:93:a6:2c:8c:5f:a3:7a: 21:d5:cd:4b:be:8d:ff:a2:00:44:af:2e:96:86:63: 21:66:43:65:b9:46:91:ce:c8:a4:d9:43:ce:23:15: 30:22:58:8c:33:41:aa:50:4e:dc:8d:62:51:5c:01: 4c:b3:5a:e8:00:ed:f0:9b:5e:f3:73:fd:23:ee:a9: f0:2f:c0:4d:68:bc:36:61:7d:04:e9:a6:bf:97:4c: b9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:1A:72:DB:42:2E:D2:5C:DC:F5:07:40:F1:0C:88:DD:49:B8:57:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8afd3ef0-698d-334e-bd79-3cd5f07aefe7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3e6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:77:4a:a2:e0:0e:dd:c8:7c:f3:3c:04:b5:92:00:b3:fb:05: de:c3:f4:93:f6:d6:52:57:7d:05:1c:1b:a9:85:39:79:1f:9f: 3b:69:95:8c:e7:2f:ff:64:f7:87:2a:2a:7a:dc:1c:7a:68:f2: a7:04:65:0c:c1:09:6e:ef:ee:61:01:fe:49:cc:be:94:5e:d9: c4:24:cd:4b:d8:c0:fc:01:69:dc:de:f0:23:96:a9:ca:7d:f9: aa:e7:48:91:08:3e:24:b8:f9:c2:fa:69:f7:b2:62:dd:58:02: 9b:d7:a1:aa:26:03:fe:87:de:4f:37:a2:a9:77:6c:ce:82:6a: 6b:8b:5f:14:3e:5d:3d:db:ce:fd:95:f2:4b:26:ec:dc:52:e2: 0f:a8:dd:e9:ec:fc:8b:02:de:89:e4:03:6e:03:15:88:3e:ac: ef:64:15:b1:c0:92:a6:15:25:0f:21:58:79:87:d4:2b:2a:79: 21:20:0f:d4:a6:c8:3d:0e:e7:6e:db:a4:b4:1a:15:b8:2f:64: f2:f0:c3:de:23:51:d4:1d:5d:30:82:3e:c5:36:66:7c:2a:00: 0e:7b:87:49:b9:c4:c4:66:4f:03:6e:3c:85:dd:05:28:04:35: b0:06:e3:4f:f5:f9:6b:76:0f:0d:4b:91:c7:ca:66:52:90:00: 47:b0:35:75 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoKn9RBTStfUEdABwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDYwMTAxMDA0OVoXDTI1MDgzMDAxMDA0OVowLzEtMCsGA1UEAxMk MDVkNGIzYmMtODcxYi00YjY5LTlkZDMtMzVlNjNlYzNhY2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOLc5HLGuQPGWvpbl8qdyF+uHkdxRQaJ3Frc 1nFWVxtZe+NAIWs3zMlx/sepguhSo7696fQkn14G11euOaqpi8DqXCUAOFi9Q4H3 fIVTxYpUz1cC59oiyZhHopUUfhpqfNfp/syo6G72lK3zRVtiaVth6y86lQ/NSsAB tpoOomUakmaKlmosstXIRnc+HvgHetUu+SjHZlt/yr4Ag9CtWbOVTVC07WRgv8p9 A5OmLIxfo3oh1c1Lvo3/ogBEry6WhmMhZkNluUaRzsik2UPOIxUwIliMM0GqUE7c jWJRXAFMs1roAO3wm17zc/0j7qnwL8BNaLw2YX0E6aa/l0y5JwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPEacttCLtJc3PUHQPEMiN1JuFfqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOGFmZDNlZjAtNjk4ZC0z MzRlLWJkNzktM2NkNWYwN2FlZmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK93SqLgDt3IfPM8BLWSALP7Bd7D9JP21lJXfQUcG6mFOXkfnztp lYznL/9k94cqKnrcHHpo8qcEZQzBCW7v7mEB/knMvpRe2cQkzUvYwPwBadze8COW qcp9+arnSJEIPiS4+cL6afeyYt1YApvXoaomA/6H3k83oql3bM6CamuLXxQ+XT3b zv2V8ksm7NxS4g+o3ens/IsC3onkA24DFYg+rO9kFbHAkqYVJQ8hWHmH1CsqeSEg D9SmyD0O527bpLQaFbgvZPLww94jUdQdXTCCPsU2ZnwqAA57h0m5xMRmTwNuPIXd BSgENbAG40/1+Wt2Dw1LkcfKZlKQAEewNXU= -----END CERTIFICATE-----Generated at Sun Jun 15 15:48:25 2025 by rpki-client