$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8c2868c0-ba9a-37de-8fbc-e74a96e2345a.roa File: 8c2868c0-ba9a-37de-8fbc-e74a96e2345a.roa (raw, json) Hash identifier: tzbPDota1ebP4TcpI245ugHq7vmE2vbpDy08Eby+GUs= Subject key identifier: 9D:DC:19:1E:56:8B:87:CF:A9:01:1A:42:C3:30:50:BA:B6:3E:86:E7 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A269930776737E93F18A25100 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8c2868c0-ba9a-37de-8fbc-e74a96e2345a.roa Signing time: Wed 11 Jun 2025 01:30:08 +0000 ROA not before: Wed 11 Jun 2025 01:30:08 +0000 ROA not after: Tue 09 Sep 2025 01:30:08 +0000 asID: 54634 IP address blocks: 2001:470:2b8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:99:30:77:67:37:e9:3f:18:a2:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 11 01:30:08 2025 GMT Not After : Sep 9 01:30:08 2025 GMT Subject: CN=36e99d7c-3eca-4504-82df-2250640678f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:81:f3:d4:48:24:7e:a5:49:b7:33:62:22:7d: f9:5a:9e:74:e8:04:2b:42:e3:b8:5c:b6:d2:80:77: 5c:2e:24:5a:2b:17:40:5b:6e:a6:8e:5f:3e:61:a2: 08:78:0b:0d:ac:83:e8:e1:d2:12:99:a1:d7:53:e9: b7:ae:41:f7:f7:01:f4:cc:cf:f9:0f:68:24:e2:78: 5a:c3:87:4f:04:f9:9a:15:00:fe:59:02:38:3f:4c: 6b:12:89:bf:d5:a6:19:2c:54:55:de:65:6d:55:5e: e8:14:7f:89:32:79:5b:64:76:a8:79:e7:ec:8e:dd: 0d:e5:de:4a:7e:88:a3:7d:f8:88:a0:ee:9a:cf:bb: 56:ff:81:11:6b:24:c3:7d:a3:05:3b:3d:50:7c:0c: ca:81:55:51:6a:94:56:33:22:67:a1:6c:57:39:ce: cf:82:8a:e4:95:80:2b:ed:51:1e:32:4a:0f:00:6d: 9c:65:0d:7b:56:7f:a0:6c:9f:29:e4:96:56:75:aa: d9:6e:60:b2:c5:86:cd:80:d9:8d:a1:ea:9f:98:d4: 7a:ed:fa:a9:a2:a5:69:08:50:49:65:5b:a8:19:fc: 29:bc:fe:b2:d9:28:60:13:68:72:0f:e0:6a:cb:60: a6:4b:23:16:b8:b1:75:7c:04:2a:96:68:e6:4b:7e: cb:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:DC:19:1E:56:8B:87:CF:A9:01:1A:42:C3:30:50:BA:B6:3E:86:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8c2868c0-ba9a-37de-8fbc-e74a96e2345a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2b8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:c3:ff:f2:01:e8:38:d9:ae:25:11:62:c0:25:f5:dc:45:9c: c9:8d:43:7b:27:bb:5f:4e:7d:0a:54:97:35:55:0e:20:8b:82: 27:44:e6:9f:05:a8:44:24:40:a4:4d:2c:3d:1a:c3:1c:68:d0: 97:ad:6d:a3:1c:ea:db:d7:b7:f3:7f:b9:d3:eb:38:58:3e:de: ae:cd:b6:49:b5:60:ff:6a:eb:4a:b9:39:5c:cc:09:7c:63:99: 13:92:24:fc:e6:70:89:25:ea:fa:4e:e6:1a:fb:84:da:72:e3: a6:75:36:b1:f5:e4:43:9e:c4:6a:f2:49:29:91:96:39:4f:96: 7c:e6:ba:39:fb:d3:b6:38:7b:f4:1f:f4:4a:09:46:61:27:1b: ea:53:e6:15:36:0f:3c:aa:b8:f4:3e:14:14:f4:aa:44:a9:c1: 76:83:85:42:f7:ca:89:7b:83:e4:bd:19:bd:72:0e:28:bb:5f: 68:7a:6e:ca:3b:27:a5:61:3f:e1:8a:a3:4e:d6:78:cf:62:fa: 1e:22:ee:e5:ac:e3:ad:39:b3:14:b6:ce:b8:64:ed:f1:7c:01: 08:13:02:ef:a9:b5:06:f5:bf:b6:55:1c:c2:f7:47:c4:a5:83: e0:a3:25:81:6e:60:6b:27:20:28:8b:99:cd:9e:8c:40:ee:f5: d9:b7:9b:2f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEommTB3ZzfpPxiiUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDYxMTAxMzAwOFoXDTI1MDkwOTAxMzAwOFowLzEtMCsGA1UEAxMk MzZlOTlkN2MtM2VjYS00NTA0LTgyZGYtMjI1MDY0MDY3OGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4Hz1EgkfqVJtzNiIn35Wp506AQrQuO4XLbS gHdcLiRaKxdAW26mjl8+YaIIeAsNrIPo4dISmaHXU+m3rkH39wH0zM/5D2gk4nha w4dPBPmaFQD+WQI4P0xrEom/1aYZLFRV3mVtVV7oFH+JMnlbZHaoeefsjt0N5d5K foijffiIoO6az7tW/4ERayTDfaMFOz1QfAzKgVVRapRWMyJnoWxXOc7PgorklYAr 7VEeMkoPAG2cZQ17Vn+gbJ8p5JZWdarZbmCyxYbNgNmNoeqfmNR67fqpoqVpCFBJ ZVuoGfwpvP6y2ShgE2hyD+Bqy2CmSyMWuLF1fAQqlmjmS37LZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ3cGR5Wi4fPqQEaQsMwULq2PobnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOGMyODY4YzAtYmE5YS0z N2RlLThmYmMtZTc0YTk2ZTIzNDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAK4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALjD//IB6DjZriURYsAl9dxFnMmNQ3snu19OfQpUlzVVDiCLgidE 5p8FqEQkQKRNLD0awxxo0JetbaMc6tvXt/N/udPrOFg+3q7Ntkm1YP9q60q5OVzM CXxjmROSJPzmcIkl6vpO5hr7hNpy46Z1NrH15EOexGrySSmRljlPlnzmujn707Y4 e/Qf9EoJRmEnG+pT5hU2DzyquPQ+FBT0qkSpwXaDhUL3yol7g+S9Gb1yDii7X2h6 bso7J6VhP+GKo07WeM9i+h4i7uWs4605sxS2zrhk7fF8AQgTAu+ptQb1v7ZVHML3 R8Slg+CjJYFuYGsnICiLmc2ejEDu9dm3my8= -----END CERTIFICATE-----Generated at Sun Jun 15 17:50:25 2025 by rpki-client