$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8d1afe5f-821c-3f29-b837-cfa2a5991a27.roa File: 8d1afe5f-821c-3f29-b837-cfa2a5991a27.roa (raw, json) Hash identifier: KQ6HJlPJzYHCRJihCm9Fpp1EcCfSSdP8tL2s83HVgKk= Subject key identifier: 78:79:75:A1:00:D6:EA:4F:91:3A:A8:8C:A3:BA:89:92:AB:9D:4F:B9 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FBA50BF07ECD664343580 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8d1afe5f-821c-3f29-b837-cfa2a5991a27.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 14228 IP address blocks: 2001:470:b8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:ba:50:bf:07:ec:d6:64:34:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=a5c3dc14-2f38-4590-b406-3ec58f5cb685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4a:fe:05:ca:0f:83:e5:86:91:80:78:dc:16: 16:62:20:b6:3f:1b:c7:3b:9d:4a:a2:33:54:18:4a: 3a:b1:be:5e:97:73:28:ee:20:eb:23:65:d9:a7:d6: cc:02:9f:a1:f0:25:ab:b5:14:ca:85:57:15:8b:68: 88:f3:f7:5e:a9:98:72:05:e8:09:53:4c:00:d7:8f: 0a:00:a6:58:52:eb:25:0a:50:e1:0f:36:da:13:a2: 5d:7b:c8:c8:e5:c0:3b:cb:30:89:04:96:3c:fb:0a: 96:90:5e:76:a6:7a:e4:8a:ae:49:e6:c7:d9:fd:d1: f1:d0:07:69:0f:d6:f9:19:cb:eb:89:b9:bc:fd:64: dc:fd:32:48:79:65:72:39:74:b7:f1:b3:db:45:f8: 84:4f:14:9d:c0:08:63:80:a9:d4:0b:d8:ed:b7:0b: 1f:95:a8:e0:7a:d7:14:75:64:1f:e9:27:5b:1e:2c: 01:f4:b7:92:ed:11:20:7a:da:ac:59:f7:75:6d:a0: b5:c1:91:12:11:62:0c:9b:ff:c6:6b:c8:53:2e:ec: da:6a:28:04:ed:ea:76:86:06:8a:71:bf:5e:38:3b: 2d:a7:fa:41:c1:33:ec:43:83:e9:7a:62:11:93:de: b0:b0:bc:05:53:74:2e:34:7b:fa:42:74:ea:0d:58: 79:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:79:75:A1:00:D6:EA:4F:91:3A:A8:8C:A3:BA:89:92:AB:9D:4F:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8d1afe5f-821c-3f29-b837-cfa2a5991a27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:b8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:7c:55:e6:f1:a0:53:bd:6f:e4:82:41:e9:91:96:34:f1:41: a5:ae:63:d0:40:14:4c:a2:3a:13:eb:b9:c8:36:14:0a:6b:79: dd:25:98:4a:6c:72:bd:26:8e:8b:10:a4:7a:39:19:81:7b:bb: f1:a8:42:09:c5:93:9e:52:24:59:43:1c:3d:15:44:aa:17:b5: da:e6:83:8c:4d:e0:cd:a5:5e:15:9b:71:e0:57:f1:b5:5b:09: 37:2f:7b:5a:e8:d4:21:05:31:e1:26:f4:1d:a6:af:3a:87:d5: 3c:95:08:71:fb:5e:f9:21:61:c6:8b:7a:9e:67:2d:cc:a1:b1: 45:e8:66:7b:a4:3c:96:78:e1:1a:39:f1:5c:10:4d:b4:03:69: 60:7f:6d:1a:5f:ec:cd:23:4c:09:8f:e0:5b:34:75:90:b8:89: be:45:88:8c:40:ff:c8:0c:66:e0:8e:fa:17:df:b1:5a:65:fa: c9:4c:14:bf:9e:1d:be:58:82:6d:fb:56:0d:11:ab:e1:54:34: 8c:10:9c:49:ad:a7:2c:ee:26:60:7e:02:7f:0b:89:bd:4d:31: a9:e5:de:3a:cb:18:8a:e1:a9:7a:6e:d5:ba:4a:a3:b9:06:a2: d7:5f:e7:93:f6:78:aa:a1:cc:73:54:88:23:03:16:e8:8b:1c: f7:62:39:84 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX7pQvwfs1mQ0NYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk YTVjM2RjMTQtMmYzOC00NTkwLWI0MDYtM2VjNThmNWNiNjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkr+BcoPg+WGkYB43BYWYiC2PxvHO51KojNU GEo6sb5el3Mo7iDrI2XZp9bMAp+h8CWrtRTKhVcVi2iI8/deqZhyBegJU0wA148K AKZYUuslClDhDzbaE6Jde8jI5cA7yzCJBJY8+wqWkF52pnrkiq5J5sfZ/dHx0Adp D9b5Gcvribm8/WTc/TJIeWVyOXS38bPbRfiETxSdwAhjgKnUC9jttwsflajgetcU dWQf6SdbHiwB9LeS7REgetqsWfd1baC1wZESEWIMm//Ga8hTLuzaaigE7ep2hgaK cb9eODstp/pBwTPsQ4PpemIRk96wsLwFU3QuNHv6QnTqDVh5ZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHh5daEA1upPkTqojKO6iZKrnU+5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOGQxYWZlNWYtODIxYy0z ZjI5LWI4MzctY2ZhMmE1OTkxYTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAC4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMV8VebxoFO9b+SCQemRljTxQaWuY9BAFEyiOhPrucg2FApred0l mEpscr0mjosQpHo5GYF7u/GoQgnFk55SJFlDHD0VRKoXtdrmg4xN4M2lXhWbceBX 8bVbCTcve1ro1CEFMeEm9B2mrzqH1TyVCHH7XvkhYcaLep5nLcyhsUXoZnukPJZ4 4Ro58VwQTbQDaWB/bRpf7M0jTAmP4Fs0dZC4ib5FiIxA/8gMZuCO+hffsVpl+slM FL+eHb5Ygm37Vg0Rq+FUNIwQnEmtpyzuJmB+An8Lib1NManl3jrLGIrhqXpu1bpK o7kGotdf55P2eKqhzHNUiCMDFuiLHPdiOYQ= -----END CERTIFICATE-----Generated at Mon Jun 16 15:34:47 2025 by rpki-client