$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9368d032-7556-39a7-bdc4-9aef186f4f9a.roa File: 9368d032-7556-39a7-bdc4-9aef186f4f9a.roa (raw, json) Hash identifier: x+dZmHcK4BHDwXy5apeynBuJpyCAH3+cEEpPCGJhQf0= Subject key identifier: 76:93:D0:E7:BA:2C:86:93:57:46:F9:54:E2:88:C9:34:33:18:17:33 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FCA538F26462E94A89DC0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9368d032-7556-39a7-bdc4-9aef186f4f9a.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 64122 IP address blocks: 2001:470:2bd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:ca:53:8f:26:46:2e:94:a8:9d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=28ff6de4-a4cb-48f9-bea8-1886a6d4b492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:35:fe:73:32:6f:10:0a:4e:c9:25:ca:1c:f8: d8:62:17:14:98:19:10:1b:0f:71:59:04:07:eb:d7: 26:93:b3:ad:cf:cd:35:bc:9f:0c:31:e8:0a:34:7b: 02:09:ea:f9:52:a8:0a:51:2e:5b:c4:50:fd:1e:3d: 87:76:95:8a:e7:20:54:a7:ce:ba:a1:47:e3:fd:6c: 91:83:d0:24:8a:a6:63:5d:fb:46:b9:10:2f:c5:e2: 6d:0a:8a:09:90:78:e0:c2:c9:22:f5:cf:71:d6:35: e7:38:77:a0:43:e2:c2:de:7b:09:d7:2d:a1:34:6b: 25:78:42:fc:0f:9e:0e:8c:46:e9:b3:c2:86:e3:31: 47:2e:1b:c4:82:8f:d9:3c:62:b1:40:00:cf:47:da: fb:8f:dd:ac:7f:5c:b8:46:58:9f:80:a8:5d:f1:2b: 52:fa:ae:5d:cc:8e:18:4e:19:87:1a:ec:e4:0b:09: 60:9f:d5:99:3f:bd:3a:3f:41:92:13:1d:6b:b3:c6: d0:db:66:dc:77:e1:88:db:ef:9f:f5:e2:63:fb:f4: 51:06:db:b2:51:4c:f9:99:d9:81:f9:87:0e:a8:4b: 93:73:b5:89:29:f0:d0:77:99:9e:70:c6:db:ec:9c: e5:59:55:9a:d2:a9:70:74:3a:4b:7a:eb:27:02:b1: e5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:93:D0:E7:BA:2C:86:93:57:46:F9:54:E2:88:C9:34:33:18:17:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9368d032-7556-39a7-bdc4-9aef186f4f9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2bd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:50:f8:81:3e:f0:8b:6b:a4:71:de:5d:73:fc:35:66:37:51: 65:6f:b6:19:5c:17:7b:a0:c8:a5:46:38:52:b7:11:b7:f8:56: 34:56:bb:b9:c5:a1:b9:bd:03:56:6c:39:53:8d:f3:42:c6:64: c5:86:b8:1d:19:b0:47:da:cb:09:8f:67:c2:6a:09:e8:34:6c: b9:d8:ef:9f:00:91:bc:05:cf:86:40:cc:a8:f8:4a:92:52:c2: 79:1d:dd:d8:e0:bf:35:54:a2:eb:4e:34:8c:76:2b:35:da:99: db:60:7c:b8:85:e0:c9:d9:9b:6e:7d:98:6c:82:ab:bb:45:1a: f6:84:f2:42:7b:c5:c8:ce:da:3b:57:9e:95:bf:c9:60:17:4a: 35:e6:45:d5:3d:52:3a:20:da:b0:13:08:9f:7e:54:85:cb:e4: 7d:78:21:f0:fa:7f:dc:ee:59:f5:f5:fe:eb:d9:1f:17:8f:f0: f0:ad:a2:80:00:8c:e4:7b:e1:8f:ac:9d:50:88:74:8b:5d:b7: 00:01:55:13:98:76:8b:51:f8:b7:de:af:2c:9b:4b:6b:b5:c9: c1:ac:a7:d2:a4:13:74:e5:19:a6:6c:24:9c:e4:1f:d0:7d:10: b7:62:31:06:cc:33:ba:7c:c8:14:4a:ce:62:1a:72:57:b7:0c: d1:8c:f6:e4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX8pTjyZGLpSoncAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk MjhmZjZkZTQtYTRjYi00OGY5LWJlYTgtMTg4NmE2ZDRiNDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DX+czJvEApOySXKHPjYYhcUmBkQGw9xWQQH 69cmk7Otz801vJ8MMegKNHsCCer5UqgKUS5bxFD9Hj2HdpWK5yBUp866oUfj/WyR g9AkiqZjXftGuRAvxeJtCooJkHjgwski9c9x1jXnOHegQ+LC3nsJ1y2hNGsleEL8 D54OjEbps8KG4zFHLhvEgo/ZPGKxQADPR9r7j92sf1y4RlifgKhd8StS+q5dzI4Y ThmHGuzkCwlgn9WZP706P0GSEx1rs8bQ22bcd+GI2++f9eJj+/RRBtuyUUz5mdmB +YcOqEuTc7WJKfDQd5mecMbb7JzlWVWa0qlwdDpLeusnArHlewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHaT0Oe6LIaTV0b5VOKIyTQzGBczMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTM2OGQwMzItNzU1Ni0z OWE3LWJkYzQtOWFlZjE4NmY0ZjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAK9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADBQ+IE+8ItrpHHeXXP8NWY3UWVvthlcF3ugyKVGOFK3Ebf4VjRW u7nFobm9A1ZsOVON80LGZMWGuB0ZsEfaywmPZ8JqCeg0bLnY758AkbwFz4ZAzKj4 SpJSwnkd3djgvzVUoutONIx2KzXamdtgfLiF4MnZm259mGyCq7tFGvaE8kJ7xcjO 2jtXnpW/yWAXSjXmRdU9Ujog2rATCJ9+VIXL5H14IfD6f9zuWfX1/uvZHxeP8PCt ooAAjOR74Y+snVCIdItdtwABVROYdotR+LferyybS2u1ycGsp9KkE3TlGaZsJJzk H9B9ELdiMQbMM7p8yBRKzmIacle3DNGM9uQ= -----END CERTIFICATE-----Generated at Sun Jun 15 16:42:40 2025 by rpki-client