$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9ef17d6e-c7d3-3d09-b205-e9d76bd6752b.roa File: 9ef17d6e-c7d3-3d09-b205-e9d76bd6752b.roa (raw, json) Hash identifier: Mq5LGTfamy2MGiAKd5DMOr8UpHD5lmnNoTb+L0emOEs= Subject key identifier: 7F:09:00:FA:72:10:61:15:0B:D1:08:12:80:D8:46:C9:40:F9:76:33 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FE9F2C7E7ABA3FB3F5C80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9ef17d6e-c7d3-3d09-b205-e9d76bd6752b.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 54239 IP address blocks: 2001:470:2e5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:e9:f2:c7:e7:ab:a3:fb:3f:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=5315a13a-6030-4087-a91e-6f948fb16345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f0:16:eb:98:92:fc:1a:6c:0a:7c:e1:f2:7f: 54:ea:22:b7:a5:b7:31:dc:4c:a1:4f:fa:8e:fb:6b: 18:99:7a:e4:48:51:fd:f9:25:91:3e:7e:a9:69:81: e5:09:46:7a:2f:70:87:bb:33:67:0c:e9:84:82:ae: f4:50:76:b0:4b:59:ec:62:40:72:55:e6:ea:30:32: 22:73:15:ef:14:f0:67:b7:e8:84:9c:b4:6a:55:fe: 67:74:b2:d8:26:03:23:5d:c0:d5:5b:f3:90:b7:a4: c0:56:c3:53:da:75:8f:d3:49:8c:b5:39:34:12:1b: b4:69:99:53:77:81:27:cb:2e:5d:30:ba:3b:dd:74: ef:8f:e9:32:2f:2e:48:c2:1b:ad:33:39:fa:84:bc: d1:07:b9:4e:d4:c6:37:6b:20:e3:50:e8:94:d6:a2: f9:3e:b9:1d:62:d2:80:e8:38:12:09:66:f4:9f:5e: 0b:c7:cb:19:01:7d:ed:0b:3b:10:75:b9:19:e0:3b: b5:65:ba:54:ee:90:57:15:8b:c0:74:b6:53:04:05: 9d:61:45:65:66:59:3e:cd:58:0b:f3:f6:70:21:66: d8:37:8b:dc:24:7d:e0:39:f3:a8:5d:8e:0f:48:74: 2a:8c:9c:7f:93:41:34:63:91:90:9c:f0:e0:47:14: dd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:09:00:FA:72:10:61:15:0B:D1:08:12:80:D8:46:C9:40:F9:76:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9ef17d6e-c7d3-3d09-b205-e9d76bd6752b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2e5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:25:f4:bc:54:a2:b7:a3:d5:c9:6f:64:44:ef:2e:92:b8:88: 1c:55:22:da:ce:16:11:7e:b1:5a:1f:85:0b:8f:3d:d6:4a:6e: 1a:cc:3f:2c:3c:64:44:8e:ce:cc:73:42:45:47:28:8e:ab:87: 0f:ef:5f:0e:b7:34:99:22:27:e8:ae:94:59:d8:29:42:f9:a2: ea:c3:8a:a9:ad:5d:79:f4:57:f6:71:88:47:d1:e7:fa:01:d5: 98:2f:2c:0e:b3:57:86:c6:d5:81:3c:e8:44:0c:17:1f:07:d2: 52:85:b7:fa:3c:a0:d9:aa:80:a3:cc:4e:fd:a4:07:c2:19:10: 7e:e7:cf:93:aa:ad:4f:71:2a:5f:83:8d:1c:f0:90:06:40:8d: 0a:a8:51:da:1c:18:9e:e7:70:d2:dc:24:f4:05:d3:56:71:22: 0e:9a:59:95:3e:a1:ca:c5:9d:9d:32:da:da:2b:39:3a:19:7c: d2:c4:a3:4d:71:fa:b4:d4:21:a8:7b:d0:2c:eb:0a:37:98:4a: 15:8c:ff:4f:4c:a4:d7:88:b5:ec:e6:f0:9c:82:67:75:7f:90: ae:d2:20:88:1f:a0:ac:bc:c9:79:31:59:01:1c:54:6d:8f:ae: 3f:fd:78:43:de:49:10:b8:b2:bd:dc:ea:6c:80:fd:71:6d:de: 5b:0d:82:c7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX+nyx+ero/s/XIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk NTMxNWExM2EtNjAzMC00MDg3LWE5MWUtNmY5NDhmYjE2MzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvAW65iS/BpsCnzh8n9U6iK3pbcx3EyhT/qO +2sYmXrkSFH9+SWRPn6paYHlCUZ6L3CHuzNnDOmEgq70UHawS1nsYkByVebqMDIi cxXvFPBnt+iEnLRqVf5ndLLYJgMjXcDVW/OQt6TAVsNT2nWP00mMtTk0Ehu0aZlT d4Enyy5dMLo73XTvj+kyLy5IwhutMzn6hLzRB7lO1MY3ayDjUOiU1qL5PrkdYtKA 6DgSCWb0n14Lx8sZAX3tCzsQdbkZ4Du1ZbpU7pBXFYvAdLZTBAWdYUVlZlk+zVgL 8/ZwIWbYN4vcJH3gOfOoXY4PSHQqjJx/k0E0Y5GQnPDgRxTdPwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH8JAPpyEGEVC9EIEoDYRslA+XYzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOWVmMTdkNmUtYzdkMy0z ZDA5LWIyMDUtZTlkNzZiZDY3NTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC8l9LxUorej1clvZETvLpK4iBxVItrOFhF+sVofhQuPPdZKbhrM Pyw8ZESOzsxzQkVHKI6rhw/vXw63NJkiJ+iulFnYKUL5ourDiqmtXXn0V/ZxiEfR 5/oB1ZgvLA6zV4bG1YE86EQMFx8H0lKFt/o8oNmqgKPMTv2kB8IZEH7nz5OqrU9x Kl+DjRzwkAZAjQqoUdocGJ7ncNLcJPQF01ZxIg6aWZU+ocrFnZ0y2torOToZfNLE o01x+rTUIah70CzrCjeYShWM/09MpNeItezm8JyCZ3V/kK7SIIgfoKy8yXkxWQEc VG2Prj/9eEPeSRC4sr3c6myA/XFt3lsNgsc= -----END CERTIFICATE-----Generated at Sun Jun 15 14:04:03 2025 by rpki-client