$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a2c4f45f-0794-3016-b08d-1a60c4ca5384.roa File: a2c4f45f-0794-3016-b08d-1a60c4ca5384.roa (raw, json) Hash identifier: m33+uXC/flh9llNbxFQ+HDnYhBC2JBATTeGUFJGGToI= Subject key identifier: 1A:19:BD:70:F7:DE:7F:68:81:AB:DC:BD:78:EF:A8:A9:0A:29:7A:F6 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FC77DB7BE6D93A2624D80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a2c4f45f-0794-3016-b08d-1a60c4ca5384.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 15081 IP address blocks: 2001:470:287::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:c7:7d:b7:be:6d:93:a2:62:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=8a48c488-c1d5-4c5d-802f-9c8d24948631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ed:2f:3a:b1:ed:52:e2:ef:2a:f8:be:4e:c9: 51:12:5f:44:dd:6f:d1:a7:a3:39:a9:c8:2c:88:92: 0f:2a:c8:41:ae:ca:79:89:26:f7:06:e1:80:bc:5f: 8b:38:2b:81:dc:a6:48:c4:07:03:44:68:dd:1f:59: 33:99:27:0e:c8:b8:b4:af:41:3d:40:bb:f6:9b:fc: 36:9b:00:91:c4:91:ea:18:97:56:44:ca:c8:7b:67: 7f:e0:34:a2:b7:aa:b2:36:9b:f4:81:7a:8d:68:ac: 6e:ba:c0:94:1b:27:2d:66:0e:1c:59:91:ff:da:6d: 62:50:66:76:49:5a:c9:08:40:06:b8:4d:a0:bb:df: 18:4c:d2:08:8e:e3:e5:d7:40:67:70:6c:98:97:60: 69:e4:e6:ce:dd:9c:f7:20:5b:77:d2:d7:6c:87:3f: 3b:28:ac:09:10:14:1b:e5:51:61:56:f6:36:26:54: 94:ce:52:19:4d:ed:f5:9a:c6:fb:c8:b9:a1:98:1a: 48:46:4a:e3:d5:6b:d0:b4:08:3d:5d:f3:d7:2f:5a: 30:bc:fa:a0:87:d7:cd:e8:c5:7e:2f:fa:d8:31:0e: 12:88:89:f0:a9:21:47:30:39:21:e9:08:b2:f9:55: d3:6c:61:63:0a:ec:b2:34:33:41:df:ad:18:2e:b0: 60:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:19:BD:70:F7:DE:7F:68:81:AB:DC:BD:78:EF:A8:A9:0A:29:7A:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a2c4f45f-0794-3016-b08d-1a60c4ca5384.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:287::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:57:2a:99:40:e8:c6:d7:e9:94:26:97:c1:53:44:4f:f4:75: 8f:ac:8d:1c:63:2c:10:f4:97:88:1a:92:95:95:78:b5:9c:7e: 60:c6:f5:07:b6:18:2b:cc:f8:1e:b9:3c:4f:e8:8a:31:08:d7: bc:2a:5e:46:ee:2c:1e:54:ad:38:2a:53:8e:2c:7e:6d:9e:97: 37:ed:a6:8f:58:22:93:07:b5:95:60:5d:40:33:79:93:83:4c: 0b:24:7e:b1:5c:9a:d8:6b:a9:c8:52:70:25:b2:58:9f:b7:a2: 2b:aa:3e:19:1e:4b:d8:16:56:ec:54:9a:d2:bc:e1:47:51:41: af:19:a3:91:08:79:c8:6b:4b:a3:fc:3a:32:a3:15:63:63:e8: 82:5a:8c:61:6d:30:b8:54:b8:0b:4e:0a:94:b6:d2:c0:5e:8e: f6:8e:c7:15:54:c1:e6:50:6d:b3:97:e1:64:9d:cc:07:70:1f: c7:64:f2:c8:66:61:35:f0:82:81:15:f0:63:df:06:24:0f:1a: 14:cb:41:b4:9d:b2:a9:8d:e5:23:dd:c9:a3:dc:41:ee:a0:5c: 39:49:44:d8:1d:c5:63:2d:45:b7:ac:71:7d:ab:fe:89:7f:b6: a6:8e:a5:c9:fd:38:a6:61:67:5a:47:bd:d9:74:61:08:df:66: 21:7a:f3:98 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX8d9t75tk6JiTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk OGE0OGM0ODgtYzFkNS00YzVkLTgwMmYtOWM4ZDI0OTQ4NjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+0vOrHtUuLvKvi+TslREl9E3W/Rp6M5qcgs iJIPKshBrsp5iSb3BuGAvF+LOCuB3KZIxAcDRGjdH1kzmScOyLi0r0E9QLv2m/w2 mwCRxJHqGJdWRMrIe2d/4DSit6qyNpv0gXqNaKxuusCUGyctZg4cWZH/2m1iUGZ2 SVrJCEAGuE2gu98YTNIIjuPl10BncGyYl2Bp5ObO3Zz3IFt30tdshz87KKwJEBQb 5VFhVvY2JlSUzlIZTe31msb7yLmhmBpIRkrj1WvQtAg9XfPXL1owvPqgh9fN6MV+ L/rYMQ4SiInwqSFHMDkh6Qiy+VXTbGFjCuyyNDNB360YLrBgGwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBoZvXD33n9ogavcvXjvqKkKKXr2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTJjNGY0NWYtMDc5NC0z MDE2LWIwOGQtMWE2MGM0Y2E1Mzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH9XKplA6MbX6ZQml8FTRE/0dY+sjRxjLBD0l4gakpWVeLWcfmDG 9Qe2GCvM+B65PE/oijEI17wqXkbuLB5UrTgqU44sfm2elzftpo9YIpMHtZVgXUAz eZODTAskfrFcmthrqchScCWyWJ+3oiuqPhkeS9gWVuxUmtK84UdRQa8Zo5EIechr S6P8OjKjFWNj6IJajGFtMLhUuAtOCpS20sBejvaOxxVUweZQbbOX4WSdzAdwH8dk 8shmYTXwgoEV8GPfBiQPGhTLQbSdsqmN5SPdyaPcQe6gXDlJRNgdxWMtRbescX2r /ol/tqaOpcn9OKZhZ1pHvdl0YQjfZiF685g= -----END CERTIFICATE-----Generated at Mon Jun 16 03:25:46 2025 by rpki-client