$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bdf93fcf-75b6-3eb2-8b90-c65493650e05.roa File: bdf93fcf-75b6-3eb2-8b90-c65493650e05.roa (raw, json) Hash identifier: 3O9ClXyS3PcK1D4DAwannKf9eLjdSpIhtnXwuhqO8sE= Subject key identifier: 0F:67:A5:E3:CA:7D:8F:A1:15:FC:52:6B:6D:D0:9E:EF:C9:3A:98:67 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849DC8FD1E38134CC689380EF00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bdf93fcf-75b6-3eb2-8b90-c65493650e05.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 40417 IP address blocks: 2001:470:329::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:d1:e3:81:34:cc:68:93:80:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=1f3b668d-cbef-4314-a35c-005c2abc1165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a3:c2:05:fd:af:28:85:53:db:36:ef:39:7e: 2f:3c:b4:7a:31:f6:12:8a:d7:f8:23:66:98:a2:fa: b8:81:a2:58:72:51:a4:5c:d7:bb:18:28:ba:e5:1e: 22:5c:c9:70:27:52:ca:f3:07:7b:1f:06:3c:27:be: d5:00:d2:ad:79:e0:84:47:9b:71:a9:a8:00:84:62: a7:47:6d:a0:08:70:27:97:41:9d:6c:f3:e4:f7:2c: 3d:02:53:b7:03:fd:cd:5d:94:fb:01:55:76:d6:11: 7e:ac:30:72:87:03:03:ea:08:42:91:a4:cb:0f:d5: b2:3e:bd:06:d0:ac:0c:8a:98:80:21:8a:fd:1d:20: 3b:88:e8:ef:cf:e0:9c:10:56:04:20:83:3c:94:aa: a4:81:f2:a7:2b:92:40:ee:c9:e8:27:b8:0a:9b:6f: ac:db:12:f4:64:31:84:f5:1e:3b:3e:06:9f:20:ca: c5:05:79:74:f5:8e:c7:0a:a9:36:2a:82:b3:ea:1b: c0:21:28:ef:1a:45:65:5d:96:ab:20:03:a7:5f:7d: 27:65:0c:20:87:f2:55:01:e8:84:58:2a:11:c4:ae: 5e:3a:13:79:a7:08:10:ee:ca:76:92:eb:2f:5d:a0: c5:89:6d:9c:7b:e1:01:db:7a:64:5f:64:49:27:dc: 85:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:67:A5:E3:CA:7D:8F:A1:15:FC:52:6B:6D:D0:9E:EF:C9:3A:98:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bdf93fcf-75b6-3eb2-8b90-c65493650e05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:329::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:5c:e8:8d:b2:89:95:56:b1:41:c0:88:21:fa:7d:58:84:44: 08:c4:fa:ea:76:9d:7c:97:5a:56:b4:06:57:16:13:f2:bd:60: 61:4f:67:de:1b:10:e8:d3:8b:61:9f:ac:ca:59:07:08:c5:8c: 98:bd:20:1b:6e:c6:a6:08:07:a0:3e:ce:69:fd:ba:4b:26:e8: a2:2f:5d:38:d7:60:d7:a2:a5:95:6d:7a:a2:81:af:2c:e9:71: 3b:e3:b6:fd:a3:39:e1:62:aa:d1:e4:08:1c:25:59:76:53:06: 9a:3b:dc:d2:69:d5:89:96:19:b5:70:20:49:08:98:d7:09:59: 48:d6:35:44:4c:d9:0b:c2:ed:8c:64:a5:f0:50:f7:30:c8:82: d5:5d:22:49:93:0e:12:c0:76:c4:1a:93:5d:41:43:52:eb:54: 0a:6a:8e:cb:f5:af:18:cc:48:03:e2:e2:9d:17:07:14:af:a7: cf:1a:6c:31:12:ee:2f:e5:77:27:c6:3a:1a:f4:79:39:0c:36: 51:cf:44:e9:39:cb:86:08:a8:7b:17:c3:79:c4:c0:f0:e9:52: 35:56:63:fb:fe:db:17:34:8f:33:32:8b:1f:c3:cf:1e:05:a8: e9:35:60:e3:4c:84:d9:0e:96:97:6e:6c:98:d3:ed:97:8d:20: b6:b1:72:48 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEncj9HjgTTMaJOA7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk MWYzYjY2OGQtY2JlZi00MzE0LWEzNWMtMDA1YzJhYmMxMTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6PCBf2vKIVT2zbvOX4vPLR6MfYSitf4I2aY ovq4gaJYclGkXNe7GCi65R4iXMlwJ1LK8wd7HwY8J77VANKteeCER5txqagAhGKn R22gCHAnl0GdbPPk9yw9AlO3A/3NXZT7AVV21hF+rDByhwMD6ghCkaTLD9WyPr0G 0KwMipiAIYr9HSA7iOjvz+CcEFYEIIM8lKqkgfKnK5JA7snoJ7gKm2+s2xL0ZDGE 9R47PgafIMrFBXl09Y7HCqk2KoKz6hvAISjvGkVlXZarIAOnX30nZQwgh/JVAeiE WCoRxK5eOhN5pwgQ7sp2kusvXaDFiW2ce+EB23pkX2RJJ9yFYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA9npePKfY+hFfxSa23Qnu/JOphnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmRmOTNmY2YtNzViNi0z ZWIyLThiOTAtYzY1NDkzNjUwZTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAMp MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJNc6I2yiZVWsUHAiCH6fViERAjE+up2nXyXWla0BlcWE/K9YGFP Z94bEOjTi2GfrMpZBwjFjJi9IBtuxqYIB6A+zmn9uksm6KIvXTjXYNeipZVteqKB ryzpcTvjtv2jOeFiqtHkCBwlWXZTBpo73NJp1YmWGbVwIEkImNcJWUjWNURM2QvC 7YxkpfBQ9zDIgtVdIkmTDhLAdsQak11BQ1LrVApqjsv1rxjMSAPi4p0XBxSvp88a bDES7i/ldyfGOhr0eTkMNlHPROk5y4YIqHsXw3nEwPDpUjVWY/v+2xc0jzMyix/D zx4FqOk1YONMhNkOlpdubJjT7ZeNILaxckg= -----END CERTIFICATE-----Generated at Sun Jun 15 15:01:10 2025 by rpki-client