$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/be3f7955-10ed-3235-9011-8b9ab5aacc3f.roa File: be3f7955-10ed-3235-9011-8b9ab5aacc3f.roa (raw, json) Hash identifier: eGC7j3Xqmu4r4jVsjjIqbb88H8yghJ7wFIROm4tclAU= Subject key identifier: 30:09:C1:8B:8B:6C:7A:98:D1:B3:B5:3D:D2:B8:C8:CC:D4:2A:5E:2D Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858497F1826F4E36B2E9A41EF3180 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/be3f7955-10ed-3235-9011-8b9ab5aacc3f.roa Signing time: Sat 12 Apr 2025 01:30:09 +0000 ROA not before: Sat 12 Apr 2025 01:30:09 +0000 ROA not after: Fri 11 Jul 2025 01:30:09 +0000 asID: 5062 IP address blocks: 2001:470:43d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7f:18:26:f4:e3:6b:2e:9a:41:ef:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 12 01:30:09 2025 GMT Not After : Jul 11 01:30:09 2025 GMT Subject: CN=f01129d8-87b3-43f8-9734-9993b48598e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:97:b3:5c:e3:bc:55:36:a4:e6:81:28:47:2e: eb:c6:bb:f2:99:3b:07:97:00:66:58:04:e8:a4:58: dd:d5:00:8f:b1:74:b7:98:5d:f2:08:e5:0f:91:3c: 0a:7c:29:c8:53:9f:ac:9f:fa:44:da:dd:80:d5:33: 7d:23:55:1c:be:86:48:e9:5e:72:1d:57:36:e7:c0: 50:60:df:61:ed:4e:51:f2:34:21:bc:e4:b0:3e:f7: 96:d8:03:db:56:ce:ad:42:96:76:d8:2e:5c:74:a3: 38:57:94:e1:5c:1b:08:e2:ef:f5:57:c0:02:9c:fc: 6b:fa:cd:5f:59:bf:8f:38:49:c3:bd:39:06:37:a7: 3c:14:1d:24:9e:fb:a6:85:b6:40:fd:e3:6b:95:ec: 02:3f:ac:5c:45:d3:60:f7:d0:09:4c:82:4d:18:18: 4a:68:a4:82:2c:12:67:88:2e:94:9a:e3:04:58:a4: f7:85:d1:ba:b3:c5:98:6e:57:ee:49:eb:cf:35:56: 0a:ea:6d:ca:6f:38:f9:22:50:29:3b:8d:14:aa:f8: 3d:f7:37:9b:9f:9c:c9:e6:9f:5a:90:46:a6:b2:00: dd:c6:03:89:5e:f9:f1:dc:40:e7:f0:1b:f3:91:dd: 4d:21:98:a5:cf:d0:62:a7:f8:0f:b8:cb:d2:b7:57: 22:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:09:C1:8B:8B:6C:7A:98:D1:B3:B5:3D:D2:B8:C8:CC:D4:2A:5E:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/be3f7955-10ed-3235-9011-8b9ab5aacc3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:43d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:60:50:e5:77:f8:d2:81:3f:82:42:f1:95:9b:4b:f2:a4:9b: f0:9c:fc:2a:70:ce:fc:f9:8a:7a:3e:82:17:74:0f:65:a8:01: 9d:42:98:ac:65:cf:e1:96:57:82:78:fd:3b:de:83:c3:d5:a4: 67:4b:a4:99:bb:96:0b:2b:84:d0:af:33:bf:30:3d:e3:42:35: c7:86:29:f1:8d:21:0f:ba:bb:e2:31:00:ff:b4:12:97:b0:4b: f1:d7:1e:22:60:4c:ee:d5:22:56:0a:5e:2e:7a:49:77:a1:df: 30:cd:21:0f:fa:1a:85:d0:a1:b3:82:41:e1:31:13:93:70:e6: 49:d9:38:3f:0b:25:85:83:ad:53:f9:2c:9e:42:85:9c:68:1b: 62:56:b7:90:f7:9d:9a:b7:53:53:69:9d:6a:a4:8e:a2:5a:02: 3e:cf:39:42:b3:3f:51:68:3c:55:25:1f:11:88:65:07:4d:af: ce:b9:80:a7:54:ce:06:6e:18:06:33:13:0c:bd:a5:9c:29:78: 20:8f:b6:f4:79:9e:9d:ad:b1:b8:67:31:05:48:9e:dd:36:c1: 55:6d:e8:1f:10:2c:71:9a:7c:63:6f:6b:a3:21:03:4f:1a:9b: 32:b6:77:17:72:49:e3:9b:ae:b4:ba:fe:13:93:91:a4:43:7b: 9d:24:20:a7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl/GCb042sumkHvMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDQxMjAxMzAwOVoXDTI1MDcxMTAxMzAwOVowLzEtMCsGA1UEAxMk ZjAxMTI5ZDgtODdiMy00M2Y4LTk3MzQtOTk5M2I0ODU5OGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZezXOO8VTak5oEoRy7rxrvymTsHlwBmWATo pFjd1QCPsXS3mF3yCOUPkTwKfCnIU5+sn/pE2t2A1TN9I1UcvoZI6V5yHVc258BQ YN9h7U5R8jQhvOSwPveW2APbVs6tQpZ22C5cdKM4V5ThXBsI4u/1V8ACnPxr+s1f Wb+POEnDvTkGN6c8FB0knvumhbZA/eNrlewCP6xcRdNg99AJTIJNGBhKaKSCLBJn iC6UmuMEWKT3hdG6s8WYblfuSevPNVYK6m3Kbzj5IlApO40Uqvg99zebn5zJ5p9a kEamsgDdxgOJXvnx3EDn8Bvzkd1NIZilz9Bip/gPuMvSt1ci6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDAJwYuLbHqY0bO1PdK4yMzUKl4tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmUzZjc5NTUtMTBlZC0z MjM1LTkwMTEtOGI5YWI1YWFjYzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQ9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABxgUOV3+NKBP4JC8ZWbS/Kkm/Cc/Cpwzvz5ino+ghd0D2WoAZ1C mKxlz+GWV4J4/Tveg8PVpGdLpJm7lgsrhNCvM78wPeNCNceGKfGNIQ+6u+IxAP+0 EpewS/HXHiJgTO7VIlYKXi56SXeh3zDNIQ/6GoXQobOCQeExE5Nw5knZOD8LJYWD rVP5LJ5ChZxoG2JWt5D3nZq3U1NpnWqkjqJaAj7POUKzP1FoPFUlHxGIZQdNr865 gKdUzgZuGAYzEwy9pZwpeCCPtvR5np2tsbhnMQVInt02wVVt6B8QLHGafGNva6Mh A08amzK2dxdySeObrrS6/hOTkaRDe50kIKc= -----END CERTIFICATE-----Generated at Sun Apr 27 01:03:18 2025 by rpki-client