$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d4717c0c-c225-387f-8c80-94e80e9e1c8d.roa File: d4717c0c-c225-387f-8c80-94e80e9e1c8d.roa (raw, json) Hash identifier: W3f5AFbAn1FaiAhksm0twW9f6LIFkrao9eMgGFA/LwM= Subject key identifier: D3:41:6A:7E:04:51:A6:AF:39:05:2E:FD:D0:EC:2B:CB:B0:9A:74:A3 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FBFEC35892599BB809C60 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d4717c0c-c225-387f-8c80-94e80e9e1c8d.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 14277 IP address blocks: 2001:470:17d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:bf:ec:35:89:25:99:bb:80:9c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=1fe1d799-6dfd-4b5c-9120-88095bf62454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6e:68:9a:c3:6c:82:b7:49:73:f6:12:55:4a: 8d:dd:aa:0b:3c:77:a8:d4:12:6e:d0:e6:89:92:04: 15:7c:34:f5:9d:54:49:a5:79:f8:6b:98:25:1e:65: 2a:3f:8c:17:24:2f:89:f6:d0:63:60:57:e2:90:5d: 48:a7:59:19:8d:40:8c:d4:33:92:2a:70:8d:b3:5a: 23:21:37:92:4e:69:fd:d4:88:1b:f5:1e:c6:47:08: 6b:d0:be:e9:0e:f3:fc:0e:4c:09:c8:c0:60:a2:e8: 87:c4:ff:07:0c:96:28:20:1e:52:b5:ac:ae:ff:84: 3e:30:5d:6f:31:4c:6f:b6:9e:0e:7f:fa:18:a2:fc: b3:15:c3:89:95:dd:9c:5a:38:33:6e:3e:3b:10:16: a7:ee:5b:75:0d:5c:0c:f4:1a:3f:c7:09:55:f3:be: 23:e5:04:94:eb:4b:ab:f4:23:0d:d7:18:69:b5:4e: f4:ce:a6:d7:38:60:80:38:21:65:e6:de:d9:da:90: 48:3c:9b:86:52:14:38:ca:6e:d4:69:68:a3:2d:d6: cf:58:1c:48:e7:4a:b5:ce:26:f9:7e:d3:cc:fe:e6: 9a:11:98:84:58:72:30:7e:90:49:03:7e:e2:11:9c: 85:8e:d7:b1:e8:89:e1:45:b8:ab:1d:20:48:77:65: 16:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:41:6A:7E:04:51:A6:AF:39:05:2E:FD:D0:EC:2B:CB:B0:9A:74:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d4717c0c-c225-387f-8c80-94e80e9e1c8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:17d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:83:24:df:da:0a:47:98:b5:05:36:04:0b:80:0f:f7:81:64: f0:4e:f3:e8:13:83:3d:83:2f:d5:e6:d1:dc:ff:88:eb:50:43: f3:04:ad:67:63:f2:e3:75:91:95:b4:d7:56:0c:d7:4c:6d:9b: 31:02:fc:73:78:5a:31:15:f1:12:30:33:78:b6:00:30:0e:3e: c2:22:35:2f:2d:60:8f:5d:40:a4:ca:83:d0:e3:59:fc:7d:aa: ea:32:63:6a:10:2d:80:ae:e2:71:8f:6d:d7:fa:0d:1a:8b:7c: c1:69:68:8e:d8:20:dd:5c:41:af:eb:b3:6f:59:08:36:a0:b0: 78:ef:9c:0f:a9:c4:51:5c:2f:a9:e9:99:2b:c1:88:d9:21:8c: c4:8b:c3:75:3c:b0:50:9e:01:7c:f6:4b:18:1b:8a:f4:95:54: 35:8b:04:9e:9e:ae:ba:ce:e0:da:00:93:65:99:5d:97:56:36: 42:7b:9f:46:53:d5:d8:a5:1d:25:8d:b4:c5:a4:11:21:26:bf: 7c:5e:74:c1:e7:66:af:97:33:2c:4f:9c:d3:f0:f7:a2:04:cf: e3:8d:7a:ae:d5:47:6e:b0:58:4c:01:70:d0:dc:1a:48:91:97: 3e:67:9d:24:24:dd:55:74:1e:25:a1:aa:80:4f:39:10:af:3c: 1d:9e:08:46 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX7/sNYklmbuAnGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk MWZlMWQ3OTktNmRmZC00YjVjLTkxMjAtODgwOTViZjYyNDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi25omsNsgrdJc/YSVUqN3aoLPHeo1BJu0OaJ kgQVfDT1nVRJpXn4a5glHmUqP4wXJC+J9tBjYFfikF1Ip1kZjUCM1DOSKnCNs1oj ITeSTmn91Igb9R7GRwhr0L7pDvP8DkwJyMBgouiHxP8HDJYoIB5Stayu/4Q+MF1v MUxvtp4Of/oYovyzFcOJld2cWjgzbj47EBan7lt1DVwM9Bo/xwlV874j5QSU60ur 9CMN1xhptU70zqbXOGCAOCFl5t7Z2pBIPJuGUhQ4ym7UaWijLdbPWBxI50q1zib5 ftPM/uaaEZiEWHIwfpBJA37iEZyFjtex6InhRbirHSBId2UWVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNNBan4EUaavOQUu/dDsK8uwmnSjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDQ3MTdjMGMtYzIyNS0z ODdmLThjODAtOTRlODBlOWUxYzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAF9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAODJN/aCkeYtQU2BAuAD/eBZPBO8+gTgz2DL9Xm0dz/iOtQQ/ME rWdj8uN1kZW011YM10xtmzEC/HN4WjEV8RIwM3i2ADAOPsIiNS8tYI9dQKTKg9Dj Wfx9quoyY2oQLYCu4nGPbdf6DRqLfMFpaI7YIN1cQa/rs29ZCDagsHjvnA+pxFFc L6npmSvBiNkhjMSLw3U8sFCeAXz2SxgbivSVVDWLBJ6errrO4NoAk2WZXZdWNkJ7 n0ZT1dilHSWNtMWkESEmv3xedMHnZq+XMyxPnNPw96IEz+ONeq7VR26wWEwBcNDc GkiRlz5nnSQk3VV0HiWhqoBPORCvPB2eCEY= -----END CERTIFICATE-----Generated at Sun Jun 15 13:46:36 2025 by rpki-client