$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f4d9cdf4-9b94-3179-af7d-741a0dd3dd3e.roa File: f4d9cdf4-9b94-3179-af7d-741a0dd3dd3e.roa (raw, json) Hash identifier: J2kzW9kVCRqgCXZqnrKnVO5sv23XEto1Vz/ijKSvTZI= Subject key identifier: 53:EA:FA:16:6D:44:94:20:FF:02:DE:7E:1C:BC:6D:C7:F8:4E:C6:FF Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FC9166F691CEE6C15D580 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f4d9cdf4-9b94-3179-af7d-741a0dd3dd3e.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 44411 IP address blocks: 2001:470:2a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:c9:16:6f:69:1c:ee:6c:15:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=bb403d4e-3518-44de-8eab-d5903578b498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:4a:6e:bc:7e:b7:7e:80:ad:fa:86:39:e8:66: c6:2a:4e:f4:c2:9d:91:8e:c4:da:19:63:db:9b:42: a9:d4:3a:18:36:e9:e1:9c:29:21:02:31:1d:cd:be: ee:25:1a:e0:68:5e:c3:ea:e5:fb:70:d1:a5:5a:82: d9:40:62:02:48:87:00:13:3a:0b:89:7a:73:7c:8b: e8:e6:7c:35:ef:9f:94:dc:97:ba:62:c8:29:d9:a4: ea:cf:0c:c3:6a:c8:dd:15:67:0d:6b:dd:56:ad:1c: 95:ab:40:5a:6f:ec:cb:30:9f:bd:6c:0b:b7:92:ad: 93:98:66:13:02:0a:e1:0f:34:37:4f:22:b1:1a:93: e0:9f:bf:19:5c:d8:ae:ed:bc:49:88:45:13:11:e4: 16:d3:3a:93:71:ed:28:6c:e4:33:ed:f8:ad:3d:1b: 81:3b:1e:d8:7c:db:f4:85:82:71:17:5a:d8:50:1b: a5:e1:e7:f5:5f:08:4a:61:05:11:e8:f1:b0:86:4d: 3e:56:7c:90:c6:92:ba:28:fe:60:b9:e7:84:ff:27: d4:f6:77:80:de:56:16:57:9e:64:3d:96:23:b2:28: de:07:36:ae:36:fb:1c:bb:d3:01:f4:ff:d3:16:a4: b5:67:3f:5d:32:47:0e:a7:32:d2:f7:69:01:99:b9: c2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:EA:FA:16:6D:44:94:20:FF:02:DE:7E:1C:BC:6D:C7:F8:4E:C6:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f4d9cdf4-9b94-3179-af7d-741a0dd3dd3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:a8:c7:01:16:58:b8:3d:89:7a:9d:24:c5:db:f4:6d:18:8a: d9:18:87:83:68:85:32:a4:58:2d:15:1f:42:6d:23:71:10:c3: c2:46:f8:ed:d2:bd:35:21:52:b5:3a:ec:8c:71:70:68:39:86: 06:2a:58:d5:4a:f0:1b:29:98:e5:b8:cc:e8:51:07:68:e6:82: 91:1a:16:86:a0:8e:c5:be:6b:a1:e2:6d:d1:43:c0:c9:96:66: 1a:3b:26:f5:e2:bf:96:d2:42:16:dd:3a:8a:23:44:e3:b1:e1: 88:4d:52:ad:ac:49:7f:da:60:53:27:36:c0:0f:4d:22:b6:3f: 92:47:6e:7f:ec:5c:c5:fb:f2:52:e8:9a:f4:56:52:cf:3e:5f: 2e:62:da:4a:2a:17:ee:6f:4b:9c:99:84:74:84:84:47:c0:5e: d3:3f:cf:93:f9:c1:b3:75:68:c3:81:9c:ba:c8:73:3c:7a:46: 70:94:7d:74:51:07:37:e7:67:4c:5d:41:0a:81:ef:f0:d8:7f: 85:c7:d4:7d:0a:83:9d:d2:60:f7:00:96:ea:26:ba:d2:04:c0: eb:a5:09:ac:53:21:97:b8:1f:51:fd:84:80:44:fa:5d:5e:6a: fa:52:94:ee:68:bb:fe:67:a2:0a:89:11:72:f4:8c:3a:00:22: 35:21:bf:74 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX8kWb2kc7mwV1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk YmI0MDNkNGUtMzUxOC00NGRlLThlYWItZDU5MDM1NzhiNDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUpuvH63foCt+oY56GbGKk70wp2RjsTaGWPb m0Kp1DoYNunhnCkhAjEdzb7uJRrgaF7D6uX7cNGlWoLZQGICSIcAEzoLiXpzfIvo 5nw175+U3Je6Ysgp2aTqzwzDasjdFWcNa91WrRyVq0Bab+zLMJ+9bAu3kq2TmGYT AgrhDzQ3TyKxGpPgn78ZXNiu7bxJiEUTEeQW0zqTce0obOQz7fitPRuBOx7YfNv0 hYJxF1rYUBul4ef1XwhKYQUR6PGwhk0+VnyQxpK6KP5gueeE/yfU9neA3lYWV55k PZYjsijeBzauNvscu9MB9P/TFqS1Zz9dMkcOpzLS92kBmbnC9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFPq+hZtRJQg/wLefhy8bcf4Tsb/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjRkOWNkZjQtOWI5NC0z MTc5LWFmN2QtNzQxYTBkZDNkZDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFCoxwEWWLg9iXqdJMXb9G0YitkYh4NohTKkWC0VH0JtI3EQw8JG +O3SvTUhUrU67IxxcGg5hgYqWNVK8BspmOW4zOhRB2jmgpEaFoagjsW+a6HibdFD wMmWZho7JvXiv5bSQhbdOoojROOx4YhNUq2sSX/aYFMnNsAPTSK2P5JHbn/sXMX7 8lLomvRWUs8+Xy5i2koqF+5vS5yZhHSEhEfAXtM/z5P5wbN1aMOBnLrIczx6RnCU fXRRBzfnZ0xdQQqB7/DYf4XH1H0Kg53SYPcAluomutIEwOulCaxTIZe4H1H9hIBE +l1eavpSlO5ou/5nogqJEXL0jDoAIjUhv3Q= -----END CERTIFICATE-----Generated at Mon Jun 16 12:07:40 2025 by rpki-client