$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02fa560f-a2ed-3b6f-a5a7-67d8b8e5c098.roa File: 02fa560f-a2ed-3b6f-a5a7-67d8b8e5c098.roa (raw, json) Hash identifier: bWz50S1Mn4IErLeReJVG1/c/9AU9p+swVQlyV1mjqBs= Subject key identifier: E6:2C:32:F0:7B:2C:19:8D:9D:7B:89:7E:89:FD:B8:F3:B0:A4:5E:C5 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A10352F84F9B742E64152BD80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02fa560f-a2ed-3b6f-a5a7-67d8b8e5c098.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 206186 IP address blocks: 2001:470:427::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:2f:84:f9:b7:42:e6:41:52:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=1a774af2-3a56-42ea-bb7a-9413e4c74d2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8f:21:7c:68:02:45:7c:02:10:e9:f8:86:83: 70:c6:4d:5c:b7:02:d9:24:d5:29:a6:b4:1c:4d:46: 2f:e6:c4:3e:b5:25:d7:af:4e:40:be:04:48:d4:93: ed:4a:c6:67:cb:d9:e0:bb:71:19:44:93:58:ea:77: 0b:9d:dc:5e:36:33:09:40:35:e4:d9:18:6e:27:d7: 2b:d9:90:14:0d:bc:21:37:03:fe:60:8d:58:f0:c1: 40:97:93:b3:73:03:2e:65:b4:cc:08:f5:59:83:52: fa:f3:42:c3:60:f8:cb:cf:5e:e2:b9:7b:26:89:dd: f7:76:6b:49:11:62:00:95:d3:62:76:21:d6:1a:54: 06:11:1f:a3:dc:1a:f3:b5:24:a0:de:1f:fe:37:63: 26:36:97:2c:60:ae:6e:93:29:be:38:a0:24:42:9b: ef:ec:c6:2a:22:c2:82:40:50:19:c4:a2:cb:b5:83: 27:5f:78:28:c7:a3:b1:78:20:79:f9:82:65:f3:9c: 04:d0:c8:d7:9e:e5:cb:a2:9d:f7:54:74:cf:11:31: a0:71:af:5a:9f:23:83:a2:c5:c1:68:46:be:60:4b: dc:ab:d0:ac:a6:4b:02:4a:98:e7:87:f2:2e:33:49: a7:71:db:a7:80:89:24:33:c1:65:d8:b1:4a:bf:5c: f7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:2C:32:F0:7B:2C:19:8D:9D:7B:89:7E:89:FD:B8:F3:B0:A4:5E:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02fa560f-a2ed-3b6f-a5a7-67d8b8e5c098.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:427::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:61:e9:19:65:3f:da:c6:1d:e7:b1:94:24:a4:8d:e4:5a:89: 72:4a:36:de:62:c8:cf:3d:62:7c:99:6e:3f:3d:80:9c:ff:b2: ae:7b:4d:89:cd:2c:f3:cd:44:f1:a8:30:83:e6:03:12:75:03: 96:06:fb:9c:3a:1b:64:26:5a:3c:c8:4a:b6:c4:e4:68:d2:63: 35:8b:4a:0d:11:30:d7:c9:23:5f:e7:83:df:0a:e0:8b:72:11: dc:66:e6:05:c9:cb:d8:20:e5:93:b8:c1:0e:f7:86:ca:8d:85: b0:d4:f2:9f:75:99:2d:37:20:1c:b6:ba:c1:57:be:7b:03:a1: e9:dd:12:89:61:fe:2d:18:ab:4f:08:ba:bb:bd:af:0a:f1:04: d4:72:1c:df:3c:81:7c:c5:36:a7:41:55:ed:71:ac:62:5f:23: f7:ca:41:31:8b:62:ad:2e:9a:46:39:f1:5b:fa:b0:40:41:0f: c3:1f:57:91:ee:60:f5:1c:87:f9:45:f5:10:5c:5b:23:06:d4: 8d:e8:4f:9a:f4:84:0e:de:d2:f7:85:b8:5d:31:4e:b8:21:22: 22:a6:17:7b:1e:ef:fa:8c:7e:d8:bb:2e:ee:82:d8:bf:5d:d6: f1:f6:67:a0:87:29:c9:62:3b:b7:5c:fb:f8:88:cb:f7:cd:b7: 74:82:4c:ff -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoQNS+E+bdC5kFSvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk MWE3NzRhZjItM2E1Ni00MmVhLWJiN2EtOTQxM2U0Yzc0ZDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl48hfGgCRXwCEOn4hoNwxk1ctwLZJNUpprQc TUYv5sQ+tSXXr05AvgRI1JPtSsZny9ngu3EZRJNY6ncLndxeNjMJQDXk2RhuJ9cr 2ZAUDbwhNwP+YI1Y8MFAl5OzcwMuZbTMCPVZg1L680LDYPjLz17iuXsmid33dmtJ EWIAldNidiHWGlQGER+j3BrztSSg3h/+N2MmNpcsYK5ukym+OKAkQpvv7MYqIsKC QFAZxKLLtYMnX3gox6OxeCB5+YJl85wE0MjXnuXLop33VHTPETGgca9anyODosXB aEa+YEvcq9CspksCSpjnh/IuM0mncdungIkkM8Fl2LFKv1z3wwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOYsMvB7LBmNnXuJfon9uPOwpF7FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDJmYTU2MGYtYTJlZC0z YjZmLWE1YTctNjdkOGI4ZTVjMDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMZh6RllP9rGHeexlCSkjeRaiXJKNt5iyM89YnyZbj89gJz/sq57 TYnNLPPNRPGoMIPmAxJ1A5YG+5w6G2QmWjzISrbE5GjSYzWLSg0RMNfJI1/ng98K 4ItyEdxm5gXJy9gg5ZO4wQ73hsqNhbDU8p91mS03IBy2usFXvnsDoendEolh/i0Y q08Iuru9rwrxBNRyHN88gXzFNqdBVe1xrGJfI/fKQTGLYq0umkY58Vv6sEBBD8Mf V5HuYPUch/lF9RBcWyMG1I3oT5r0hA7e0veFuF0xTrghIiKmF3se7/qMfti7Lu6C 2L9d1vH2Z6CHKcliO7dc+/iIy/fNt3SCTP8= -----END CERTIFICATE-----Generated at Sun Jun 8 01:43:54 2025 by rpki-client