$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/088af552-e3aa-3534-9df2-64d1f767c9a6.roa File: 088af552-e3aa-3534-9df2-64d1f767c9a6.roa (raw, json) Hash identifier: 0CwjKVz/30WNoSZeDjotx2evSXkZF5/JDD6QMfOE3OE= Subject key identifier: 61:F8:10:55:BD:E4:28:4B:6E:F8:1D:CE:58:FE:AA:E7:A0:3C:58:3C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FE83CBD0D50A1C4514340 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/088af552-e3aa-3534-9df2-64d1f767c9a6.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 49585 IP address blocks: 2001:470:2a7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:e8:3c:bd:0d:50:a1:c4:51:43:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=c21e86b3-4feb-48f8-b116-faeba4ea09ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:61:3e:c6:3a:99:37:68:be:a0:8f:87:b8:a1: b4:8c:d3:10:d2:76:46:60:91:0a:33:a0:ba:44:d6: 21:21:10:29:2c:92:4c:93:18:1a:55:0d:1a:92:0d: 27:40:c1:ef:90:88:0a:46:5a:1b:d3:3e:43:bc:8d: b9:d0:b0:4e:a5:2f:22:ab:ff:9f:82:dc:cf:b5:82: 11:31:c3:4a:e6:96:ad:15:83:ee:7b:ec:a7:1d:25: 47:f9:8c:51:e6:5c:df:f8:73:af:92:50:1a:36:0d: ae:fc:4e:04:dd:55:ca:e4:48:f5:ee:36:83:18:cf: 2d:59:3d:6c:6e:f8:0f:e9:56:06:b0:94:81:7e:54: 4e:d6:ee:23:b1:f4:82:62:89:2a:d1:12:4d:86:b0: ec:57:b5:bf:e1:50:98:29:61:ab:06:6a:cc:cc:cf: 9d:e1:ca:19:7d:0d:4d:c8:4c:3c:2f:c0:da:57:99: a0:a8:13:9f:25:37:82:4e:74:02:13:d3:99:a7:cf: ed:2f:19:d7:03:7f:f7:bf:67:01:a8:f8:f1:7a:ea: 2a:5a:cd:7f:14:60:11:75:6e:67:a0:4d:7e:64:d2: 25:9c:8f:d2:a5:18:23:54:28:ae:3b:d5:ef:69:11: 5c:e7:d9:e2:d6:79:31:8f:8d:44:aa:81:47:00:02: 92:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F8:10:55:BD:E4:28:4B:6E:F8:1D:CE:58:FE:AA:E7:A0:3C:58:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/088af552-e3aa-3534-9df2-64d1f767c9a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:d2:35:50:c3:f5:ec:9c:9b:b8:cb:be:15:1c:82:de:ba:41: 0d:46:1a:0b:11:f1:cd:5f:bc:d8:84:27:5f:48:c8:32:ac:44: 97:99:0c:e3:c6:75:02:69:48:6d:e1:95:08:76:4c:9e:f9:fc: 2a:c4:78:6d:19:b9:6a:38:7a:b2:2e:1f:44:f1:df:a8:a0:7e: df:26:f1:09:5e:51:9e:89:3f:de:d4:30:05:97:46:03:4d:c4: 8d:43:ff:df:4b:2b:a2:2e:42:8e:6a:53:bb:ac:23:6a:0c:2d: 7e:d1:87:dc:aa:e1:d9:5e:2a:9a:5c:9d:fe:3a:71:58:25:48: 75:d9:9d:02:dd:82:0b:98:e7:73:a2:25:f8:ce:3c:37:8f:3a: 38:fb:2e:5b:fe:bc:a3:52:e5:8a:da:21:ef:ec:19:f7:6d:2f: 4e:57:97:ef:e5:78:81:16:ed:32:ce:92:11:1b:5f:8c:ed:b5: c0:1c:68:2e:2f:c5:d9:a7:9b:b7:fa:b6:3a:c6:c8:fb:85:31: a9:9d:32:28:01:a1:01:e5:e8:36:05:a7:2d:67:65:14:b6:23: b9:05:e4:19:fc:df:01:be:78:1f:ed:8b:5e:25:c5:0a:e1:ef: 60:bc:23:0b:aa:55:08:97:d8:b9:8f:16:69:8f:c8:89:18:3a: f9:d1:7c:c1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX+g8vQ1QocRRQ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk YzIxZTg2YjMtNGZlYi00OGY4LWIxMTYtZmFlYmE0ZWEwOWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmE+xjqZN2i+oI+HuKG0jNMQ0nZGYJEKM6C6 RNYhIRApLJJMkxgaVQ0akg0nQMHvkIgKRlob0z5DvI250LBOpS8iq/+fgtzPtYIR McNK5patFYPue+ynHSVH+YxR5lzf+HOvklAaNg2u/E4E3VXK5Ej17jaDGM8tWT1s bvgP6VYGsJSBflRO1u4jsfSCYokq0RJNhrDsV7W/4VCYKWGrBmrMzM+d4coZfQ1N yEw8L8DaV5mgqBOfJTeCTnQCE9OZp8/tLxnXA3/3v2cBqPjxeuoqWs1/FGARdW5n oE1+ZNIlnI/SpRgjVCiuO9XvaRFc59ni1nkxj41EqoFHAAKSGwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGH4EFW95ChLbvgdzlj+quegPFg8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDg4YWY1NTItZTNhYS0z NTM0LTlkZjItNjRkMWY3NjdjOWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ3SNVDD9eycm7jLvhUcgt66QQ1GGgsR8c1fvNiEJ19IyDKsRJeZ DOPGdQJpSG3hlQh2TJ75/CrEeG0ZuWo4erIuH0Tx36igft8m8QleUZ6JP97UMAWX RgNNxI1D/99LK6IuQo5qU7usI2oMLX7Rh9yq4dleKppcnf46cVglSHXZnQLdgguY 53OiJfjOPDePOjj7Llv+vKNS5YraIe/sGfdtL05Xl+/leIEW7TLOkhEbX4zttcAc aC4vxdmnm7f6tjrGyPuFMamdMigBoQHl6DYFpy1nZRS2I7kF5Bn83wG+eB/ti14l xQrh72C8IwuqVQiX2LmPFmmPyIkYOvnRfME= -----END CERTIFICATE-----Generated at Sun Jun 8 07:14:03 2025 by rpki-client