$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e47daa7-02ca-3b95-a725-6a3af9d16bfb.roa File: 0e47daa7-02ca-3b95-a725-6a3af9d16bfb.roa (raw, json) Hash identifier: VMBSQDbrdECHl2tndwJ2GWVm1xhYx0UvBywv+aqzU2k= Subject key identifier: 00:D7:11:F7:10:F6:F4:29:E4:2C:9F:89:86:EC:F2:B9:19:AF:50:8D Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FE518CCDA24355FBB5200 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e47daa7-02ca-3b95-a725-6a3af9d16bfb.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 48422 IP address blocks: 2001:470:23d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:e5:18:cc:da:24:35:5f:bb:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=35ef5841-ff00-4ab0-90bb-9bca5c8fa967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:84:e3:ee:a7:cd:3c:eb:66:77:0f:ec:02:5e: 6e:2c:37:b9:cc:45:8e:74:c5:e4:9b:b4:a5:ec:76: e2:4d:8b:b1:ee:29:84:7a:3a:86:90:2e:33:8f:ee: ed:87:6a:18:c3:46:44:51:69:7d:f9:24:87:77:30: e6:a6:60:9c:8d:80:95:04:2b:05:a6:fa:d7:66:8d: 99:c6:0d:c9:21:77:ef:fc:b5:5f:2e:8a:89:36:9c: 75:e0:0b:6a:6a:6f:a5:26:d3:d0:a4:7e:01:47:72: d4:a9:dd:db:d5:2c:73:72:e8:20:fd:e1:b9:ed:34: 0c:a4:02:e7:8b:f5:e0:50:98:7b:c2:ea:23:2c:f5: 29:46:67:fd:e2:18:bf:65:32:d0:9c:bf:77:a0:18: 5c:c1:05:8e:6e:87:e7:da:eb:3c:cc:48:11:32:f7: d5:5a:f7:1a:47:7d:93:33:af:12:f9:35:6b:1b:93: 84:7b:4d:67:6b:02:2c:72:06:6b:ea:be:3c:22:79: 7c:ce:e1:8b:34:41:a3:dd:4d:a1:dd:e7:3e:7e:1b: b8:bb:ff:c3:a5:c6:76:12:9f:f9:f1:cf:07:70:5d: ed:90:a9:35:5f:c8:b7:43:59:17:55:72:28:72:23: 8d:a6:07:f2:44:8d:12:d9:a9:23:12:89:84:c5:bd: 7c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:D7:11:F7:10:F6:F4:29:E4:2C:9F:89:86:EC:F2:B9:19:AF:50:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e47daa7-02ca-3b95-a725-6a3af9d16bfb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:23d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:42:8e:61:b9:d0:83:6d:09:ee:1c:97:62:9c:d9:56:1b:17: d7:4a:99:9f:6d:25:f3:3a:4d:cc:b8:e7:7a:fc:f4:d9:40:43: 68:23:05:60:73:8a:5e:63:a9:51:44:82:d0:58:0c:b7:f8:ab: 2c:74:d7:90:8b:84:86:e6:54:25:a0:fe:68:0f:46:24:1c:70: dd:e2:a0:0f:2e:d0:a3:5e:f1:66:b7:ba:8e:8d:a7:6e:ec:2b: 8f:cb:8c:85:08:69:c8:2b:a6:3b:1b:ef:2d:5c:13:b9:8d:30: f2:51:90:d4:11:23:5a:a0:aa:ab:58:28:b8:55:a8:d1:ba:f0: af:e5:f2:96:98:e4:0c:e9:d2:be:30:54:5a:64:71:6e:21:6e: d5:20:de:30:53:c0:e0:b7:f5:c3:0b:63:44:8b:af:04:7a:7f: f5:ba:88:df:bf:7e:84:bf:8f:2c:b5:8d:48:6d:ea:55:e8:0d: 96:80:76:a4:c4:02:18:64:04:af:66:b7:d6:59:a3:95:c8:08: 1a:4f:60:6c:53:93:a9:83:96:66:61:1b:13:1d:8e:18:12:97: 58:56:b1:e8:47:9b:73:69:b0:7f:26:0e:e2:15:d1:b8:af:79: ad:7f:69:c5:5c:eb:8d:9d:86:73:9a:e1:15:54:5f:c6:6a:52: 0a:3e:33:b4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX+UYzNokNV+7UgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk MzVlZjU4NDEtZmYwMC00YWIwLTkwYmItOWJjYTVjOGZhOTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYTj7qfNPOtmdw/sAl5uLDe5zEWOdMXkm7Sl 7HbiTYux7imEejqGkC4zj+7th2oYw0ZEUWl9+SSHdzDmpmCcjYCVBCsFpvrXZo2Z xg3JIXfv/LVfLoqJNpx14Atqam+lJtPQpH4BR3LUqd3b1Sxzcugg/eG57TQMpALn i/XgUJh7wuojLPUpRmf94hi/ZTLQnL93oBhcwQWObofn2us8zEgRMvfVWvcaR32T M68S+TVrG5OEe01nawIscgZr6r48Inl8zuGLNEGj3U2h3ec+fhu4u//DpcZ2Ep/5 8c8HcF3tkKk1X8i3Q1kXVXIociONpgfyRI0S2akjEomExb18xQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFADXEfcQ9vQp5CyfiYbs8rkZr1CNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMGU0N2RhYTctMDJjYS0z Yjk1LWE3MjUtNmEzYWY5ZDE2YmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFhCjmG50INtCe4cl2Kc2VYbF9dKmZ9tJfM6Tcy453r89NlAQ2gj BWBzil5jqVFEgtBYDLf4qyx015CLhIbmVCWg/mgPRiQccN3ioA8u0KNe8Wa3uo6N p27sK4/LjIUIacgrpjsb7y1cE7mNMPJRkNQRI1qgqqtYKLhVqNG68K/l8paY5Azp 0r4wVFpkcW4hbtUg3jBTwOC39cMLY0SLrwR6f/W6iN+/foS/jyy1jUht6lXoDZaA dqTEAhhkBK9mt9ZZo5XICBpPYGxTk6mDlmZhGxMdjhgSl1hWsehHm3NpsH8mDuIV 0bivea1/acVc642dhnOa4RVUX8ZqUgo+M7Q= -----END CERTIFICATE-----Generated at Tue Jun 10 11:32:10 2025 by rpki-client