$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0faafe61-87fc-3eee-b788-7d9b253f0a33.roa File: 0faafe61-87fc-3eee-b788-7d9b253f0a33.roa (raw, json) Hash identifier: h99WxnbmnHG2jfejLIc92vrUEFCxblNr24zAkaH32K8= Subject key identifier: 0F:3C:CE:07:17:6C:D6:60:AC:4B:1C:F3:86:D2:5D:CC:CD:21:85:08 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FC11DF20F20F5A716CA60 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0faafe61-87fc-3eee-b788-7d9b253f0a33.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 133929 IP address blocks: 2001:470:1a2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:c1:1d:f2:0f:20:f5:a7:16:ca:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=39399a78-5377-49c9-9b0d-acd7261b6b42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:67:06:8d:3e:fd:9e:01:a0:5e:b2:38:6b:52: 19:d6:ca:f2:66:d5:c1:a8:a4:cb:5f:ab:de:90:35: 2b:bd:96:65:6d:cf:70:ac:5b:0f:15:e9:bc:03:2e: b0:64:ef:56:f2:0a:fe:ba:a8:d7:e3:5e:f1:ea:8c: a1:3e:ec:02:1e:28:7c:a7:d8:51:b9:58:91:35:d3: ba:e3:33:08:20:62:60:07:60:08:b1:73:bf:82:a5: 27:8b:47:2b:c5:2d:54:28:2e:49:27:f8:a7:3f:b1: fb:03:aa:bf:fe:40:65:dd:fc:ae:2f:a7:ac:08:48: 1a:0b:11:67:a2:04:76:81:e9:56:67:df:1f:a5:4f: 35:b4:a9:8b:1b:86:f1:39:55:4f:56:ef:01:82:e1: b1:0d:76:81:44:8b:92:14:4b:62:67:f1:40:03:95: db:d6:7e:b8:44:dd:13:4d:94:d8:a6:6d:a8:7d:8d: b0:61:29:ce:54:2f:55:c1:4a:b2:ac:b3:d2:8d:80: 1c:60:e8:17:4b:1f:8d:4a:2f:6b:26:d1:82:52:d8: 7d:81:8d:2d:15:3a:4f:4d:17:07:07:f3:f6:cb:e7: 57:a6:0b:b6:06:6b:7c:b8:ad:02:01:c7:65:cd:ae: d8:f8:e1:5d:08:d7:fd:15:0f:f4:72:66:7f:11:1f: 65:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:3C:CE:07:17:6C:D6:60:AC:4B:1C:F3:86:D2:5D:CC:CD:21:85:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0faafe61-87fc-3eee-b788-7d9b253f0a33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1a2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:a7:7c:13:2d:20:06:bb:88:d4:68:ab:c5:b4:df:40:40:bc: 43:10:c3:db:2d:b8:c3:3d:b1:66:15:e5:9f:3c:53:95:b2:45: d2:88:b0:1c:55:e4:81:3b:a3:bf:aa:a5:a4:b7:6f:5a:dd:44: 6c:d5:ea:db:1f:bb:90:52:6b:e5:87:91:35:a1:de:df:f4:84: 38:5f:37:69:a8:89:1b:a3:89:8b:eb:9f:f1:93:7b:2f:e2:68: b8:69:7a:fe:18:eb:22:ae:e7:ba:8b:86:4a:68:e1:70:8b:cc: 49:61:d0:33:91:19:b8:4d:f3:c8:12:72:40:70:a3:e2:3e:ac: 08:06:06:0f:17:83:0e:d9:54:6c:1d:0b:61:5c:99:8e:37:7b: 50:73:ea:8a:22:04:ff:68:06:88:4f:ab:de:bf:3c:5c:01:1e: 90:65:e0:52:77:1d:fc:7a:05:66:8c:7c:71:4c:5a:12:b2:40: d4:82:6c:1a:0a:a4:1d:73:b0:c8:6a:5a:37:46:ed:eb:5e:1b: 89:a0:bb:cd:62:0a:5a:c6:0d:2d:b5:0b:bd:a3:0c:b0:2b:bb: 42:0e:b3:1b:88:20:9c:1a:fd:9d:84:4e:a1:a3:ff:74:db:56: 8e:c1:2e:61:6d:9b:78:21:ed:5c:ce:f4:7c:dc:ad:78:27:0d: b1:35:98:39 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX8Ed8g8g9acWymAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk MzkzOTlhNzgtNTM3Ny00OWM5LTliMGQtYWNkNzI2MWI2YjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWcGjT79ngGgXrI4a1IZ1sryZtXBqKTLX6ve kDUrvZZlbc9wrFsPFem8Ay6wZO9W8gr+uqjX417x6oyhPuwCHih8p9hRuViRNdO6 4zMIIGJgB2AIsXO/gqUni0crxS1UKC5JJ/inP7H7A6q//kBl3fyuL6esCEgaCxFn ogR2gelWZ98fpU81tKmLG4bxOVVPVu8BguGxDXaBRIuSFEtiZ/FAA5Xb1n64RN0T TZTYpm2ofY2wYSnOVC9VwUqyrLPSjYAcYOgXSx+NSi9rJtGCUth9gY0tFTpPTRcH B/P2y+dXpgu2Bmt8uK0CAcdlza7Y+OFdCNf9FQ/0cmZ/ER9l+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA88zgcXbNZgrEsc84bSXczNIYUIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMGZhYWZlNjEtODdmYy0z ZWVlLWI3ODgtN2Q5YjI1M2YwYTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAGi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALKnfBMtIAa7iNRoq8W030BAvEMQw9stuMM9sWYV5Z88U5WyRdKI sBxV5IE7o7+qpaS3b1rdRGzV6tsfu5BSa+WHkTWh3t/0hDhfN2moiRujiYvrn/GT ey/iaLhpev4Y6yKu57qLhkpo4XCLzElh0DORGbhN88gSckBwo+I+rAgGBg8Xgw7Z VGwdC2FcmY43e1Bz6ooiBP9oBohPq96/PFwBHpBl4FJ3Hfx6BWaMfHFMWhKyQNSC bBoKpB1zsMhqWjdG7eteG4mgu81iClrGDS21C72jDLAru0IOsxuIIJwa/Z2ETqGj /3TbVo7BLmFtm3gh7VzO9HzcrXgnDbE1mDk= -----END CERTIFICATE-----Generated at Thu Jun 5 18:31:33 2025 by rpki-client