$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/23a78174-e8dd-3e98-8677-8ee79bd66ff7.roa File: 23a78174-e8dd-3e98-8677-8ee79bd66ff7.roa (raw, json) Hash identifier: cuyBdsUA9rjtbO3eX11Kr0Fwt7Gyl+8j4Uo4bUfIvSA= Subject key identifier: DF:D9:D0:8F:87:4E:31:F2:D6:AC:62:04:A2:CC:03:34:17:2F:2A:26 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A1895525BC8E54DD7361A9900 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/23a78174-e8dd-3e98-8677-8ee79bd66ff7.roa Signing time: Fri 06 Jun 2025 01:00:50 +0000 ROA not before: Fri 06 Jun 2025 01:00:50 +0000 ROA not after: Thu 04 Sep 2025 01:00:50 +0000 asID: 397270 IP address blocks: 2001:470:33d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:18:95:52:5b:c8:e5:4d:d7:36:1a:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 6 01:00:50 2025 GMT Not After : Sep 4 01:00:50 2025 GMT Subject: CN=2dfac387-6be7-4e87-a585-abbd8eabea79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:83:4c:9a:58:35:1d:0c:0d:3b:e5:2c:90:80: f3:0c:ad:05:50:68:7e:50:63:91:c3:4a:b0:f1:e7: c3:3d:f7:1c:bf:bf:31:ea:f7:77:3c:d3:14:1c:9f: ca:26:c0:08:c7:b4:74:7d:1d:ce:d5:96:c6:33:53: af:66:b8:35:0b:49:3c:8d:79:a8:15:95:d0:d1:f3: 16:22:91:30:c6:f6:ca:6c:fa:81:d1:0c:0f:ae:4e: 6b:20:11:0c:6b:c2:9c:6a:c4:c9:f1:bf:50:b8:4c: 82:12:c0:0a:c5:89:8d:fa:fd:ad:b8:5c:8f:aa:9d: a4:0a:5d:95:bc:4c:84:fa:17:0f:9e:c8:27:6c:d1: b8:28:59:86:15:53:2e:3b:5f:65:9b:bb:19:21:53: 38:f6:d2:e4:bd:76:26:c0:44:de:c7:d2:46:1c:f7: 3b:9b:34:ec:66:58:91:3d:40:ba:ed:10:86:75:80: f9:68:40:60:d9:50:5b:03:76:48:83:08:ed:27:81: 3a:7d:37:a0:cf:37:dd:02:72:c1:c2:0b:2b:15:5b: a3:38:6a:93:17:ef:7d:4a:8a:99:8f:11:6e:8f:ff: b0:b3:44:21:14:d0:41:36:14:26:11:75:71:ba:65: 9f:c0:51:85:54:4c:a8:99:fc:42:a0:b8:da:25:66: fa:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D9:D0:8F:87:4E:31:F2:D6:AC:62:04:A2:CC:03:34:17:2F:2A:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/23a78174-e8dd-3e98-8677-8ee79bd66ff7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:33d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:9b:a5:6b:62:ac:30:0a:c5:ae:22:98:2d:cb:6d:ca:3a:b2: 72:96:54:80:a0:c0:c0:92:31:91:9f:1e:a5:d4:89:54:71:30: 4b:61:c0:88:77:13:f5:2c:99:28:ca:71:75:fc:5c:8c:5b:6e: 2b:c5:8a:d8:ea:26:4d:5d:4b:1c:ca:37:14:76:3b:7c:f4:1b: 1e:ca:91:93:a9:1e:8e:43:18:2d:de:d9:5a:e8:2b:35:18:01: 04:ef:ba:5b:38:5b:ed:fd:b4:ed:77:ec:c2:c4:0b:c7:30:4d: 94:c4:55:cd:1a:70:7f:6f:c6:92:7b:d3:c0:07:43:1f:44:e5: 3a:66:61:6a:3f:f5:d3:49:44:16:72:f8:f3:af:70:3c:1e:5e: 43:38:9e:ec:83:54:97:f2:ec:18:89:68:56:a3:c0:2e:09:2e: e6:c5:28:91:84:9a:c5:b3:9e:d5:13:39:b8:ce:e0:71:b6:c5: 63:a0:ed:5a:58:f7:b8:3d:2f:3c:62:90:3d:fc:50:98:85:66: 66:d2:3b:e9:7e:c2:03:eb:39:4f:1f:22:11:5a:2b:d1:e0:cb: 6f:51:b9:de:ec:98:a6:93:5c:4e:56:c4:66:f9:bf:25:cc:1d: 00:5e:ab:df:2a:83:47:26:bd:ed:13:45:4c:af:d2:27:2a:e7: 23:96:93:bd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoYlVJbyOVN1zYamQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDYwNjAxMDA1MFoXDTI1MDkwNDAxMDA1MFowLzEtMCsGA1UEAxMk MmRmYWMzODctNmJlNy00ZTg3LWE1ODUtYWJiZDhlYWJlYTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwINMmlg1HQwNO+UskIDzDK0FUGh+UGORw0qw 8efDPfccv78x6vd3PNMUHJ/KJsAIx7R0fR3O1ZbGM1OvZrg1C0k8jXmoFZXQ0fMW IpEwxvbKbPqB0QwPrk5rIBEMa8KcasTJ8b9QuEyCEsAKxYmN+v2tuFyPqp2kCl2V vEyE+hcPnsgnbNG4KFmGFVMuO19lm7sZIVM49tLkvXYmwETex9JGHPc7mzTsZliR PUC67RCGdYD5aEBg2VBbA3ZIgwjtJ4E6fTegzzfdAnLBwgsrFVujOGqTF+99SoqZ jxFuj/+ws0QhFNBBNhQmEXVxumWfwFGFVEyomfxCoLjaJWb6RwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN/Z0I+HTjHy1qxiBKLMAzQXLyomMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjNhNzgxNzQtZThkZC0z ZTk4LTg2NzctOGVlNzliZDY2ZmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAM9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEObpWtirDAKxa4imC3Lbco6snKWVICgwMCSMZGfHqXUiVRxMEth wIh3E/UsmSjKcXX8XIxbbivFitjqJk1dSxzKNxR2O3z0Gx7KkZOpHo5DGC3e2Vro KzUYAQTvuls4W+39tO137MLEC8cwTZTEVc0acH9vxpJ708AHQx9E5TpmYWo/9dNJ RBZy+POvcDweXkM4nuyDVJfy7BiJaFajwC4JLubFKJGEmsWzntUTObjO4HG2xWOg 7VpY97g9LzxikD38UJiFZmbSO+l+wgPrOU8fIhFaK9Hgy29Rud7smKaTXE5WxGb5 vyXMHQBeq98qg0cmve0TRUyv0icq5yOWk70= -----END CERTIFICATE-----Generated at Mon Jun 30 20:07:22 2025 by rpki-client