$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/25672efb-4b66-3a10-b8a4-e58a7d48a4a6.roa File: 25672efb-4b66-3a10-b8a4-e58a7d48a4a6.roa (raw, json) Hash identifier: MU1b5VcbCPnghs6lFsO7ZGsyhvuW6EUBqnBxQGAWwoM= Subject key identifier: A0:2F:D0:6D:22:62:E6:AA:6B:87:28:D7:E3:D0:BE:61:DB:BE:70:E6 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A5CFC93AC79883065C3BA2040 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/25672efb-4b66-3a10-b8a4-e58a7d48a4a6.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 214873 IP address blocks: 2001:470:3be::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:93:ac:79:88:30:65:c3:ba:20:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=f3e40ad0-2ced-4931-90d8-a971aa7b6be4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:24:93:a4:08:3d:ef:46:a4:75:f1:46:3e:e6: d7:7a:b0:8a:ba:5c:df:67:0a:11:08:f7:87:f4:56: 82:b5:e1:3b:3c:87:ce:6d:03:f0:a8:0f:9d:c2:9f: 86:56:fb:3e:04:aa:14:2b:30:c7:f9:62:7a:0b:b4: 35:e0:15:3d:56:3d:ca:1a:2f:fb:5d:bf:ee:54:27: b4:43:9e:e2:f5:b8:a6:e3:a9:56:bc:71:f9:7b:a3: a9:a6:2e:a7:c0:88:4b:d5:01:0b:69:d0:7d:a5:55: ab:fa:d1:7e:e9:94:db:c9:d8:db:99:4c:c0:7a:46: fd:97:55:5a:55:d7:c0:82:c9:2b:b0:53:a9:11:68: fc:f7:52:cd:d3:05:1b:70:c1:62:48:95:ae:ed:88: 74:e2:25:78:df:5a:25:19:f1:b0:6e:bd:77:e6:ac: 0f:1e:36:c3:46:c8:cc:69:76:fc:9c:bf:a5:e0:7a: 73:63:7b:dc:ed:5e:93:57:42:a2:78:a1:1e:dd:c0: c9:16:d5:a1:36:ae:27:00:f3:fd:51:1c:da:28:38: f7:a0:b8:12:49:0b:bc:85:b6:59:b6:2f:8a:5f:a6: 51:f2:74:7c:cf:61:c1:ae:63:f0:6b:d8:ba:92:0d: 48:32:54:d5:28:eb:5d:71:de:4c:af:a2:b3:c8:6a: bf:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:2F:D0:6D:22:62:E6:AA:6B:87:28:D7:E3:D0:BE:61:DB:BE:70:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/25672efb-4b66-3a10-b8a4-e58a7d48a4a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3be::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:bf:6e:77:a1:19:50:77:e9:2e:27:a0:49:b4:1b:c2:67:49: ae:c7:39:d4:1c:2a:c8:c2:05:3c:f7:97:6e:91:a4:6d:14:a3: b6:49:c5:ce:ee:92:53:e1:fe:aa:d2:34:a3:7c:d6:c0:3b:26: 12:b7:b7:f9:0a:b1:84:8b:2a:55:6a:cb:17:fc:98:6a:35:d3: 1c:22:38:97:83:7d:f3:d1:c8:8c:e1:0c:69:cf:ea:a4:f2:b0: 5a:c4:31:c0:6f:82:77:a5:d5:c9:64:6a:e3:75:20:f2:15:f8: d8:3c:b1:6d:67:e2:6d:80:10:ac:3b:ad:34:e8:fb:90:c2:8e: 1e:76:2c:bc:69:42:ee:3b:c5:28:52:b8:ec:07:18:2e:6f:cc: cd:53:0c:6e:6a:cc:19:1a:3a:dd:97:f7:77:34:b1:c4:64:c1: 39:18:98:cc:a9:77:3e:22:b0:33:02:71:a5:7f:5e:d9:ee:f5: 74:90:48:86:0a:fa:c1:f0:45:a3:07:1d:85:39:65:f9:2f:13: 73:a5:3d:52:97:f3:6d:17:20:7b:d2:34:fb:df:1f:00:1a:2e: 53:a8:f0:f8:13:f7:1b:4e:de:30:34:24:63:12:cb:20:a2:d9: a0:cc:ea:f4:61:98:c3:13:c0:3c:b2:e6:87:cf:5a:53:39:3e: e8:7e:19:05 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpc/JOseYgwZcO6IEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk ZjNlNDBhZDAtMmNlZC00OTMxLTkwZDgtYTk3MWFhN2I2YmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5CSTpAg970akdfFGPubXerCKulzfZwoRCPeH 9FaCteE7PIfObQPwqA+dwp+GVvs+BKoUKzDH+WJ6C7Q14BU9Vj3KGi/7Xb/uVCe0 Q57i9bim46lWvHH5e6Oppi6nwIhL1QELadB9pVWr+tF+6ZTbydjbmUzAekb9l1Va VdfAgskrsFOpEWj891LN0wUbcMFiSJWu7Yh04iV431olGfGwbr135qwPHjbDRsjM aXb8nL+l4HpzY3vc7V6TV0KieKEe3cDJFtWhNq4nAPP9URzaKDj3oLgSSQu8hbZZ ti+KX6ZR8nR8z2HBrmPwa9i6kg1IMlTVKOtdcd5Mr6KzyGq/jwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKAv0G0iYuaqa4co1+PQvmHbvnDmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjU2NzJlZmItNGI2Ni0z YTEwLWI4YTQtZTU4YTdkNDhhNGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAO+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALa/bnehGVB36S4noEm0G8JnSa7HOdQcKsjCBTz3l26RpG0Uo7ZJ xc7uklPh/qrSNKN81sA7JhK3t/kKsYSLKlVqyxf8mGo10xwiOJeDffPRyIzhDGnP 6qTysFrEMcBvgnel1clkauN1IPIV+Ng8sW1n4m2AEKw7rTTo+5DCjh52LLxpQu47 xShSuOwHGC5vzM1TDG5qzBkaOt2X93c0scRkwTkYmMypdz4isDMCcaV/Xtnu9XSQ SIYK+sHwRaMHHYU5ZfkvE3OlPVKX820XIHvSNPvfHwAaLlOo8PgT9xtO3jA0JGMS yyCi2aDM6vRhmMMTwDyy5ofPWlM5Puh+GQU= -----END CERTIFICATE-----Generated at Thu Jul 3 08:47:00 2025 by rpki-client