$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2aad4a91-5495-31e8-986a-7b1dd49c242d.roa File: 2aad4a91-5495-31e8-986a-7b1dd49c242d.roa (raw, json) Hash identifier: 1v+y0SRzvfJYkGm+s57GyV7R6UrJNk3kL5T4ox4qUxY= Subject key identifier: 5F:94:A0:90:D3:30:AF:27:40:89:E9:3E:23:F1:C2:9D:F5:B0:B1:E2 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FE98D6734CD4175FD2E80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2aad4a91-5495-31e8-986a-7b1dd49c242d.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 24534 IP address blocks: 2001:470:2d6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:e9:8d:67:34:cd:41:75:fd:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=3c5fca40-8f11-4a83-abad-dec6cbe00294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c3:1b:15:04:0c:f0:ce:ad:8a:d7:86:7b:af: a5:03:2a:84:c0:41:87:6e:5c:77:9c:38:0e:c9:26: fa:b5:bc:26:9b:93:60:f6:4c:45:96:98:6f:af:82: 84:79:d9:3b:bb:de:39:5f:93:05:fd:f3:62:6d:e1: f8:29:20:ee:ca:d9:20:2f:15:3f:c1:ea:9b:e7:be: 4a:7e:6d:9e:13:e7:cf:29:30:44:ae:8e:92:cc:c3: 3e:f7:81:00:5a:ff:ca:4d:88:b4:47:39:60:7c:cb: 8f:ab:62:62:5a:5f:05:fa:32:a6:0c:34:ef:8c:82: 36:64:36:30:cd:4c:be:d7:51:4d:de:81:51:b4:46: 45:8e:84:5a:79:f2:dc:0f:4f:0d:a0:74:d1:a8:65: 6c:bc:5b:fa:b5:4c:da:48:9d:77:b3:bd:eb:95:cc: c1:b4:a9:9e:4e:51:81:53:c8:f6:c3:3a:43:6c:22: eb:05:c6:28:e2:df:d1:61:1f:b8:b7:15:46:79:e5: 50:7a:c7:ac:b8:84:f6:54:82:98:43:99:d8:04:2f: a1:bc:78:ce:db:92:d4:c1:b3:ec:48:34:de:e8:42: c7:ae:19:bc:6f:48:5f:8a:2c:8a:53:7a:d5:9d:7d: 2c:b3:03:8a:5d:a5:11:b2:7b:d8:40:da:f3:45:b3: 09:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:94:A0:90:D3:30:AF:27:40:89:E9:3E:23:F1:C2:9D:F5:B0:B1:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2aad4a91-5495-31e8-986a-7b1dd49c242d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2d6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:af:02:60:60:b8:55:84:c4:be:ff:84:d6:3b:7f:b1:40:9a: 67:ac:32:39:39:34:96:cf:39:e3:3b:5e:1c:9a:1d:6c:eb:bf: ed:00:db:19:01:8c:02:8c:c3:35:cb:24:9d:c0:70:98:4d:de: 6c:51:eb:58:e7:e2:ae:30:8a:d8:dd:07:9c:70:55:c5:97:03: fa:8d:d5:b8:56:f7:32:20:f5:9a:2e:85:23:1e:88:0e:09:f5: e7:75:c6:d5:20:00:cd:5b:f7:59:34:be:12:d6:c0:0b:e1:87: d2:d3:eb:60:44:c2:9d:6b:b4:16:4d:89:67:ec:e9:38:1d:33: 0b:66:35:8a:ae:3c:a8:dc:d5:1d:4b:11:ed:3d:dd:a8:35:38: e5:36:f5:76:31:f3:83:d0:44:b3:9f:d7:76:ee:7a:f2:90:c7: 7e:31:18:2e:94:75:5a:c5:59:d4:59:c7:de:ed:f6:00:0f:5e: 99:34:c4:1a:6c:8a:ef:42:73:62:e4:41:63:0f:0a:c4:81:8e: 1c:84:eb:89:e6:a1:80:32:8d:1a:47:80:9e:6b:8b:70:3d:bb: 62:9a:57:58:1a:16:ed:ea:ff:32:33:c5:dd:95:3d:eb:b6:f6: 07:bf:5b:c6:22:54:5d:7d:ee:49:ef:27:93:c9:a9:dd:50:f5: 13:76:91:04 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX+mNZzTNQXX9LoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk M2M1ZmNhNDAtOGYxMS00YTgzLWFiYWQtZGVjNmNiZTAwMjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusMbFQQM8M6titeGe6+lAyqEwEGHblx3nDgO ySb6tbwmm5Ng9kxFlphvr4KEedk7u945X5MF/fNibeH4KSDuytkgLxU/weqb575K fm2eE+fPKTBEro6SzMM+94EAWv/KTYi0RzlgfMuPq2JiWl8F+jKmDDTvjII2ZDYw zUy+11FN3oFRtEZFjoRaefLcD08NoHTRqGVsvFv6tUzaSJ13s73rlczBtKmeTlGB U8j2wzpDbCLrBcYo4t/RYR+4txVGeeVQesesuIT2VIKYQ5nYBC+hvHjO25LUwbPs SDTe6ELHrhm8b0hfiiyKU3rVnX0sswOKXaURsnvYQNrzRbMJkQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF+UoJDTMK8nQInpPiPxwp31sLHiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMmFhZDRhOTEtNTQ5NS0z MWU4LTk4NmEtN2IxZGQ0OWMyNDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACCvAmBguFWExL7/hNY7f7FAmmesMjk5NJbPOeM7XhyaHWzrv+0A 2xkBjAKMwzXLJJ3AcJhN3mxR61jn4q4witjdB5xwVcWXA/qN1bhW9zIg9ZouhSMe iA4J9ed1xtUgAM1b91k0vhLWwAvhh9LT62BEwp1rtBZNiWfs6TgdMwtmNYquPKjc 1R1LEe093ag1OOU29XYx84PQRLOf13buevKQx34xGC6UdVrFWdRZx97t9gAPXpk0 xBpsiu9Cc2LkQWMPCsSBjhyE64nmoYAyjRpHgJ5ri3A9u2KaV1gaFu3q/zIzxd2V Peu29ge/W8YiVF197knvJ5PJqd1Q9RN2kQQ= -----END CERTIFICATE-----Generated at Sun Jun 8 04:23:16 2025 by rpki-client