$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3188ec37-0c4c-3b29-9d2b-1a0d36957709.roa File: 3188ec37-0c4c-3b29-9d2b-1a0d36957709.roa (raw, json) Hash identifier: Pf2TWE+ME7AcZIf5FVEZ641/by+IFdb8dxPCFdk5LbI= Subject key identifier: A1:42:17:47:58:8B:03:36:DC:3D:24:D6:24:81:9C:4B:B7:87:51:26 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FC5CE33F190056D2D0C80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3188ec37-0c4c-3b29-9d2b-1a0d36957709.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 17408 IP address blocks: 2001:470:25e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:c5:ce:33:f1:90:05:6d:2d:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=61b94012-c14f-4af9-b05c-3e42594a12d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:5b:ce:6b:f4:a8:55:61:97:47:cf:d8:7c:2a: 84:eb:1e:69:16:e8:17:d1:2e:76:9e:02:11:7a:fd: ea:ae:41:a8:58:68:77:c8:3d:b7:7e:80:80:f4:17: 21:03:61:7a:fb:08:26:d0:58:06:0f:1d:17:96:e1: 72:7f:96:85:f3:d2:e2:0e:75:37:bd:60:c2:29:8e: 86:65:a9:4a:e3:22:33:a3:38:31:d6:73:96:38:d5: e8:f8:37:66:eb:7c:50:cb:3f:fd:4c:0f:c9:ef:d2: a1:26:c6:01:dc:18:fb:78:f1:7f:f6:a9:6e:70:ec: ad:e2:92:95:42:69:e7:dd:b8:52:8d:88:04:72:c4: c4:3d:7f:54:85:00:f9:80:7a:64:90:fd:42:65:42: 58:13:8e:f0:22:d0:9a:3b:3e:86:46:0e:5c:1f:84: 06:c1:f3:19:8e:ca:1b:5d:40:9a:b5:4d:b5:9e:b6: db:85:a0:1a:4e:c3:a1:a7:c3:c6:8d:98:85:7c:bf: 51:49:3e:f3:38:5b:aa:7e:30:46:83:18:c4:ac:e8: d3:f1:c1:f2:f3:f7:c0:f1:db:30:fa:d4:60:5c:52: a3:d5:65:f0:7a:be:6b:f0:ec:ec:0a:8a:02:67:d7: e7:5c:25:45:73:43:7e:c0:ee:ef:32:55:56:50:7e: c2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:42:17:47:58:8B:03:36:DC:3D:24:D6:24:81:9C:4B:B7:87:51:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3188ec37-0c4c-3b29-9d2b-1a0d36957709.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:25e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:10:c9:16:bd:dd:66:d0:c8:40:3b:b3:8d:13:04:c9:3d:cf: 15:fa:1b:6d:72:d8:3f:69:ed:4c:67:fb:04:fa:72:54:47:73: e1:ef:97:41:b5:a3:33:f6:1a:29:87:88:da:6a:78:07:35:84: fc:52:9e:fa:39:ca:be:1d:2a:de:58:91:c5:90:e2:75:0d:f7: b5:0a:ac:7d:a5:8a:52:11:07:4d:ee:33:64:65:4e:fd:fe:93: 8f:e8:72:77:b7:1e:2e:40:2e:a9:40:44:3a:e3:58:4f:02:0b: 58:08:35:f8:96:5d:16:d9:d6:c0:f2:80:f9:45:ce:9f:78:e7: 84:df:f7:bf:04:1d:b2:8e:03:ab:09:f5:97:c6:13:b5:66:ed: 96:64:32:b5:17:17:51:72:03:30:cf:34:e0:55:8e:06:6b:36: 09:1a:62:09:7b:36:be:33:c2:a0:7e:fc:16:ec:79:35:42:01: d7:6f:f1:df:7c:bf:45:5b:33:9b:61:26:aa:8f:f5:03:21:21: 65:e5:64:d4:88:05:2b:42:1f:d0:8e:91:ce:d9:99:d7:a0:1d: 8a:99:c6:27:bf:00:9a:ba:73:aa:44:a0:4d:03:2f:73:92:52: 05:39:93:f3:37:fa:d2:17:6c:c9:f3:da:b5:49:3c:28:e8:26: 13:d4:b0:b8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX8XOM/GQBW0tDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk NjFiOTQwMTItYzE0Zi00YWY5LWIwNWMtM2U0MjU5NGExMmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlvOa/SoVWGXR8/YfCqE6x5pFugX0S52ngIR ev3qrkGoWGh3yD23foCA9BchA2F6+wgm0FgGDx0XluFyf5aF89LiDnU3vWDCKY6G ZalK4yIzozgx1nOWONXo+Ddm63xQyz/9TA/J79KhJsYB3Bj7ePF/9qlucOyt4pKV Qmnn3bhSjYgEcsTEPX9UhQD5gHpkkP1CZUJYE47wItCaOz6GRg5cH4QGwfMZjsob XUCatU21nrbbhaAaTsOhp8PGjZiFfL9RST7zOFuqfjBGgxjErOjT8cHy8/fA8dsw +tRgXFKj1WXwer5r8OzsCooCZ9fnXCVFc0N+wO7vMlVWUH7C2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKFCF0dYiwM23D0k1iSBnEu3h1EmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzE4OGVjMzctMGM0Yy0z YjI5LTlkMmItMWEwZDM2OTU3NzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAMQyRa93WbQyEA7s40TBMk9zxX6G21y2D9p7Uxn+wT6clRHc+Hv l0G1ozP2GimHiNpqeAc1hPxSnvo5yr4dKt5YkcWQ4nUN97UKrH2lilIRB03uM2Rl Tv3+k4/ocne3Hi5ALqlARDrjWE8CC1gINfiWXRbZ1sDygPlFzp9454Tf978EHbKO A6sJ9ZfGE7Vm7ZZkMrUXF1FyAzDPNOBVjgZrNgkaYgl7Nr4zwqB+/BbseTVCAddv 8d98v0VbM5thJqqP9QMhIWXlZNSIBStCH9COkc7ZmdegHYqZxie/AJq6c6pEoE0D L3OSUgU5k/M3+tIXbMnz2rVJPCjoJhPUsLg= -----END CERTIFICATE-----Generated at Thu Jun 5 18:27:43 2025 by rpki-client