$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/322bb83e-cb4f-3cbf-aa01-8282cfd43ea1.roa File: 322bb83e-cb4f-3cbf-aa01-8282cfd43ea1.roa (raw, json) Hash identifier: g0WoCtvDyvjpkNldd0D5oT9eF2mIUGt7xea0ZbJpd50= Subject key identifier: 2C:B2:F7:3A:1E:60:4C:5D:48:24:BC:9D:86:E3:DC:C2:88:64:6D:B9 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FE187E89DD82FB36AA380 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/322bb83e-cb4f-3cbf-aa01-8282cfd43ea1.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 800 IP address blocks: 2001:470:1ef::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:e1:87:e8:9d:d8:2f:b3:6a:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=5f257ed2-14b4-44b9-8e79-f0bda5fabbb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:03:dc:4d:26:f7:c1:90:6d:d1:88:fa:6e:4f: 2f:b8:25:cc:dd:cb:b6:72:fa:96:30:31:e5:f4:f0: 92:a3:42:15:99:46:c4:e4:78:29:2d:cd:83:20:d0: d5:15:59:1b:83:26:5e:f2:0d:3f:79:0a:19:92:81: 70:c5:fc:99:c4:ce:f2:07:6f:28:ec:ad:7b:35:1b: ae:00:52:00:67:eb:69:20:ec:1c:9b:5f:dc:a9:c6: 8b:e9:23:a1:28:99:07:e9:1d:f9:4a:b6:32:4c:0e: 42:f6:c5:5e:dd:ac:00:ea:88:01:2f:73:7c:e3:b6: 24:b7:5e:4f:68:9f:7b:72:be:62:91:ed:f0:6e:b3: 3f:5f:99:63:e2:be:9e:af:4f:2d:87:12:06:f5:53: 3a:56:51:b5:b0:4a:53:fb:2f:a0:34:4c:d7:b9:a1: b2:23:fd:1a:ed:98:3d:95:f8:d3:84:8d:b9:71:e4: 2e:ff:80:75:6c:ca:0a:77:16:ef:df:57:dc:4c:6b: a5:e4:5f:b7:12:d3:a0:21:a0:50:19:18:c8:98:98: 74:2e:cb:2f:6d:dc:03:87:98:40:cb:8b:1b:ae:43: 27:b1:76:45:e4:39:dd:06:27:a2:3d:29:b2:54:08: 11:81:ba:29:d2:e2:22:80:eb:bf:26:90:e4:55:9e: 31:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:B2:F7:3A:1E:60:4C:5D:48:24:BC:9D:86:E3:DC:C2:88:64:6D:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/322bb83e-cb4f-3cbf-aa01-8282cfd43ea1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1ef::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:16:db:81:f0:c1:87:b2:5a:51:bc:a8:a7:98:63:b4:ba:67: 96:e9:0c:7c:f2:71:4e:2f:df:76:c3:c9:e9:48:de:25:96:87: 03:c8:5c:cb:bb:22:a4:32:9d:f5:b2:6a:40:4b:22:0d:2b:04: 6c:65:20:d8:81:78:49:fd:d2:14:8e:98:b7:7b:7c:29:94:e5: dd:dc:63:7a:1a:36:f6:17:53:73:45:e5:51:88:33:72:91:e9: 01:3f:1a:b8:e8:e9:08:fc:ea:27:7a:78:3c:7c:cf:e0:8d:94: 57:e7:b8:2a:27:b1:4b:34:f7:2e:4f:05:08:4c:8d:63:ac:82: 16:02:76:0c:3d:a8:2f:f6:5f:04:2f:02:44:59:9f:4f:3b:e4: 3b:91:8b:74:ef:e8:47:5f:7b:c9:78:ea:b2:48:ef:2e:c6:7a: 13:03:90:97:e0:bb:5b:0c:6b:67:df:ac:4a:b8:99:57:70:bb: 3a:cb:85:b2:70:34:62:ad:81:f3:a0:60:0b:6f:e6:88:ab:d0: cd:04:d3:58:d9:f7:5a:83:ea:e9:95:9b:bf:b9:57:97:5b:8f: 41:32:27:32:6a:1f:fc:bc:77:09:db:26:74:31:ca:e7:6a:f2: aa:94:06:56:42:a0:7d:c5:53:c0:f8:df:9a:31:a8:4b:ff:d8: b7:bc:63:b5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX+GH6J3YL7Nqo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk NWYyNTdlZDItMTRiNC00NGI5LThlNzktZjBiZGE1ZmFiYmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgPcTSb3wZBt0Yj6bk8vuCXM3cu2cvqWMDHl 9PCSo0IVmUbE5HgpLc2DINDVFVkbgyZe8g0/eQoZkoFwxfyZxM7yB28o7K17NRuu AFIAZ+tpIOwcm1/cqcaL6SOhKJkH6R35SrYyTA5C9sVe3awA6ogBL3N847Ykt15P aJ97cr5ike3wbrM/X5lj4r6er08thxIG9VM6VlG1sEpT+y+gNEzXuaGyI/0a7Zg9 lfjThI25ceQu/4B1bMoKdxbv31fcTGul5F+3EtOgIaBQGRjImJh0LssvbdwDh5hA y4sbrkMnsXZF5DndBieiPSmyVAgRgbop0uIigOu/JpDkVZ4xFQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCyy9zoeYExdSCS8nYbj3MKIZG25MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzIyYmI4M2UtY2I0Zi0z Y2JmLWFhMDEtODI4MmNmZDQzZWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHv MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJQW24HwwYeyWlG8qKeYY7S6Z5bpDHzycU4v33bDyelI3iWWhwPI XMu7IqQynfWyakBLIg0rBGxlINiBeEn90hSOmLd7fCmU5d3cY3oaNvYXU3NF5VGI M3KR6QE/Grjo6Qj86id6eDx8z+CNlFfnuConsUs09y5PBQhMjWOsghYCdgw9qC/2 XwQvAkRZn0875DuRi3Tv6Edfe8l46rJI7y7GehMDkJfgu1sMa2ffrEq4mVdwuzrL hbJwNGKtgfOgYAtv5oir0M0E01jZ91qD6umVm7+5V5dbj0EyJzJqH/y8dwnbJnQx yudq8qqUBlZCoH3FU8D435oxqEv/2Le8Y7U= -----END CERTIFICATE-----Generated at Thu Jun 5 18:30:49 2025 by rpki-client