$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3cef3b85-1bf0-31fa-81e7-76d7a053c636.roa File: 3cef3b85-1bf0-31fa-81e7-76d7a053c636.roa (raw, json) Hash identifier: nd7KNYUDQnFMMVnxpx/KY5ngB9xkwfeBsD0Rorh17d8= Subject key identifier: 2A:1B:91:7B:8A:94:AD:89:8A:E4:32:B6:CC:89:66:26:A1:CD:EA:76 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FC3147F233BBAF4011F80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3cef3b85-1bf0-31fa-81e7-76d7a053c636.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 41529 IP address blocks: 2001:470:1d4::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 13 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:c3:14:7f:23:3b:ba:f4:01:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=d0022428-8c51-49c0-a25b-592d624efa66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c8:19:01:8d:cf:0f:bc:70:0f:fd:15:66:7c: 85:08:0b:0a:79:6b:df:56:97:3d:de:53:31:cc:31: 53:df:11:fd:54:4c:4e:67:f2:b7:08:ca:58:31:45: 10:61:10:08:47:54:c1:b4:00:59:35:f7:bc:7b:dd: fd:f8:6f:3c:b1:e7:8d:90:3b:0e:3b:f8:59:17:a6: 0f:88:60:9d:52:c2:55:0e:cd:2c:47:bf:42:4f:3c: 19:16:b2:81:8f:ab:3f:ad:a1:c2:cc:4e:2b:0e:22: e1:09:e8:97:58:b1:f0:d9:b1:7d:b9:7a:87:da:10: 3c:7e:3f:20:0f:8b:7a:30:9d:5f:df:63:de:6b:c3: 4a:5d:75:58:e5:2d:f3:65:db:1f:43:ca:82:ac:ee: 32:09:39:64:66:e1:e6:39:52:21:77:78:99:35:6c: 43:35:fd:df:36:3d:7a:4c:0d:33:87:67:70:98:62: cd:a7:3b:15:d4:75:50:d7:e0:3d:5e:e6:43:ef:c5: 45:f9:08:e4:e6:92:51:aa:8a:2c:d7:cf:60:d5:6c: 65:79:e2:72:d1:08:51:af:6f:04:01:87:f1:d8:ed: 70:a6:86:a1:fe:2a:10:e0:50:6b:8b:1c:1a:be:06: 97:4b:18:73:a2:3f:7c:cd:cf:43:05:d3:9f:cf:3b: ab:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:1B:91:7B:8A:94:AD:89:8A:E4:32:B6:CC:89:66:26:A1:CD:EA:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3cef3b85-1bf0-31fa-81e7-76d7a053c636.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1d4::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:aa:5d:63:c9:36:6b:79:8e:fb:88:90:61:4b:60:97:48:4d: 77:81:ba:14:e6:2f:83:69:4e:8f:65:0d:51:8f:61:8e:92:cd: 62:6b:cb:b0:da:e0:a9:f0:68:9b:0a:14:b1:1d:da:33:a3:f8: a9:9f:9e:d9:9d:8c:e4:0f:75:a2:74:74:ca:da:b6:7d:65:6a: 72:9b:ef:a0:76:f4:51:bb:4e:da:14:04:bc:92:64:50:10:e0: c7:43:a9:8b:76:43:1f:e4:e1:28:0d:04:55:7c:4f:7c:1f:cf: 51:63:1d:b5:80:51:14:5f:29:9c:d1:bd:62:b0:ed:27:9a:c3: d2:ca:2b:ee:4c:4e:ba:fe:27:03:a7:42:d8:43:8e:5f:ba:c1: 7d:5f:42:0f:8c:99:41:fe:b9:d7:fd:5d:5e:9b:f1:d6:62:1b: 10:2e:24:f0:8c:49:53:9b:94:59:ce:e4:af:42:ca:c4:e3:43: df:ef:df:a5:56:1c:42:c4:25:81:3b:03:43:37:a2:4d:3a:a0: f3:fb:5a:b8:46:71:96:e1:ea:90:d3:64:2d:8d:12:4c:6d:51: 2c:9b:b3:10:3f:13:1a:f1:18:62:65:f0:aa:97:56:14:c5:52: 3f:c3:87:7c:6c:80:90:0c:8d:6b:e4:c2:ba:10:50:31:84:5e: 7b:3a:60:dc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX8MUfyM7uvQBH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk ZDAwMjI0MjgtOGM1MS00OWMwLWEyNWItNTkyZDYyNGVmYTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48gZAY3PD7xwD/0VZnyFCAsKeWvfVpc93lMx zDFT3xH9VExOZ/K3CMpYMUUQYRAIR1TBtABZNfe8e939+G88seeNkDsOO/hZF6YP iGCdUsJVDs0sR79CTzwZFrKBj6s/raHCzE4rDiLhCeiXWLHw2bF9uXqH2hA8fj8g D4t6MJ1f32Pea8NKXXVY5S3zZdsfQ8qCrO4yCTlkZuHmOVIhd3iZNWxDNf3fNj16 TA0zh2dwmGLNpzsV1HVQ1+A9XuZD78VF+Qjk5pJRqoos189g1WxleeJy0QhRr28E AYfx2O1wpoah/ioQ4FBrixwavgaXSxhzoj98zc9DBdOfzzurlQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCobkXuKlK2JiuQytsyJZiahzep2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2NlZjNiODUtMWJmMC0z MWZhLTgxZTctNzZkN2EwNTNjNjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBIAEEcAHU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA6qXWPJNmt5jvuIkGFLYJdITXeBuhTmL4NpTo9lDVGPYY6SzWJr y7Da4KnwaJsKFLEd2jOj+KmfntmdjOQPdaJ0dMratn1lanKb76B29FG7TtoUBLyS ZFAQ4MdDqYt2Qx/k4SgNBFV8T3wfz1FjHbWAURRfKZzRvWKw7Seaw9LKK+5MTrr+ JwOnQthDjl+6wX1fQg+MmUH+udf9XV6b8dZiGxAuJPCMSVOblFnO5K9CysTjQ9/v 36VWHELEJYE7A0M3ok06oPP7WrhGcZbh6pDTZC2NEkxtUSybsxA/ExrxGGJl8KqX VhTFUj/Dh3xsgJAMjWvkwroQUDGEXns6YNw= -----END CERTIFICATE-----Generated at Thu Jun 12 11:26:06 2025 by rpki-client