$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3d98889e-bbf4-35f8-a46f-b1e55d04a99d.roa File: 3d98889e-bbf4-35f8-a46f-b1e55d04a99d.roa (raw, json) Hash identifier: YYGWJz8a6QGu/AYzobjS0ymrG5s3iG1afk8aBhOl4ug= Subject key identifier: 4A:4B:93:87:09:88:4E:6E:17:45:3E:DE:D4:4A:80:CB:7D:AA:AD:E3 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A1043BA1F0B5E899A6E983680 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3d98889e-bbf4-35f8-a46f-b1e55d04a99d.roa Signing time: Tue 03 Jun 2025 01:30:09 +0000 ROA not before: Tue 03 Jun 2025 01:30:09 +0000 ROA not after: Mon 01 Sep 2025 01:30:09 +0000 asID: 61573 IP address blocks: 2001:470:112::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:43:ba:1f:0b:5e:89:9a:6e:98:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 3 01:30:09 2025 GMT Not After : Sep 1 01:30:09 2025 GMT Subject: CN=1d6131eb-d6e1-48d9-b586-20a9f3e99b81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2e:e5:a7:42:33:34:7b:ba:35:47:91:f8:27: d1:8e:1a:83:24:81:11:c8:b3:f3:0c:e3:c8:0d:78: c2:82:11:c6:5e:59:95:cf:5b:7c:e8:2b:ff:78:bf: e0:f5:94:64:69:ef:21:8c:02:9e:1a:97:12:5b:2a: 49:8b:f9:eb:13:16:84:0d:be:1f:10:92:1f:90:83: ba:1b:2c:c5:d7:14:11:b2:2e:b7:73:31:2f:f3:f3: 45:81:9b:65:49:d6:02:7f:86:75:f0:aa:d0:29:33: 07:0e:94:f9:10:a4:de:5a:2f:27:0c:c4:1f:76:4f: a3:d8:11:a2:00:8b:4a:53:e0:79:1e:28:09:44:d0: 82:81:ff:0b:f1:a6:7b:cc:b8:35:cc:3d:3e:e0:a7: ef:5f:be:47:b9:c9:73:7d:4e:ef:28:3c:5f:8f:2c: 8e:4e:ce:67:a4:e4:cd:7f:ea:05:17:34:b9:85:fc: df:b8:74:99:2b:cb:d7:29:16:66:04:a0:71:9a:db: 44:5b:37:60:5a:09:f1:46:d2:f5:08:86:0b:e3:be: a1:54:78:98:98:8d:86:b1:09:8b:52:0e:9a:ca:92: d0:85:1e:5c:bd:81:85:46:bc:c0:41:d2:a2:31:6e: 2b:8c:6c:4b:6e:a4:17:33:82:8d:5c:e9:4b:63:eb: 50:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:4B:93:87:09:88:4E:6E:17:45:3E:DE:D4:4A:80:CB:7D:AA:AD:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3d98889e-bbf4-35f8-a46f-b1e55d04a99d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:112::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:5a:d6:e5:8c:b8:f7:b8:fc:47:e4:65:bb:a3:ce:36:a1:35: 67:6e:2c:5d:aa:9f:ec:8e:b1:da:f6:75:cd:9a:61:1e:7b:9a: 5a:17:2a:71:68:e6:65:b1:88:1e:6c:7c:a9:a5:10:dd:95:9c: 2e:50:9a:a5:e4:05:10:d9:58:a0:3e:22:ab:59:a8:d7:0c:29: fe:cb:20:0f:ac:6d:5f:7e:c4:04:1d:12:2b:b2:09:26:53:40: b6:91:7d:1f:5a:40:1b:88:d7:12:39:a8:80:76:7a:b2:34:95: 14:70:9a:c6:43:fe:23:fc:5d:9b:30:53:a7:ca:51:8f:8f:fc: fa:ed:af:50:6f:a0:94:98:7d:d9:32:69:f0:cb:7a:4d:8d:56: 19:82:51:3d:94:ed:7b:62:c7:79:64:1a:63:4f:e1:8a:6c:1f: 54:05:92:5a:89:59:15:7c:81:30:f5:e0:ff:f0:36:91:6d:0a: 6f:3f:49:d1:5c:29:62:6b:16:c8:b9:60:44:16:d4:42:a4:7f: 5c:3b:f3:29:63:1d:32:68:a9:95:00:4c:d4:f4:5c:55:f3:ca: 3e:e3:e9:df:4a:f3:60:62:9f:24:79:76:71:10:9b:19:60:f9: 0f:31:c6:4e:23:15:5c:d1:2f:ad:09:54:a1:3f:0b:27:b4:34: 46:fc:5b:fe -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoQQ7ofC16Jmm6YNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDYwMzAxMzAwOVoXDTI1MDkwMTAxMzAwOVowLzEtMCsGA1UEAxMk MWQ2MTMxZWItZDZlMS00OGQ5LWI1ODYtMjBhOWYzZTk5YjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAty7lp0IzNHu6NUeR+CfRjhqDJIERyLPzDOPI DXjCghHGXlmVz1t86Cv/eL/g9ZRkae8hjAKeGpcSWypJi/nrExaEDb4fEJIfkIO6 GyzF1xQRsi63czEv8/NFgZtlSdYCf4Z18KrQKTMHDpT5EKTeWi8nDMQfdk+j2BGi AItKU+B5HigJRNCCgf8L8aZ7zLg1zD0+4KfvX75HuclzfU7vKDxfjyyOTs5npOTN f+oFFzS5hfzfuHSZK8vXKRZmBKBxmttEWzdgWgnxRtL1CIYL476hVHiYmI2GsQmL Ug6aypLQhR5cvYGFRrzAQdKiMW4rjGxLbqQXM4KNXOlLY+tQYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEpLk4cJiE5uF0U+3tRKgMt9qq3jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2Q5ODg4OWUtYmJmNC0z NWY4LWE0NmYtYjFlNTVkMDRhOTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAES MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABpa1uWMuPe4/EfkZbujzjahNWduLF2qn+yOsdr2dc2aYR57mloX KnFo5mWxiB5sfKmlEN2VnC5QmqXkBRDZWKA+IqtZqNcMKf7LIA+sbV9+xAQdEiuy CSZTQLaRfR9aQBuI1xI5qIB2erI0lRRwmsZD/iP8XZswU6fKUY+P/Prtr1BvoJSY fdkyafDLek2NVhmCUT2U7Xtix3lkGmNP4YpsH1QFklqJWRV8gTD14P/wNpFtCm8/ SdFcKWJrFsi5YEQW1EKkf1w78yljHTJoqZUATNT0XFXzyj7j6d9K82BinyR5dnEQ mxlg+Q8xxk4jFVzRL60JVKE/Cye0NEb8W/4= -----END CERTIFICATE-----Generated at Sun Jun 8 22:13:50 2025 by rpki-client