$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3ed8c690-7bf1-3d35-a609-35654298ea78.roa File: 3ed8c690-7bf1-3d35-a609-35654298ea78.roa (raw, json) Hash identifier: hw+P9nmxGax8msOhIwtJxkdyanwt7KSfsBTK/79bc6g= Subject key identifier: 43:73:4E:8A:2F:1C:BD:07:3C:71:C8:CE:D7:AA:CC:28:EE:57:C7:DB Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FC9777949FCED35EDCE00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3ed8c690-7bf1-3d35-a609-35654298ea78.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 62206 IP address blocks: 2001:470:2a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:c9:77:79:49:fc:ed:35:ed:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=bd35c7fb-7d36-4ea6-a74f-4c9e78e66dae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2e:9d:02:c6:29:f5:27:6f:e3:db:68:1f:1f: 58:4e:41:5b:da:2f:27:d9:bb:aa:a4:f8:e1:22:d3: c7:1e:1a:41:5c:7d:81:b2:c2:28:81:74:e2:bd:30: b8:3e:cb:58:1a:67:53:bc:4b:b4:85:df:50:af:60: 32:73:0f:5f:42:92:b4:7e:9a:13:c2:60:6b:d5:70: a0:68:30:9d:d2:65:03:7a:d1:f7:91:3a:08:04:43: 50:9b:ec:bf:7d:52:1d:fd:fa:cf:cd:a4:e8:7b:94: 4f:9f:80:05:93:14:e6:1e:6c:48:ff:a5:5b:cb:30: 0e:31:4c:f2:f1:c5:f8:d7:cf:17:fa:a9:48:66:ab: c5:cd:39:94:45:c7:39:87:90:44:f9:d9:73:ae:3a: 51:64:fb:30:7b:4f:14:e9:a6:6f:08:7b:48:0a:13: 46:1c:89:45:00:0e:bc:c1:d1:22:ab:d2:4c:d8:58: 29:47:7c:c0:fc:c4:c7:64:8d:f4:b5:df:96:46:fc: 22:99:7f:2d:3c:bb:71:c7:ed:dd:80:65:7e:66:1d: 82:e2:6c:0d:7d:94:e5:1d:9c:89:6a:0c:20:5d:a0: 10:64:9d:da:21:ef:20:b5:93:79:92:01:ec:3d:4f: 4a:ef:a4:27:4a:83:55:5a:f2:25:8b:22:9a:55:91: 4c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:73:4E:8A:2F:1C:BD:07:3C:71:C8:CE:D7:AA:CC:28:EE:57:C7:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3ed8c690-7bf1-3d35-a609-35654298ea78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:83:05:99:b7:40:45:ee:7b:a2:fa:ab:5a:07:32:18:3c:b3: 9b:4a:c9:c8:bd:28:bc:5e:82:b2:56:22:22:aa:ed:2f:51:eb: b0:64:0f:0b:05:14:b8:41:9d:ea:a6:33:20:9b:b8:95:ff:8d: 98:b3:8d:2e:a2:ce:e5:5c:07:a2:15:af:ff:19:f0:86:34:05: 31:c1:d5:2c:70:30:b0:3c:f5:95:41:a0:6d:31:24:0e:70:00: c4:58:1a:8a:74:a0:d9:d3:58:5d:6c:2e:fc:d6:3c:77:67:98: 05:fe:f1:e7:5c:c2:4b:d4:be:a1:2f:3f:87:b2:7f:bc:6a:ef: ca:66:22:4d:66:ff:e5:87:88:3a:55:b4:07:ef:76:e4:5b:cd: 47:65:0e:cf:b5:ae:de:3a:1f:6e:e7:3b:bd:2a:19:b9:64:f2: e4:a9:1a:07:fa:89:c3:a5:fe:46:cb:54:4d:e5:3e:6e:a2:aa: f1:c7:e0:8f:1a:75:e9:3b:08:92:c6:b3:be:e4:0c:d7:43:70: c1:14:48:ba:60:a0:19:e5:29:e7:4d:8f:0a:93:bf:b2:b7:60: 3f:f1:5b:89:51:de:a9:6e:25:14:5d:29:3b:f0:fd:e7:04:e5: fb:9f:39:c6:1b:24:e1:71:f0:88:aa:e4:e6:e4:bc:36:ba:5c: ca:4b:6f:b8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX8l3eUn87TXtzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk YmQzNWM3ZmItN2QzNi00ZWE2LWE3NGYtNGM5ZTc4ZTY2ZGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAli6dAsYp9Sdv49toHx9YTkFb2i8n2buqpPjh ItPHHhpBXH2BssIogXTivTC4PstYGmdTvEu0hd9Qr2Aycw9fQpK0fpoTwmBr1XCg aDCd0mUDetH3kToIBENQm+y/fVId/frPzaToe5RPn4AFkxTmHmxI/6VbyzAOMUzy 8cX4188X+qlIZqvFzTmURcc5h5BE+dlzrjpRZPswe08U6aZvCHtIChNGHIlFAA68 wdEiq9JM2FgpR3zA/MTHZI30td+WRvwimX8tPLtxx+3dgGV+Zh2C4mwNfZTlHZyJ agwgXaAQZJ3aIe8gtZN5kgHsPU9K76QnSoNVWvIliyKaVZFMdQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFENzToovHL0HPHHIzteqzCjuV8fbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2VkOGM2OTAtN2JmMS0z ZDM1LWE2MDktMzU2NTQyOThlYTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAeDBZm3QEXue6L6q1oHMhg8s5tKyci9KLxegrJWIiKq7S9R67Bk DwsFFLhBneqmMyCbuJX/jZizjS6izuVcB6IVr/8Z8IY0BTHB1SxwMLA89ZVBoG0x JA5wAMRYGop0oNnTWF1sLvzWPHdnmAX+8edcwkvUvqEvP4eyf7xq78pmIk1m/+WH iDpVtAfvduRbzUdlDs+1rt46H27nO70qGblk8uSpGgf6icOl/kbLVE3lPm6iqvHH 4I8adek7CJLGs77kDNdDcMEUSLpgoBnlKedNjwqTv7K3YD/xW4lR3qluJRRdKTvw /ecE5fufOcYbJOFx8Iiq5ObkvDa6XMpLb7g= -----END CERTIFICATE-----Generated at Sun Jun 8 06:15:15 2025 by rpki-client