$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/40f8dc35-9f6a-32d9-9b05-4599efaca192.roa File: 40f8dc35-9f6a-32d9-9b05-4599efaca192.roa (raw, json) Hash identifier: 8mf9ejdQJn3MR1KNsh6kvboh6+Agl22wdsie1Wh8jeI= Subject key identifier: 88:D6:30:86:EE:16:83:7F:5B:62:2A:C9:21:3E:3F:1A:A5:D2:2F:60 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858498769A54902F79F69AB880900 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/40f8dc35-9f6a-32d9-9b05-4599efaca192.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 17408 IP address blocks: 2001:470:3fd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:a5:49:02:f7:9f:69:ab:88:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=a41ffc4f-e95f-4b63-b066-e5626d2ea71f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:07:fa:35:e1:fa:cd:1c:78:9c:b9:ff:c8:f5: db:19:11:97:e2:47:bb:a3:c2:38:fe:dd:82:2e:59: f7:26:57:2f:27:c2:11:2c:1c:ac:0e:43:e4:f1:24: 33:99:f5:d1:c3:ff:99:33:cb:10:9c:a4:6a:51:f9: 27:79:41:32:02:4e:00:cf:b1:b9:be:74:02:42:e6: 30:5f:c7:c5:e7:45:ad:57:48:4d:d4:2f:fc:48:38: d9:a5:aa:bf:f8:e7:f7:28:48:3d:cb:3b:46:fc:3b: 31:1e:9b:73:a7:47:e4:ca:3d:ca:2f:a8:72:51:7b: ab:42:87:7a:a8:02:5c:62:9a:7c:36:a9:6b:d0:b7: 9b:54:3d:83:b8:db:76:4a:2c:97:a4:42:d5:62:7e: a0:d6:05:f3:a0:b1:c0:3d:fe:3a:de:9e:97:94:cf: d5:9a:6c:f8:9c:c4:d1:76:96:a5:61:89:58:32:f5: d4:15:e3:22:d8:d8:26:7a:77:4f:67:46:c1:71:42: b4:98:4f:c4:26:93:43:09:9b:a2:c2:47:f8:7d:97: 5e:8d:79:6f:43:8c:30:a8:eb:d2:f6:33:4c:b6:26: 71:2b:3d:77:41:a5:1c:e7:2f:61:03:66:de:43:b7: 16:0c:41:0a:39:89:2b:e7:08:e0:b0:68:3a:58:71: 90:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D6:30:86:EE:16:83:7F:5B:62:2A:C9:21:3E:3F:1A:A5:D2:2F:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/40f8dc35-9f6a-32d9-9b05-4599efaca192.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3fd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:a5:77:53:fe:e6:39:0e:50:90:6b:61:77:9b:ce:f5:00:65: 44:c6:93:bc:21:e6:01:a6:06:e7:f3:21:ba:8f:5e:81:08:06: 9a:ac:e8:89:83:ad:5f:e8:a8:2f:41:1c:11:f4:33:bc:cc:78: 5c:26:1f:33:b3:69:2f:2b:77:50:c9:44:7e:b0:56:7c:d6:86: 2f:79:77:67:9d:84:4b:52:66:6f:89:84:ff:e1:40:99:07:11: 84:29:b9:03:f6:3e:66:da:a6:07:bb:85:0a:20:6b:6a:7d:9e: 3a:bd:02:bd:1b:e3:f6:ce:08:78:b0:39:9d:20:70:41:5b:b0: f6:87:27:71:f9:4d:77:9c:c6:60:31:7f:02:27:61:20:86:7c: 3f:e5:43:0f:76:ea:f2:30:c1:d5:38:11:b1:da:4b:fc:81:b9: fa:82:a2:02:61:cb:df:67:a7:88:63:9e:0b:93:7c:2d:62:04: cf:7c:1d:d6:df:d3:d6:b6:39:a2:ec:05:90:9f:88:04:03:d2: fb:a6:fc:65:b9:7f:c3:64:3c:c3:76:ff:95:ce:62:c8:ce:7a: af:70:71:22:12:83:59:3c:b0:b5:0a:2f:9c:2a:3d:ba:81:cd: fc:80:ad:6f:7f:96:1d:c0:19:90:bc:53:bc:08:76:f7:b9:7c: c0:9e:b0:00 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmHaaVJAvefaauICQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk YTQxZmZjNGYtZTk1Zi00YjYzLWIwNjYtZTU2MjZkMmVhNzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAf6NeH6zRx4nLn/yPXbGRGX4ke7o8I4/t2C Lln3JlcvJ8IRLBysDkPk8SQzmfXRw/+ZM8sQnKRqUfkneUEyAk4Az7G5vnQCQuYw X8fF50WtV0hN1C/8SDjZpaq/+Of3KEg9yztG/DsxHptzp0fkyj3KL6hyUXurQod6 qAJcYpp8Nqlr0LebVD2DuNt2SiyXpELVYn6g1gXzoLHAPf463p6XlM/Vmmz4nMTR dpalYYlYMvXUFeMi2NgmendPZ0bBcUK0mE/EJpNDCZuiwkf4fZdejXlvQ4wwqOvS 9jNMtiZxKz13QaUc5y9hA2beQ7cWDEEKOYkr5wjgsGg6WHGQ5wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIjWMIbuFoN/W2IqySE+Pxql0i9gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDBmOGRjMzUtOWY2YS0z MmQ5LTliMDUtNDU5OWVmYWNhMTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAP9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKald1P+5jkOUJBrYXebzvUAZUTGk7wh5gGmBufzIbqPXoEIBpqs 6ImDrV/oqC9BHBH0M7zMeFwmHzOzaS8rd1DJRH6wVnzWhi95d2edhEtSZm+JhP/h QJkHEYQpuQP2Pmbapge7hQoga2p9njq9Ar0b4/bOCHiwOZ0gcEFbsPaHJ3H5TXec xmAxfwInYSCGfD/lQw926vIwwdU4EbHaS/yBufqCogJhy99np4hjnguTfC1iBM98 Hdbf09a2OaLsBZCfiAQD0vum/GW5f8NkPMN2/5XOYsjOeq9wcSISg1k8sLUKL5wq PbqBzfyArW9/lh3AGZC8U7wIdve5fMCesAA= -----END CERTIFICATE-----Generated at Fri May 9 08:49:20 2025 by rpki-client