$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/45277be7-95a4-3769-ae49-68fd90408ca3.roa File: 45277be7-95a4-3769-ae49-68fd90408ca3.roa (raw, json) Hash identifier: n3rnQvaWxipMJ0CkSr6AxDP+cJey+vrpfHoJvT6X2rk= Subject key identifier: F2:81:2E:60:C6:9D:1C:61:13:3E:5A:EB:FA:E2:76:2B:B8:DC:E7:31 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FBFDB6CFB2B604D931E80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/45277be7-95a4-3769-ae49-68fd90408ca3.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 33763 IP address blocks: 2001:470:178::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:bf:db:6c:fb:2b:60:4d:93:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=ee813a28-965a-4413-b1d7-4ad21e509e7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:49:dc:c6:64:b8:c2:88:15:5a:c1:e8:77:53: 19:41:41:17:47:11:71:15:88:9b:bf:b1:06:0b:82: ce:f1:af:6a:88:62:77:77:5b:2e:e3:13:45:a6:01: 82:79:d9:b9:b2:3d:70:2b:8d:2f:db:8f:a6:58:6a: 63:9b:ec:af:09:e1:a6:e8:55:6f:de:78:6b:06:5f: c2:04:88:47:aa:e1:0a:49:f3:84:58:d8:66:36:76: cb:44:82:6f:41:7d:f7:e1:7c:ba:a5:ec:dc:5f:5c: c4:4c:dd:fe:01:8f:b8:70:81:8d:b8:3e:3b:a0:43: ae:f9:21:a6:20:da:68:20:ca:28:d0:fb:b4:1a:cb: f9:df:35:78:d8:d2:7e:64:a3:37:47:bb:d2:50:8d: e1:52:f9:43:24:4c:5e:ec:1c:97:33:a0:5d:37:da: 13:16:9e:d1:09:b1:fd:c9:a0:3e:50:d0:d5:55:97: 42:b3:f0:32:4b:0e:58:79:23:1f:1a:bc:4d:92:8a: 51:9c:06:a8:25:d6:af:6a:a9:b3:5f:3d:94:7a:ff: 0c:e0:5c:1c:c8:fb:21:30:d7:20:cb:58:3a:e2:1a: 75:e9:5c:3e:11:0c:57:db:16:61:bf:23:ed:eb:ac: b2:85:26:23:75:20:57:27:71:a6:b9:13:16:85:32: fa:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:81:2E:60:C6:9D:1C:61:13:3E:5A:EB:FA:E2:76:2B:B8:DC:E7:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/45277be7-95a4-3769-ae49-68fd90408ca3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:178::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:71:6c:31:5b:ee:f4:e3:11:35:04:f7:47:7a:b1:dd:b5:91: 01:80:84:a5:ee:cc:b1:07:df:b7:be:92:ad:a4:a5:84:0b:0d: 9f:bd:14:a9:99:96:7e:da:2e:3d:60:f8:44:dc:db:8c:42:61: ec:b7:e8:d4:6f:29:83:7e:09:66:f1:e0:e4:e0:d2:07:2d:d6: 9d:84:0a:eb:f9:6e:e3:54:e7:38:1e:59:d7:ac:2f:fd:d0:fb: 62:e8:65:1c:92:7b:85:63:0d:1e:4f:00:0b:03:59:3b:39:d4: 8a:fa:5f:34:76:d2:eb:2c:7d:02:16:1c:98:ae:30:52:dd:70: b3:56:b8:91:c8:b9:81:4d:f3:b6:44:ab:10:af:e2:c4:2f:a3: b0:67:73:25:a5:2f:8f:a1:8d:0d:bc:bb:fb:31:ec:34:6f:fd: e2:a5:70:c7:13:05:d7:7b:61:e4:8b:d4:ca:7a:b4:08:69:b3: 2f:9b:7e:18:43:dc:1c:01:8b:d4:15:0b:78:93:29:17:bd:66: 2a:61:e7:a6:9b:26:2c:0d:0c:b2:9f:27:d3:5d:61:34:65:1b: 56:42:ed:b7:fa:46:86:f0:f1:64:18:39:ca:53:e9:43:40:cb: 95:0e:09:e3:17:b5:13:93:9b:ab:84:0e:a9:3e:c2:e7:ed:bb: f9:85:5a:73 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX7/bbPsrYE2THoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk ZWU4MTNhMjgtOTY1YS00NDEzLWIxZDctNGFkMjFlNTA5ZTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUncxmS4wogVWsHod1MZQUEXRxFxFYibv7EG C4LO8a9qiGJ3d1su4xNFpgGCedm5sj1wK40v24+mWGpjm+yvCeGm6FVv3nhrBl/C BIhHquEKSfOEWNhmNnbLRIJvQX334Xy6pezcX1zETN3+AY+4cIGNuD47oEOu+SGm INpoIMoo0Pu0Gsv53zV42NJ+ZKM3R7vSUI3hUvlDJExe7ByXM6BdN9oTFp7RCbH9 yaA+UNDVVZdCs/AySw5YeSMfGrxNkopRnAaoJdavaqmzXz2Uev8M4FwcyPshMNcg y1g64hp16Vw+EQxX2xZhvyPt66yyhSYjdSBXJ3GmuRMWhTL6gQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPKBLmDGnRxhEz5a6/ridiu43OcxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDUyNzdiZTctOTVhNC0z NzY5LWFlNDktNjhmZDkwNDA4Y2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAF4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIBxbDFb7vTjETUE90d6sd21kQGAhKXuzLEH37e+kq2kpYQLDZ+9 FKmZln7aLj1g+ETc24xCYey36NRvKYN+CWbx4OTg0gct1p2ECuv5buNU5zgeWdes L/3Q+2LoZRySe4VjDR5PAAsDWTs51Ir6XzR20ussfQIWHJiuMFLdcLNWuJHIuYFN 87ZEqxCv4sQvo7BncyWlL4+hjQ28u/sx7DRv/eKlcMcTBdd7YeSL1Mp6tAhpsy+b fhhD3BwBi9QVC3iTKRe9Ziph56abJiwNDLKfJ9NdYTRlG1ZC7bf6Robw8WQYOcpT 6UNAy5UOCeMXtROTm6uEDqk+wuftu/mFWnM= -----END CERTIFICATE-----Generated at Sun Jun 8 04:57:11 2025 by rpki-client