$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e22535c-66ce-36cf-93fc-5e992947b804.roa File: 4e22535c-66ce-36cf-93fc-5e992947b804.roa (raw, json) Hash identifier: p3M2nlnIoh1zFKYjsRoqdE6NYfr+pqjIdaGhUj6hJsY= Subject key identifier: 48:FB:F4:B4:0D:48:AD:1A:53:D6:08:C0:4A:43:C6:DA:4D:90:7C:4C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FCBABCEC756D50FDAF780 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e22535c-66ce-36cf-93fc-5e992947b804.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 15517 IP address blocks: 2001:470:2d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:cb:ab:ce:c7:56:d5:0f:da:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=ae7178c8-9a53-4766-8d42-c0f8f0c1a551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c0:d5:66:69:82:83:fa:03:e1:02:76:3e:6d: 6d:3c:48:13:42:f6:43:2f:16:14:3c:a5:1e:0c:17: 4c:f0:33:d8:30:50:36:59:af:7e:4b:44:48:81:f8: 9c:5f:0e:98:49:12:df:97:ae:3b:28:4b:c7:8d:14: df:af:25:17:54:6a:ba:7f:2a:3d:cf:6d:f0:83:77: e0:a6:f8:be:a8:30:91:9d:85:86:40:82:54:af:8c: d7:c2:a5:34:9c:e7:1f:0c:be:45:e8:58:4f:10:7e: 23:a2:c5:76:81:48:aa:84:3e:c6:f5:ac:25:7f:70: a3:41:1d:2a:41:cd:47:2d:ad:4c:95:ff:b5:dd:0a: b3:12:21:c7:66:5f:37:40:28:09:7c:39:f6:c2:77: 82:ab:7e:a8:c4:1c:e6:8e:ff:9a:9c:2a:1c:4e:fc: e9:22:e6:4d:9e:1d:20:2f:a1:f3:03:d4:9b:38:1a: fc:09:0a:00:fd:29:10:73:7d:0c:f6:23:d5:1b:88: ec:2d:8b:6f:b0:b3:f0:25:4b:91:00:ee:cc:27:ce: b5:5e:ac:1f:ae:64:be:63:eb:17:a5:0e:15:c8:e7: f1:ae:66:56:8b:d6:e6:a9:78:41:7e:e7:c9:b2:8d: 51:71:1e:19:86:8c:f7:7c:74:7e:45:42:b7:40:65: 04:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:FB:F4:B4:0D:48:AD:1A:53:D6:08:C0:4A:43:C6:DA:4D:90:7C:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e22535c-66ce-36cf-93fc-5e992947b804.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:42:7e:78:34:cd:ed:6e:d5:25:0f:2f:8e:f2:8d:8d:8f:a0: d8:5a:b9:e6:7d:95:5c:27:c9:da:3d:00:9d:63:5d:c6:6a:73: 38:78:b2:e3:1a:75:21:ce:90:e0:2b:b8:64:e1:bf:3d:28:18: db:c3:ee:f2:fd:05:b6:55:02:6e:21:25:00:fb:8b:3a:a0:77: cc:ec:3b:77:a3:13:ab:fe:33:53:e3:1e:ec:4a:84:d0:22:ec: 84:0c:83:ab:bc:bc:74:55:ea:90:8b:de:33:61:fa:a6:ac:4c: be:07:0c:07:af:a7:aa:db:68:04:e9:b7:be:03:83:f1:c0:3b: 55:cc:c2:f6:e8:58:e9:e9:c6:d9:44:6d:05:3a:58:7d:b7:06: 5a:5a:4a:05:73:56:9b:8c:4b:71:61:75:15:4c:8d:93:3b:88: b8:ba:9d:e4:13:90:c1:31:cf:08:7e:f9:76:11:37:17:c0:75: 39:ce:94:f6:d3:8e:df:80:d8:de:1f:58:c2:57:40:11:48:5e: 72:f8:6d:0a:04:c0:21:0b:82:22:9b:07:03:b1:c0:18:2a:a7: b4:87:cb:8c:f3:a4:8e:c0:61:07:81:3a:10:f1:5b:9b:f4:ce: a1:a1:3b:5c:6b:53:dc:6e:ba:1b:03:48:fa:cc:b7:2b:05:a7: 2e:ee:ad:17 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX8urzsdW1Q/a94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk YWU3MTc4YzgtOWE1My00NzY2LThkNDItYzBmOGYwYzFhNTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsDVZmmCg/oD4QJ2Pm1tPEgTQvZDLxYUPKUe DBdM8DPYMFA2Wa9+S0RIgficXw6YSRLfl647KEvHjRTfryUXVGq6fyo9z23wg3fg pvi+qDCRnYWGQIJUr4zXwqU0nOcfDL5F6FhPEH4josV2gUiqhD7G9awlf3CjQR0q Qc1HLa1Mlf+13QqzEiHHZl83QCgJfDn2wneCq36oxBzmjv+anCocTvzpIuZNnh0g L6HzA9SbOBr8CQoA/SkQc30M9iPVG4jsLYtvsLPwJUuRAO7MJ861XqwfrmS+Y+sX pQ4VyOfxrmZWi9bmqXhBfufJso1RcR4Zhoz3fHR+RUK3QGUEYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEj79LQNSK0aU9YIwEpDxtpNkHxMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNGUyMjUzNWMtNjZjZS0z NmNmLTkzZmMtNWU5OTI5NDdiODA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAAt MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACJCfng0ze1u1SUPL47yjY2PoNhaueZ9lVwnydo9AJ1jXcZqczh4 suMadSHOkOAruGThvz0oGNvD7vL9BbZVAm4hJQD7izqgd8zsO3ejE6v+M1PjHuxK hNAi7IQMg6u8vHRV6pCL3jNh+qasTL4HDAevp6rbaATpt74Dg/HAO1XMwvboWOnp xtlEbQU6WH23BlpaSgVzVpuMS3FhdRVMjZM7iLi6neQTkMExzwh++XYRNxfAdTnO lPbTjt+A2N4fWMJXQBFIXnL4bQoEwCELgiKbBwOxwBgqp7SHy4zzpI7AYQeBOhDx W5v0zqGhO1xrU9xuuhsDSPrMtysFpy7urRc= -----END CERTIFICATE-----Generated at Sun Jun 8 08:57:19 2025 by rpki-client