$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5232a25a-6432-3b3e-a4e0-7e0f95439c81.roa File: 5232a25a-6432-3b3e-a4e0-7e0f95439c81.roa (raw, json) Hash identifier: ayztxAsl384oxTM270wSo/qUi9rDyn46atPi/K6/pB8= Subject key identifier: 56:5C:E0:98:36:3B:CB:B2:89:DC:40:71:E5:D9:BC:6B:55:D6:26:93 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FE5960B3D02187D9AFB80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5232a25a-6432-3b3e-a4e0-7e0f95439c81.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 45960 IP address blocks: 2001:470:243::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:e5:96:0b:3d:02:18:7d:9a:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=9e7ac704-d7bb-42b3-ac2d-809216cfc815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0c:fa:e0:65:5c:90:89:2e:15:88:ea:86:7b: c3:bf:20:d4:a2:f2:47:07:c1:f1:f6:6c:57:ce:33: d4:8b:66:1b:17:f8:90:82:84:c6:1f:a6:b3:a4:3a: 19:74:8e:79:b4:5d:10:64:14:10:f4:43:72:91:7e: a3:37:9e:7d:f9:78:8b:95:a0:0a:c0:aa:54:9d:b7: 1d:6c:65:dd:08:9b:2f:ac:06:02:72:be:cd:2c:bc: e9:a2:b4:18:9c:04:d6:98:16:ad:76:84:fb:22:2c: 2d:05:16:1f:be:10:2c:6c:a7:0f:dc:fd:5d:cc:78: dc:d7:e8:81:5c:f8:1f:f5:de:d1:39:e2:ef:bf:ea: 35:1b:fa:ca:b5:8f:be:44:ea:1d:f5:e8:05:63:b5: a1:23:23:c2:ff:67:c3:99:65:8c:e4:54:86:9f:15: fc:68:55:29:62:02:68:79:9b:5c:11:64:95:72:9d: 28:00:20:8e:2c:c0:9c:c2:fe:17:2c:eb:e5:6d:f7: 79:c7:5a:14:49:ff:b2:29:00:26:d6:32:dc:5b:04: 2b:8b:ab:ed:75:52:f8:a2:81:4e:4f:44:8a:43:3f: c5:7e:41:9a:a2:0d:21:c5:7f:36:98:4e:49:7b:8f: 54:6c:31:31:b5:d8:4b:91:94:bc:b4:07:10:c0:86: 31:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:5C:E0:98:36:3B:CB:B2:89:DC:40:71:E5:D9:BC:6B:55:D6:26:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5232a25a-6432-3b3e-a4e0-7e0f95439c81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:243::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:79:cf:1b:ab:60:ff:7c:23:84:fb:f1:93:d4:0e:28:8a:ae: ef:82:e6:31:29:d5:0f:61:76:20:1c:4d:5b:df:93:9b:50:5e: 0d:f7:ca:2c:fe:2d:ff:87:11:94:c7:3b:74:4f:2f:84:46:55: 46:b1:df:5a:67:b5:e6:4c:0a:c1:52:35:4a:f6:fc:c2:36:f4: 01:12:b6:dd:4d:27:4b:92:33:15:11:1b:0f:25:79:e5:05:1d: 51:79:5e:42:9c:69:f8:76:f0:1e:2c:89:4f:34:16:fc:ab:fc: da:e6:b6:ca:25:f1:ef:a0:32:c6:d1:76:03:bd:dc:f4:a6:ac: 3b:d8:d9:34:dc:ca:75:d1:76:b2:9a:a9:e3:cf:b3:fd:0e:c1: 80:ff:b1:cc:08:17:98:00:9c:80:82:e8:3c:fd:2e:09:f0:d8: b6:9a:3b:97:01:c9:b2:19:43:16:52:9a:49:a2:d3:57:8c:b5: 6b:1a:fc:8a:8d:66:68:e3:02:e2:ec:4c:e4:2a:f9:fd:94:d9: 02:b5:eb:b1:e1:64:4e:65:3f:64:1a:02:b3:35:16:13:3c:66: 69:13:5b:ea:d3:5a:a8:45:a1:3a:f9:a4:80:c0:9a:a4:73:d3: 2d:f3:99:03:44:4d:9d:91:8b:3f:27:14:dd:cd:08:28:84:d2: 98:8a:d4:68 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX+WWCz0CGH2a+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk OWU3YWM3MDQtZDdiYi00MmIzLWFjMmQtODA5MjE2Y2ZjODE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgz64GVckIkuFYjqhnvDvyDUovJHB8Hx9mxX zjPUi2YbF/iQgoTGH6azpDoZdI55tF0QZBQQ9ENykX6jN559+XiLlaAKwKpUnbcd bGXdCJsvrAYCcr7NLLzporQYnATWmBatdoT7IiwtBRYfvhAsbKcP3P1dzHjc1+iB XPgf9d7ROeLvv+o1G/rKtY++ROod9egFY7WhIyPC/2fDmWWM5FSGnxX8aFUpYgJo eZtcEWSVcp0oACCOLMCcwv4XLOvlbfd5x1oUSf+yKQAm1jLcWwQri6vtdVL4ooFO T0SKQz/FfkGaog0hxX82mE5Je49UbDExtdhLkZS8tAcQwIYxxQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFZc4Jg2O8uyidxAceXZvGtV1iaTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTIzMmEyNWEtNjQzMi0z YjNlLWE0ZTAtN2UwZjk1NDM5YzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABp5zxurYP98I4T78ZPUDiiKru+C5jEp1Q9hdiAcTVvfk5tQXg33 yiz+Lf+HEZTHO3RPL4RGVUax31pnteZMCsFSNUr2/MI29AEStt1NJ0uSMxURGw8l eeUFHVF5XkKcafh28B4siU80Fvyr/Nrmtsol8e+gMsbRdgO93PSmrDvY2TTcynXR drKaqePPs/0OwYD/scwIF5gAnICC6Dz9Lgnw2LaaO5cBybIZQxZSmkmi01eMtWsa /IqNZmjjAuLsTOQq+f2U2QK167HhZE5lP2QaArM1FhM8ZmkTW+rTWqhFoTr5pIDA mqRz0y3zmQNETZ2Riz8nFN3NCCiE0piK1Gg= -----END CERTIFICATE-----Generated at Sat Jun 7 23:07:09 2025 by rpki-client