$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/595719c0-6e9e-3e71-9c55-f5ec2e2927b7.roa File: 595719c0-6e9e-3e71-9c55-f5ec2e2927b7.roa (raw, json) Hash identifier: uUxmoHIn0Y2FdUE9Y9SGdqjTuC6huMDDnW4v3gpcX6A= Subject key identifier: B1:A7:9C:B5:93:57:5A:2E:67:E3:83:E8:2B:0C:8F:77:8B:7E:9F:90 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FDF1399F21E3F416ED140 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/595719c0-6e9e-3e71-9c55-f5ec2e2927b7.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 15083 IP address blocks: 2001:470:174::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:df:13:99:f2:1e:3f:41:6e:d1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=30fd2ddd-ee2e-4350-8349-d722d015a665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:53:d4:42:ad:7f:99:cb:2b:b2:04:3d:09:be: e7:6f:a0:b9:18:16:4f:c2:27:a2:36:b4:06:13:4c: 71:6e:f8:38:ce:5c:88:0d:16:57:09:e1:d5:0d:8d: 03:5c:4b:e3:5a:f0:5e:43:9e:14:b3:c9:f9:0e:0d: 49:f0:b5:2a:5c:c5:9f:32:77:93:6d:36:7c:61:ea: fc:54:5b:0b:81:1d:15:d3:18:3c:3b:fd:b5:cf:f0: e9:fe:53:00:85:43:55:7d:3f:f5:fd:63:35:94:35: 75:16:fb:d5:43:30:6d:c1:62:c2:21:42:06:44:a4: f3:ad:2b:e2:29:00:1b:9f:e6:da:d8:3c:d6:96:19: ba:ba:ad:d0:d3:c6:1f:d2:a9:65:ed:df:de:fa:f5: 1a:4e:6a:78:41:44:78:98:46:ae:59:f5:e4:40:05: e6:ce:5d:72:53:8f:66:a6:66:74:4b:c1:03:0b:4e: 5d:da:85:30:7f:bf:8e:6c:f2:64:92:fc:e0:05:e1: 26:c4:84:62:cd:70:6b:b3:b3:34:0a:64:d3:ee:0c: d4:75:e6:e1:74:1d:7c:a8:ce:5d:e6:d9:39:4c:63: a0:76:45:6b:57:0a:01:be:79:5e:25:2d:e6:bd:69: ef:bf:d2:40:37:69:4e:37:4b:05:53:7c:f3:28:a6: 9e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A7:9C:B5:93:57:5A:2E:67:E3:83:E8:2B:0C:8F:77:8B:7E:9F:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/595719c0-6e9e-3e71-9c55-f5ec2e2927b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:174::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:f8:e5:68:b2:c7:19:0f:70:6b:ad:56:87:c7:a4:fe:64:f5: 4d:49:52:6f:0c:17:6c:24:d1:75:ce:8d:61:c2:a7:db:b6:9d: d6:d8:06:b9:e8:08:3b:84:da:f7:29:c0:8c:4b:36:8e:c6:29: 67:0d:10:8c:77:5e:db:3e:94:9f:1a:64:6a:49:aa:4b:a6:21: 95:9d:a4:33:7a:51:85:53:b1:0c:66:3b:11:e1:41:f0:16:87: 45:5e:bd:db:3a:a3:15:12:33:bd:c9:da:15:f8:b0:44:00:e4: a3:78:d6:f1:20:4f:c4:f7:93:e7:a6:73:ef:17:43:bc:3a:c5: 9f:4e:02:ef:b6:4b:be:2a:6c:05:bf:97:6c:bf:df:98:f0:d3: aa:55:06:74:8e:ae:c9:e8:c4:6e:d4:97:d9:b1:cf:f0:41:93: 01:28:f7:3f:b5:5d:42:39:3f:9d:3d:ed:72:e8:3b:0d:f5:36: 2b:30:6c:79:c7:cd:33:cd:3d:3c:d4:b9:2c:81:f6:cf:ed:e2: 6c:04:ab:8d:13:51:17:1d:db:94:93:43:64:ba:9c:73:2e:7b: 5a:a0:2b:17:b9:9a:40:eb:1f:a9:e2:18:26:6d:3a:1d:2c:c4: 7f:da:19:8b:01:17:a7:dd:b0:83:cc:6f:72:3a:7c:e7:2a:d2: c2:3c:68:4d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX98TmfIeP0Fu0UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk MzBmZDJkZGQtZWUyZS00MzUwLTgzNDktZDcyMmQwMTVhNjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1PUQq1/mcsrsgQ9Cb7nb6C5GBZPwieiNrQG E0xxbvg4zlyIDRZXCeHVDY0DXEvjWvBeQ54Us8n5Dg1J8LUqXMWfMneTbTZ8Yer8 VFsLgR0V0xg8O/21z/Dp/lMAhUNVfT/1/WM1lDV1FvvVQzBtwWLCIUIGRKTzrSvi KQAbn+ba2DzWlhm6uq3Q08Yf0qll7d/e+vUaTmp4QUR4mEauWfXkQAXmzl1yU49m pmZ0S8EDC05d2oUwf7+ObPJkkvzgBeEmxIRizXBrs7M0CmTT7gzUdebhdB18qM5d 5tk5TGOgdkVrVwoBvnleJS3mvWnvv9JAN2lON0sFU3zzKKaexQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLGnnLWTV1ouZ+OD6CsMj3eLfp+QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTk1NzE5YzAtNmU5ZS0z ZTcxLTljNTUtZjVlYzJlMjkyN2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAF0 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKD45WiyxxkPcGutVofHpP5k9U1JUm8MF2wk0XXOjWHCp9u2ndbY BrnoCDuE2vcpwIxLNo7GKWcNEIx3Xts+lJ8aZGpJqkumIZWdpDN6UYVTsQxmOxHh QfAWh0Vevds6oxUSM73J2hX4sEQA5KN41vEgT8T3k+emc+8XQ7w6xZ9OAu+2S74q bAW/l2y/35jw06pVBnSOrsnoxG7Ul9mxz/BBkwEo9z+1XUI5P5097XLoOw31Nisw bHnHzTPNPTzUuSyB9s/t4mwEq40TURcd25STQ2S6nHMue1qgKxe5mkDrH6niGCZt Oh0sxH/aGYsBF6fdsIPMb3I6fOcq0sI8aE0= -----END CERTIFICATE-----Generated at Thu Jun 5 18:17:33 2025 by rpki-client