$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/59f6def4-6e3c-367f-8602-c606eec4c6e1.roa File: 59f6def4-6e3c-367f-8602-c606eec4c6e1.roa (raw, json) Hash identifier: KnrCR2MK0Zcgv0pEhaCyhCbwE3kVhQklJxsz93TDGlo= Subject key identifier: 4D:22:6F:22:8A:97:4E:FD:35:E3:B9:63:B6:19:4D:D0:11:0B:38:95 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FE87040773FC8D5249600 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/59f6def4-6e3c-367f-8602-c606eec4c6e1.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 41695 IP address blocks: 2001:470:2a5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:e8:70:40:77:3f:c8:d5:24:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=8a76736e-90dd-4862-a9a8-a6f6cad17e47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:3e:94:f4:9a:99:9f:5b:e2:1c:45:0b:61:f2: cb:33:9a:d5:5f:63:fa:1c:5a:7e:3f:62:3d:c2:aa: d8:f9:4f:1d:71:38:11:e0:87:7c:ce:89:55:45:bf: 10:6d:d5:8e:b1:bf:d9:e2:2f:6c:83:40:48:eb:e6: 6c:d3:73:aa:6e:ef:fa:d9:30:e9:62:84:5f:6d:73: 69:d2:5c:95:a2:be:eb:52:60:a5:12:5b:73:d6:7e: 27:1c:e3:16:b0:0e:05:c0:71:98:fa:1d:9a:04:58: 34:af:40:f5:66:7e:b0:ef:ce:06:3f:2c:a3:62:4e: bf:cc:93:22:70:48:36:00:14:79:9f:be:91:f5:ab: ff:c6:8d:bc:70:6d:93:58:49:0d:ae:46:d5:15:17: 75:39:47:8e:96:09:cd:6e:6c:d7:8f:d4:ad:90:e7: 44:19:81:61:cb:34:26:c3:eb:44:9f:d7:aa:e0:67: 6b:eb:91:26:1d:55:73:ee:0e:5f:00:46:73:e3:62: 78:39:1d:13:20:5b:b7:e5:b2:ac:2e:01:e4:20:13: 9a:18:29:02:29:70:71:c2:fd:de:35:a2:9d:5f:8e: dd:a2:67:d1:84:7d:19:ed:9c:8f:e4:73:72:cb:01: b0:08:b3:46:53:2c:d2:dc:52:c2:01:f4:1b:33:e4: 1e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:22:6F:22:8A:97:4E:FD:35:E3:B9:63:B6:19:4D:D0:11:0B:38:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/59f6def4-6e3c-367f-8602-c606eec4c6e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:06:ef:d9:e1:d8:ee:6b:5f:ca:99:c7:80:42:8a:fd:1e:85: 59:97:ba:6a:31:bc:6d:0c:65:65:41:f9:e4:3d:77:dd:6a:cd: 24:40:fd:52:9b:d1:c8:f2:fb:67:83:02:9f:8e:6e:b3:30:7c: 7f:18:08:45:97:dc:12:13:5f:53:f7:76:4a:c5:3c:64:64:9d: 85:91:3e:84:05:61:0e:dc:b7:5c:4c:1d:3e:6d:e7:82:0b:b0: b8:ea:58:8c:da:5d:33:83:64:89:a7:44:42:56:9b:13:66:11: 31:f4:81:39:8e:7b:6e:78:8e:ce:f5:d2:ea:fa:59:09:5b:72: a5:55:b3:de:c3:4f:f3:cd:56:29:a4:b4:e3:ad:7c:7d:c2:c4: 0e:e6:1f:f8:73:97:37:7e:e5:98:62:e9:1d:94:77:0b:60:10: 8b:d1:7d:14:fc:6d:74:aa:a8:8d:8d:cd:99:3d:9e:aa:25:0b: 4d:89:d9:58:6a:60:3b:f2:91:54:2e:5d:82:ee:43:d4:3e:f8: 0e:4a:6d:00:74:88:f1:bd:4e:90:8e:81:48:f5:f6:82:73:a2: c5:57:b6:e7:68:85:7a:72:b8:5a:48:65:c7:a5:b9:61:4e:f7: 5b:17:57:13:55:a2:dd:d8:89:3f:14:73:d1:5f:50:07:b4:a0: 58:9a:53:64 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX+hwQHc/yNUklgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk OGE3NjczNmUtOTBkZC00ODYyLWE5YTgtYTZmNmNhZDE3ZTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7z6U9JqZn1viHEULYfLLM5rVX2P6HFp+P2I9 wqrY+U8dcTgR4Id8zolVRb8QbdWOsb/Z4i9sg0BI6+Zs03Oqbu/62TDpYoRfbXNp 0lyVor7rUmClEltz1n4nHOMWsA4FwHGY+h2aBFg0r0D1Zn6w784GPyyjYk6/zJMi cEg2ABR5n76R9av/xo28cG2TWEkNrkbVFRd1OUeOlgnNbmzXj9StkOdEGYFhyzQm w+tEn9eq4Gdr65EmHVVz7g5fAEZz42J4OR0TIFu35bKsLgHkIBOaGCkCKXBxwv3e NaKdX47domfRhH0Z7ZyP5HNyywGwCLNGUyzS3FLCAfQbM+QepQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE0ibyKKl079NeO5Y7YZTdARCziVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTlmNmRlZjQtNmUzYy0z NjdmLTg2MDItYzYwNmVlYzRjNmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFEG79nh2O5rX8qZx4BCiv0ehVmXumoxvG0MZWVB+eQ9d91qzSRA /VKb0cjy+2eDAp+ObrMwfH8YCEWX3BITX1P3dkrFPGRknYWRPoQFYQ7ct1xMHT5t 54ILsLjqWIzaXTODZImnREJWmxNmETH0gTmOe254js710ur6WQlbcqVVs97DT/PN VimktOOtfH3CxA7mH/hzlzd+5Zhi6R2UdwtgEIvRfRT8bXSqqI2NzZk9nqolC02J 2VhqYDvykVQuXYLuQ9Q++A5KbQB0iPG9TpCOgUj19oJzosVXtudohXpyuFpIZcel uWFO91sXVxNVot3YiT8Uc9FfUAe0oFiaU2Q= -----END CERTIFICATE-----Generated at Sun Jun 8 22:18:41 2025 by rpki-client