$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5f44ce33-c8f8-38b8-9e8f-a079f5298103.roa File: 5f44ce33-c8f8-38b8-9e8f-a079f5298103.roa (raw, json) Hash identifier: FwDWm4Bn4IkI70QNtO0lX+WmgdwaQaNfqDMC8zbpTzk= Subject key identifier: 52:52:2C:50:A5:8D:D9:1F:D7:EB:A6:FB:76:D5:49:01:B8:D8:30:50 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FE36358FA64EA0CA52200 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5f44ce33-c8f8-38b8-9e8f-a079f5298103.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 198781 IP address blocks: 2001:470:22b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:e3:63:58:fa:64:ea:0c:a5:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=6e19faa1-d3f0-40b1-b420-fc675eedb5ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7d:84:a5:a4:82:22:b5:d8:1c:46:11:2c:60: ac:fc:04:9c:90:27:83:e1:1e:e9:63:d0:ea:b3:ec: 92:54:76:d2:48:2c:93:6d:6d:a0:e9:e1:95:90:02: 81:5b:47:95:4f:88:aa:3d:4f:82:e5:e1:f9:26:88: c0:00:db:c2:8e:11:01:dd:84:f4:59:4e:fb:7f:0a: 2e:f0:1b:df:40:74:da:fe:ce:8a:f4:67:8c:4b:26: bb:11:b0:6a:9b:ad:ee:b9:76:46:b8:bf:e7:9c:be: f7:89:b2:89:ea:45:cc:e4:ec:15:d0:15:69:ee:23: 57:e3:ef:77:ea:f4:ed:9d:9c:fc:7d:a4:6b:f0:96: 2c:09:cf:10:8c:dd:b1:a3:e2:07:49:c7:66:32:15: f0:f9:b8:a2:61:72:66:14:bb:f5:5b:72:d3:7d:43: 00:5b:02:ee:46:cc:8e:93:7e:a3:de:08:84:36:39: 94:b7:07:b0:44:b9:0e:65:1d:ef:f0:a1:37:23:8e: 82:b2:97:84:62:6c:df:b1:8c:ef:e4:c2:b6:32:90: a2:dc:13:3f:cd:82:c3:9f:28:91:de:47:fc:f2:66: 47:1c:39:fd:9e:bb:f3:88:be:f1:47:ec:eb:27:bc: 72:4a:71:7e:7c:ab:c2:21:21:f5:eb:7b:d1:16:a1: 67:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:52:2C:50:A5:8D:D9:1F:D7:EB:A6:FB:76:D5:49:01:B8:D8:30:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5f44ce33-c8f8-38b8-9e8f-a079f5298103.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:22b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:05:dd:a7:30:64:7f:04:62:c9:d3:a0:c4:60:a9:a1:6f:88: 4f:77:0b:5d:70:b5:7e:17:8d:29:1b:a4:d2:b8:fd:46:5d:ec: f5:25:7b:1b:0e:78:66:3c:9f:32:4e:74:25:cb:ad:65:e3:e9: 8a:11:20:f8:c5:3b:5a:8c:c0:82:b4:79:74:90:78:d8:0b:e8: d3:a3:04:82:d1:a7:e3:f9:7a:3f:90:63:59:63:53:fb:c9:86: 6e:bb:17:75:3d:31:29:47:52:40:a3:73:99:31:a8:96:18:43: 3f:1c:8f:26:51:1c:ef:17:0c:c0:c6:24:e1:d7:1b:0f:1d:69: 12:9d:1d:42:a3:dd:ef:ac:27:c8:86:d6:17:6f:fb:67:9e:2e: 5c:41:ee:29:9b:0b:01:b5:87:b6:91:96:92:d8:f5:c0:e8:54: 14:05:36:51:67:93:cb:ff:67:4c:af:4c:58:6f:5a:0f:e5:e6: 1c:c6:a2:0e:fc:2c:65:1c:3b:11:ad:1b:02:5b:ac:9b:cd:28: f7:96:73:88:79:e2:c6:78:f1:81:5f:65:d4:14:37:53:28:66: 5a:c5:df:0b:4f:20:af:2a:90:d4:6b:1f:29:68:4f:ee:a5:77: bc:62:12:cb:cc:c8:c3:b6:f1:33:80:02:6b:1f:a9:08:7a:12: da:e0:52:62 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX+NjWPpk6gylIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk NmUxOWZhYTEtZDNmMC00MGIxLWI0MjAtZmM2NzVlZWRiNWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiH2EpaSCIrXYHEYRLGCs/ASckCeD4R7pY9Dq s+ySVHbSSCyTbW2g6eGVkAKBW0eVT4iqPU+C5eH5JojAANvCjhEB3YT0WU77fwou 8BvfQHTa/s6K9GeMSya7EbBqm63uuXZGuL/nnL73ibKJ6kXM5OwV0BVp7iNX4+93 6vTtnZz8faRr8JYsCc8QjN2xo+IHScdmMhXw+biiYXJmFLv1W3LTfUMAWwLuRsyO k36j3giENjmUtwewRLkOZR3v8KE3I46CspeEYmzfsYzv5MK2MpCi3BM/zYLDnyiR 3kf88mZHHDn9nrvziL7xR+zrJ7xySnF+fKvCISH163vRFqFn/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFJSLFCljdkf1+um+3bVSQG42DBQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNWY0NGNlMzMtYzhmOC0z OGI4LTllOGYtYTA3OWY1Mjk4MTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAIr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALEF3acwZH8EYsnToMRgqaFviE93C11wtX4XjSkbpNK4/UZd7PUl exsOeGY8nzJOdCXLrWXj6YoRIPjFO1qMwIK0eXSQeNgL6NOjBILRp+P5ej+QY1lj U/vJhm67F3U9MSlHUkCjc5kxqJYYQz8cjyZRHO8XDMDGJOHXGw8daRKdHUKj3e+s J8iG1hdv+2eeLlxB7imbCwG1h7aRlpLY9cDoVBQFNlFnk8v/Z0yvTFhvWg/l5hzG og78LGUcOxGtGwJbrJvNKPeWc4h54sZ48YFfZdQUN1MoZlrF3wtPIK8qkNRrHylo T+6ld7xiEsvMyMO28TOAAmsfqQh6EtrgUmI= -----END CERTIFICATE-----Generated at Mon Jun 9 06:02:01 2025 by rpki-client