$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/70c8e9e1-9888-3a19-8d4f-5779a1219972.roa File: 70c8e9e1-9888-3a19-8d4f-5779a1219972.roa (raw, json) Hash identifier: ClRcrdWjRjUmwuflX8ug5NCvcdzlUVrYh5ZGeFyc9oQ= Subject key identifier: E6:94:37:F6:C2:81:C8:75:0D:C3:11:5C:DA:FA:57:90:B4:16:EA:6C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A1035309DC7E8C525A5072A00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/70c8e9e1-9888-3a19-8d4f-5779a1219972.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 30886 IP address blocks: 2001:470:427::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:30:9d:c7:e8:c5:25:a5:07:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=324b1a85-0097-42df-8317-c3014654f06b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b4:31:20:e2:ea:9e:51:10:fb:09:32:d4:28: 2c:91:83:bf:ea:e4:92:4d:84:e6:a6:48:e9:71:16: 15:99:28:0d:65:4d:ff:08:fd:8f:33:41:21:75:eb: 88:d4:15:38:00:7c:ec:74:62:18:52:a6:f7:19:60: ca:46:bf:4f:fd:af:b8:a8:d8:b2:eb:f9:d3:34:f2: 43:27:24:9b:4b:2a:da:7a:e4:dc:b3:e0:a7:2f:8a: 0f:9a:c2:6d:fd:a8:9e:64:61:cd:20:03:c0:85:a1: 3d:7d:f1:bf:e1:19:a5:b0:2d:ac:81:47:b6:0f:86: e8:43:50:d0:22:7e:05:67:91:18:5b:5d:63:f8:bb: 10:47:34:6e:7a:e5:37:f6:54:f3:f5:8b:61:d4:be: 62:20:26:8d:e6:3f:b9:c1:f0:b3:77:15:60:62:af: 49:57:dc:38:44:5d:c0:ec:55:c7:63:10:1c:13:66: 47:a8:97:73:cb:fd:b5:93:01:5e:f4:f8:63:f8:d1: 6f:05:4c:41:dc:81:bf:e8:8b:a8:ef:95:91:31:78: e2:f8:2a:a2:e4:ac:bd:de:e8:51:3d:c0:af:96:4a: aa:71:5c:a6:03:bb:0b:64:ba:7d:f0:86:94:96:5b: 13:75:93:20:f6:ec:72:d7:b7:be:dd:87:44:1a:72: 92:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:94:37:F6:C2:81:C8:75:0D:C3:11:5C:DA:FA:57:90:B4:16:EA:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/70c8e9e1-9888-3a19-8d4f-5779a1219972.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:427::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:d6:50:61:3e:33:3b:7a:c9:61:95:55:cd:fd:d2:ee:ae:bb: d8:74:04:3d:b8:72:2f:4c:72:3d:fd:2e:6d:de:79:b8:eb:02: 11:54:23:70:3c:b8:c8:98:5e:ed:b4:3b:51:a7:a1:d8:d8:8f: 7f:aa:37:61:47:ef:57:7f:4f:8e:68:26:c9:21:c1:e3:b7:e1: ca:69:c4:90:92:81:87:fe:7f:8f:21:91:a9:c5:93:ba:35:69: 70:0f:23:40:66:71:b3:be:21:8f:7c:70:20:33:d2:3e:f4:b1: 44:8f:16:71:fe:37:8a:a3:f1:0a:89:28:f9:e8:7b:70:a9:de: 80:88:e1:d1:26:11:1e:5a:2b:0a:47:5c:ce:88:68:d4:7a:81: 26:33:22:5e:33:fb:7f:8d:b3:78:7f:3b:cd:9d:b7:fa:2f:b8: eb:18:74:c2:2e:6c:25:0e:4a:43:3d:a1:da:2f:1d:5b:d7:98: 0f:1f:3c:9a:8e:ff:01:bb:11:3a:66:cf:59:2c:ae:96:17:f6: 1c:fb:40:51:ec:57:af:0c:05:73:24:59:ad:48:0e:a9:22:ef: cf:fa:9b:f1:3e:f9:db:74:96:65:3c:8d:0c:c8:17:f8:07:eb: c3:05:0b:76:50:67:40:ee:72:f2:d1:9e:b7:7f:38:dc:49:98: e5:5c:5c:9a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoQNTCdx+jFJaUHKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk MzI0YjFhODUtMDA5Ny00MmRmLTgzMTctYzMwMTQ2NTRmMDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLQxIOLqnlEQ+wky1CgskYO/6uSSTYTmpkjp cRYVmSgNZU3/CP2PM0EhdeuI1BU4AHzsdGIYUqb3GWDKRr9P/a+4qNiy6/nTNPJD JySbSyraeuTcs+CnL4oPmsJt/aieZGHNIAPAhaE9ffG/4RmlsC2sgUe2D4boQ1DQ In4FZ5EYW11j+LsQRzRueuU39lTz9Yth1L5iICaN5j+5wfCzdxVgYq9JV9w4RF3A 7FXHYxAcE2ZHqJdzy/21kwFe9Phj+NFvBUxB3IG/6Iuo75WRMXji+Cqi5Ky93uhR PcCvlkqqcVymA7sLZLp98IaUllsTdZMg9uxy17e+3YdEGnKSzQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOaUN/bCgch1DcMRXNr6V5C0FupsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNzBjOGU5ZTEtOTg4OC0z YTE5LThkNGYtNTc3OWExMjE5OTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGzWUGE+Mzt6yWGVVc390u6uu9h0BD24ci9Mcj39Lm3eebjrAhFU I3A8uMiYXu20O1GnodjYj3+qN2FH71d/T45oJskhweO34cppxJCSgYf+f48hkanF k7o1aXAPI0BmcbO+IY98cCAz0j70sUSPFnH+N4qj8QqJKPnoe3Cp3oCI4dEmER5a KwpHXM6IaNR6gSYzIl4z+3+Ns3h/O82dt/ovuOsYdMIubCUOSkM9odovHVvXmA8f PJqO/wG7ETpmz1ksrpYX9hz7QFHsV68MBXMkWa1IDqki78/6m/E++dt0lmU8jQzI F/gH68MFC3ZQZ0DucvLRnrd/ONxJmOVcXJo= -----END CERTIFICATE-----Generated at Sun Jun 8 22:22:45 2025 by rpki-client