$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/76de50f5-e7fd-3521-a9aa-7f92e5b20b2e.roa File: 76de50f5-e7fd-3521-a9aa-7f92e5b20b2e.roa (raw, json) Hash identifier: 5avWAT1mAvHNUHe2Edvc80ccuFwFauZmQe7gxsqyxvc= Subject key identifier: 0C:88:26:50:50:2D:16:F6:88:4D:5D:59:05:2C:F9:F2:85:EB:7A:65 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849E654E6ABEAB6415B7B5F3F88 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/76de50f5-e7fd-3521-a9aa-7f92e5b20b2e.roa Signing time: Mon 19 May 2025 01:00:48 +0000 ROA not before: Mon 19 May 2025 01:00:48 +0000 ROA not after: Sun 17 Aug 2025 01:00:48 +0000 asID: 201789 IP address blocks: 2001:470:41e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e6:54:e6:ab:ea:b6:41:5b:7b:5f:3f:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 19 01:00:48 2025 GMT Not After : Aug 17 01:00:48 2025 GMT Subject: CN=8f65eabb-ac54-445b-8717-77a5d30ed04f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:22:94:01:ad:64:e5:22:f1:20:f9:92:3a:34: cf:2c:53:2f:dc:51:f4:f1:f8:1a:01:3e:13:e0:c1: 0e:b4:98:76:71:fc:34:a2:83:1d:f2:17:93:2a:ec: e1:f3:2a:4b:c8:2e:5f:e5:c5:0f:af:7a:72:e6:0d: 13:b3:7a:18:68:ea:90:8e:d1:bb:99:3b:c6:6b:64: c9:8c:2b:12:3f:43:35:36:29:0a:ba:87:2b:f2:19: c7:e2:4b:43:90:d7:b7:b3:20:a9:a0:72:de:85:60: 9e:0e:da:47:20:32:c5:c8:13:94:cd:45:19:20:35: bc:51:4a:49:5f:32:95:15:7f:42:5e:51:0f:10:46: 3e:52:c8:57:c5:b5:fc:04:aa:d4:1b:39:ac:9a:d2: 71:d4:69:d5:ba:ff:3f:76:70:01:f0:f1:a3:12:43: 07:85:2f:96:d7:cd:20:12:17:6d:33:8e:ef:8b:45: 95:48:2e:f9:3e:ad:db:93:65:5c:f2:0e:56:ce:93: e5:63:54:d2:35:4d:73:ef:b7:8d:56:50:91:05:f1: ac:ce:61:97:ea:f4:b2:fa:af:b5:03:1c:97:9d:f7: 77:dc:85:2e:41:fe:72:6d:d2:b6:01:96:d9:3b:89: 0e:08:36:46:8f:4e:66:08:03:4c:6e:e9:71:48:49: 9d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:88:26:50:50:2D:16:F6:88:4D:5D:59:05:2C:F9:F2:85:EB:7A:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/76de50f5-e7fd-3521-a9aa-7f92e5b20b2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:41e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:ba:a5:71:87:77:f9:43:25:00:be:b1:09:74:f8:47:50:4b: b7:59:a8:c4:98:35:6e:80:9a:d0:bf:13:98:90:7e:fc:dc:ce: ac:dc:55:e6:00:3d:fb:83:89:7a:66:d4:f6:3c:1e:3c:bb:97: 51:73:5e:26:58:dc:6e:e6:57:20:75:ec:14:a8:6c:bb:9b:67: 3c:37:2e:79:52:91:90:c0:85:19:f4:a0:eb:2e:8a:78:3f:f8: fa:be:14:63:a6:8f:67:e9:4a:c3:b0:4d:04:b6:09:01:45:96: 7c:22:29:fe:7f:a9:c9:c5:63:c4:3a:0a:50:cc:8c:45:31:42: 0a:da:e2:85:46:a0:e4:98:a9:68:cc:1a:ec:84:e3:24:0d:c3: 18:09:45:14:ac:90:b2:71:44:99:2d:8b:a6:da:3e:2f:37:aa: 91:86:95:6e:67:fa:3c:9d:93:22:4e:68:3b:7a:ea:fa:67:c4: f8:9f:4d:fa:95:cb:ed:8a:5e:4e:57:f7:c6:48:db:d2:e2:37: e2:61:22:ae:de:5c:3f:4b:16:33:eb:e4:19:70:7b:bc:7c:83: b4:1a:3f:49:d1:c2:2b:53:f9:55:ac:fc:94:87:af:d8:51:09: d5:8d:55:29:fc:9e:be:10:62:fe:b3:8c:4b:31:57:90:93:7c: fa:3b:f5:05 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnmVOar6rZBW3tfP4gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk OGY2NWVhYmItYWM1NC00NDViLTg3MTctNzdhNWQzMGVkMDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSKUAa1k5SLxIPmSOjTPLFMv3FH08fgaAT4T 4MEOtJh2cfw0ooMd8heTKuzh8ypLyC5f5cUPr3py5g0Ts3oYaOqQjtG7mTvGa2TJ jCsSP0M1NikKuocr8hnH4ktDkNe3syCpoHLehWCeDtpHIDLFyBOUzUUZIDW8UUpJ XzKVFX9CXlEPEEY+UshXxbX8BKrUGzmsmtJx1GnVuv8/dnAB8PGjEkMHhS+W180g EhdtM47vi0WVSC75Pq3bk2Vc8g5WzpPlY1TSNU1z77eNVlCRBfGszmGX6vSy+q+1 AxyXnfd33IUuQf5ybdK2AZbZO4kOCDZGj05mCANMbulxSEmdKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAyIJlBQLRb2iE1dWQUs+fKF63plMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNzZkZTUwZjUtZTdmZC0z NTIxLWE5YWEtN2Y5MmU1YjIwYjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGq6pXGHd/lDJQC+sQl0+EdQS7dZqMSYNW6AmtC/E5iQfvzczqzc VeYAPfuDiXpm1PY8Hjy7l1FzXiZY3G7mVyB17BSobLubZzw3LnlSkZDAhRn0oOsu ing/+Pq+FGOmj2fpSsOwTQS2CQFFlnwiKf5/qcnFY8Q6ClDMjEUxQgra4oVGoOSY qWjMGuyE4yQNwxgJRRSskLJxRJkti6baPi83qpGGlW5n+jydkyJOaDt66vpnxPif TfqVy+2KXk5X98ZI29LiN+JhIq7eXD9LFjPr5Blwe7x8g7QaP0nRwitT+VWs/JSH r9hRCdWNVSn8nr4QYv6zjEsxV5CTfPo79QU= -----END CERTIFICATE-----Generated at Sun Jun 8 12:34:12 2025 by rpki-client