$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/76ef33c1-14ca-37fe-a6da-7e1cce363139.roa File: 76ef33c1-14ca-37fe-a6da-7e1cce363139.roa (raw, json) Hash identifier: FK69peuT+zdKs7GI5GkjMbH0aSk+L73nxBz34j40THE= Subject key identifier: 47:0F:90:4D:72:9B:AF:AD:B5:BE:73:91:24:E1:E1:D9:52:E2:28:E5 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FE5AD56EC868715919C40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/76ef33c1-14ca-37fe-a6da-7e1cce363139.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 133199 IP address blocks: 2001:470:249::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:e5:ad:56:ec:86:87:15:91:9c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=92e31e6c-47c5-44b0-a440-8cc18e657a60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e8:26:ee:17:c6:21:98:bf:ab:14:db:87:c8: 4e:2a:2b:75:96:21:b7:4c:a6:3c:5e:5f:4e:72:b5: e0:14:4f:02:d4:c0:0b:0a:55:e1:41:14:8c:18:22: 16:02:f2:0a:32:95:3e:6d:ec:f5:89:93:14:88:7a: 3b:84:c5:b0:78:be:45:cc:7e:43:51:7a:35:f3:53: 46:49:99:18:5b:25:4f:ec:b2:88:ae:f8:8a:39:8f: fc:18:fa:24:cc:83:85:0d:41:25:b9:49:b7:a6:d9: ac:33:48:17:41:e7:ba:6f:91:cd:2f:a0:19:a0:42: 60:cf:3f:f2:51:11:81:50:ce:53:e5:93:e0:6f:77: df:c7:eb:40:c2:0a:8d:f8:61:c9:b6:af:20:b3:0b: c1:3b:68:c5:b7:f2:16:78:b2:f4:02:cd:72:ba:1b: 56:77:ab:59:fe:43:78:0c:7b:9a:31:95:11:f3:60: 56:18:7b:68:0f:4c:ee:fa:aa:6a:21:14:9f:0c:91: 5e:8f:3c:40:1e:95:46:a8:9a:17:7e:70:9b:4c:51: e9:6c:0d:8e:b0:e4:71:68:ac:30:01:19:d6:78:f7: 1b:96:de:25:a5:05:32:59:e0:07:00:2b:42:22:41: 36:00:74:b0:56:5c:f1:ac:7f:8d:9d:a1:f7:97:42: 6e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:0F:90:4D:72:9B:AF:AD:B5:BE:73:91:24:E1:E1:D9:52:E2:28:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/76ef33c1-14ca-37fe-a6da-7e1cce363139.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:249::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:bd:6f:4a:2b:f0:47:85:68:da:27:29:37:cd:37:99:e1:15: 1d:25:04:c3:79:ce:cd:72:7f:e6:ae:4a:a5:9e:ed:08:56:66: 79:e1:bd:0f:06:23:cf:18:1f:1d:e3:28:3a:3e:6b:cc:83:d8: 7e:0b:e8:1a:ca:e8:0f:96:69:90:c2:5e:af:dc:81:36:23:06: 77:b5:77:7a:79:33:44:d4:da:a3:ae:d8:90:ff:cd:92:cb:02: fe:98:89:04:d4:53:cc:19:1e:d3:ac:df:a8:aa:3c:58:18:53: b4:23:66:21:9f:1d:13:c8:94:ea:39:16:8a:eb:33:be:cc:0f: 5f:95:34:c1:7c:2c:a4:9b:ce:1a:52:2e:b5:cb:da:f4:ae:77: c6:c8:cd:9e:71:d4:87:b8:ac:83:72:97:13:4c:6c:4c:5a:11: 80:53:d6:2e:86:f0:2c:17:07:8b:5c:7c:34:08:03:0f:2e:3a: bc:cc:28:4a:c6:fe:64:6a:f0:f1:8f:60:ec:ef:e1:3a:bc:2a: 8a:b6:a7:60:d5:49:55:70:6f:38:f4:a1:a8:15:47:6a:b4:21: d2:78:83:36:bc:b5:fa:12:48:00:b4:5a:c8:8f:9a:cf:1e:f9: 49:27:33:f4:2c:d5:53:0a:0f:92:75:43:1e:5e:ae:67:98:14: e3:25:19:9f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX+WtVuyGhxWRnEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk OTJlMzFlNmMtNDdjNS00NGIwLWE0NDAtOGNjMThlNjU3YTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+gm7hfGIZi/qxTbh8hOKit1liG3TKY8Xl9O crXgFE8C1MALClXhQRSMGCIWAvIKMpU+bez1iZMUiHo7hMWweL5FzH5DUXo181NG SZkYWyVP7LKIrviKOY/8GPokzIOFDUEluUm3ptmsM0gXQee6b5HNL6AZoEJgzz/y URGBUM5T5ZPgb3ffx+tAwgqN+GHJtq8gswvBO2jFt/IWeLL0As1yuhtWd6tZ/kN4 DHuaMZUR82BWGHtoD0zu+qpqIRSfDJFejzxAHpVGqJoXfnCbTFHpbA2OsORxaKww ARnWePcblt4lpQUyWeAHACtCIkE2AHSwVlzxrH+NnaH3l0JuHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEcPkE1ym6+ttb5zkSTh4dlS4ijlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNzZlZjMzYzEtMTRjYS0z N2ZlLWE2ZGEtN2UxY2NlMzYzMTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFi9b0or8EeFaNonKTfNN5nhFR0lBMN5zs1yf+auSqWe7QhWZnnh vQ8GI88YHx3jKDo+a8yD2H4L6BrK6A+WaZDCXq/cgTYjBne1d3p5M0TU2qOu2JD/ zZLLAv6YiQTUU8wZHtOs36iqPFgYU7QjZiGfHRPIlOo5ForrM77MD1+VNMF8LKSb zhpSLrXL2vSud8bIzZ5x1Ie4rINylxNMbExaEYBT1i6G8CwXB4tcfDQIAw8uOrzM KErG/mRq8PGPYOzv4Tq8Koq2p2DVSVVwbzj0oagVR2q0IdJ4gza8tfoSSAC0WsiP ms8e+UknM/Qs1VMKD5J1Qx5ermeYFOMlGZ8= -----END CERTIFICATE-----Generated at Fri Jun 6 16:33:16 2025 by rpki-client