$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7e5956a9-6e89-3692-bb1b-20f80ea34dc6.roa File: 7e5956a9-6e89-3692-bb1b-20f80ea34dc6.roa (raw, json) Hash identifier: Y4t/LtGsAqW9xqi7n5QmXkitNLBJ0oeQe5HdgmnxOIo= Subject key identifier: D9:0D:AE:11:B7:D1:1B:F8:96:5B:C9:AB:ED:FF:FB:11:8E:A4:CD:3E Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FE3283861A2A1837D8D50 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7e5956a9-6e89-3692-bb1b-20f80ea34dc6.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 207327 IP address blocks: 2001:470:225::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:e3:28:38:61:a2:a1:83:7d:8d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=dbe53df7-6d47-4c17-b077-ecc51f3a5ad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:db:74:05:99:07:2d:0a:06:5e:74:bf:2b:98: f1:67:7d:08:71:cd:1a:1d:7e:7b:2c:a5:d8:a1:37: eb:83:fe:d8:ac:05:c7:14:7d:f8:c1:15:92:25:ec: 35:1e:07:12:39:41:7d:86:56:c6:8f:63:5a:b4:f1: cf:9d:39:78:9f:9e:cd:6f:fb:66:dd:61:a3:de:1b: 67:8d:16:24:90:9e:06:da:70:91:41:0a:f7:9e:d8: d4:35:62:86:1e:1b:34:2f:8e:dd:2e:c4:c2:51:27: d2:3d:66:46:0c:99:e7:40:47:dd:52:c5:b5:8f:f7: 0d:ff:91:72:b3:f9:0d:9e:53:c7:87:c7:8c:86:a4: 0b:fe:b2:4d:05:f4:45:50:71:43:9e:85:58:f9:59: 73:9b:0f:6b:8f:51:9c:bd:7e:10:3f:dc:b2:19:2a: e0:be:ee:92:ac:12:5f:18:8f:76:83:cd:f5:f0:c0: 2c:1c:04:c3:fb:b3:31:f8:e9:29:c7:25:2f:3d:04: 12:b3:17:ea:97:6c:e4:44:04:e7:73:ee:2a:01:98: 59:16:df:4d:ba:33:7e:3a:15:fc:e2:05:74:64:09: 83:e9:0e:54:d9:94:02:9e:9c:d9:22:37:e2:fb:f3: 7f:c7:23:91:fb:bf:4d:c2:60:f2:31:0f:cb:3c:ae: 07:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:0D:AE:11:B7:D1:1B:F8:96:5B:C9:AB:ED:FF:FB:11:8E:A4:CD:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7e5956a9-6e89-3692-bb1b-20f80ea34dc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:225::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:91:07:92:01:c7:b4:71:b3:56:3e:fd:ad:bc:ef:84:40:52: 90:d1:f0:db:ae:70:6a:e8:54:18:91:c9:a3:fa:9f:3a:f1:09: e7:55:a0:6d:95:65:8d:e4:fb:34:53:a9:6a:64:23:35:1d:73: 81:4c:38:5d:b9:46:15:f9:8f:b7:7b:a7:f7:b8:89:10:3e:b9: c2:0d:c9:e7:9d:5b:82:a3:ef:79:34:f4:a2:3c:3b:67:08:3e: 53:2f:16:00:07:17:f0:f2:25:33:04:35:de:57:c1:11:1e:ed: 66:c8:46:97:2a:14:28:d3:9a:e2:27:39:58:69:06:5c:86:a8: ec:c0:d5:f4:aa:ce:bb:98:0e:e6:05:26:01:bb:f6:bc:da:b6: 0a:35:1b:7d:ee:28:5e:ba:e5:2b:ad:de:00:4d:75:13:09:fe: f6:17:85:f8:7e:ca:5d:7b:23:49:c6:e6:5f:77:68:fe:5e:7c: 22:ec:eb:a1:4b:3c:dc:74:28:8c:9e:2e:3d:8c:f5:5a:69:2e: 11:0f:c1:48:2d:80:f2:07:22:15:fd:b7:8f:f6:52:8d:bb:a0: 7e:a7:00:29:21:33:0a:5b:f8:bb:0a:46:14:e8:b4:c9:b8:23: e0:f9:75:e6:f1:b4:78:61:f6:c3:9b:ec:a9:61:40:59:86:9a: 51:b2:75:56 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX+MoOGGioYN9jVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk ZGJlNTNkZjctNmQ0Ny00YzE3LWIwNzctZWNjNTFmM2E1YWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztt0BZkHLQoGXnS/K5jxZ30Icc0aHX57LKXY oTfrg/7YrAXHFH34wRWSJew1HgcSOUF9hlbGj2NatPHPnTl4n57Nb/tm3WGj3htn jRYkkJ4G2nCRQQr3ntjUNWKGHhs0L47dLsTCUSfSPWZGDJnnQEfdUsW1j/cN/5Fy s/kNnlPHh8eMhqQL/rJNBfRFUHFDnoVY+Vlzmw9rj1GcvX4QP9yyGSrgvu6SrBJf GI92g8318MAsHATD+7Mx+OkpxyUvPQQSsxfql2zkRATnc+4qAZhZFt9NujN+OhX8 4gV0ZAmD6Q5U2ZQCnpzZIjfi+/N/xyOR+79NwmDyMQ/LPK4HIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNkNrhG30Rv4llvJq+3/+xGOpM0+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvN2U1OTU2YTktNmU4OS0z NjkyLWJiMWItMjBmODBlYTM0ZGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAIl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABuRB5IBx7Rxs1Y+/a2874RAUpDR8NuucGroVBiRyaP6nzrxCedV oG2VZY3k+zRTqWpkIzUdc4FMOF25RhX5j7d7p/e4iRA+ucINyeedW4Kj73k09KI8 O2cIPlMvFgAHF/DyJTMENd5XwREe7WbIRpcqFCjTmuInOVhpBlyGqOzA1fSqzruY DuYFJgG79rzatgo1G33uKF665Sut3gBNdRMJ/vYXhfh+yl17I0nG5l93aP5efCLs 66FLPNx0KIyeLj2M9VppLhEPwUgtgPIHIhX9t4/2Uo27oH6nACkhMwpb+LsKRhTo tMm4I+D5debxtHhh9sOb7KlhQFmGmlGydVY= -----END CERTIFICATE-----Generated at Sat Jun 14 10:06:39 2025 by rpki-client