$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/844570c7-1c5c-330c-8cf4-4b20c3a2a092.roa File: 844570c7-1c5c-330c-8cf4-4b20c3a2a092.roa (raw, json) Hash identifier: QMNglZYgj8BiKduG2eD8qPx8ySyGSoegJ/YNQUtI6a0= Subject key identifier: 9B:47:4F:B5:1F:95:20:50:A5:83:69:95:F0:D5:6B:82:43:F3:A5:1A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FE57EB8CF6515FDE8B480 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/844570c7-1c5c-330c-8cf4-4b20c3a2a092.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 151374 IP address blocks: 2001:470:b4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:e5:7e:b8:cf:65:15:fd:e8:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=b37b4384-e5fe-4498-902e-3af326d64e09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:59:46:c4:16:e9:06:77:8f:de:ec:c7:b5:a1: f9:d5:d3:8d:96:c5:cf:2f:29:15:06:32:71:4f:e4: 7e:a3:80:94:c3:cf:64:b6:ba:81:fc:ac:98:98:8a: 7f:63:55:3b:95:38:51:89:fa:db:9a:6f:fd:3a:4d: b5:08:a8:e8:7f:96:5a:18:e4:34:65:d1:b9:7f:de: 40:53:a8:1c:5b:5d:01:b1:36:26:f4:82:75:86:79: 72:95:69:14:20:1a:98:24:c9:af:cc:c2:df:d3:08: 1c:35:ed:81:3c:2d:2f:88:1e:96:cb:65:05:19:20: e4:b1:9d:b4:23:56:9e:52:da:c4:a9:ca:af:1c:cf: e5:11:4b:d1:c4:ae:dc:29:b9:51:00:41:df:b7:6e: ce:b3:f0:6a:ae:71:ec:3a:33:9c:47:67:2e:b1:ab: ec:69:0e:66:6e:5a:2d:a4:b9:bd:e5:61:9c:87:c2: e3:6e:72:33:a0:5d:4a:a8:8c:d4:61:33:d5:b4:4d: e5:32:b3:43:6e:34:96:a5:a9:76:b7:4f:a4:e8:67: ae:9c:1b:91:68:79:d9:d8:84:d4:18:c0:84:d2:06: 43:98:7a:b1:f9:0c:6b:a6:dc:68:92:c9:82:23:ff: 89:6c:ab:d1:bb:84:b5:d7:86:48:72:54:b7:2b:8a: dc:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:47:4F:B5:1F:95:20:50:A5:83:69:95:F0:D5:6B:82:43:F3:A5:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/844570c7-1c5c-330c-8cf4-4b20c3a2a092.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:b4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:3c:e6:3a:4b:4a:7b:cf:1e:48:0c:7e:c9:04:35:2a:94:2a: a2:70:a1:67:73:97:3b:82:27:0e:ae:5f:a8:c1:c7:44:66:83: 19:ae:1c:45:03:67:07:cd:3d:51:8a:c9:10:1f:2d:f3:21:e3: 0c:18:26:fb:d3:b5:db:71:0d:ca:c8:1b:15:a8:df:e0:f6:08: 34:be:c6:6b:e1:3e:6d:ea:19:6a:49:95:58:47:a4:1d:7f:3a: ab:7a:29:05:b8:b8:f1:9c:30:8f:66:22:21:fc:ec:ee:03:6b: 24:2f:0b:21:81:4f:9f:76:f3:3b:35:af:12:0c:1a:32:aa:a5: 3e:ce:1d:ef:5e:bb:cc:ed:a3:58:87:52:85:66:cd:b6:64:e6: f5:e3:cd:5f:ac:e4:43:74:04:9d:0d:89:f6:2f:61:d2:54:76: 81:33:70:2e:f6:66:8a:58:52:66:74:af:1c:c8:2c:5c:8d:36: 22:72:f4:f2:0a:38:25:c2:b0:ff:5f:79:4d:10:56:8a:bf:d2: aa:78:a5:00:42:f4:33:1b:3b:1e:8b:94:3a:1c:c9:ff:6f:5c: 0f:44:19:ea:52:8c:70:be:50:b8:7e:f1:a9:bd:c4:57:15:84: d7:fa:9d:a2:f9:05:0a:06:13:1d:d5:bf:e5:fe:b0:aa:9b:c6: 52:b3:2b:45 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX+V+uM9lFf3otIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk YjM3YjQzODQtZTVmZS00NDk4LTkwMmUtM2FmMzI2ZDY0ZTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFlGxBbpBneP3uzHtaH51dONlsXPLykVBjJx T+R+o4CUw89ktrqB/KyYmIp/Y1U7lThRifrbmm/9Ok21CKjof5ZaGOQ0ZdG5f95A U6gcW10BsTYm9IJ1hnlylWkUIBqYJMmvzMLf0wgcNe2BPC0viB6Wy2UFGSDksZ20 I1aeUtrEqcqvHM/lEUvRxK7cKblRAEHft27Os/BqrnHsOjOcR2cusavsaQ5mblot pLm95WGch8LjbnIzoF1KqIzUYTPVtE3lMrNDbjSWpal2t0+k6GeunBuRaHnZ2ITU GMCE0gZDmHqx+QxrptxoksmCI/+JbKvRu4S114ZIclS3K4rcwQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJtHT7UflSBQpYNplfDVa4JD86UaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODQ0NTcwYzctMWM1Yy0z MzBjLThjZjQtNGIyMGMzYTJhMDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAC0 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFE85jpLSnvPHkgMfskENSqUKqJwoWdzlzuCJw6uX6jBx0Rmgxmu HEUDZwfNPVGKyRAfLfMh4wwYJvvTtdtxDcrIGxWo3+D2CDS+xmvhPm3qGWpJlVhH pB1/Oqt6KQW4uPGcMI9mIiH87O4DayQvCyGBT5928zs1rxIMGjKqpT7OHe9eu8zt o1iHUoVmzbZk5vXjzV+s5EN0BJ0NifYvYdJUdoEzcC72ZopYUmZ0rxzILFyNNiJy 9PIKOCXCsP9feU0QVoq/0qp4pQBC9DMbOx6LlDocyf9vXA9EGepSjHC+ULh+8am9 xFcVhNf6naL5BQoGEx3Vv+X+sKqbxlKzK0U= -----END CERTIFICATE-----Generated at Sat Jun 7 04:03:12 2025 by rpki-client