$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8db2f3de-9b32-356a-843b-d4e3e7cfa144.roa File: 8db2f3de-9b32-356a-843b-d4e3e7cfa144.roa (raw, json) Hash identifier: t3FdGJO1Vm8Ju+GX2saeeQg6IW6XmZUw7UJhRZfh69s= Subject key identifier: 2A:C6:BE:10:F5:6B:2A:3D:C4:22:86:42:EF:09:15:2D:EA:B9:9A:7D Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584996C4840BCAD88F6D7D990E80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8db2f3de-9b32-356a-843b-d4e3e7cfa144.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 400111 IP address blocks: 2001:470:407::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:84:0b:ca:d8:8f:6d:7d:99:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=29ad720d-acf5-45f6-9b98-5c972a989179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:36:c1:f5:18:28:65:90:7f:88:e8:2e:26:32: b3:0e:f5:71:12:62:23:87:40:07:6a:42:71:67:cc: 2f:c4:02:83:2a:e6:cc:3e:54:32:3b:ba:88:e4:f8: 4d:b1:df:cc:55:c8:74:15:95:10:93:2c:53:a3:c3: 03:f2:77:1d:a4:d9:45:9e:68:e1:9b:c2:7d:99:98: c7:e9:23:0d:dc:fb:44:85:f1:54:71:bc:b9:d5:91: 4b:f1:8b:2c:16:96:4d:2c:34:8c:a1:c8:c1:9d:87: d9:9a:3e:d5:30:31:ac:a6:15:f2:b8:09:7b:8b:e8: 21:3e:5c:27:67:05:b0:8d:d9:fb:d9:81:f0:dd:26: 8b:9e:81:c0:53:c1:95:51:f2:94:6c:6d:6d:94:63: 0a:78:10:4e:57:21:6a:18:da:a9:81:94:9a:b2:39: d5:58:53:4e:df:a2:12:cc:17:64:99:0f:de:ca:e8: 31:1b:73:53:ce:68:04:86:6e:e3:e5:56:85:24:c5: d1:89:63:9a:5c:fe:1c:cc:5d:bf:95:fe:cc:0a:c8: 2e:ce:5c:97:43:b9:0f:d4:77:62:f7:94:43:cc:ec: 15:91:41:67:15:ef:81:93:d6:39:68:f4:c8:31:95: c7:a8:72:be:b4:6e:c3:d5:5f:70:f9:ae:55:88:d1: 42:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C6:BE:10:F5:6B:2A:3D:C4:22:86:42:EF:09:15:2D:EA:B9:9A:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8db2f3de-9b32-356a-843b-d4e3e7cfa144.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:407::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:6f:8e:c7:62:e8:d9:39:53:08:32:a8:40:b9:2c:ac:86:b1: fa:dd:6f:cf:38:dc:1e:9f:f0:65:57:54:ab:20:d4:c3:eb:9d: 75:76:59:c0:96:0f:d2:31:3c:8a:df:86:5e:7b:7b:5a:e8:1a: b5:1f:3f:89:9b:eb:9c:92:42:da:cf:36:0f:5b:bd:7b:b3:32: 3c:e8:eb:58:31:e3:1b:b2:20:da:2c:30:8f:ad:83:b5:18:0f: 3b:96:f7:b2:00:93:51:b4:0c:b9:fa:f9:31:76:1c:26:ef:3a: 21:23:e2:43:35:4d:90:fb:f3:be:71:d1:e2:b8:fc:d1:7a:d4: 81:41:5d:46:fe:3a:f5:b0:03:96:24:06:45:8c:c3:af:79:bd: f3:5a:8b:3b:89:50:64:aa:0c:f2:fe:e5:90:33:48:92:d2:1d: ec:63:83:35:32:d5:65:4f:a0:b3:4a:7b:72:da:ea:ea:43:0d: 8f:dd:2a:bf:d6:10:dc:39:e6:d6:76:37:86:5e:30:8e:95:7b: e3:d0:ca:df:93:bb:e6:07:69:07:e5:20:ea:94:4c:d3:ec:b3: 4c:31:ff:dc:dc:b6:72:19:53:62:17:a1:60:99:dd:21:78:1e: d5:f0:62:ea:a8:e5:d0:6c:d7:34:65:42:64:15:3e:c4:8d:11: e5:a8:d7:c0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmWxIQLytiPbX2ZDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk MjlhZDcyMGQtYWNmNS00NWY2LTliOTgtNWM5NzJhOTg5MTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzbB9RgoZZB/iOguJjKzDvVxEmIjh0AHakJx Z8wvxAKDKubMPlQyO7qI5PhNsd/MVch0FZUQkyxTo8MD8ncdpNlFnmjhm8J9mZjH 6SMN3PtEhfFUcby51ZFL8YssFpZNLDSMocjBnYfZmj7VMDGsphXyuAl7i+ghPlwn ZwWwjdn72YHw3SaLnoHAU8GVUfKUbG1tlGMKeBBOVyFqGNqpgZSasjnVWFNO36IS zBdkmQ/eyugxG3NTzmgEhm7j5VaFJMXRiWOaXP4czF2/lf7MCsguzlyXQ7kP1Hdi 95RDzOwVkUFnFe+Bk9Y5aPTIMZXHqHK+tG7D1V9w+a5ViNFCswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCrGvhD1ayo9xCKGQu8JFS3quZp9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOGRiMmYzZGUtOWIzMi0z NTZhLTg0M2ItZDRlM2U3Y2ZhMTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF9vjsdi6Nk5UwgyqEC5LKyGsfrdb8843B6f8GVXVKsg1MPrnXV2 WcCWD9IxPIrfhl57e1roGrUfP4mb65ySQtrPNg9bvXuzMjzo61gx4xuyINosMI+t g7UYDzuW97IAk1G0DLn6+TF2HCbvOiEj4kM1TZD7875x0eK4/NF61IFBXUb+OvWw A5YkBkWMw695vfNaizuJUGSqDPL+5ZAzSJLSHexjgzUy1WVPoLNKe3La6upDDY/d Kr/WENw55tZ2N4ZeMI6Ve+PQyt+Tu+YHaQflIOqUTNPss0wx/9zctnIZU2IXoWCZ 3SF4HtXwYuqo5dBs1zRlQmQVPsSNEeWo18A= -----END CERTIFICATE-----Generated at Thu Jul 3 08:50:28 2025 by rpki-client