$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8e3e3ccd-b555-3d10-acda-7b9ca0a378c6.roa File: 8e3e3ccd-b555-3d10-acda-7b9ca0a378c6.roa (raw, json) Hash identifier: IsbpXa7UId7zW4jP38XHTokpJWnGN0glG4tooM/BYB4= Subject key identifier: 09:5A:72:44:27:EA:0C:B6:18:2C:F9:57:D5:15:66:04:A4:44:A8:79 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849F18E313E08D94158C33EDF80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8e3e3ccd-b555-3d10-acda-7b9ca0a378c6.roa Signing time: Fri 23 May 2025 01:30:08 +0000 ROA not before: Fri 23 May 2025 01:30:08 +0000 ROA not after: Thu 21 Aug 2025 01:30:08 +0000 asID: 215740 IP address blocks: 2001:470:2bd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:8e:31:3e:08:d9:41:58:c3:3e:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 23 01:30:08 2025 GMT Not After : Aug 21 01:30:08 2025 GMT Subject: CN=99e36cec-6e1c-4394-b87a-703202158f7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ec:de:aa:3d:4b:bc:e9:99:13:c1:fd:e9:2a: 40:b1:60:11:84:f2:ef:eb:36:d7:92:b3:4a:89:75: d9:67:94:dd:e7:c3:39:28:df:dd:11:2d:ca:04:e1: 39:68:81:df:f7:a1:19:e5:07:e8:3c:6e:2e:43:87: f6:d5:7a:62:3a:ec:97:30:ca:b3:63:86:59:59:1d: a2:1b:02:1b:f6:c3:62:f0:92:e1:1a:a3:b3:01:15: c8:20:26:bf:e8:b5:99:a8:c0:10:1f:57:15:de:39: 3f:a4:72:36:53:4f:7b:f0:60:c6:28:e6:5b:cb:95: 06:4a:92:7d:de:a9:7d:9b:d8:22:58:72:69:c1:19: 2d:72:21:c9:bc:6d:0e:eb:2b:2b:5b:7d:b3:9f:bb: e5:48:f4:9a:48:02:95:bd:ba:e3:d0:2b:20:21:f0: 9f:63:25:46:db:5b:e5:bb:cb:df:9b:2d:59:8b:6f: 9a:33:2e:c2:b1:e8:25:5c:f7:ba:f1:d1:41:3a:25: 3d:e1:1d:63:70:de:b2:8a:6d:21:7d:1f:af:f9:b0: fe:db:35:88:09:1a:8e:c0:a3:a1:bd:e7:e3:0a:8a: e1:1a:b7:a4:e0:cf:b0:a3:75:83:39:d0:ad:1d:80: 61:9c:6c:fa:9f:74:87:ae:ef:51:55:4f:0e:0c:83: 78:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:5A:72:44:27:EA:0C:B6:18:2C:F9:57:D5:15:66:04:A4:44:A8:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8e3e3ccd-b555-3d10-acda-7b9ca0a378c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2bd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:bc:30:c1:9c:0c:f5:37:07:a4:08:b0:39:04:f4:59:fc:6d: 87:88:36:12:4e:3f:e6:1a:5e:16:99:7d:8c:04:50:bc:66:3c: 23:79:55:a9:f0:20:b9:54:26:18:8d:19:79:6a:b8:1f:cf:0f: 75:54:57:b2:f7:78:56:f4:39:47:a6:4f:5d:d5:5d:c9:14:76: c1:11:b7:75:82:2e:2d:76:44:ee:d0:60:c3:f5:a7:0b:e1:55: bc:2f:6f:b4:fc:01:9e:e6:d5:d9:3a:14:6a:a3:bc:45:18:b9: 76:c7:64:dd:09:91:ec:2c:a8:98:76:50:ae:f0:67:e2:92:ef: f5:7a:1f:f7:36:7d:85:d2:9b:a1:7c:6a:d0:bf:11:77:8c:04: 78:33:b9:64:d2:c0:66:b1:b2:be:23:7c:3f:63:c9:b8:67:f3: 40:e1:c8:35:0b:09:1b:1e:3d:24:c4:06:3d:f9:a5:07:de:81: d8:8c:c0:ed:17:d7:40:78:cf:21:a7:5d:8a:89:e2:9c:f8:d6: 79:29:32:a9:32:e6:d8:85:ea:4f:3d:12:c5:73:3e:14:1f:a8: dd:67:78:09:3e:8a:2d:5b:79:58:0b:9a:dc:57:f7:46:c4:a0: 66:7f:fb:e8:ec:64:54:6b:44:b4:3d:d3:10:f3:0a:dd:a6:55: 8e:d3:64:1d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnxjjE+CNlBWMM+34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUyMzAxMzAwOFoXDTI1MDgyMTAxMzAwOFowLzEtMCsGA1UEAxMk OTllMzZjZWMtNmUxYy00Mzk0LWI4N2EtNzAzMjAyMTU4ZjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+zeqj1LvOmZE8H96SpAsWARhPLv6zbXkrNK iXXZZ5Td58M5KN/dES3KBOE5aIHf96EZ5QfoPG4uQ4f21XpiOuyXMMqzY4ZZWR2i GwIb9sNi8JLhGqOzARXIICa/6LWZqMAQH1cV3jk/pHI2U0978GDGKOZby5UGSpJ9 3ql9m9giWHJpwRktciHJvG0O6ysrW32zn7vlSPSaSAKVvbrj0CsgIfCfYyVG21vl u8vfmy1Zi2+aMy7CseglXPe68dFBOiU94R1jcN6yim0hfR+v+bD+2zWICRqOwKOh vefjCorhGrek4M+wo3WDOdCtHYBhnGz6n3SHru9RVU8ODIN4HQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAlackQn6gy2GCz5V9UVZgSkRKh5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOGUzZTNjY2QtYjU1NS0z ZDEwLWFjZGEtN2I5Y2EwYTM3OGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAK9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADe8MMGcDPU3B6QIsDkE9Fn8bYeINhJOP+YaXhaZfYwEULxmPCN5 VanwILlUJhiNGXlquB/PD3VUV7L3eFb0OUemT13VXckUdsERt3WCLi12RO7QYMP1 pwvhVbwvb7T8AZ7m1dk6FGqjvEUYuXbHZN0JkewsqJh2UK7wZ+KS7/V6H/c2fYXS m6F8atC/EXeMBHgzuWTSwGaxsr4jfD9jybhn80DhyDULCRsePSTEBj35pQfegdiM wO0X10B4zyGnXYqJ4pz41nkpMqky5tiF6k89EsVzPhQfqN1neAk+ii1beVgLmtxX 90bEoGZ/++jsZFRrRLQ90xDzCt2mVY7TZB0= -----END CERTIFICATE-----Generated at Sun Jun 8 05:22:54 2025 by rpki-client