$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8e7ed53d-0c67-39de-85e6-7bc2d447a216.roa File: 8e7ed53d-0c67-39de-85e6-7bc2d447a216.roa (raw, json) Hash identifier: XSTRCBz1M4CE4ob3k9arOJYQKQdRt3mFizlqSUl6znA= Subject key identifier: 27:A1:DB:76:64:BF:82:F6:CF:16:48:14:EE:70:57:07:CB:A0:83:F7 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849C63A2AF15E05DCBCC29F7980 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8e7ed53d-0c67-39de-85e6-7bc2d447a216.roa Signing time: Wed 07 May 2025 13:01:01 +0000 ROA not before: Wed 07 May 2025 13:01:01 +0000 ROA not after: Tue 05 Aug 2025 13:01:01 +0000 asID: 59953 IP address blocks: 2001:470:3d8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c6:3a:2a:f1:5e:05:dc:bc:c2:9f:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 7 13:01:01 2025 GMT Not After : Aug 5 13:01:01 2025 GMT Subject: CN=6c565f4d-a68b-4e4d-b15d-718181d3f1ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6c:10:42:8e:ea:14:a3:46:0c:ce:0e:27:0d: c9:3b:92:f5:d8:30:76:bf:8e:af:c5:97:30:8b:e6: e2:25:cc:58:ba:47:38:8c:d7:c8:a6:eb:1a:ab:e7: 5a:87:dd:5f:22:dc:a3:b3:1e:63:83:57:af:ce:a0: eb:cd:f0:5f:8e:e9:38:50:4d:83:e5:b6:cc:37:4f: b8:66:2d:58:f9:6a:41:25:78:06:da:4c:5d:7f:a0: 9f:70:9d:7c:42:2a:fb:dd:9b:ae:0e:a0:bf:46:1f: 31:47:46:7b:a7:de:d6:9e:87:df:a1:19:cc:1b:04: 27:fc:7b:d2:55:f6:8f:04:8b:7c:07:20:6b:1b:5b: b8:01:c0:e1:3b:36:27:e5:4a:93:03:07:97:0e:01: 22:2b:57:6d:5b:75:59:9c:2f:71:61:d8:93:6e:fe: d3:28:cd:b6:be:99:5c:c6:21:a2:6f:64:d9:63:96: c4:f5:4f:50:43:9a:4f:10:e3:fe:ec:80:47:50:fc: c3:0d:05:ed:90:92:77:d9:03:ce:84:71:3e:be:20: c9:61:98:8e:20:c5:2b:17:cd:20:a1:74:cf:39:f6: 8b:7b:1a:55:8d:3b:fc:d5:cf:e3:cf:c5:d8:7c:30: 33:bc:15:15:2d:83:65:76:99:75:12:7e:a0:fa:0b: c2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A1:DB:76:64:BF:82:F6:CF:16:48:14:EE:70:57:07:CB:A0:83:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8e7ed53d-0c67-39de-85e6-7bc2d447a216.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3d8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:fb:cb:48:f8:64:b0:4b:e7:87:d3:5c:97:d2:29:85:af:74: b1:b9:20:5c:d1:85:10:3f:04:69:7a:aa:d5:03:99:7a:f5:98: 08:24:43:22:61:67:50:ae:d0:c0:68:32:0f:e2:81:ad:fd:99: 1b:6a:91:77:87:39:02:c0:14:18:e5:de:48:cd:20:12:b5:19: 9b:0c:74:97:f9:7d:38:06:c0:ac:3a:65:f9:31:27:68:e9:f2: d6:8a:d5:2a:47:75:3d:40:bc:6d:0a:5f:53:a6:98:0a:ab:23: e9:4a:d5:a1:6a:a5:ea:a3:43:1e:ba:2a:76:e1:19:53:bb:49: 2c:32:5f:69:45:54:a6:b7:3a:fe:34:cc:28:56:93:59:a4:c7: 6e:b3:b5:a2:80:fc:b4:d0:e5:da:35:2a:a5:a6:42:23:37:8b: 45:82:b8:0c:6a:8a:1e:1a:4a:6e:b8:5b:4a:4f:9f:a6:75:9b: d8:0c:20:ed:ff:93:a6:72:25:f5:20:19:a0:b9:74:15:7c:70: 0b:fb:08:b5:d2:e9:27:be:fd:7d:35:e9:9b:b0:66:7b:5c:fb: 79:bf:df:b9:84:7f:9b:fb:89:1a:db:cb:a5:25:6f:1d:2b:6f: 9b:9c:45:d0:51:56:45:e8:83:dc:c7:cf:6b:52:d4:57:38:60: c3:c3:60:c4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnGOirxXgXcvMKfeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUwNzEzMDEwMVoXDTI1MDgwNTEzMDEwMVowLzEtMCsGA1UEAxMk NmM1NjVmNGQtYTY4Yi00ZTRkLWIxNWQtNzE4MTgxZDNmMWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmwQQo7qFKNGDM4OJw3JO5L12DB2v46vxZcw i+biJcxYukc4jNfIpusaq+dah91fItyjsx5jg1evzqDrzfBfjuk4UE2D5bbMN0+4 Zi1Y+WpBJXgG2kxdf6CfcJ18Qir73ZuuDqC/Rh8xR0Z7p97WnoffoRnMGwQn/HvS VfaPBIt8ByBrG1u4AcDhOzYn5UqTAweXDgEiK1dtW3VZnC9xYdiTbv7TKM22vplc xiGib2TZY5bE9U9QQ5pPEOP+7IBHUPzDDQXtkJJ32QPOhHE+viDJYZiOIMUrF80g oXTPOfaLexpVjTv81c/jz8XYfDAzvBUVLYNldpl1En6g+gvC8wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCeh23Zkv4L2zxZIFO5wVwfLoIP3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOGU3ZWQ1M2QtMGM2Ny0z OWRlLTg1ZTYtN2JjMmQ0NDdhMjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHT7y0j4ZLBL54fTXJfSKYWvdLG5IFzRhRA/BGl6qtUDmXr1mAgk QyJhZ1Cu0MBoMg/iga39mRtqkXeHOQLAFBjl3kjNIBK1GZsMdJf5fTgGwKw6Zfkx J2jp8taK1SpHdT1AvG0KX1OmmAqrI+lK1aFqpeqjQx66KnbhGVO7SSwyX2lFVKa3 Ov40zChWk1mkx26ztaKA/LTQ5do1KqWmQiM3i0WCuAxqih4aSm64W0pPn6Z1m9gM IO3/k6ZyJfUgGaC5dBV8cAv7CLXS6Se+/X016ZuwZntc+3m/37mEf5v7iRrby6Ul bx0rb5ucRdBRVkXog9zHz2tS1Fc4YMPDYMQ= -----END CERTIFICATE-----Generated at Sun Jun 8 18:23:13 2025 by rpki-client