$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8f6146f1-4942-371a-983f-d43e1292f0ab.roa File: 8f6146f1-4942-371a-983f-d43e1292f0ab.roa (raw, json) Hash identifier: X3AcqRdnOaniQcFxlu99XpAdGQyY5aV0m+Qs0SEqPB4= Subject key identifier: C3:F5:DD:DF:C8:5B:01:CA:5E:35:8E:3A:45:E9:09:D4:32:94:C5:7A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A6139955A270DF1AB5DBC3F80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8f6146f1-4942-371a-983f-d43e1292f0ab.roa Signing time: Wed 02 Jul 2025 01:30:12 +0000 ROA not before: Wed 02 Jul 2025 01:30:12 +0000 ROA not after: Tue 30 Sep 2025 01:30:12 +0000 asID: 19796 IP address blocks: 2001:470:2c5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:39:95:5a:27:0d:f1:ab:5d:bc:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jul 2 01:30:12 2025 GMT Not After : Sep 30 01:30:12 2025 GMT Subject: CN=98ed3b52-5f13-4891-9f0b-559b728bc749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f4:d6:83:cf:f8:cd:9e:49:45:b7:2a:c2:37: 15:c8:f8:03:61:f9:51:20:e1:0b:7b:e9:37:52:c7: 07:31:b8:06:bf:c5:c4:4c:5e:28:6f:eb:49:32:13: 62:30:f5:e9:0b:a7:23:d8:f3:6c:8f:b4:b4:12:a1: 97:3c:91:78:a8:82:9f:bf:bb:94:3b:90:1c:42:f7: 84:b1:b1:ec:8b:70:3c:3c:27:59:98:92:63:a5:ef: dd:da:69:81:5a:65:73:fe:30:b1:d9:ab:d1:22:cf: e1:3a:3c:57:82:7e:75:97:e4:ff:cd:d0:e8:7e:f9: 2b:76:3f:25:5e:8c:d5:96:90:3b:9e:0f:28:cd:29: 6f:ae:37:6d:a0:57:8b:8d:df:ea:65:8e:e0:26:69: 15:98:1b:e5:d1:c9:f1:03:82:9f:d5:f5:a5:ab:29: c1:15:e9:59:58:7b:f3:55:c8:62:63:8d:dc:87:46: 88:48:3c:4e:55:96:79:9f:9a:bb:9f:55:40:40:7d: 84:f3:92:51:b9:65:a7:55:48:e7:92:f4:e1:de:cd: 3c:bc:f2:3b:b8:08:34:b1:f3:a0:ed:5b:4e:12:f1: d0:b6:aa:a3:bf:5e:6a:18:6b:b0:68:dc:63:78:4b: ff:f6:86:b3:a9:3a:d8:ba:6c:09:a2:89:ea:c1:1e: 58:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F5:DD:DF:C8:5B:01:CA:5E:35:8E:3A:45:E9:09:D4:32:94:C5:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8f6146f1-4942-371a-983f-d43e1292f0ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2c5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:db:96:da:40:87:48:60:e0:28:a0:f8:6e:71:7c:d4:4e:21: ee:89:89:24:77:ab:ff:59:b9:38:f1:26:d8:68:cf:42:05:23: d4:bc:bc:10:38:a3:f7:c9:55:52:a6:65:98:75:36:df:05:0e: 21:a4:08:46:4a:2f:fb:cb:35:56:55:15:db:84:35:9f:7b:f6: f7:fe:09:0f:b2:6f:16:d4:2a:97:ae:e5:f2:c1:8c:4f:a4:8b: 79:26:e0:d1:aa:5e:78:4b:c1:2b:8b:cc:44:53:34:e0:1d:df: 49:e5:c7:fa:7d:fa:5f:23:d1:40:3c:5d:4f:7c:38:7a:c7:03: 5a:72:65:a5:1f:a8:4b:f5:1d:b0:28:84:55:53:7e:b7:56:6d: 0e:e2:8d:a1:89:39:55:a6:5c:04:d3:d3:8d:39:9f:97:e0:6b: e5:0c:b2:bc:9e:cc:7e:ff:8f:ca:b8:08:5e:5e:a1:38:8b:92: 84:66:4d:f8:3c:f8:7e:86:c7:60:cd:ca:43:32:e9:9e:41:2d: 3b:6e:11:af:06:9e:c7:04:00:d3:4f:d0:e4:51:88:5c:42:a8: f1:fa:b0:45:98:ec:39:20:87:50:5a:0f:b1:c5:96:32:36:34: d2:fe:28:b8:3f:b4:7b:90:41:d8:42:ab:69:96:c6:58:ed:34: 63:90:38:48 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEphOZVaJw3xq128P4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDcwMjAxMzAxMloXDTI1MDkzMDAxMzAxMlowLzEtMCsGA1UEAxMk OThlZDNiNTItNWYxMy00ODkxLTlmMGItNTU5YjcyOGJjNzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvTWg8/4zZ5JRbcqwjcVyPgDYflRIOELe+k3 UscHMbgGv8XETF4ob+tJMhNiMPXpC6cj2PNsj7S0EqGXPJF4qIKfv7uUO5AcQveE sbHsi3A8PCdZmJJjpe/d2mmBWmVz/jCx2avRIs/hOjxXgn51l+T/zdDofvkrdj8l XozVlpA7ng8ozSlvrjdtoFeLjd/qZY7gJmkVmBvl0cnxA4Kf1fWlqynBFelZWHvz VchiY43ch0aISDxOVZZ5n5q7n1VAQH2E85JRuWWnVUjnkvTh3s08vPI7uAg0sfOg 7VtOEvHQtqqjv15qGGuwaNxjeEv/9oazqTrYumwJoonqwR5YTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMP13d/IWwHKXjWOOkXpCdQylMV6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOGY2MTQ2ZjEtNDk0Mi0z NzFhLTk4M2YtZDQzZTEyOTJmMGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALjbltpAh0hg4Cig+G5xfNROIe6JiSR3q/9ZuTjxJthoz0IFI9S8 vBA4o/fJVVKmZZh1Nt8FDiGkCEZKL/vLNVZVFduENZ979vf+CQ+ybxbUKpeu5fLB jE+ki3km4NGqXnhLwSuLzERTNOAd30nlx/p9+l8j0UA8XU98OHrHA1pyZaUfqEv1 HbAohFVTfrdWbQ7ijaGJOVWmXATT0405n5fga+UMsryezH7/j8q4CF5eoTiLkoRm Tfg8+H6Gx2DNykMy6Z5BLTtuEa8GnscEANNP0ORRiFxCqPH6sEWY7Dkgh1BaD7HF ljI2NNL+KLg/tHuQQdhCq2mWxljtNGOQOEg= -----END CERTIFICATE-----Generated at Thu Jul 3 09:15:21 2025 by rpki-client