$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/91f1d46e-cbf3-3f3a-ba5c-ed3366e961ea.roa File: 91f1d46e-cbf3-3f3a-ba5c-ed3366e961ea.roa (raw, json) Hash identifier: nUUjlMTPgX2+0wH2JRLER9GYjStLAsxSjLjloAl5Snk= Subject key identifier: C3:DE:63:8D:72:1A:9B:22:20:C9:B4:CF:E3:50:E4:8F:96:22:C4:7D Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A5E6EE2BA0A43AA49AF704900 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/91f1d46e-cbf3-3f3a-ba5c-ed3366e961ea.roa Signing time: Tue 01 Jul 2025 01:30:10 +0000 ROA not before: Tue 01 Jul 2025 01:30:10 +0000 ROA not after: Mon 29 Sep 2025 01:30:10 +0000 asID: 4128 IP address blocks: 2001:470:2c5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:6e:e2:ba:0a:43:aa:49:af:70:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jul 1 01:30:10 2025 GMT Not After : Sep 29 01:30:10 2025 GMT Subject: CN=2c334642-4e8b-46db-940d-57a5ae35fc89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d3:ef:e9:35:c9:af:8b:30:9a:bd:9a:fa:f4: 75:bf:42:3d:93:66:46:75:a1:5b:7b:a2:43:0c:74: a4:a7:6e:eb:d3:e4:f6:76:8a:0c:30:03:b6:d2:6d: 75:fe:11:b2:6e:a0:66:f2:ab:6e:4d:d9:7a:37:71: 49:2e:ac:d2:68:f1:12:8b:7d:e1:bc:73:dd:82:33: dc:05:94:39:32:7a:79:65:e1:47:98:80:aa:2a:d2: ca:8a:7a:f5:e7:a3:16:49:b0:72:59:e5:84:dd:66: 52:88:85:11:e8:19:bc:a7:87:3b:8b:8c:ff:85:57: eb:b0:e3:dd:e4:c5:ef:23:e3:fb:d2:c2:1e:9e:e3: fb:15:7c:f5:1d:46:a0:e3:41:4f:28:cf:c8:44:c7: ed:c2:12:18:eb:6b:aa:6e:c4:35:3d:17:59:75:17: bd:50:be:d7:c1:d1:b9:e6:c1:12:bc:fa:41:a3:89: e8:6b:ea:22:47:5e:24:d5:d5:da:17:d7:31:b7:19: 55:aa:d0:19:45:e1:7f:7d:70:20:08:c4:19:40:dd: 2f:14:f8:f0:26:0a:12:36:0d:0c:ef:34:f5:fd:fd: 39:9e:92:bf:dc:4a:96:8e:ab:fa:5e:dd:c1:65:aa: 13:4b:dd:e9:6f:6a:b8:f1:f1:38:4a:1e:31:c4:84: c6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:DE:63:8D:72:1A:9B:22:20:C9:B4:CF:E3:50:E4:8F:96:22:C4:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/91f1d46e-cbf3-3f3a-ba5c-ed3366e961ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2c5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:e3:76:0c:ab:38:53:d9:c9:81:3f:fe:b2:7a:d5:12:4c:38: a9:6e:0e:75:7d:54:00:c3:0f:fc:e1:8d:2b:f4:36:0a:26:6f: 25:17:c9:2e:b2:98:a8:8b:10:3f:e0:d6:e3:a6:16:a8:9e:15: ff:5a:2f:68:18:83:d8:73:a6:f5:0e:37:da:9b:1c:6c:4c:78: 4a:b5:e6:e5:a4:1a:ab:94:de:64:d2:41:56:51:e8:2b:ed:4c: ab:81:fc:07:de:0d:35:98:2f:20:62:00:43:c5:18:7a:4a:d3: fe:27:3b:c5:2c:6c:bb:77:44:60:73:a4:eb:84:cb:d6:f8:79: 97:f2:06:09:c0:3b:88:33:7a:f8:2a:8d:3b:1b:52:d5:51:67: 28:5c:93:16:27:dd:a6:10:11:51:1c:98:56:13:ef:8a:11:04: eb:b9:96:eb:29:82:f6:f4:69:d7:47:9a:ac:22:8c:85:56:d3: 89:c2:b5:69:28:8c:d3:3a:ff:0b:b1:b7:4a:9f:f2:a9:f8:77: 32:30:84:3b:41:c1:3a:3d:1e:f0:06:73:dd:d4:ee:27:72:31: 7d:e8:88:a3:70:dc:7b:60:bc:22:2d:33:db:d7:80:14:72:c1: 6e:35:89:3b:83:75:eb:07:87:18:99:3a:08:48:13:f7:bd:0d: d6:b9:76:d5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpebuK6CkOqSa9wSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDcwMTAxMzAxMFoXDTI1MDkyOTAxMzAxMFowLzEtMCsGA1UEAxMk MmMzMzQ2NDItNGU4Yi00NmRiLTk0MGQtNTdhNWFlMzVmYzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdPv6TXJr4swmr2a+vR1v0I9k2ZGdaFbe6JD DHSkp27r0+T2dooMMAO20m11/hGybqBm8qtuTdl6N3FJLqzSaPESi33hvHPdgjPc BZQ5Mnp5ZeFHmICqKtLKinr156MWSbByWeWE3WZSiIUR6Bm8p4c7i4z/hVfrsOPd 5MXvI+P70sIenuP7FXz1HUag40FPKM/IRMftwhIY62uqbsQ1PRdZdRe9UL7XwdG5 5sESvPpBo4noa+oiR14k1dXaF9cxtxlVqtAZReF/fXAgCMQZQN0vFPjwJgoSNg0M 7zT1/f05npK/3EqWjqv6Xt3BZaoTS93pb2q48fE4Sh4xxITGcQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMPeY41yGpsiIMm0z+NQ5I+WIsR9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTFmMWQ0NmUtY2JmMy0z ZjNhLWJhNWMtZWQzMzY2ZTk2MWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGPjdgyrOFPZyYE//rJ61RJMOKluDnV9VADDD/zhjSv0NgombyUX yS6ymKiLED/g1uOmFqieFf9aL2gYg9hzpvUON9qbHGxMeEq15uWkGquU3mTSQVZR 6CvtTKuB/AfeDTWYLyBiAEPFGHpK0/4nO8UsbLt3RGBzpOuEy9b4eZfyBgnAO4gz evgqjTsbUtVRZyhckxYn3aYQEVEcmFYT74oRBOu5luspgvb0addHmqwijIVW04nC tWkojNM6/wuxt0qf8qn4dzIwhDtBwTo9HvAGc93U7idyMX3oiKNw3HtgvCItM9vX gBRywW41iTuDdesHhxiZOghIE/e9Dda5dtU= -----END CERTIFICATE-----Generated at Thu Jul 3 09:02:01 2025 by rpki-client