$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/92f74dcd-2c13-36ec-98f1-c64e586972db.roa File: 92f74dcd-2c13-36ec-98f1-c64e586972db.roa (raw, json) Hash identifier: 99KZ/nwxm6Jz/+ZZeCVC7eMKpJ1D5SNhjYzHX4I6uxY= Subject key identifier: 9C:70:40:1C:74:E9:65:8A:3F:1C:AD:DC:3F:64:FD:87:C4:8D:4D:63 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FC3395507E02F4705C63C Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/92f74dcd-2c13-36ec-98f1-c64e586972db.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 25198 IP address blocks: 2001:470:1d8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:c3:39:55:07:e0:2f:47:05:c6:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=09c7771a-859d-43ce-868e-978df7c80cd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:75:e5:f4:32:89:32:4c:c2:dc:c0:13:f3:c5: 71:d8:5b:7e:72:c0:8e:19:36:4b:7e:7a:29:ca:d1: 5f:f9:61:91:b0:3c:bb:61:6c:f1:d3:e1:8e:c8:11: 88:f0:08:71:ef:4e:30:91:77:96:65:67:8c:b7:d7: 34:16:70:8d:e9:07:9e:9d:ef:85:d2:f9:71:a1:9a: 71:59:79:ed:4f:94:cb:e1:b9:16:6e:d9:1d:57:f3: 0b:45:2f:71:58:2b:13:78:2e:83:83:56:17:bd:74: 76:cf:cd:0d:01:fd:64:07:34:a3:3b:2e:ef:35:12: 59:27:7c:77:ee:68:aa:08:64:f6:e8:02:82:29:ff: b1:c2:be:0a:02:31:43:49:f5:a8:17:e3:8d:d3:f7: 26:ff:35:c5:f7:4c:bc:60:e0:99:72:55:00:01:d2: 48:c7:b1:1a:d8:9f:8f:12:f0:19:0c:1c:c7:39:43: 46:79:d5:be:df:7a:b2:a2:0b:97:d3:cf:8f:c3:63: 9f:5b:be:6f:eb:34:83:7c:bf:78:77:b2:10:56:aa: de:90:93:28:55:ad:05:69:a3:aa:d9:c1:4e:8c:6a: ce:e6:86:79:9c:f5:2f:7d:3f:bf:f0:65:2e:a7:28: 76:eb:89:3b:97:cd:42:89:5d:28:f2:56:8c:ab:93: b5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:70:40:1C:74:E9:65:8A:3F:1C:AD:DC:3F:64:FD:87:C4:8D:4D:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/92f74dcd-2c13-36ec-98f1-c64e586972db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1d8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:c3:b8:1d:4f:8a:4a:df:0c:6f:29:ad:bc:11:70:08:12:d0: 27:66:09:db:e0:b3:05:91:0e:51:41:e8:5d:35:3e:69:c9:c2: d2:66:fb:a1:1a:38:72:3b:22:47:bc:c5:eb:f7:bf:1c:3b:c0: c5:d0:e9:35:00:68:8e:3d:0d:39:af:ea:ba:9a:74:9f:9a:c3: 3f:d2:f4:fd:86:bc:ad:9b:07:7f:ab:44:57:15:fe:46:3d:e8: 62:d0:aa:a1:7c:e4:d6:cf:1b:51:af:a3:5a:cb:33:c4:b8:f4: a6:55:99:65:68:17:bd:5a:86:bd:09:d9:2f:f5:df:02:f5:3c: 56:08:e8:d5:74:cf:a5:91:a6:5f:08:5f:7b:53:ef:6a:2f:f2: 31:25:72:fe:58:40:34:fa:f8:63:38:c7:43:25:aa:a9:ce:c0: 69:55:28:3e:e2:e4:8c:42:8e:a9:2a:95:05:39:3b:8d:94:eb: 10:1d:e9:c5:10:f1:95:6d:3c:6f:10:4d:f8:c6:af:9b:a4:a1: 47:73:7f:b1:0e:aa:88:c6:f4:b8:f2:2d:dd:28:4c:d5:9f:99: b3:5f:c2:70:56:ce:3c:c4:f8:0a:a3:d1:da:32:05:15:ff:9e: ef:ac:c3:4c:2b:72:d0:f1:cc:5c:77:08:4a:0f:8b:b3:40:3a: b3:e2:8d:d1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX8M5VQfgL0cFxjwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk MDljNzc3MWEtODU5ZC00M2NlLTg2OGUtOTc4ZGY3YzgwY2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinXl9DKJMkzC3MAT88Vx2Ft+csCOGTZLfnop ytFf+WGRsDy7YWzx0+GOyBGI8Ahx704wkXeWZWeMt9c0FnCN6Qeene+F0vlxoZpx WXntT5TL4bkWbtkdV/MLRS9xWCsTeC6Dg1YXvXR2z80NAf1kBzSjOy7vNRJZJ3x3 7miqCGT26AKCKf+xwr4KAjFDSfWoF+ON0/cm/zXF90y8YOCZclUAAdJIx7Ea2J+P EvAZDBzHOUNGedW+33qyoguX08+Pw2OfW75v6zSDfL94d7IQVqrekJMoVa0FaaOq 2cFOjGrO5oZ5nPUvfT+/8GUupyh264k7l81CiV0o8laMq5O1+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJxwQBx06WWKPxyt3D9k/YfEjU1jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTJmNzRkY2QtMmMxMy0z NmVjLTk4ZjEtYzY0ZTU4Njk3MmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABTDuB1PikrfDG8prbwRcAgS0CdmCdvgswWRDlFB6F01PmnJwtJm +6EaOHI7Ike8xev3vxw7wMXQ6TUAaI49DTmv6rqadJ+awz/S9P2GvK2bB3+rRFcV /kY96GLQqqF85NbPG1Gvo1rLM8S49KZVmWVoF71ahr0J2S/13wL1PFYI6NV0z6WR pl8IX3tT72ov8jElcv5YQDT6+GM4x0MlqqnOwGlVKD7i5IxCjqkqlQU5O42U6xAd 6cUQ8ZVtPG8QTfjGr5ukoUdzf7EOqojG9LjyLd0oTNWfmbNfwnBWzjzE+Aqj0doy BRX/nu+sw0wrctDxzFx3CEoPi7NAOrPijdE= -----END CERTIFICATE-----Generated at Thu Jun 5 18:34:43 2025 by rpki-client