$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/98e69e38-4353-3762-a63c-5f5e5ec4ec31.roa File: 98e69e38-4353-3762-a63c-5f5e5ec4ec31.roa (raw, json) Hash identifier: dhUk1dM3zOZ0erkSKS8tMDExY8QiebQELDfwlEnJHg4= Subject key identifier: BE:2D:09:42:7A:CE:7C:B8:2A:6E:2B:00:86:95:3B:BA:36:90:10:C4 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A1035320531F2F9E0376A2F00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/98e69e38-4353-3762-a63c-5f5e5ec4ec31.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 49183 IP address blocks: 2001:470:427::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:32:05:31:f2:f9:e0:37:6a:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=a342bbb5-96e1-483f-8272-154af80127b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e2:03:77:c3:b7:21:0a:70:6a:c1:25:fc:9f: 30:23:1e:d2:b9:04:cb:97:71:f0:9f:24:91:5d:c5: 90:d1:12:ae:49:1c:3e:e6:ab:46:58:2d:bb:96:63: 9f:64:2d:f9:53:d0:b5:7a:e7:81:92:15:52:0e:35: 37:6b:ea:8b:66:05:8c:83:f2:97:7e:64:48:16:0e: b5:06:7d:22:ab:9c:b2:ea:48:68:1e:4e:ab:95:11: 68:68:64:c2:00:a2:6c:4e:73:55:1c:13:82:ab:0a: 1d:c9:2a:4b:a3:03:56:9a:74:76:94:ab:e3:10:ce: 07:24:7a:f0:4f:20:e4:15:18:f2:91:10:1a:04:cf: 7b:91:8f:ef:5f:92:a6:de:84:2a:de:b9:dc:20:92: 32:d7:f0:85:00:9a:4f:40:99:ee:19:6f:09:da:bd: 16:f4:27:b2:56:85:70:e8:40:54:85:b5:b0:1f:d6: 7d:22:60:40:28:69:f4:fc:81:e7:6a:b4:6f:00:4c: b5:b1:98:44:19:15:44:62:f8:8f:6b:b2:ca:36:96: f2:36:d9:98:2b:46:56:e7:b5:e6:09:6d:ce:58:87: e2:3b:8e:fb:7f:ab:03:ae:a1:a7:51:02:eb:c7:9a: f6:55:d0:a9:71:42:52:8d:65:d6:ce:e1:d4:d9:b9: f5:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:2D:09:42:7A:CE:7C:B8:2A:6E:2B:00:86:95:3B:BA:36:90:10:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/98e69e38-4353-3762-a63c-5f5e5ec4ec31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:427::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:a2:5c:ca:5f:34:1c:57:5f:b7:47:fd:ca:02:16:cb:a2:e7: 6b:b0:f2:f8:bd:3b:17:5d:d9:fe:fd:0a:e9:16:b8:7f:a3:3a: fa:23:a8:a6:c4:27:4a:b2:43:12:eb:97:d4:d1:f3:45:a0:f8: 62:a6:7f:0f:5d:94:50:17:63:7c:cb:3f:23:a5:33:95:c4:e5: fd:f8:a0:8a:f3:00:8e:31:d0:96:1f:22:d7:e5:7c:65:4c:3b: 7b:ab:e4:61:1a:54:0e:a4:af:a6:f6:a0:4f:5b:1d:41:65:5e: df:1b:98:9d:5e:fb:e0:16:8c:87:81:53:3c:0f:a2:e7:f6:a8: 95:6f:00:11:95:50:b9:93:5f:2a:c4:80:71:a6:76:5c:0e:c1: a9:d1:90:79:4c:fc:61:8b:18:b0:88:93:75:19:0f:70:a9:84: 35:54:9a:40:b5:3a:ee:2c:41:2e:fc:ef:7e:96:0f:e1:b9:23: 22:dc:f5:52:b1:d8:7e:a9:7e:34:1b:0f:34:63:ed:c3:11:0c: b2:31:c5:dc:c0:1c:2d:9b:23:48:17:48:de:1a:a5:96:f1:f0: 09:2c:fa:90:2c:ab:6a:a7:53:af:cd:16:bf:d7:be:6a:cc:4d: 14:c6:8d:4d:7d:af:d3:23:f2:be:b4:3b:c8:7b:e6:bb:0d:1d: 68:c8:eb:67 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoQNTIFMfL54DdqLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk YTM0MmJiYjUtOTZlMS00ODNmLTgyNzItMTU0YWY4MDEyN2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOIDd8O3IQpwasEl/J8wIx7SuQTLl3HwnySR XcWQ0RKuSRw+5qtGWC27lmOfZC35U9C1eueBkhVSDjU3a+qLZgWMg/KXfmRIFg61 Bn0iq5yy6khoHk6rlRFoaGTCAKJsTnNVHBOCqwodySpLowNWmnR2lKvjEM4HJHrw TyDkFRjykRAaBM97kY/vX5Km3oQq3rncIJIy1/CFAJpPQJnuGW8J2r0W9CeyVoVw 6EBUhbWwH9Z9ImBAKGn0/IHnarRvAEy1sZhEGRVEYviPa7LKNpbyNtmYK0ZW57Xm CW3OWIfiO477f6sDrqGnUQLrx5r2VdCpcUJSjWXWzuHU2bn1BwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL4tCUJ6zny4Km4rAIaVO7o2kBDEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOThlNjllMzgtNDM1My0z NzYyLWE2M2MtNWY1ZTVlYzRlYzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEyiXMpfNBxXX7dH/coCFsui52uw8vi9Oxdd2f79CukWuH+jOvoj qKbEJ0qyQxLrl9TR80Wg+GKmfw9dlFAXY3zLPyOlM5XE5f34oIrzAI4x0JYfItfl fGVMO3ur5GEaVA6kr6b2oE9bHUFlXt8bmJ1e++AWjIeBUzwPouf2qJVvABGVULmT XyrEgHGmdlwOwanRkHlM/GGLGLCIk3UZD3CphDVUmkC1Ou4sQS78736WD+G5IyLc 9VKx2H6pfjQbDzRj7cMRDLIxxdzAHC2bI0gXSN4apZbx8Aks+pAsq2qnU6/NFr/X vmrMTRTGjU19r9Mj8r60O8h75rsNHWjI62c= -----END CERTIFICATE-----Generated at Sun Jun 8 03:48:43 2025 by rpki-client