$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a136c33c-9bf8-3ca7-852c-6df16029b2a7.roa File: a136c33c-9bf8-3ca7-852c-6df16029b2a7.roa (raw, json) Hash identifier: 4DMka7FBmgEUbPGucMHYbh1nFSos4kuE4o7ZdohK7FQ= Subject key identifier: 78:6C:28:3C:69:F5:AA:59:6A:4F:86:4C:72:1C:98:C9:A1:38:FB:79 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A103532BE03A8D6CB805C8120 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a136c33c-9bf8-3ca7-852c-6df16029b2a7.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 62081 IP address blocks: 2001:470:427::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:32:be:03:a8:d6:cb:80:5c:81:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=173cf6e8-496b-46a6-a397-dc3de89b3595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cf:64:77:5e:34:61:0d:cb:2f:83:b5:e6:cd: bb:b1:ed:b0:7e:04:19:45:90:81:0e:71:3a:b3:29: 72:9f:1d:28:dd:de:04:fc:38:e7:cd:89:87:a0:45: 50:7e:db:0c:c2:de:4e:d6:e3:64:c5:cd:c2:3c:12: 54:46:47:da:18:42:6a:5e:3d:fe:72:3a:e0:7b:b6: 04:bf:e0:8f:1e:1e:6c:2b:42:c3:9b:38:66:0f:2f: ef:1c:49:97:6d:be:73:33:f7:54:18:f3:bb:40:4c: ec:a0:9a:53:a1:4f:54:f9:2d:ae:ae:f0:31:c3:eb: b7:e6:bb:90:61:07:a7:f9:87:64:18:cb:bc:19:6d: 06:9c:4f:f6:c2:a7:2f:3c:e1:fc:26:58:ab:09:e3: ed:8b:b1:16:25:dd:05:09:a1:fc:31:c2:90:31:90: 1a:ce:c7:09:e3:b0:89:50:b7:03:0b:0e:3c:95:62: 2a:14:b4:dd:e3:01:0e:a0:46:d1:79:66:9f:44:dc: 32:3f:1f:84:8f:42:95:95:67:4b:fa:e5:c9:6f:c5: f0:41:fb:a6:ff:d2:e6:59:ba:2a:47:a3:98:40:28: 6a:80:18:0b:9c:69:1f:d4:c2:57:a5:99:52:5c:b1: d8:3a:a7:19:b3:f4:80:d3:50:0b:55:69:e4:bf:f5: f9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:6C:28:3C:69:F5:AA:59:6A:4F:86:4C:72:1C:98:C9:A1:38:FB:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a136c33c-9bf8-3ca7-852c-6df16029b2a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:427::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:99:3d:99:28:7a:f7:47:fb:2a:6a:1c:c1:ec:18:cf:cb:a6: 74:a2:8d:ee:cd:2c:4d:03:99:15:00:59:0d:b6:9a:41:39:64: ac:75:cb:04:08:65:45:d8:42:bd:e0:94:bc:65:2a:6b:7f:fe: 41:63:86:fe:be:2f:9c:6b:f2:a7:b3:da:32:3a:d4:77:be:e8: 2c:49:ff:79:92:26:0a:ee:9a:fa:39:a4:e8:7c:42:e3:c6:68: 0a:c3:fa:40:04:ec:27:26:dc:08:4a:f0:a9:aa:61:50:a6:6c: 51:14:0f:85:a8:f1:cf:52:da:4f:e2:87:2a:06:2d:14:fb:fd: a4:7a:5d:e5:65:10:b2:b8:ae:79:86:22:67:e2:52:ef:88:c8: 64:0f:9c:4d:dd:e8:4d:7c:04:cc:86:6e:b4:3a:66:db:e0:af: 70:2c:c4:1a:af:c8:a7:57:d5:dc:ed:4f:41:03:13:1a:57:bd: 67:2b:7c:2e:60:39:14:52:f3:1d:90:fa:43:82:9f:b9:c2:61: 39:84:f1:13:6e:8c:fc:46:49:5e:56:2c:f4:44:98:94:fa:32: 29:67:42:b8:96:fd:ef:56:2a:4d:b5:de:45:90:70:2b:09:dc: 78:b8:9f:d7:73:e4:a5:4b:63:96:dd:15:88:78:fd:4f:0a:64: e7:b8:27:85 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoQNTK+A6jWy4BcgSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk MTczY2Y2ZTgtNDk2Yi00NmE2LWEzOTctZGMzZGU4OWIzNTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnM9kd140YQ3LL4O15s27se2wfgQZRZCBDnE6 sylynx0o3d4E/DjnzYmHoEVQftsMwt5O1uNkxc3CPBJURkfaGEJqXj3+cjrge7YE v+CPHh5sK0LDmzhmDy/vHEmXbb5zM/dUGPO7QEzsoJpToU9U+S2urvAxw+u35ruQ YQen+YdkGMu8GW0GnE/2wqcvPOH8JlirCePti7EWJd0FCaH8McKQMZAazscJ47CJ ULcDCw48lWIqFLTd4wEOoEbReWafRNwyPx+Ej0KVlWdL+uXJb8XwQfum/9LmWboq R6OYQChqgBgLnGkf1MJXpZlSXLHYOqcZs/SA01ALVWnkv/X5SwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHhsKDxp9apZak+GTHIcmMmhOPt5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTEzNmMzM2MtOWJmOC0z Y2E3LTg1MmMtNmRmMTYwMjliMmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGmZPZkoevdH+ypqHMHsGM/LpnSije7NLE0DmRUAWQ22mkE5ZKx1 ywQIZUXYQr3glLxlKmt//kFjhv6+L5xr8qez2jI61He+6CxJ/3mSJgrumvo5pOh8 QuPGaArD+kAE7Ccm3AhK8KmqYVCmbFEUD4Wo8c9S2k/ihyoGLRT7/aR6XeVlELK4 rnmGImfiUu+IyGQPnE3d6E18BMyGbrQ6Ztvgr3AsxBqvyKdX1dztT0EDExpXvWcr fC5gORRS8x2Q+kOCn7nCYTmE8RNujPxGSV5WLPREmJT6MilnQriW/e9WKk213kWQ cCsJ3Hi4n9dz5KVLY5bdFYh4/U8KZOe4J4U= -----END CERTIFICATE-----Generated at Sun Jun 8 05:12:08 2025 by rpki-client