$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a2fa7185-3748-3bef-ac3f-c86bd7b5e9aa.roa File: a2fa7185-3748-3bef-ac3f-c86bd7b5e9aa.roa (raw, json) Hash identifier: wX3fTuzvk8aQqEOpCpSspWTVBJNjs/U8zVfH8aPInOY= Subject key identifier: B8:ED:DD:B4:DE:12:50:91:83:08:8A:B3:F5:AF:6A:70:7B:54:4C:80 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FE4E17CF2F27459DE6820 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a2fa7185-3748-3bef-ac3f-c86bd7b5e9aa.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 43633 IP address blocks: 2001:470:23d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:e4:e1:7c:f2:f2:74:59:de:68:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=ad3750df-350c-4e4f-969b-8f0c6ae4e7b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e8:94:92:28:1c:24:34:ae:f4:b4:5a:d2:fe: 6f:ee:54:6b:66:04:88:82:22:05:94:cb:08:95:d8: cb:bd:27:01:42:ea:41:08:62:f7:81:0a:f2:3e:78: f3:69:db:a2:97:a0:59:85:6c:6f:01:89:0f:4e:5e: 6a:41:d1:aa:21:60:8f:84:ad:72:d7:37:a9:d4:04: 56:9d:8b:79:2b:00:61:9c:b0:85:62:1f:34:6c:e4: ea:95:ea:c1:7f:f7:0a:6a:69:80:f2:39:60:ba:98: 6a:50:d9:c2:a9:67:f9:4e:ec:25:16:16:51:87:1b: b4:c2:9e:5e:1e:1d:65:23:b1:cd:f3:dc:7b:22:8b: 3c:3c:8f:4a:3b:88:c7:f4:b8:46:30:21:f8:77:26: fc:8f:67:a5:dd:28:50:90:60:c5:16:78:0b:c5:bc: 95:f0:f2:c4:9e:4d:2e:20:56:82:7e:dc:d7:e7:0b: 9e:9b:17:67:b5:94:3e:e0:98:4f:63:81:9a:73:e9: 8d:27:a6:1a:79:f4:88:af:89:07:c7:8e:d1:6c:18: f3:b8:ed:3d:b5:6e:62:af:ca:b9:96:af:6c:e2:cc: 74:dc:eb:dc:96:6e:1a:ae:8d:bc:f5:60:6b:93:27: 33:c2:20:64:c7:d4:5a:77:ae:88:95:b5:51:32:c1: 51:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:ED:DD:B4:DE:12:50:91:83:08:8A:B3:F5:AF:6A:70:7B:54:4C:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a2fa7185-3748-3bef-ac3f-c86bd7b5e9aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:23d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:ca:03:b1:af:cb:02:9c:75:b5:47:11:cd:08:0e:1e:e5:5b: 17:a2:2e:48:ef:25:8c:10:f8:ab:19:f9:a6:c4:ef:ef:bd:b2: 7f:d0:2d:a7:6d:86:ab:3b:68:c8:f9:9a:ff:3a:e5:b4:66:66: 45:99:01:b7:25:6b:50:6f:cc:f6:23:51:20:04:30:1e:d7:28: 72:c9:d0:49:bb:6e:85:e9:52:25:a0:c9:3d:2c:5e:ae:d7:2c: 68:55:61:c8:4c:54:61:21:f5:69:f2:af:5f:3e:c1:28:0e:2b: f7:5e:44:85:3b:98:4b:b5:6a:3b:a7:1a:8c:2c:1a:44:b3:7e: fd:1e:58:ff:60:85:30:bc:de:b0:c2:40:74:26:dc:88:18:53: 54:77:a6:bc:f5:e2:cc:a2:83:1a:a8:73:76:fc:77:53:77:51: 8a:9e:98:fa:dd:40:1b:7c:2e:16:8e:f1:fd:6c:3e:f9:38:ac: 25:ce:1e:4b:bd:c2:0f:46:0c:b0:c0:3d:f1:40:c9:c1:11:0b: 7c:a1:d8:b7:2e:f8:1a:f8:cc:75:2a:45:15:42:b3:02:8d:33: 54:21:29:3e:0d:13:1a:bd:69:61:dc:ce:e9:f1:f8:6a:cc:46: 2a:61:1d:d8:b4:9d:5e:37:60:83:94:76:a1:80:bb:ce:74:8e: 65:df:51:c4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX+ThfPLydFneaCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk YWQzNzUwZGYtMzUwYy00ZTRmLTk2OWItOGYwYzZhZTRlN2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuiUkigcJDSu9LRa0v5v7lRrZgSIgiIFlMsI ldjLvScBQupBCGL3gQryPnjzaduil6BZhWxvAYkPTl5qQdGqIWCPhK1y1zep1ARW nYt5KwBhnLCFYh80bOTqlerBf/cKammA8jlguphqUNnCqWf5TuwlFhZRhxu0wp5e Hh1lI7HN89x7Ios8PI9KO4jH9LhGMCH4dyb8j2el3ShQkGDFFngLxbyV8PLEnk0u IFaCftzX5wuemxdntZQ+4JhPY4Gac+mNJ6YaefSIr4kHx47RbBjzuO09tW5ir8q5 lq9s4sx03Ovclm4aro289WBrkyczwiBkx9Rad66IlbVRMsFRLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLjt3bTeElCRgwiKs/WvanB7VEyAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTJmYTcxODUtMzc0OC0z YmVmLWFjM2YtYzg2YmQ3YjVlOWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFPKA7GvywKcdbVHEc0IDh7lWxeiLkjvJYwQ+KsZ+abE7++9sn/Q Ladthqs7aMj5mv865bRmZkWZAbcla1BvzPYjUSAEMB7XKHLJ0Em7boXpUiWgyT0s Xq7XLGhVYchMVGEh9Wnyr18+wSgOK/deRIU7mEu1ajunGowsGkSzfv0eWP9ghTC8 3rDCQHQm3IgYU1R3prz14syigxqoc3b8d1N3UYqemPrdQBt8LhaO8f1sPvk4rCXO Hku9wg9GDLDAPfFAycERC3yh2Lcu+Br4zHUqRRVCswKNM1QhKT4NExq9aWHczunx +GrMRiphHdi0nV43YIOUdqGAu850jmXfUcQ= -----END CERTIFICATE-----Generated at Sun Jun 8 18:28:59 2025 by rpki-client