$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a7c639c8-15de-350a-8dae-e4b61f919db2.roa File: a7c639c8-15de-350a-8dae-e4b61f919db2.roa (raw, json) Hash identifier: vJxJnVxBZISg7G8KTFh0uC/WhJQQxtmEVRBvDc/4tJ0= Subject key identifier: 8C:B9:14:F6:BD:62:37:B7:4F:7E:22:17:A3:46:CB:FF:40:78:C1:41 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FC8E7491920D128BE3300 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a7c639c8-15de-350a-8dae-e4b61f919db2.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 30886 IP address blocks: 2001:470:2a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:c8:e7:49:19:20:d1:28:be:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=9782142c-b212-4f2d-91c0-6fcd61f12e1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:af:bf:e9:22:fc:e7:62:9e:7f:2b:ee:36:e4: 34:6c:4b:44:13:f1:0d:e1:af:a5:91:95:90:91:7b: 07:6a:45:82:f5:37:e6:50:b8:0c:c9:e3:2b:4e:e8: 23:27:bb:b8:04:ea:cf:b7:1b:12:73:68:e0:c8:67: 9a:95:46:ff:ea:c2:7a:c0:a1:ae:c5:b1:d4:d3:44: ee:8d:75:cd:4e:ab:c5:49:25:76:9b:55:f5:90:c2: 47:6b:78:3a:06:61:63:82:a4:63:39:5d:a4:6a:a1: 3f:95:66:03:3e:ac:22:e0:fa:a5:e3:fc:83:dc:5d: 6b:f1:a6:e7:74:45:1b:90:34:04:65:2f:2d:96:3b: d4:e7:22:f1:c9:92:f3:e6:f0:90:21:d8:fe:0a:65: 0b:04:ff:c3:be:1e:a3:6f:80:12:ae:85:51:c8:5f: 1a:3c:53:04:12:51:4d:2e:26:13:4f:48:8d:76:4c: 90:e2:35:97:d3:ad:f8:8c:48:e9:eb:f9:72:51:c8: 6c:15:ef:60:c2:81:0d:b4:3c:c8:67:46:ca:a6:b0: fb:64:bd:67:d6:bc:18:be:85:dc:04:20:eb:5e:65: 45:3e:36:57:de:72:6f:42:89:81:1c:c5:17:3a:ad: 69:53:df:01:34:69:59:09:8b:42:27:2c:38:37:b6: cb:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B9:14:F6:BD:62:37:B7:4F:7E:22:17:A3:46:CB:FF:40:78:C1:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a7c639c8-15de-350a-8dae-e4b61f919db2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:40:5a:1e:bc:49:30:d4:63:a3:48:f6:68:e6:89:b2:5a:98: d3:27:ed:7e:69:09:24:d0:22:fb:23:40:1c:7a:8a:a7:09:47: 7d:42:7f:15:f8:5d:4f:bd:7a:72:23:ed:17:fa:8c:64:55:5d: 2d:31:e3:eb:56:3b:fa:3d:f0:fe:31:45:f5:ea:61:72:85:37: 1d:eb:1e:87:2d:31:ed:8a:c8:8a:f5:e4:68:97:23:d0:73:2c: cf:f9:89:ac:c7:bd:cb:fc:91:95:b2:e4:59:6e:ef:e8:31:bc: 34:5b:6d:ab:37:33:57:8e:28:fa:57:3f:2c:b3:bc:19:07:f5: 08:ce:c3:1b:a4:38:59:87:54:04:32:c0:cc:42:a0:2a:81:09: 58:2d:86:94:d3:65:29:57:74:8b:3f:a5:59:3f:67:ee:91:0d: c5:63:92:21:cc:ae:55:30:bb:64:32:55:ad:1a:fa:fa:3d:fc: c0:40:c7:89:dd:5f:d1:e0:44:3b:6b:38:a6:7d:c3:85:b9:5e: 6d:69:01:da:65:31:fe:d1:e1:25:06:ad:9b:f0:83:4a:a6:98: 2f:de:d3:df:98:2a:1a:8e:76:62:62:0f:bc:5a:06:fa:fb:0c: cd:e3:90:a9:8e:68:a0:17:36:c7:c1:1a:bf:0d:c6:c0:97:d4: 99:ef:fd:a2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX8jnSRkg0Si+MwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk OTc4MjE0MmMtYjIxMi00ZjJkLTkxYzAtNmZjZDYxZjEyZTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAna+/6SL852KefyvuNuQ0bEtEE/EN4a+lkZWQ kXsHakWC9TfmULgMyeMrTugjJ7u4BOrPtxsSc2jgyGealUb/6sJ6wKGuxbHU00Tu jXXNTqvFSSV2m1X1kMJHa3g6BmFjgqRjOV2kaqE/lWYDPqwi4Pql4/yD3F1r8abn dEUbkDQEZS8tljvU5yLxyZLz5vCQIdj+CmULBP/Dvh6jb4ASroVRyF8aPFMEElFN LiYTT0iNdkyQ4jWX0634jEjp6/lyUchsFe9gwoENtDzIZ0bKprD7ZL1n1rwYvoXc BCDrXmVFPjZX3nJvQomBHMUXOq1pU98BNGlZCYtCJyw4N7bLCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIy5FPa9Yje3T34iF6NGy/9AeMFBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTdjNjM5YzgtMTVkZS0z NTBhLThkYWUtZTRiNjFmOTE5ZGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFVAWh68STDUY6NI9mjmibJamNMn7X5pCSTQIvsjQBx6iqcJR31C fxX4XU+9enIj7Rf6jGRVXS0x4+tWO/o98P4xRfXqYXKFNx3rHoctMe2KyIr15GiX I9BzLM/5iazHvcv8kZWy5Flu7+gxvDRbbas3M1eOKPpXPyyzvBkH9QjOwxukOFmH VAQywMxCoCqBCVgthpTTZSlXdIs/pVk/Z+6RDcVjkiHMrlUwu2QyVa0a+vo9/MBA x4ndX9HgRDtrOKZ9w4W5Xm1pAdplMf7R4SUGrZvwg0qmmC/e09+YKhqOdmJiD7xa Bvr7DM3jkKmOaKAXNsfBGr8NxsCX1Jnv/aI= -----END CERTIFICATE-----Generated at Mon Jun 9 00:05:35 2025 by rpki-client