$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b448f49d-d8be-353e-ad86-61174d37a25a.roa File: b448f49d-d8be-353e-ad86-61174d37a25a.roa (raw, json) Hash identifier: BjTHOEHjc2Ci1Lv+73pvSqRoDy9yL3Ke9yaZ1k0dGbk= Subject key identifier: D8:50:CA:43:11:80:F5:7B:6A:36:F6:E2:89:31:0E:16:03:04:76:90 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FE79398C3E5C8FFFE3AC0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b448f49d-d8be-353e-ad86-61174d37a25a.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 48438 IP address blocks: 2001:470:2a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:e7:93:98:c3:e5:c8:ff:fe:3a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=bb1e6073-3833-438e-a3e8-78da9f503b9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e9:d1:af:36:80:31:f2:57:83:25:13:88:78: b3:45:48:ac:a1:d3:8f:78:a8:34:f9:66:10:5e:03: b4:fd:4c:aa:b4:46:10:fd:f7:d8:14:07:ac:99:21: 28:83:b6:2c:1e:e2:ef:03:a3:b4:0c:a9:f0:82:6f: 5d:02:0f:8f:21:4f:cb:93:92:a3:ee:50:fb:20:d3: 91:6d:08:ae:d3:1d:01:d9:53:f2:6b:0d:1d:ad:20: 27:90:c6:25:01:17:38:cf:ad:a8:53:12:77:6c:50: db:8e:03:90:09:68:b7:d0:ce:61:b9:e0:3f:bb:76: 84:bf:b1:44:31:2d:09:28:01:49:4c:0f:22:4c:db: e1:c8:ac:51:de:31:66:3d:f0:8e:09:1f:f0:d1:87: fa:20:fc:e5:9d:3a:88:20:d5:5b:d9:be:38:ec:94: e6:09:7c:c2:c8:05:36:7d:1a:ed:b5:ea:cf:fe:df: 76:32:c0:4a:00:f4:82:57:54:d7:fd:8e:ae:5a:0e: 46:0b:b1:8a:69:60:51:b3:fd:a0:87:be:0b:f5:af: b1:e3:4c:13:df:fb:b4:17:35:d6:c7:cc:b6:41:4e: d0:30:8c:44:59:91:d0:5a:07:e3:61:44:06:46:1c: 49:a1:90:e2:fb:2c:87:fd:2d:be:4f:d9:35:38:01: d1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:50:CA:43:11:80:F5:7B:6A:36:F6:E2:89:31:0E:16:03:04:76:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b448f49d-d8be-353e-ad86-61174d37a25a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:44:a0:9a:ad:aa:c2:8a:66:24:76:6e:38:65:ee:8e:f8:8c: 67:bf:ff:6b:59:ce:0c:cc:a8:6e:c8:62:3f:74:8f:98:4d:d8: 3a:59:ea:fb:83:a9:52:d5:f5:b3:0d:2d:e1:91:4c:6e:56:32: df:99:31:db:d7:e8:5e:c7:5b:2e:7e:24:50:bd:4c:cd:08:c8: 66:76:f4:59:51:9f:9c:d2:03:3a:05:e8:5d:e3:61:4e:17:47: a4:a5:1d:af:0d:92:0b:3a:72:8e:36:39:e4:60:d8:ba:0c:e9: ba:4b:a2:ce:80:e0:f8:69:13:77:1e:e5:64:ac:48:d6:db:b8: 33:91:40:4b:23:83:a2:66:e0:a7:a7:6c:b6:b5:28:fa:aa:cd: 4d:ad:ac:23:e7:05:37:36:10:54:1c:00:a3:55:8e:9d:9d:f2: e7:96:75:c7:00:f8:9e:a3:32:97:e9:56:c3:6c:3b:3a:74:c1: 14:e8:c7:d1:13:63:9b:af:6d:7f:69:8b:e7:89:c5:8b:d0:ee: 90:30:f4:da:db:63:38:d5:b5:01:ba:58:40:6c:68:5a:c7:99: 34:1b:71:d7:d4:2a:b2:d2:eb:55:79:e0:cf:9a:21:0d:3a:ed: 57:46:70:02:cf:72:f7:47:68:18:ac:03:a7:1f:b8:39:95:88: d7:75:8e:1f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX+eTmMPlyP/+OsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk YmIxZTYwNzMtMzgzMy00MzhlLWEzZTgtNzhkYTlmNTAzYjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhunRrzaAMfJXgyUTiHizRUisodOPeKg0+WYQ XgO0/UyqtEYQ/ffYFAesmSEog7YsHuLvA6O0DKnwgm9dAg+PIU/Lk5Kj7lD7INOR bQiu0x0B2VPyaw0drSAnkMYlARc4z62oUxJ3bFDbjgOQCWi30M5hueA/u3aEv7FE MS0JKAFJTA8iTNvhyKxR3jFmPfCOCR/w0Yf6IPzlnTqIINVb2b447JTmCXzCyAU2 fRrtterP/t92MsBKAPSCV1TX/Y6uWg5GC7GKaWBRs/2gh74L9a+x40wT3/u0FzXW x8y2QU7QMIxEWZHQWgfjYUQGRhxJoZDi+yyH/S2+T9k1OAHRvQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNhQykMRgPV7ajb24okxDhYDBHaQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjQ0OGY0OWQtZDhiZS0z NTNlLWFkODYtNjExNzRkMzdhMjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIhEoJqtqsKKZiR2bjhl7o74jGe//2tZzgzMqG7IYj90j5hN2DpZ 6vuDqVLV9bMNLeGRTG5WMt+ZMdvX6F7HWy5+JFC9TM0IyGZ29FlRn5zSAzoF6F3j YU4XR6SlHa8Nkgs6co42OeRg2LoM6bpLos6A4PhpE3ce5WSsSNbbuDORQEsjg6Jm 4KenbLa1KPqqzU2trCPnBTc2EFQcAKNVjp2d8ueWdccA+J6jMpfpVsNsOzp0wRTo x9ETY5uvbX9pi+eJxYvQ7pAw9NrbYzjVtQG6WEBsaFrHmTQbcdfUKrLS61V54M+a IQ067VdGcALPcvdHaBisA6cfuDmViNd1jh8= -----END CERTIFICATE-----Generated at Sun Jun 8 03:40:07 2025 by rpki-client