$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b720e6e1-bfd6-3554-9954-1efcf5ba348e.roa File: b720e6e1-bfd6-3554-9954-1efcf5ba348e.roa (raw, json) Hash identifier: 4PuP/E9XUqExOwG1QPjl7XtyV7krOT5ADuXUiCvwmNw= Subject key identifier: 8B:AB:ED:18:EA:2C:68:61:3B:90:AF:E8:B2:EE:CA:6C:0C:15:A5:43 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FB3EA7F88BE373F7D3840 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b720e6e1-bfd6-3554-9954-1efcf5ba348e.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 33309 IP address blocks: 2001:470:5f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:b3:ea:7f:88:be:37:3f:7d:38:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=57cb7132-b965-48e8-98e7-bf6c549cf23a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7d:50:d7:01:a0:71:ee:e6:6d:84:5e:75:1c: d1:00:e5:18:10:33:3a:3c:76:d8:5d:99:04:ba:4c: b8:5b:71:01:af:1a:d8:0e:80:f3:cb:8c:83:9c:ef: 34:1a:98:33:de:30:a4:f0:dc:05:28:b3:e9:73:46: 9a:a2:4e:2f:18:e4:ea:58:00:62:0f:0d:c1:5f:86: 30:d5:1a:97:f5:cf:c1:42:f7:ed:ef:2c:0e:51:38: 84:65:aa:c4:08:8d:bd:5f:a6:bf:b7:90:ab:11:c3: 6c:a6:18:35:ea:83:67:e8:f6:e3:89:90:56:65:ec: 3e:3c:1b:f7:e4:52:9a:4a:76:aa:ee:e8:64:29:9e: 2a:23:aa:af:2f:1b:30:f1:35:b6:30:58:ec:b0:ee: ac:45:78:65:65:a8:1b:d1:9a:09:6d:57:62:64:4b: b5:7b:dd:ac:18:78:e8:18:08:1a:27:4d:0c:d1:9a: b9:3d:28:e8:83:da:3d:76:5e:dc:7a:43:f0:aa:2b: 4d:ce:fb:15:98:32:bd:2c:c5:7a:f0:ab:8f:9d:3d: 6f:7a:82:ac:0e:7e:4c:16:e7:c1:b6:06:95:b4:49: de:c1:71:20:78:62:e5:47:13:af:81:d5:d8:1e:41: b1:1b:74:11:88:95:6f:e6:7c:1c:fe:8a:6a:2e:b2: 4f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:AB:ED:18:EA:2C:68:61:3B:90:AF:E8:B2:EE:CA:6C:0C:15:A5:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b720e6e1-bfd6-3554-9954-1efcf5ba348e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:5f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:6d:1c:7a:04:e7:11:9f:91:17:0d:c4:e7:d1:c2:38:9a:55: 8b:f6:08:aa:57:48:98:78:e1:07:a6:92:ad:9c:f5:22:f0:a4: 25:ec:71:d5:c0:09:f9:31:c0:90:74:f7:a0:38:b0:d1:d2:dc: 68:9a:56:46:b0:0a:a8:b3:9b:0f:00:70:5d:6f:d6:79:51:cb: cb:79:38:42:56:9f:fe:45:fc:4d:35:7b:3d:ee:c3:ef:b2:f9: 78:34:4a:14:64:ea:2f:a7:d1:53:44:89:51:e8:a4:9f:ac:d7: 71:0a:e3:51:69:08:a2:8f:2f:b4:69:1e:ed:0a:b8:ba:71:75: ca:46:f8:60:06:9a:0c:b0:2b:09:df:a4:a4:18:08:fd:74:0f: 34:59:d6:4d:62:4b:7f:27:c4:08:b0:6e:d6:da:2d:09:8b:08: 0b:d9:86:34:dc:ff:37:22:2f:26:6a:bd:c2:69:ec:8f:ed:59: b0:2e:80:16:1f:0f:75:82:8b:a9:6e:c7:21:d4:f4:a8:ae:0a: bf:e9:2d:36:f4:9e:86:60:b9:d8:ed:2d:08:3b:14:98:63:2b: c3:84:ed:f1:f8:62:03:71:d4:20:b6:6a:35:05:48:aa:01:63: 7f:9f:fa:eb:35:b5:2d:a7:45:80:af:67:54:26:5a:57:bd:0d: 36:b0:e4:79 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX7Pqf4i+Nz99OEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk NTdjYjcxMzItYjk2NS00OGU4LTk4ZTctYmY2YzU0OWNmMjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr31Q1wGgce7mbYRedRzRAOUYEDM6PHbYXZkE uky4W3EBrxrYDoDzy4yDnO80Gpgz3jCk8NwFKLPpc0aaok4vGOTqWABiDw3BX4Yw 1RqX9c/BQvft7ywOUTiEZarECI29X6a/t5CrEcNsphg16oNn6PbjiZBWZew+PBv3 5FKaSnaq7uhkKZ4qI6qvLxsw8TW2MFjssO6sRXhlZagb0ZoJbVdiZEu1e92sGHjo GAgaJ00M0Zq5PSjog9o9dl7cekPwqitNzvsVmDK9LMV68KuPnT1veoKsDn5MFufB tgaVtEnewXEgeGLlRxOvgdXYHkGxG3QRiJVv5nwc/opqLrJPKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIur7RjqLGhhO5Cv6LLuymwMFaVDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjcyMGU2ZTEtYmZkNi0z NTU0LTk5NTQtMWVmY2Y1YmEzNDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcABf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAltHHoE5xGfkRcNxOfRwjiaVYv2CKpXSJh44Qemkq2c9SLwpCXs cdXACfkxwJB096A4sNHS3GiaVkawCqizmw8AcF1v1nlRy8t5OEJWn/5F/E01ez3u w++y+Xg0ShRk6i+n0VNEiVHopJ+s13EK41FpCKKPL7RpHu0KuLpxdcpG+GAGmgyw KwnfpKQYCP10DzRZ1k1iS38nxAiwbtbaLQmLCAvZhjTc/zciLyZqvcJp7I/tWbAu gBYfD3WCi6luxyHU9KiuCr/pLTb0noZgudjtLQg7FJhjK8OE7fH4YgNx1CC2ajUF SKoBY3+f+us1tS2nRYCvZ1QmWle9DTaw5Hk= -----END CERTIFICATE-----Generated at Mon Jun 9 00:08:25 2025 by rpki-client