$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/baba8a46-5e4b-3132-a577-25dfcc514262.roa File: baba8a46-5e4b-3132-a577-25dfcc514262.roa (raw, json) Hash identifier: qAI2oTmuA5o2L4XxIg0OqM4taDOp+QJFWk1X7Zal80M= Subject key identifier: 11:DB:29:C6:7B:DD:F7:9A:AE:B7:A3:FD:64:AF:08:41:20:0D:A5:49 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FC6F0C3CAFBB53247AE80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/baba8a46-5e4b-3132-a577-25dfcc514262.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 147024 IP address blocks: 2001:470:21d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:c6:f0:c3:ca:fb:b5:32:47:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=21faffe1-46e9-44dd-9f3f-0790a1bf3089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:5c:54:c7:8e:dd:1f:4a:11:3e:d7:d3:ed:ba: be:0a:fb:77:7c:cc:e7:a9:41:7b:cd:a5:d3:06:f3: dd:51:95:c9:fb:8a:c8:43:85:20:78:98:17:a1:95: 91:3d:62:8f:3a:1a:69:f0:2f:cb:7f:f5:f4:af:a6: 76:f1:71:81:5f:e3:c8:c4:dc:47:50:08:78:e6:eb: 49:13:06:53:32:d1:4a:d7:34:18:20:5c:48:18:04: a7:c1:1a:a7:4d:8a:6a:eb:54:2d:b4:0c:a6:97:26: c5:5b:1f:e3:89:8f:c2:18:85:2e:f7:1c:7a:63:f5: 22:df:ec:59:dc:de:e7:f9:e6:85:20:0b:b6:ff:48: c6:ef:8b:a6:20:a4:0b:0b:a3:7f:bf:59:be:74:3b: 1f:c0:33:24:3a:f5:32:90:72:52:8f:11:c7:4a:ed: 91:1b:ff:cf:51:2a:5e:8e:3b:2a:7e:96:d7:c9:33: aa:7a:42:f2:66:84:e8:2b:7e:fc:a1:91:f9:be:72: 30:17:f0:c8:59:19:e8:90:4f:6e:13:7e:bc:85:c3: ab:d6:b2:07:89:0e:f2:42:3b:85:6c:cf:50:48:42: 3c:f1:66:21:30:6f:3f:1f:82:0a:c4:44:bb:a1:0b: c4:3b:90:00:09:0d:cc:c5:5d:9d:43:2e:bd:9d:71: 95:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:DB:29:C6:7B:DD:F7:9A:AE:B7:A3:FD:64:AF:08:41:20:0D:A5:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/baba8a46-5e4b-3132-a577-25dfcc514262.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:21d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:78:04:66:63:d3:e3:fa:49:98:14:30:25:88:27:f4:45:6c: 05:89:90:48:12:e8:d1:a1:bd:19:f6:e4:25:d9:e3:e3:56:0f: 3c:ea:21:6d:25:d6:58:73:8c:de:f1:b4:54:ff:9d:6e:a2:af: 8e:0a:e2:e9:37:50:5f:c2:40:11:9a:6f:3b:0d:d1:5b:b1:6b: d8:2a:a2:47:90:e7:49:b7:ee:30:f3:18:b2:97:25:93:19:9d: f0:6e:74:31:06:c0:72:0b:8d:23:43:81:df:05:9d:90:bf:f4: 7e:49:1a:a3:f9:0e:e1:0d:39:ae:f6:56:c0:f9:1c:05:93:b1: 4f:d4:c6:86:b4:11:bc:54:ed:47:90:ff:1d:b3:ea:2a:e0:1b: 1d:d3:7c:21:ff:e5:d5:60:d1:b5:34:4b:8a:48:5b:f0:5a:a7: 68:d6:a1:ce:bb:05:91:88:9f:d7:11:8d:b7:d6:2c:22:b1:7d: 7c:fb:cc:a8:6b:63:8d:0e:f9:4e:fd:12:3d:1e:80:f3:b5:1c: 38:a0:1e:67:02:0c:46:47:62:45:e2:33:e7:34:77:7a:fe:b2: 04:1c:37:8d:56:df:be:04:ba:80:15:ac:a5:4d:e1:40:4f:40: 23:79:28:39:e5:eb:53:b9:8d:c0:ef:a4:69:bf:78:16:13:75: f1:44:20:af -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX8bww8r7tTJHroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk MjFmYWZmZTEtNDZlOS00NGRkLTlmM2YtMDc5MGExYmYzMDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1xUx47dH0oRPtfT7bq+Cvt3fMznqUF7zaXT BvPdUZXJ+4rIQ4UgeJgXoZWRPWKPOhpp8C/Lf/X0r6Z28XGBX+PIxNxHUAh45utJ EwZTMtFK1zQYIFxIGASnwRqnTYpq61QttAymlybFWx/jiY/CGIUu9xx6Y/Ui3+xZ 3N7n+eaFIAu2/0jG74umIKQLC6N/v1m+dDsfwDMkOvUykHJSjxHHSu2RG//PUSpe jjsqfpbXyTOqekLyZoToK378oZH5vnIwF/DIWRnokE9uE368hcOr1rIHiQ7yQjuF bM9QSEI88WYhMG8/H4IKxES7oQvEO5AACQ3MxV2dQy69nXGVEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBHbKcZ73fearrej/WSvCEEgDaVJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmFiYThhNDYtNWU0Yi0z MTMyLWE1NzctMjVkZmNjNTE0MjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAId MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADB4BGZj0+P6SZgUMCWIJ/RFbAWJkEgS6NGhvRn25CXZ4+NWDzzq IW0l1lhzjN7xtFT/nW6ir44K4uk3UF/CQBGabzsN0Vuxa9gqokeQ50m37jDzGLKX JZMZnfBudDEGwHILjSNDgd8FnZC/9H5JGqP5DuENOa72VsD5HAWTsU/Uxoa0EbxU 7UeQ/x2z6irgGx3TfCH/5dVg0bU0S4pIW/Bap2jWoc67BZGIn9cRjbfWLCKxfXz7 zKhrY40O+U79Ej0egPO1HDigHmcCDEZHYkXiM+c0d3r+sgQcN41W374EuoAVrKVN 4UBPQCN5KDnl61O5jcDvpGm/eBYTdfFEIK8= -----END CERTIFICATE-----Generated at Sun Jun 8 04:19:09 2025 by rpki-client