$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/be3f7955-10ed-3235-9011-8b9ab5aacc3f.roa File: be3f7955-10ed-3235-9011-8b9ab5aacc3f.roa (raw, json) Hash identifier: Jq2Ff1jRC3RWa1zJkjpmD6kmy1ISwWFQL1DEU+EYaR0= Subject key identifier: 6A:26:95:4F:15:1B:C6:03:32:3E:81:6C:44:E1:47:9D:54:6B:AE:5C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A5FC5CBE664D1FE40BDA0B500 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/be3f7955-10ed-3235-9011-8b9ab5aacc3f.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 5062 IP address blocks: 2001:470:43d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:cb:e6:64:d1:fe:40:bd:a0:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=c88e51f4-afd3-4719-9b07-f557a94a6ee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:35:83:52:ae:99:61:12:cb:80:44:68:4a:fa: ee:de:b4:67:04:cc:34:a1:3d:f4:55:40:95:83:22: 68:9c:d2:85:e9:4c:a4:40:8d:4f:41:46:19:05:ae: b9:5c:91:64:0d:ee:ae:fd:c2:f1:b3:ef:59:04:8f: 20:c1:ab:5a:97:b1:e9:47:e4:f5:3b:2d:5c:6c:7a: 5f:a1:cb:bb:24:b7:d7:a4:ee:d9:29:d2:08:d0:8d: 43:eb:ed:61:06:12:37:16:82:5d:60:43:2b:76:c8: 59:6b:f0:32:a2:9a:90:56:c2:b0:63:f9:3b:a9:a9: 88:26:71:0c:60:7d:d4:d5:81:56:7f:8d:4f:76:e6: 6c:f6:05:53:6b:12:44:53:76:17:39:76:f3:e5:b1: 8b:6c:8e:6b:5b:39:19:11:eb:5b:c8:18:a0:fb:3b: 65:9b:20:3a:9b:41:e2:9f:64:e3:58:5a:16:bc:2e: 7c:eb:b6:2d:4a:2d:d5:c8:1c:5c:5c:ec:90:29:af: 1d:8e:7d:fa:82:2b:ba:0f:b8:8b:ca:95:37:e7:b3: b9:61:df:22:44:d0:95:cc:20:27:61:65:ac:fe:f4: 7c:51:9e:57:1b:66:af:dc:b9:f5:be:37:b3:65:ac: aa:f7:81:f6:1c:05:2f:77:ad:96:b0:15:1b:4c:37: c9:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:26:95:4F:15:1B:C6:03:32:3E:81:6C:44:E1:47:9D:54:6B:AE:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/be3f7955-10ed-3235-9011-8b9ab5aacc3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:43d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:00:6e:d1:a7:d0:a0:52:b1:90:66:a6:fc:df:43:4d:50:76: 03:4a:a6:48:1e:6e:12:cd:ad:85:d4:30:af:58:d4:30:f7:c4: ed:3e:21:9f:7d:f2:e6:37:9f:bb:8c:2c:62:4e:94:22:07:64: 9b:c6:26:ff:2c:77:88:be:e7:a3:d5:d7:82:31:a5:c6:93:33: 7a:bf:51:f4:9b:1e:f7:6a:da:74:a8:bf:39:7e:b5:fe:cb:e1: be:c6:19:6e:e1:64:b8:3e:80:a5:b6:af:0b:64:15:d6:cf:e0: 96:83:57:d8:77:96:82:b6:2c:28:1d:f3:f9:1a:74:63:e2:d0: db:dd:a1:b9:d7:da:a9:6b:da:5b:90:6c:eb:40:28:00:e8:ca: aa:f8:b4:84:d9:5d:39:a5:ee:ce:52:6f:2c:a2:5d:fb:57:c1: 76:3d:aa:9d:10:4a:56:96:ce:7b:6f:7b:64:08:d9:29:30:b1: d4:ec:d7:a1:39:96:92:cb:c7:8b:5c:4c:a8:01:b0:da:f0:10: 52:9f:7c:0b:1c:07:da:0c:0c:b0:18:d3:7a:30:f0:fe:3d:38: 5b:8c:d2:3a:80:b1:da:47:0d:7e:b2:6d:eb:3d:29:b5:dd:28: 13:bd:52:38:9d:87:b4:ca:92:d2:30:a0:a2:27:06:2a:e0:71: e3:e9:6b:bf -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpfxcvmZNH+QL2gtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk Yzg4ZTUxZjQtYWZkMy00NzE5LTliMDctZjU1N2E5NGE2ZWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzWDUq6ZYRLLgERoSvru3rRnBMw0oT30VUCV gyJonNKF6UykQI1PQUYZBa65XJFkDe6u/cLxs+9ZBI8gwatal7HpR+T1Oy1cbHpf ocu7JLfXpO7ZKdII0I1D6+1hBhI3FoJdYEMrdshZa/AyopqQVsKwY/k7qamIJnEM YH3U1YFWf41PduZs9gVTaxJEU3YXOXbz5bGLbI5rWzkZEetbyBig+ztlmyA6m0Hi n2TjWFoWvC5867YtSi3VyBxcXOyQKa8djn36giu6D7iLypU357O5Yd8iRNCVzCAn YWWs/vR8UZ5XG2av3Ln1vjezZayq94H2HAUvd62WsBUbTDfJxQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGomlU8VG8YDMj6BbEThR51Ua65cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmUzZjc5NTUtMTBlZC0z MjM1LTkwMTEtOGI5YWI1YWFjYzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQ9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADoAbtGn0KBSsZBmpvzfQ01QdgNKpkgebhLNrYXUMK9Y1DD3xO0+ IZ998uY3n7uMLGJOlCIHZJvGJv8sd4i+56PV14IxpcaTM3q/UfSbHvdq2nSovzl+ tf7L4b7GGW7hZLg+gKW2rwtkFdbP4JaDV9h3loK2LCgd8/kadGPi0NvdobnX2qlr 2luQbOtAKADoyqr4tITZXTml7s5SbyyiXftXwXY9qp0QSlaWzntve2QI2SkwsdTs 16E5lpLLx4tcTKgBsNrwEFKffAscB9oMDLAY03ow8P49OFuM0jqAsdpHDX6ybes9 KbXdKBO9Ujidh7TKktIwoKInBirgcePpa78= -----END CERTIFICATE-----Generated at Thu Jul 3 09:10:26 2025 by rpki-client