$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf7b163f-eb7d-38a7-804a-f09031da09e1.roa File: bf7b163f-eb7d-38a7-804a-f09031da09e1.roa (raw, json) Hash identifier: 12+u21WB9jX+hLfkjllwsvCwPDz49Pp58Xape/hySyE= Subject key identifier: 7F:59:BE:68:BC:26:D6:F5:EC:BF:A9:78:ED:B4:1F:7E:CA:A7:0C:61 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A10353085F0701B468835EC00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf7b163f-eb7d-38a7-804a-f09031da09e1.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 30860 IP address blocks: 2001:470:427::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:30:85:f0:70:1b:46:88:35:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=0d1d519e-4846-4eb7-ac27-8342094ba079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:64:66:1e:30:d7:42:17:24:fc:b3:54:21:99: 33:31:bf:a9:1e:89:73:b2:15:8e:8b:1f:15:04:0f: da:9d:ba:29:78:46:94:88:3f:fc:18:a6:d9:3a:6b: a2:14:42:a4:d3:d1:ec:60:a1:99:8a:99:47:5b:a4: 27:2e:31:30:92:29:73:f0:c3:e1:71:ea:c4:5d:70: 4b:fa:67:6f:70:49:2a:fe:ef:bf:e7:db:ba:34:a7: 6d:9f:b8:cb:a0:0d:fc:e2:cd:e8:5e:8d:30:13:92: 5a:80:10:60:fe:27:96:8c:4f:a9:cc:5a:c1:16:fb: a9:0e:07:dd:9f:65:c2:2f:5f:3a:8b:3f:18:d0:8f: 54:6c:06:26:03:b0:f5:9c:3f:c5:69:02:52:2c:02: c2:19:a9:79:5d:ba:47:b5:38:20:a2:d7:39:44:b8: 5b:2f:80:7a:4a:c7:7d:33:63:5f:f4:8e:01:60:f1: 27:15:38:eb:fb:cf:9a:16:40:6b:65:fe:f4:51:5e: 23:ac:fb:89:09:00:ee:33:6f:4f:a4:41:48:80:74: 27:a0:ac:3a:5f:7e:b3:62:1d:1d:80:aa:3f:3b:ea: 7a:c0:03:e5:86:99:c6:19:ed:36:a3:cc:e0:1e:b3: 71:c8:d3:36:cc:f0:00:73:e3:c3:f9:2b:02:c1:84: 66:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:59:BE:68:BC:26:D6:F5:EC:BF:A9:78:ED:B4:1F:7E:CA:A7:0C:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf7b163f-eb7d-38a7-804a-f09031da09e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:427::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:b4:cd:0d:f1:9a:47:08:89:a0:c3:65:4b:ad:31:6a:cb:68: 8a:a3:c7:30:3c:4f:a0:8f:6c:d8:e0:aa:b4:14:6e:c5:3e:da: c7:b0:f6:0e:c1:3d:87:d9:58:02:32:70:25:bb:0b:12:9b:1a: 0b:cf:bc:1f:4b:82:5d:e5:03:da:f8:8c:f0:95:ee:92:4f:5f: 31:44:9c:86:a4:11:98:25:c4:99:89:63:9d:b0:dd:0f:b9:9b: b0:65:54:38:72:6c:e9:77:b2:bd:5a:24:d2:b6:79:e4:21:ec: 20:f4:42:7e:11:da:bf:95:a9:76:7d:d1:a4:6d:e3:a6:a1:78: 5c:51:71:40:83:a4:f9:aa:46:90:a2:dc:be:da:d3:52:65:2b: 1e:a4:c2:d6:46:82:e0:e6:b8:3a:6f:52:23:88:13:5a:fe:4b: 97:29:5a:4c:ba:6e:8f:a2:29:2b:c7:0c:f0:10:1c:bd:ae:8d: 96:ac:d6:b2:ec:18:6b:19:2c:b0:1b:c6:ae:e0:92:c6:d4:f7: f1:b1:1a:fa:9f:10:6b:dd:23:e2:ce:90:b6:02:0b:e4:59:2f: 52:e5:df:0f:32:aa:82:b3:0d:a6:42:2a:08:f4:80:9d:83:95: 7b:5f:ca:51:19:a4:60:34:de:28:5b:72:95:01:21:33:a7:0c: 34:40:21:f9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoQNTCF8HAbRog17AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk MGQxZDUxOWUtNDg0Ni00ZWI3LWFjMjctODM0MjA5NGJhMDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmRmHjDXQhck/LNUIZkzMb+pHolzshWOix8V BA/anbopeEaUiD/8GKbZOmuiFEKk09HsYKGZiplHW6QnLjEwkilz8MPhcerEXXBL +mdvcEkq/u+/59u6NKdtn7jLoA384s3oXo0wE5JagBBg/ieWjE+pzFrBFvupDgfd n2XCL186iz8Y0I9UbAYmA7D1nD/FaQJSLALCGal5XbpHtTggotc5RLhbL4B6Ssd9 M2Nf9I4BYPEnFTjr+8+aFkBrZf70UV4jrPuJCQDuM29PpEFIgHQnoKw6X36zYh0d gKo/O+p6wAPlhpnGGe02o8zgHrNxyNM2zPAAc+PD+SsCwYRmNwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH9Zvmi8Jtb17L+peO20H37KpwxhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmY3YjE2M2YtZWI3ZC0z OGE3LTgwNGEtZjA5MDMxZGEwOWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEO0zQ3xmkcIiaDDZUutMWrLaIqjxzA8T6CPbNjgqrQUbsU+2sew 9g7BPYfZWAIycCW7CxKbGgvPvB9Lgl3lA9r4jPCV7pJPXzFEnIakEZglxJmJY52w 3Q+5m7BlVDhybOl3sr1aJNK2eeQh7CD0Qn4R2r+VqXZ90aRt46aheFxRcUCDpPmq RpCi3L7a01JlKx6kwtZGguDmuDpvUiOIE1r+S5cpWky6bo+iKSvHDPAQHL2ujZas 1rLsGGsZLLAbxq7gksbU9/GxGvqfEGvdI+LOkLYCC+RZL1Ll3w8yqoKzDaZCKgj0 gJ2DlXtfylEZpGA03ihbcpUBITOnDDRAIfk= -----END CERTIFICATE-----Generated at Thu Jun 5 18:30:02 2025 by rpki-client