$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bfd1b4ad-1486-3092-bbe5-9453ad3d3192.roa File: bfd1b4ad-1486-3092-bbe5-9453ad3d3192.roa (raw, json) Hash identifier: Av2L3tTD5kNdV+a4XKZ/V0kC/Rz9MZM4zpLZcrWhlmg= Subject key identifier: 9F:DB:6B:B3:9B:67:14:30:D3:44:D0:46:7E:19:A6:52:E0:8A:DB:D7 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FB3A0C79D27A7BE206900 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bfd1b4ad-1486-3092-bbe5-9453ad3d3192.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 18779 IP address blocks: 2001:470:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:b3:a0:c7:9d:27:a7:be:20:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=791d02a3-eeba-4958-8c59-1510c9dc0fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:63:a6:2f:99:42:3e:9b:6f:30:c9:02:01:0f: 92:e6:c5:19:85:b0:3a:30:0e:ba:16:89:55:7a:0a: 88:4c:a7:44:a0:33:f9:9e:86:f0:18:cc:dc:2d:39: ed:58:75:47:92:2a:7a:cd:06:ff:27:c2:0b:e5:52: 25:a2:72:04:d7:94:f4:6f:97:6c:b7:6b:03:fd:69: 8b:19:c4:11:e1:74:40:8f:79:75:3e:2e:7b:45:08: 8d:24:7f:47:b0:36:bd:0a:ad:69:22:45:5f:5d:eb: 6f:50:3e:88:21:61:06:c9:7c:20:27:02:c1:3f:26: 47:fe:66:8b:f9:5a:e7:9d:5d:be:e7:bd:95:ff:eb: 07:f5:3c:a5:98:e3:e4:f2:78:2f:05:d6:8b:93:95: f5:90:ce:a7:34:e4:b9:98:63:eb:f2:85:1e:db:8d: 21:ef:a4:88:e2:0e:c7:82:18:8e:a0:c7:4c:f7:90: 61:13:8d:35:32:79:a4:f7:fc:3c:d7:b5:e9:09:d5: ea:38:41:9b:a4:e0:17:a5:a3:10:04:31:c8:24:ab: 6b:44:6b:99:de:f3:0a:ff:cb:24:58:8e:17:b3:5e: 8d:9d:3f:21:32:13:0b:6a:5b:0f:dd:b0:88:0a:7d: ef:10:0a:bb:b3:64:5c:0f:54:9f:5c:3b:e8:68:0e: 46:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:DB:6B:B3:9B:67:14:30:D3:44:D0:46:7E:19:A6:52:E0:8A:DB:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bfd1b4ad-1486-3092-bbe5-9453ad3d3192.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:8a:52:cf:a8:fd:e9:71:5e:3e:12:38:6d:57:74:22:e7:6c: 08:04:cc:71:87:87:51:18:65:b9:8c:21:85:0b:2d:8a:d0:bb: 99:c8:8b:9a:76:a5:7d:5d:68:7f:cc:29:ac:01:aa:3e:7c:f1: 6f:16:0e:5d:0a:2a:83:0d:42:74:40:46:ee:fb:cd:b2:4f:14: de:f9:c1:e3:91:e8:7d:5b:8f:0b:66:16:30:95:1a:22:fd:b0: 23:29:81:08:e1:cd:51:37:00:1f:c2:70:c6:40:e3:52:d2:dd: bb:0d:5d:58:fc:b3:a2:69:e6:45:ae:29:12:7f:86:e2:2c:e6: 3b:dc:a7:36:08:c5:2f:84:a7:74:4d:1e:44:97:5d:56:38:6e: 17:2b:c7:a3:63:81:3d:8d:e4:e9:22:68:e5:36:e4:db:6e:63: 6c:74:b5:ac:e0:14:95:d3:1a:11:9d:a6:df:9a:a5:e7:ac:dd: 0b:f0:77:33:b3:e9:ab:3f:f0:19:58:d5:a2:a8:6f:4e:d7:0d: b3:c8:9d:07:a6:63:7b:83:a8:37:d3:46:6f:2b:17:59:6c:c5: 15:2a:ba:7d:cc:9e:d1:0e:af:da:7c:3e:47:8d:f9:6b:00:b9: b8:25:fd:31:ac:43:ce:a2:90:02:d3:52:a0:b4:65:e5:f8:42: c4:d6:dd:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX7Ogx50np74gaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk NzkxZDAyYTMtZWViYS00OTU4LThjNTktMTUxMGM5ZGMwZmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWOmL5lCPptvMMkCAQ+S5sUZhbA6MA66FolV egqITKdEoDP5nobwGMzcLTntWHVHkip6zQb/J8IL5VIlonIE15T0b5dst2sD/WmL GcQR4XRAj3l1Pi57RQiNJH9HsDa9Cq1pIkVfXetvUD6IIWEGyXwgJwLBPyZH/maL +VrnnV2+572V/+sH9TylmOPk8ngvBdaLk5X1kM6nNOS5mGPr8oUe240h76SI4g7H ghiOoMdM95BhE401Mnmk9/w817XpCdXqOEGbpOAXpaMQBDHIJKtrRGuZ3vMK/8sk WI4Xs16NnT8hMhMLalsP3bCICn3vEAq7s2RcD1SfXDvoaA5GVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ/ba7ObZxQw00TQRn4ZplLgitvXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmZkMWI0YWQtMTQ4Ni0z MDkyLWJiZTUtOTQ1M2FkM2QzMTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALKKUs+o/elxXj4SOG1XdCLnbAgEzHGHh1EYZbmMIYULLYrQu5nI i5p2pX1daH/MKawBqj588W8WDl0KKoMNQnRARu77zbJPFN75weOR6H1bjwtmFjCV GiL9sCMpgQjhzVE3AB/CcMZA41LS3bsNXVj8s6Jp5kWuKRJ/huIs5jvcpzYIxS+E p3RNHkSXXVY4bhcrx6NjgT2N5OkiaOU25NtuY2x0tazgFJXTGhGdpt+apees3Qvw dzOz6as/8BlY1aKob07XDbPInQemY3uDqDfTRm8rF1lsxRUqun3MntEOr9p8PkeN +WsAubgl/TGsQ86ikALTUqC0ZeX4QsTW3WE= -----END CERTIFICATE-----Generated at Thu Jun 5 18:36:51 2025 by rpki-client