$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c1033ffa-6361-3ea0-812d-af8ec89f8f29.roa File: c1033ffa-6361-3ea0-812d-af8ec89f8f29.roa (raw, json) Hash identifier: kJR1QgFRzGyDjBCWlP014BWW5ld57C3AmkWy7OlqV4k= Subject key identifier: D9:25:BA:AA:CC:C0:3A:03:38:4D:17:E9:01:A3:DF:E5:86:F9:CF:4E Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A189554FD12CC7E591F0D7E00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c1033ffa-6361-3ea0-812d-af8ec89f8f29.roa Signing time: Fri 06 Jun 2025 01:00:50 +0000 ROA not before: Fri 06 Jun 2025 01:00:50 +0000 ROA not after: Thu 04 Sep 2025 01:00:50 +0000 asID: 23437 IP address blocks: 2001:470:3a5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:18:95:54:fd:12:cc:7e:59:1f:0d:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 6 01:00:50 2025 GMT Not After : Sep 4 01:00:50 2025 GMT Subject: CN=a48bb04d-ed24-466f-8466-026f80c20fe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:be:5c:ac:23:c7:fc:67:cf:b0:46:2b:ff:3f: 66:ff:8b:17:df:a5:fd:dc:20:b9:86:84:0e:05:a1: 64:a7:c9:50:29:34:5d:e8:1f:a0:32:bb:b5:16:6d: 6c:c4:68:c1:bc:1f:24:00:9a:90:81:30:31:7f:c2: 58:8f:40:6e:4c:61:a0:24:11:f6:a8:a1:33:e4:7d: 71:6b:3d:b8:c5:8e:d4:ab:7d:78:ee:d2:ad:18:9b: 97:65:12:12:07:b3:4e:dd:48:f7:38:ca:bb:7e:ee: 84:94:59:62:10:ef:b8:40:c8:d6:d7:a4:13:13:7e: 77:c5:87:e4:e5:79:54:18:83:73:85:36:8d:dc:ae: 96:78:83:4c:96:5e:69:9b:f2:96:b6:4c:9f:29:04: 7f:66:07:44:74:04:82:bf:d8:c9:59:29:0d:b4:13: dd:02:1d:f8:79:9e:a5:eb:f1:27:30:88:c9:02:68: 00:28:53:54:29:83:a0:c3:c0:e9:a9:73:85:e9:1f: f4:82:72:92:0a:26:f7:6f:05:70:86:7d:7e:69:33: 3c:9a:f1:66:e8:3c:be:f3:53:74:6e:7b:86:fe:ed: 58:8d:24:e8:7b:91:35:6a:c8:a4:5b:69:dc:44:01: 99:5e:05:fc:31:12:60:de:4e:f0:3b:6b:f7:9f:e5: 45:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:25:BA:AA:CC:C0:3A:03:38:4D:17:E9:01:A3:DF:E5:86:F9:CF:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c1033ffa-6361-3ea0-812d-af8ec89f8f29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3a5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:58:c0:5f:d9:00:ef:23:51:64:9a:23:e0:c7:f7:7c:4b:c1: fb:a7:8c:65:55:e2:f7:6a:31:d4:1b:65:10:4e:af:19:b7:97: 81:2c:c9:23:b1:fc:45:35:ce:fc:99:00:c5:60:d2:f6:62:b9: 51:5e:a4:f7:dd:d1:0d:30:77:0b:60:36:79:99:fa:0f:f4:bf: 1d:bc:eb:a4:24:93:6e:a7:8d:3b:7b:7c:15:13:ae:11:44:bf: 8a:3a:16:2a:b6:c7:94:e3:18:6f:dd:4c:8f:42:a7:d7:46:4e: 63:46:eb:96:34:76:00:1e:9d:63:9a:43:c4:cf:73:6e:93:fa: e5:8c:8e:06:d4:23:4d:41:f6:08:bd:a2:b4:44:d4:c7:f1:75: 2e:0e:00:50:f0:fe:9f:aa:85:ae:20:86:45:32:8e:af:7f:36: c4:87:27:e0:0e:4b:86:8f:3b:fc:88:e0:77:e9:c2:43:32:9b: 0f:06:11:d2:5f:50:90:72:b5:75:e3:00:b6:7f:00:d0:a8:c4: fc:39:ca:d4:0b:5d:ef:21:78:f4:68:44:d8:10:62:b2:be:ad: cf:91:8f:c3:6a:06:43:a9:cf:aa:fb:1b:01:fa:84:60:70:70: dd:60:97:61:ea:97:ee:0c:ad:63:f6:d8:3c:c1:43:15:b9:70: 8b:14:72:c6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoYlVT9Esx+WR8NfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDYwNjAxMDA1MFoXDTI1MDkwNDAxMDA1MFowLzEtMCsGA1UEAxMk YTQ4YmIwNGQtZWQyNC00NjZmLTg0NjYtMDI2ZjgwYzIwZmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlL5crCPH/GfPsEYr/z9m/4sX36X93CC5hoQO BaFkp8lQKTRd6B+gMru1Fm1sxGjBvB8kAJqQgTAxf8JYj0BuTGGgJBH2qKEz5H1x az24xY7Uq3147tKtGJuXZRISB7NO3Uj3OMq7fu6ElFliEO+4QMjW16QTE353xYfk 5XlUGINzhTaN3K6WeINMll5pm/KWtkyfKQR/ZgdEdASCv9jJWSkNtBPdAh34eZ6l 6/EnMIjJAmgAKFNUKYOgw8DpqXOF6R/0gnKSCib3bwVwhn1+aTM8mvFm6Dy+81N0 bnuG/u1YjSToe5E1asikW2ncRAGZXgX8MRJg3k7wO2v3n+VFcQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNkluqrMwDoDOE0X6QGj3+WG+c9OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzEwMzNmZmEtNjM2MS0z ZWEwLTgxMmQtYWY4ZWM4OWY4ZjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAItYwF/ZAO8jUWSaI+DH93xLwfunjGVV4vdqMdQbZRBOrxm3l4Es ySOx/EU1zvyZAMVg0vZiuVFepPfd0Q0wdwtgNnmZ+g/0vx2866Qkk26njTt7fBUT rhFEv4o6Fiq2x5TjGG/dTI9Cp9dGTmNG65Y0dgAenWOaQ8TPc26T+uWMjgbUI01B 9gi9orRE1MfxdS4OAFDw/p+qha4ghkUyjq9/NsSHJ+AOS4aPO/yI4HfpwkMymw8G EdJfUJBytXXjALZ/ANCoxPw5ytQLXe8hePRoRNgQYrK+rc+Rj8NqBkOpz6r7GwH6 hGBwcN1gl2Hql+4MrWP22DzBQxW5cIsUcsY= -----END CERTIFICATE-----Generated at Sun Jun 8 00:13:38 2025 by rpki-client