$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c5d9fb6c-1fbd-3287-830f-7a1d4b0126d6.roa File: c5d9fb6c-1fbd-3287-830f-7a1d4b0126d6.roa (raw, json) Hash identifier: 7sTjWgTOcry9aTIbA/X2Ov5ua9NTb+FL5rdYFnrXBsE= Subject key identifier: 8F:86:73:D2:F4:5A:FE:8C:53:0C:BB:6D:DB:1D:19:31:F2:0F:7C:18 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849B844BE411F8D967AD3D45AC0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c5d9fb6c-1fbd-3287-830f-7a1d4b0126d6.roa Signing time: Fri 02 May 2025 13:01:00 +0000 ROA not before: Fri 02 May 2025 13:01:00 +0000 ROA not after: Thu 31 Jul 2025 13:01:00 +0000 asID: 30013 IP address blocks: 2001:470:3d1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b8:44:be:41:1f:8d:96:7a:d3:d4:5a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 2 13:01:00 2025 GMT Not After : Jul 31 13:01:00 2025 GMT Subject: CN=95343c57-d297-43ce-9216-e12529761700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:29:2b:46:87:77:64:36:f2:fc:f7:cf:c3:36: 55:68:b0:bd:4a:79:bf:c1:63:05:a7:e2:28:ea:06: ce:5c:00:11:06:0b:c2:02:a8:7a:d5:18:1c:41:c3: 60:87:61:5f:23:4f:b6:d2:06:ca:02:33:47:61:02: 60:f9:c4:7d:e0:c5:07:30:fd:d8:24:65:57:8f:e5: ba:a3:70:38:bc:25:64:d9:9b:6e:c9:85:08:72:ca: 18:c7:d8:fc:3e:5e:bf:a6:9c:39:69:d8:d1:9d:ec: 3f:1a:fd:33:3c:f7:5c:d1:50:9d:7e:16:ed:19:52: 36:29:25:9d:e9:a9:f5:2c:49:be:74:8e:cd:ab:0b: 66:be:c2:80:36:b6:f2:72:a2:e5:27:96:19:7b:8d: 0d:a6:44:1b:11:05:46:c2:d0:f8:bf:e8:48:90:7c: 06:fe:c7:23:73:1d:9e:30:49:f2:f2:a9:c5:2a:fb: ec:3c:4b:8f:64:30:01:90:fb:b3:5d:20:7b:77:32: cf:b4:ec:a6:8b:b0:fb:14:57:b3:49:57:22:bf:49: 82:e5:3b:cd:83:00:f9:77:68:09:bb:22:47:8d:e6: 75:a0:9e:68:fe:5b:91:2a:02:5a:fd:9b:9d:a7:83: 68:06:3a:ce:d6:04:98:b1:9a:63:8f:64:db:36:59: bb:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:86:73:D2:F4:5A:FE:8C:53:0C:BB:6D:DB:1D:19:31:F2:0F:7C:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c5d9fb6c-1fbd-3287-830f-7a1d4b0126d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3d1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:20:e9:e1:01:56:e3:40:7b:4f:16:26:ae:4a:6e:32:29:98: d5:d0:ed:18:e0:51:9c:ed:da:6f:ea:c9:0a:88:bf:72:6e:75: a9:a8:fb:44:43:5a:a2:88:85:0d:14:07:c1:5d:79:f9:36:51: 5d:12:5b:b6:91:4f:f3:a8:71:5f:de:7e:b6:62:66:11:81:c8: b4:f6:c8:20:18:6c:42:91:c3:8b:5d:ff:dc:ff:ac:38:4e:ef: 28:40:27:59:83:38:ae:cd:d9:1e:6e:80:22:eb:00:65:6c:9a: 2c:c9:33:07:1d:e2:79:ec:39:30:dc:d9:6c:dd:ec:0e:05:48: dc:19:1a:9c:f3:76:3e:1e:72:e5:2e:81:29:97:ee:c0:05:b4: 33:17:9a:2d:c3:01:30:ab:a5:27:19:20:49:e1:ea:68:fd:e5: 55:73:bd:68:f8:75:75:a0:71:ad:54:20:26:e0:30:33:50:74: 2a:91:68:1a:6c:9c:e5:ed:91:3e:95:0e:5b:71:66:cf:26:99: e5:90:b6:f4:e0:72:66:eb:d5:00:a9:65:b1:e0:f4:f8:78:ef: 6e:3e:0c:a7:8a:61:e3:9b:97:17:3e:bd:97:30:9b:90:72:17: ea:7c:57:73:f1:e1:a7:18:8e:79:da:ae:5b:73:cc:2d:45:54: 63:e3:26:51 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm4RL5BH42WetPUWsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUwMjEzMDEwMFoXDTI1MDczMTEzMDEwMFowLzEtMCsGA1UEAxMk OTUzNDNjNTctZDI5Ny00M2NlLTkyMTYtZTEyNTI5NzYxNzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySkrRod3ZDby/PfPwzZVaLC9Snm/wWMFp+Io 6gbOXAARBgvCAqh61RgcQcNgh2FfI0+20gbKAjNHYQJg+cR94MUHMP3YJGVXj+W6 o3A4vCVk2ZtuyYUIcsoYx9j8Pl6/ppw5adjRnew/Gv0zPPdc0VCdfhbtGVI2KSWd 6an1LEm+dI7NqwtmvsKANrbycqLlJ5YZe40NpkQbEQVGwtD4v+hIkHwG/scjcx2e MEny8qnFKvvsPEuPZDABkPuzXSB7dzLPtOymi7D7FFezSVciv0mC5TvNgwD5d2gJ uyJHjeZ1oJ5o/luRKgJa/Zudp4NoBjrO1gSYsZpjj2TbNlm7eQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI+Gc9L0Wv6MUwy7bdsdGTHyD3wYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzVkOWZiNmMtMWZiZC0z Mjg3LTgzMGYtN2ExZDRiMDEyNmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIwg6eEBVuNAe08WJq5KbjIpmNXQ7RjgUZzt2m/qyQqIv3Judamo +0RDWqKIhQ0UB8Fdefk2UV0SW7aRT/OocV/efrZiZhGByLT2yCAYbEKRw4td/9z/ rDhO7yhAJ1mDOK7N2R5ugCLrAGVsmizJMwcd4nnsOTDc2Wzd7A4FSNwZGpzzdj4e cuUugSmX7sAFtDMXmi3DATCrpScZIEnh6mj95VVzvWj4dXWgca1UICbgMDNQdCqR aBpsnOXtkT6VDltxZs8mmeWQtvTgcmbr1QCpZbHg9Ph4724+DKeKYeOblxc+vZcw m5ByF+p8V3Px4acYjnnarltzzC1FVGPjJlE= -----END CERTIFICATE-----Generated at Sun Jun 8 22:17:36 2025 by rpki-client