$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d0a0ba55-63e9-345b-8c4f-fa2ca0f06512.roa File: d0a0ba55-63e9-345b-8c4f-fa2ca0f06512.roa (raw, json) Hash identifier: WXbgjOsAIDMBzQkQaTeKl+cEY5ORyku/QO62+EXv4Ow= Subject key identifier: 58:3D:1E:36:2C:CE:5F:8B:9B:2D:32:B1:15:98:D5:DD:D4:E5:8E:93 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A10352EE4806269CB61BE2480 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d0a0ba55-63e9-345b-8c4f-fa2ca0f06512.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 196975 IP address blocks: 2001:470:427::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:2e:e4:80:62:69:cb:61:be:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=d3876da8-5c54-448b-b89e-8b5adaba79ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:fc:2a:74:d2:71:74:f0:09:cf:a7:0e:be:0a: 89:a9:e1:ae:e1:89:00:d8:d4:f7:29:ec:6a:90:e2: f0:7f:7a:0e:8b:eb:7d:e5:59:17:ae:a1:ba:a8:73: f3:5b:89:e6:b9:d3:ba:17:a7:47:b8:c6:88:92:56: f5:71:96:cc:50:1b:bb:8e:e1:7e:cc:1e:d2:97:c8: 61:93:26:d5:d9:d6:3a:47:39:c1:68:f0:a6:82:69: db:4b:01:88:22:4f:8c:a5:24:04:bc:0f:8e:79:58: d6:58:17:a0:e5:9e:d8:aa:db:3d:b0:fc:97:21:b4: 4a:e7:1f:cc:70:ee:41:bf:65:28:0a:81:65:3f:f4: 0b:7b:c6:f8:8c:65:91:b1:7d:68:06:4c:b7:74:7d: 20:4e:48:00:c2:10:19:dc:ca:09:1b:a2:80:7b:24: 5e:d8:83:bc:d7:e1:0d:43:1b:35:63:94:4f:e6:45: c7:b7:fc:6b:f6:a8:38:3c:66:84:bc:64:04:61:13: 96:51:13:92:7c:a6:36:ad:58:96:b6:3a:2d:ea:73: 71:de:bb:7d:69:b2:cd:f8:8e:32:74:40:65:b0:c6: 49:62:05:b9:b9:08:2f:72:1c:e9:b6:6e:1d:14:c8: 6b:10:98:02:21:51:c1:aa:f4:9d:45:d1:0c:32:ec: b6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:3D:1E:36:2C:CE:5F:8B:9B:2D:32:B1:15:98:D5:DD:D4:E5:8E:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d0a0ba55-63e9-345b-8c4f-fa2ca0f06512.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:427::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:10:df:2b:37:54:fc:9e:b9:28:ac:c9:36:60:c4:9b:68:d9: 27:81:02:1e:11:f2:df:08:f8:45:aa:2d:22:e6:cf:85:f6:80: 3f:e8:16:e9:42:80:b6:5e:5e:a1:a9:d9:c9:a7:07:24:86:39: 9d:0d:b7:8a:7e:97:e1:03:62:4b:8f:d2:f1:4d:53:cf:ed:48: 69:1a:0c:3e:70:a7:95:de:57:b5:2c:9a:1f:61:0c:b2:ff:6e: 9b:15:72:86:8d:81:49:af:04:9b:78:e8:28:a2:83:60:c2:02: f4:b2:62:c1:64:f1:c8:99:59:57:77:3b:2a:06:8b:4d:86:b2: a3:3b:82:d2:7b:6a:3b:02:47:01:04:37:33:74:f7:8b:ca:f1: cd:e4:11:f2:a8:a5:27:e2:1f:cb:5d:98:c0:98:9f:81:e1:de: a7:ba:0e:25:54:8f:2f:48:05:9a:d4:05:47:fa:24:42:56:cd: af:e3:6c:e8:39:8e:23:7f:f5:e7:7d:94:75:c0:3f:4d:d1:a3: 2a:38:9f:bd:e4:26:cc:a8:fc:3d:8f:1d:f3:d4:6b:1d:15:37: 3d:d8:61:64:9b:32:fd:d8:71:4f:3a:0c:70:c0:ea:89:44:37: 13:a7:0e:4d:4f:5a:64:18:3b:18:bd:df:f2:a6:66:1d:d1:08: 35:5a:80:f8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoQNS7kgGJpy2G+JIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk ZDM4NzZkYTgtNWM1NC00NDhiLWI4OWUtOGI1YWRhYmE3OWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfwqdNJxdPAJz6cOvgqJqeGu4YkA2NT3Kexq kOLwf3oOi+t95VkXrqG6qHPzW4nmudO6F6dHuMaIklb1cZbMUBu7juF+zB7Sl8hh kybV2dY6RznBaPCmgmnbSwGIIk+MpSQEvA+OeVjWWBeg5Z7Yqts9sPyXIbRK5x/M cO5Bv2UoCoFlP/QLe8b4jGWRsX1oBky3dH0gTkgAwhAZ3MoJG6KAeyRe2IO81+EN Qxs1Y5RP5kXHt/xr9qg4PGaEvGQEYROWUROSfKY2rViWtjot6nNx3rt9abLN+I4y dEBlsMZJYgW5uQgvchzptm4dFMhrEJgCIVHBqvSdRdEMMuy2EQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFg9HjYszl+Lmy0ysRWY1d3U5Y6TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDBhMGJhNTUtNjNlOS0z NDViLThjNGYtZmEyY2EwZjA2NTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHUQ3ys3VPyeuSisyTZgxJto2SeBAh4R8t8I+EWqLSLmz4X2gD/o FulCgLZeXqGp2cmnBySGOZ0Nt4p+l+EDYkuP0vFNU8/tSGkaDD5wp5XeV7Usmh9h DLL/bpsVcoaNgUmvBJt46Ciig2DCAvSyYsFk8ciZWVd3OyoGi02GsqM7gtJ7ajsC RwEENzN094vK8c3kEfKopSfiH8tdmMCYn4Hh3qe6DiVUjy9IBZrUBUf6JEJWza/j bOg5jiN/9ed9lHXAP03Royo4n73kJsyo/D2PHfPUax0VNz3YYWSbMv3YcU86DHDA 6olENxOnDk1PWmQYOxi93/KmZh3RCDVagPg= -----END CERTIFICATE-----Generated at Sun Jun 8 12:33:38 2025 by rpki-client