$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d263e939-64ed-330b-a6a6-c40faa660442.roa File: d263e939-64ed-330b-a6a6-c40faa660442.roa (raw, json) Hash identifier: 65lHNSGbVa4rQ9/8ZqXIiCRP2yXJpLw2Af4nPS8lLNo= Subject key identifier: 62:EB:FD:9F:02:7D:77:7A:F9:4D:F5:B9:7D:D7:0C:61:FB:4C:35:D2 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D00DFCC7FF84F75BEACCB600 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d263e939-64ed-330b-a6a6-c40faa660442.roa Signing time: Sun 11 May 2025 01:30:09 +0000 ROA not before: Sun 11 May 2025 01:30:09 +0000 ROA not after: Sat 09 Aug 2025 01:30:09 +0000 asID: 329305 IP address blocks: 2001:470:44f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d0:0d:fc:c7:ff:84:f7:5b:ea:cc:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 11 01:30:09 2025 GMT Not After : Aug 9 01:30:09 2025 GMT Subject: CN=45a68e70-4ce8-4bee-8fcb-5fa3268d81a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:1e:40:1f:91:02:e7:0a:5c:a0:08:1b:b8:90: 01:29:3b:0a:4c:d2:41:33:39:ee:9a:2d:6a:ea:0e: de:25:ff:9a:51:b6:1c:ce:91:ab:37:98:75:e0:53: 18:a7:88:a1:1a:a7:f2:17:86:63:53:49:6d:12:bb: 46:7b:21:a9:ac:a2:6b:e9:c8:32:1a:27:08:5a:fd: 23:f7:45:ea:da:87:da:70:a6:72:b1:0f:e0:50:d3: b0:ca:2c:f5:1b:61:6c:c6:c7:9e:8f:04:c3:30:0c: 2d:3b:1a:df:e2:56:da:0e:17:72:b4:ed:92:eb:a7: f9:b0:17:fa:40:d5:39:41:f6:70:cb:4e:e0:c3:82: e1:9a:84:d7:b0:34:53:2e:df:65:af:62:e3:9b:d2: b5:e5:98:27:87:4b:bd:81:9f:12:5a:3e:ba:56:b4: 08:19:08:ad:2e:25:43:34:6c:ef:e6:95:e9:90:eb: b2:29:06:1f:3c:93:8d:0d:8b:9a:6b:82:64:39:f7: af:f2:19:61:a6:b1:0c:a9:bf:13:cb:5e:2c:bf:91: af:d9:b0:95:d6:d2:9a:51:94:6d:a3:73:4b:2e:2c: dd:b1:3a:3c:b2:e3:62:f4:a5:6b:19:19:46:9c:a8: c2:03:ec:bc:39:bc:88:48:61:35:c1:c2:0e:1c:bd: 44:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:EB:FD:9F:02:7D:77:7A:F9:4D:F5:B9:7D:D7:0C:61:FB:4C:35:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d263e939-64ed-330b-a6a6-c40faa660442.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:44f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:f0:0c:68:9a:b6:36:81:5f:c6:94:61:bc:1f:36:26:20:4a: 1a:aa:47:79:99:88:01:0d:5d:b7:03:6e:c6:e3:88:72:6f:c6: f1:5f:57:57:59:5c:99:ed:3c:56:78:95:c8:c1:3a:5f:27:b2: 3c:98:ae:e0:a6:1d:c1:25:45:65:e4:85:9a:c8:d9:6f:4d:7c: 5c:49:cd:87:04:ef:40:6b:8a:da:c5:18:d8:15:3b:f0:40:3e: 01:ab:ae:98:df:da:7c:25:3b:38:e3:44:41:df:6a:4f:31:c1: 57:5d:96:d3:96:f2:68:9b:18:e1:40:20:12:e5:20:66:5d:10: 11:77:5f:d6:5b:c3:62:f4:58:e5:a2:38:da:6a:4c:fa:8e:67: 1e:4b:c3:21:c3:ab:19:c7:39:63:be:bf:78:3c:eb:e2:c3:60: 1d:a0:7a:16:a7:11:e6:af:22:6a:42:f2:1b:0d:36:c4:f5:ce: 89:7b:f6:5d:42:0b:fc:ef:55:d1:9c:b7:e9:0e:04:60:de:4a: 7f:fc:b7:d0:38:38:c6:37:3d:f8:4e:04:de:7c:cb:de:89:a7: 71:20:e9:cc:13:a6:3e:71:4c:a8:ca:75:47:b8:cc:ea:3e:07: 83:5a:7a:41:fa:ad:9a:f3:fd:9e:55:42:08:c2:71:a8:1c:1b: 48:ed:bb:48 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnQDfzH/4T3W+rMtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxMTAxMzAwOVoXDTI1MDgwOTAxMzAwOVowLzEtMCsGA1UEAxMk NDVhNjhlNzAtNGNlOC00YmVlLThmY2ItNWZhMzI2OGQ4MWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9R5AH5EC5wpcoAgbuJABKTsKTNJBMznumi1q 6g7eJf+aUbYczpGrN5h14FMYp4ihGqfyF4ZjU0ltErtGeyGprKJr6cgyGicIWv0j 90Xq2ofacKZysQ/gUNOwyiz1G2FsxseejwTDMAwtOxrf4lbaDhdytO2S66f5sBf6 QNU5QfZwy07gw4LhmoTXsDRTLt9lr2Ljm9K15Zgnh0u9gZ8SWj66VrQIGQitLiVD NGzv5pXpkOuyKQYfPJONDYuaa4JkOfev8hlhprEMqb8Ty14sv5Gv2bCV1tKaUZRt o3NLLizdsTo8suNi9KVrGRlGnKjCA+y8ObyISGE1wcIOHL1EswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGLr/Z8CfXd6+U31uX3XDGH7TDXSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDI2M2U5MzktNjRlZC0z MzBiLWE2YTYtYzQwZmFhNjYwNDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcARP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADfwDGiatjaBX8aUYbwfNiYgShqqR3mZiAENXbcDbsbjiHJvxvFf V1dZXJntPFZ4lcjBOl8nsjyYruCmHcElRWXkhZrI2W9NfFxJzYcE70BritrFGNgV O/BAPgGrrpjf2nwlOzjjREHfak8xwVddltOW8mibGOFAIBLlIGZdEBF3X9Zbw2L0 WOWiONpqTPqOZx5LwyHDqxnHOWO+v3g86+LDYB2gehanEeavImpC8hsNNsT1zol7 9l1CC/zvVdGct+kOBGDeSn/8t9A4OMY3PfhOBN58y96Jp3Eg6cwTpj5xTKjKdUe4 zOo+B4NaekH6rZrz/Z5VQgjCcagcG0jtu0g= -----END CERTIFICATE-----Generated at Sun Jun 8 00:22:37 2025 by rpki-client