$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d3da48d1-a313-30ec-8866-a03219d4d2d7.roa File: d3da48d1-a313-30ec-8866-a03219d4d2d7.roa (raw, json) Hash identifier: XcmU2uns6UYWuJeML4ckTQK7lEw7LOO4x2zSqjicoZc= Subject key identifier: 6F:0E:35:8D:78:F6:C3:93:EE:83:05:1F:F3:48:82:29:94:CE:24:FF Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FDDE85A6E94F6FD11C720 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d3da48d1-a313-30ec-8866-a03219d4d2d7.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 22115 IP address blocks: 2001:470:138::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:dd:e8:5a:6e:94:f6:fd:11:c7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=b45c5c84-ab93-4ecc-9fba-973ae1b25a31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:52:3b:2a:16:90:9f:5d:83:72:5a:aa:33:c9: 35:7b:a2:76:1c:00:e4:44:85:f2:c0:a7:92:d9:a8: 3d:0d:61:a5:39:6d:9d:cf:24:b7:09:01:39:fa:8d: 12:92:dd:9e:27:d5:a3:81:f7:a0:9c:0a:1a:56:74: e4:1a:2c:65:b6:16:71:82:22:07:88:c2:a4:e1:1f: a8:f4:70:4f:47:ad:c3:ac:65:1d:a9:92:24:d9:85: 24:f2:32:c9:19:c9:71:d2:ed:11:68:46:26:21:a9: 4a:3a:ae:fc:af:ac:7e:a6:4b:33:c6:05:eb:a2:9c: d6:af:3b:1c:41:df:b9:17:f9:f3:92:62:c7:80:ff: 31:70:4c:b4:d0:20:87:48:7b:12:65:3e:ad:14:8a: 60:cc:8d:71:c7:de:10:46:db:3a:64:cf:be:86:04: d0:a2:5a:b5:85:dc:2e:9b:63:1f:e2:49:5f:2e:79: 35:36:36:bf:5c:df:21:d4:13:ea:f6:05:1a:d1:f6: fc:22:c5:bb:43:f0:fa:13:e1:88:ac:52:24:3d:40: 9b:27:ee:c0:2a:cb:03:9b:6f:03:17:ac:84:51:c9: b6:00:12:3c:55:b0:62:f2:a7:d9:18:8e:09:7a:58: 15:12:c2:60:a3:10:b3:61:b5:6a:63:8c:72:03:f8: 42:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:0E:35:8D:78:F6:C3:93:EE:83:05:1F:F3:48:82:29:94:CE:24:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d3da48d1-a313-30ec-8866-a03219d4d2d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:138::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:bc:97:2b:eb:83:39:5a:b5:3e:5d:12:41:bd:43:ae:27:83: d2:10:01:b2:b1:7f:27:01:e6:da:38:ba:72:bd:0c:0f:1e:b0: f6:0b:27:b9:44:ad:09:34:b6:a4:2d:26:8d:4a:72:ff:07:40: 0c:d2:92:30:3a:a1:6c:75:cd:7f:ab:e0:7a:59:fa:47:ac:89: 4c:cf:c5:67:45:2f:40:1c:6a:49:e9:04:c7:af:05:b8:2d:42: 9b:4c:2b:d7:62:9b:24:d3:10:72:9e:19:cc:dd:8b:6c:b7:b8: 8c:74:b8:de:47:05:b1:3c:1e:72:21:f3:69:a6:41:6e:a4:76: 73:f0:63:27:3f:73:ef:0b:4b:c7:70:35:e2:0f:80:20:5f:06: d3:2a:ec:da:40:5b:64:60:b1:30:eb:bb:26:c3:4d:fe:99:6b: d0:e2:0e:b0:ca:fc:7c:20:01:a0:56:9b:03:22:19:ed:81:34: a9:0a:46:42:12:27:60:a3:60:7a:54:92:dd:2f:07:d1:7e:e9: 9e:8a:15:15:98:1e:0b:50:66:d2:67:09:c3:54:fe:d5:56:9b: 60:38:22:33:b7:0e:68:99:1b:05:f0:85:7e:1b:3b:75:e2:55: d0:51:32:ce:c5:c6:ab:a7:a6:09:b5:8d:48:2e:f1:b8:c6:92: b8:7a:d8:63 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX93oWm6U9v0RxyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk YjQ1YzVjODQtYWI5My00ZWNjLTlmYmEtOTczYWUxYjI1YTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFI7KhaQn12DclqqM8k1e6J2HADkRIXywKeS 2ag9DWGlOW2dzyS3CQE5+o0Skt2eJ9WjgfegnAoaVnTkGixlthZxgiIHiMKk4R+o 9HBPR63DrGUdqZIk2YUk8jLJGclx0u0RaEYmIalKOq78r6x+pkszxgXropzWrzsc Qd+5F/nzkmLHgP8xcEy00CCHSHsSZT6tFIpgzI1xx94QRts6ZM++hgTQolq1hdwu m2Mf4klfLnk1Nja/XN8h1BPq9gUa0fb8IsW7Q/D6E+GIrFIkPUCbJ+7AKssDm28D F6yEUcm2ABI8VbBi8qfZGI4JelgVEsJgoxCzYbVqY4xyA/hC/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG8ONY149sOT7oMFH/NIgimUziT/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDNkYTQ4ZDEtYTMxMy0z MGVjLTg4NjYtYTAzMjE5ZDRkMmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAE4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHy8lyvrgzlatT5dEkG9Q64ng9IQAbKxfycB5to4unK9DA8esPYL J7lErQk0tqQtJo1Kcv8HQAzSkjA6oWx1zX+r4HpZ+kesiUzPxWdFL0AcaknpBMev BbgtQptMK9dimyTTEHKeGczdi2y3uIx0uN5HBbE8HnIh82mmQW6kdnPwYyc/c+8L S8dwNeIPgCBfBtMq7NpAW2RgsTDruybDTf6Za9DiDrDK/HwgAaBWmwMiGe2BNKkK RkISJ2CjYHpUkt0vB9F+6Z6KFRWYHgtQZtJnCcNU/tVWm2A4IjO3DmiZGwXwhX4b O3XiVdBRMs7Fxqunpgm1jUgu8bjGkrh62GM= -----END CERTIFICATE-----Generated at Sat Jun 7 22:28:54 2025 by rpki-client