$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d4a72d12-07e6-3ae6-97d5-c09435a5c0b7.roa File: d4a72d12-07e6-3ae6-97d5-c09435a5c0b7.roa (raw, json) Hash identifier: y3gnWn2SP7zEOJa91rqUZf4B6cRLi6DJZt9lwxr11Lk= Subject key identifier: F1:26:E3:44:C5:FB:77:1E:50:EA:5E:2F:F4:2B:D1:5C:40:06:33:0E Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FCCC7D931855E60D59FA0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d4a72d12-07e6-3ae6-97d5-c09435a5c0b7.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 212341 IP address blocks: 2001:470:a7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:cc:c7:d9:31:85:5e:60:d5:9f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=4c3d4118-e330-4a07-815f-d41c5afa4c40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8f:6c:73:35:94:29:77:f5:f5:c0:e7:b6:08: 1d:13:90:0e:c2:30:d4:65:cd:be:13:ae:0a:47:5f: b5:34:8f:d5:79:fd:00:08:0b:18:59:17:30:e5:5e: 3c:bd:79:ac:6b:22:5d:05:9f:1d:21:3a:39:b2:c4: 20:b4:0c:18:13:0d:f8:06:95:35:8a:53:f1:37:bc: 28:ee:6b:af:c0:ba:27:f5:b1:fc:3c:64:67:6d:aa: a1:04:f1:87:63:63:fe:48:21:c8:b3:5e:92:ab:24: c9:ef:09:39:74:09:8b:4f:f2:26:bd:fb:e7:ef:8d: 2d:f0:9a:00:dc:6a:3d:ec:6d:17:58:4d:a3:c2:c5: 47:91:3c:c7:74:36:b9:c7:92:c8:e2:a3:91:f1:1b: 5b:e6:42:69:09:f2:c1:45:7e:f1:9b:dc:68:15:ef: 2e:53:3e:70:3a:65:5d:11:f6:8d:70:9b:fc:d3:7a: a7:8b:3a:8e:5c:24:65:f7:f6:90:54:57:a1:d0:60: 4c:e1:c6:f3:ee:77:6b:a7:81:65:b4:68:5d:37:9c: d2:18:e6:57:fc:dc:f6:7a:9d:c5:b5:f3:9c:db:bf: 9a:a1:d9:f6:02:d6:ad:35:27:bd:7e:9d:79:86:cf: 3d:9c:9f:fa:c7:15:f6:22:ca:12:54:c1:bc:c7:00: 18:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:26:E3:44:C5:FB:77:1E:50:EA:5E:2F:F4:2B:D1:5C:40:06:33:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d4a72d12-07e6-3ae6-97d5-c09435a5c0b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:a7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:c3:39:bb:d6:08:5e:bf:3f:0e:5b:90:8c:85:61:eb:75:f8: 24:55:b9:95:a9:3f:6d:ce:47:59:2f:af:3a:09:a8:e9:9a:ee: f6:fb:ac:80:4b:25:1f:b1:ee:29:2d:5b:a2:ca:bb:f1:b0:bd: ad:3f:46:76:de:a1:74:55:2d:b2:8f:2d:57:ae:9f:47:11:f8: 84:d5:e9:c5:65:19:b2:95:17:bf:c4:45:fc:b4:c4:6e:dd:6a: 73:ca:83:11:95:2a:50:04:7d:aa:cb:f1:56:ec:4d:9d:a8:48: 4c:eb:2d:22:e0:d0:96:20:e7:d8:e9:3e:fd:37:5a:dd:b2:ba: be:3a:ab:15:a5:2d:ba:78:f7:7f:72:37:d9:fd:a0:34:52:18: 09:69:0a:14:4a:45:55:90:7e:c4:df:3a:f5:37:f7:36:34:60: 92:f5:94:bd:d8:b9:f3:03:9f:ca:71:86:1d:d2:7b:0b:02:bf: f5:b7:f3:53:bc:af:a9:2e:ae:f4:5c:bf:89:f8:c4:6d:af:1d: 36:ab:00:71:f4:a8:7c:fe:ee:e8:af:f4:d5:23:b2:49:3c:f4: 76:4d:d1:cf:65:9b:09:f4:48:ca:09:7e:87:22:90:73:c9:e0: 8f:01:1d:a9:21:24:9a:02:9a:66:a0:66:c3:1a:0b:a3:f2:58: b6:7d:78:f9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX8zH2TGFXmDVn6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk NGMzZDQxMTgtZTMzMC00YTA3LTgxNWYtZDQxYzVhZmE0YzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI9sczWUKXf19cDntggdE5AOwjDUZc2+E64K R1+1NI/Vef0ACAsYWRcw5V48vXmsayJdBZ8dITo5ssQgtAwYEw34BpU1ilPxN7wo 7muvwLon9bH8PGRnbaqhBPGHY2P+SCHIs16SqyTJ7wk5dAmLT/Imvfvn740t8JoA 3Go97G0XWE2jwsVHkTzHdDa5x5LI4qOR8Rtb5kJpCfLBRX7xm9xoFe8uUz5wOmVd EfaNcJv803qnizqOXCRl9/aQVFeh0GBM4cbz7ndrp4FltGhdN5zSGOZX/Nz2ep3F tfOc27+aodn2AtatNSe9fp15hs89nJ/6xxX2IsoSVMG8xwAYeQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPEm40TF+3ceUOpeL/Qr0VxABjMOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDRhNzJkMTItMDdlNi0z YWU2LTk3ZDUtYzA5NDM1YTVjMGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALjDObvWCF6/Pw5bkIyFYet1+CRVuZWpP23OR1kvrzoJqOma7vb7 rIBLJR+x7iktW6LKu/Gwva0/RnbeoXRVLbKPLVeun0cR+ITV6cVlGbKVF7/ERfy0 xG7danPKgxGVKlAEfarL8VbsTZ2oSEzrLSLg0JYg59jpPv03Wt2yur46qxWlLbp4 939yN9n9oDRSGAlpChRKRVWQfsTfOvU39zY0YJL1lL3YufMDn8pxhh3SewsCv/W3 81O8r6kurvRcv4n4xG2vHTarAHH0qHz+7uiv9NUjskk89HZN0c9lmwn0SMoJfoci kHPJ4I8BHakhJJoCmmagZsMaC6PyWLZ9ePk= -----END CERTIFICATE-----Generated at Sun Jun 8 14:14:43 2025 by rpki-client