$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d6fdc448-4b57-38ef-9d9e-c29e88b1b654.roa File: d6fdc448-4b57-38ef-9d9e-c29e88b1b654.roa (raw, json) Hash identifier: RxRy4iGk6ngyrMrIzLFwl3m4zjgzWjlJGowG4RJU4F8= Subject key identifier: 77:22:AD:FF:39:0F:C5:C6:F5:37:50:CC:61:1C:3D:A5:52:9D:47:EA Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849EA8547E3DF78152C96973080 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d6fdc448-4b57-38ef-9d9e-c29e88b1b654.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 9664 IP address blocks: 2001:470:27e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:47:e3:df:78:15:2c:96:97:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=faa4e9f7-65b7-493e-a0a7-bc1ccd9c3fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:1f:74:08:49:55:1e:da:a7:96:61:1b:5d:84: 36:99:c9:d7:df:e0:2d:79:93:f8:0b:ed:f5:a1:f0: 5a:fc:9f:52:1a:0e:ba:64:97:24:2c:fa:c7:22:c0: a9:73:69:b0:a5:8f:fd:73:32:a5:e0:b9:a5:7c:a4: 75:da:d6:3b:ef:9a:5f:13:c4:e4:21:59:8d:c7:e8: b1:15:6f:f0:86:a3:63:82:1d:4e:cb:3c:a1:51:da: a3:d4:fe:36:d2:d7:e8:c4:6c:88:3d:5b:b4:3a:94: c6:75:c8:1b:87:e2:12:f9:b4:ef:e8:6a:f7:6e:bc: e1:18:a4:e9:26:37:a8:82:43:a9:30:3a:42:20:db: b9:3d:ec:c2:32:fa:cc:f9:15:df:43:86:63:fa:c5: 7c:04:a8:e1:e7:1c:2f:bf:9e:51:15:b1:1c:64:ff: 66:66:e1:0b:cd:ce:dd:3f:3e:b1:ca:6f:d1:86:ce: 84:1d:4a:de:fb:f5:91:36:28:d9:fa:47:24:d3:05: e7:a4:b0:d2:cf:2d:af:8f:38:d7:82:fc:70:ce:2f: 42:13:ba:ee:81:b2:fb:6b:6f:c5:b5:21:cd:fe:0e: e6:8e:1e:54:27:38:47:29:43:93:64:bd:d9:30:e1: 6f:9b:cd:b1:2e:7f:63:57:52:4b:6c:bd:21:9d:33: 6d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:22:AD:FF:39:0F:C5:C6:F5:37:50:CC:61:1C:3D:A5:52:9D:47:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d6fdc448-4b57-38ef-9d9e-c29e88b1b654.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:27e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:84:a1:ff:81:e2:a1:ee:32:d4:98:96:02:9c:a7:59:be:16: 28:c7:c6:67:c9:28:d4:c2:e2:f6:ab:33:46:2b:69:8c:f7:06: 7b:35:8d:9a:f8:e5:54:04:de:f3:ff:80:d1:fa:45:43:d1:60: e2:fe:b3:21:58:90:9e:fd:f6:a3:50:ad:b1:a5:d9:fa:3f:ee: 9e:9e:a8:e4:40:42:74:83:9e:50:c8:4f:a7:08:40:54:6b:dd: 65:b4:91:00:ef:ff:06:5d:24:dd:e3:a1:fd:25:1b:ec:e2:9a: 7d:25:02:f9:4c:0c:fa:81:3c:ca:62:3c:45:4d:2b:1d:ca:54: 30:0f:91:fa:4a:92:ea:0e:e1:1b:34:9c:07:e5:10:ff:db:75: 9a:0f:6d:2d:26:a7:a1:d0:f2:9e:32:03:e8:b8:06:b1:25:29: 4c:13:fb:f7:af:7c:bc:b1:db:71:b3:d9:41:93:ad:37:2f:00: e5:8b:9b:74:b6:2b:d2:c6:c2:aa:c6:29:00:fd:01:7d:af:88: dc:d1:19:78:e0:85:58:30:48:7f:29:24:2b:28:ad:d9:ea:ea: 85:4b:d5:a3:3a:a5:38:77:65:a4:e4:0c:a2:68:c4:8b:0c:4d: d8:71:ae:ff:ce:d4:ad:74:d9:4d:9f:78:69:92:b0:d8:a0:cd: 34:6e:18:5e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnqhUfj33gVLJaXMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk ZmFhNGU5ZjctNjViNy00OTNlLWEwYTctYmMxY2NkOWMzZmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4h90CElVHtqnlmEbXYQ2mcnX3+AteZP4C+31 ofBa/J9SGg66ZJckLPrHIsCpc2mwpY/9czKl4LmlfKR12tY775pfE8TkIVmNx+ix FW/whqNjgh1OyzyhUdqj1P420tfoxGyIPVu0OpTGdcgbh+IS+bTv6Gr3brzhGKTp JjeogkOpMDpCINu5PezCMvrM+RXfQ4Zj+sV8BKjh5xwvv55RFbEcZP9mZuELzc7d Pz6xym/Rhs6EHUre+/WRNijZ+kck0wXnpLDSzy2vjzjXgvxwzi9CE7rugbL7a2/F tSHN/g7mjh5UJzhHKUOTZL3ZMOFvm82xLn9jV1JLbL0hnTNtXwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHcirf85D8XG9TdQzGEcPaVSnUfqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDZmZGM0NDgtNGI1Ny0z OGVmLTlkOWUtYzI5ZTg4YjFiNjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJ+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMOEof+B4qHuMtSYlgKcp1m+FijHxmfJKNTC4varM0YraYz3Bns1 jZr45VQE3vP/gNH6RUPRYOL+syFYkJ799qNQrbGl2fo/7p6eqORAQnSDnlDIT6cI QFRr3WW0kQDv/wZdJN3jof0lG+zimn0lAvlMDPqBPMpiPEVNKx3KVDAPkfpKkuoO 4Rs0nAflEP/bdZoPbS0mp6HQ8p4yA+i4BrElKUwT+/evfLyx23Gz2UGTrTcvAOWL m3S2K9LGwqrGKQD9AX2viNzRGXjghVgwSH8pJCsordnq6oVL1aM6pTh3ZaTkDKJo xIsMTdhxrv/O1K102U2feGmSsNigzTRuGF4= -----END CERTIFICATE-----Generated at Thu Jun 5 18:21:50 2025 by rpki-client