$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d78c59fc-d0fa-3454-a9a5-3dbb60e345a1.roa File: d78c59fc-d0fa-3454-a9a5-3dbb60e345a1.roa (raw, json) Hash identifier: E3TYpS6ENP3Zzr3FntFfVREszr3wkcFSMFXmhJUqVXY= Subject key identifier: 26:73:6B:A9:15:28:B9:46:E8:80:EA:A1:0B:2B:89:58:72:01:C3:DE Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A1035531C965CCD6B4D881A40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d78c59fc-d0fa-3454-a9a5-3dbb60e345a1.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 35908 IP address blocks: 2001:470:3a2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:53:1c:96:5c:cd:6b:4d:88:1a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=d721d635-a46c-420c-9db7-75b5ae8e9bff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ae:1e:72:81:fc:84:b5:fe:d8:5d:ca:3a:c1: 2e:cc:6c:71:e2:6b:62:57:ad:91:7c:c5:03:40:59: 1e:8b:a0:49:df:84:c8:c6:6e:c1:1b:1a:9f:36:6d: 87:6c:b7:84:36:67:af:0b:91:f2:40:5f:05:9c:f1: 23:f6:43:ea:c6:6f:ae:71:3a:70:26:01:70:47:66: 21:5f:b3:99:c2:1c:76:22:5a:9a:54:cd:95:17:70: 97:ac:4c:38:da:26:96:52:61:ab:5f:d7:43:3a:6b: 3d:fe:4f:5f:0a:92:ca:11:85:dc:6a:b8:ef:80:87: 17:99:b7:83:ab:08:37:8f:51:e7:04:e0:a8:94:66: e6:f0:3a:b1:0d:bb:a0:7d:b8:9d:fc:ad:f4:da:40: 3c:6a:3a:d6:7b:a1:d9:fb:95:ac:3e:0c:1d:38:b6: 86:d1:63:b9:db:07:6f:e6:bf:82:6f:0e:03:98:fa: ca:53:34:7f:e8:58:d1:d1:8f:fd:4f:c3:d3:35:31: 7c:f1:8a:18:ea:35:6d:02:61:bc:6f:05:72:f8:7a: da:b0:f6:a1:8c:4d:14:c5:94:18:ad:8a:3d:10:52: 0d:6a:1e:14:b9:3d:75:ce:fe:6b:e0:4c:99:72:24: f9:7c:89:18:c7:e5:34:07:09:f5:be:10:c9:28:dd: ed:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:73:6B:A9:15:28:B9:46:E8:80:EA:A1:0B:2B:89:58:72:01:C3:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d78c59fc-d0fa-3454-a9a5-3dbb60e345a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3a2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:86:d2:66:96:e8:8b:47:e8:fd:bf:e4:73:e8:48:78:c0:c6: 5d:72:a9:da:14:27:bc:bb:c0:66:6e:28:7a:71:1a:47:9a:7c: 85:22:17:30:f9:8e:6a:6e:68:8e:a5:0e:b3:92:04:1c:11:a8: ef:51:05:af:4e:be:4d:cb:70:c4:6a:72:8a:7f:2d:6d:6d:b8: 32:e5:91:fb:bd:10:1a:50:5e:19:83:80:3b:4c:22:f3:20:1f: 68:13:07:f1:33:4d:9e:6b:97:0f:e2:24:cb:f1:ce:74:21:d7: eb:b1:49:28:8a:8b:81:92:4b:65:4f:db:fc:17:73:2e:f2:b7: d6:45:88:42:1a:d4:93:e9:cd:b5:6e:c1:27:73:96:cf:3b:8a: 86:44:40:a7:66:c6:52:bc:09:de:47:3c:08:8c:2d:0a:75:e7: 51:a6:28:8f:b6:03:43:a3:cb:a0:50:cf:3e:72:3a:05:7a:0b: 0d:02:fe:e4:ad:f1:e7:f9:57:70:f9:8e:86:8c:10:7a:8d:0f: 8a:c8:55:03:ec:61:e1:ef:ae:8f:5b:0b:ca:6d:d7:72:f3:10: b9:3a:25:b9:7f:20:55:5d:ae:22:92:75:74:bf:2a:7a:ef:41: d6:1e:89:18:f0:92:38:7f:f5:af:d8:4a:c7:c1:36:21:57:0c: a2:e5:51:22 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoQNVMcllzNa02IGkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk ZDcyMWQ2MzUtYTQ2Yy00MjBjLTlkYjctNzViNWFlOGU5YmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlq4ecoH8hLX+2F3KOsEuzGxx4mtiV62RfMUD QFkei6BJ34TIxm7BGxqfNm2HbLeENmevC5HyQF8FnPEj9kPqxm+ucTpwJgFwR2Yh X7OZwhx2IlqaVM2VF3CXrEw42iaWUmGrX9dDOms9/k9fCpLKEYXcarjvgIcXmbeD qwg3j1HnBOColGbm8DqxDbugfbid/K302kA8ajrWe6HZ+5WsPgwdOLaG0WO52wdv 5r+Cbw4DmPrKUzR/6FjR0Y/9T8PTNTF88YoY6jVtAmG8bwVy+HrasPahjE0UxZQY rYo9EFINah4UuT11zv5r4EyZciT5fIkYx+U0Bwn1vhDJKN3t5wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCZza6kVKLlG6IDqoQsriVhyAcPeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDc4YzU5ZmMtZDBmYS0z NDU0LWE5YTUtM2RiYjYwZTM0NWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH6G0maW6ItH6P2/5HPoSHjAxl1yqdoUJ7y7wGZuKHpxGkeafIUi FzD5jmpuaI6lDrOSBBwRqO9RBa9Ovk3LcMRqcop/LW1tuDLlkfu9EBpQXhmDgDtM IvMgH2gTB/EzTZ5rlw/iJMvxznQh1+uxSSiKi4GSS2VP2/wXcy7yt9ZFiEIa1JPp zbVuwSdzls87ioZEQKdmxlK8Cd5HPAiMLQp151GmKI+2A0Ojy6BQzz5yOgV6Cw0C /uSt8ef5V3D5joaMEHqND4rIVQPsYeHvro9bC8pt13LzELk6Jbl/IFVdriKSdXS/ KnrvQdYeiRjwkjh/9a/YSsfBNiFXDKLlUSI= -----END CERTIFICATE-----Generated at Sat Jun 7 18:42:45 2025 by rpki-client