$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d860e400-55ce-3e7b-81c5-634d70946b62.roa File: d860e400-55ce-3e7b-81c5-634d70946b62.roa (raw, json) Hash identifier: kL5mBKaDwJ9KV8woIxyfrGN5kxkJMjY6kY7TS8QC3Co= Subject key identifier: 97:C5:D2:A3:D1:67:A8:85:30:B3:61:48:30:72:B6:B2:F4:0E:38:A1 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A5E6EDEE1950D99776CA78280 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d860e400-55ce-3e7b-81c5-634d70946b62.roa Signing time: Tue 01 Jul 2025 01:30:08 +0000 ROA not before: Tue 01 Jul 2025 01:30:08 +0000 ROA not after: Mon 29 Sep 2025 01:30:08 +0000 asID: 11711 IP address blocks: 2001:470:26d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:6e:de:e1:95:0d:99:77:6c:a7:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jul 1 01:30:08 2025 GMT Not After : Sep 29 01:30:08 2025 GMT Subject: CN=75b642ce-909a-449a-842d-84aca807e219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ae:ee:13:46:7a:d6:d5:e2:83:dc:6e:0f:51: fd:aa:45:ca:1d:5a:cb:8f:6c:84:44:6f:9c:9d:6e: a5:d0:80:5d:0e:a7:b7:c2:3c:08:f5:4c:d1:c5:ec: 80:5d:a4:42:a8:dc:35:99:57:f8:15:a5:01:ac:6d: 17:c6:ce:3a:11:c8:52:23:b4:fa:b2:3e:2a:d4:88: 57:00:84:0e:0c:eb:56:d3:35:76:8a:e8:de:ae:14: 7f:ee:f3:82:5d:df:5c:21:7c:32:33:e4:2c:36:2d: 0e:40:e9:c8:b1:2e:10:61:54:d0:8d:d0:0a:2e:69: 1b:b5:eb:b0:ff:37:e9:c4:9d:e3:2d:d9:cc:51:93: e0:1e:69:ad:e8:6f:41:37:5d:64:db:6f:12:e2:b7: b6:ab:20:32:45:10:ca:6e:0d:99:d9:a0:57:d3:1d: 2b:da:ed:5d:58:13:33:74:30:3d:db:89:8b:8b:4e: e1:be:60:1d:4b:79:c8:75:53:1f:bb:1a:e0:d6:8b: 59:40:c6:56:03:45:37:0f:9a:ac:d7:58:ff:7d:c6: 26:ea:c4:3b:b3:ce:a1:a3:19:7a:2e:8a:3e:aa:6b: bb:98:5d:8a:69:fd:66:fb:4f:31:57:45:35:71:5e: 38:0b:ed:61:2f:0b:ce:89:13:e4:2e:6a:15:ee:be: 7f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C5:D2:A3:D1:67:A8:85:30:B3:61:48:30:72:B6:B2:F4:0E:38:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d860e400-55ce-3e7b-81c5-634d70946b62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:26d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:52:c1:20:eb:34:de:b7:bb:44:60:5a:5b:40:47:68:e9:7d: 4f:7e:c5:d0:48:44:85:e8:79:9e:7a:8c:05:8d:e8:b7:08:d2: 76:b9:3d:58:ad:7a:db:cd:e5:3b:83:af:09:93:9d:6d:b2:1a: 48:64:2c:c4:d6:09:2f:25:22:34:ac:76:05:e7:7a:3b:9e:a1: 76:95:69:fe:53:d5:0b:e8:36:8f:30:0e:40:d4:f5:ad:51:2a: 42:4c:ea:5d:91:fc:c6:22:f0:aa:3b:56:e4:26:92:8f:86:3b: 65:2f:44:0a:a2:a4:08:1a:f3:5e:6d:03:d7:e4:81:9f:c9:76: dc:7f:36:56:ef:8e:50:f1:a7:86:89:28:e0:10:f5:f7:a5:6a: 0e:bf:09:79:82:54:48:83:ae:11:48:22:24:c8:90:ec:bd:0b: 50:c0:d2:8b:06:1c:fe:b3:07:7e:a0:97:a0:85:cf:63:2a:fe: 53:db:5d:7b:d8:16:17:80:cf:1e:f5:7d:2e:7a:64:4c:4d:63: 97:0f:54:1a:b1:cf:50:69:01:4a:28:85:99:80:ea:4f:1f:c2: 37:87:94:ff:f6:94:17:cb:ab:44:97:e2:b0:b9:b3:58:32:7e: 82:47:01:32:a9:bf:d4:5f:4e:e0:07:ab:b3:26:13:0f:cc:f1: e5:c4:8d:87 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpebt7hlQ2Zd2yngoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDcwMTAxMzAwOFoXDTI1MDkyOTAxMzAwOFowLzEtMCsGA1UEAxMk NzViNjQyY2UtOTA5YS00NDlhLTg0MmQtODRhY2E4MDdlMjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxK7uE0Z61tXig9xuD1H9qkXKHVrLj2yERG+c nW6l0IBdDqe3wjwI9UzRxeyAXaRCqNw1mVf4FaUBrG0Xxs46EchSI7T6sj4q1IhX AIQODOtW0zV2iujerhR/7vOCXd9cIXwyM+QsNi0OQOnIsS4QYVTQjdAKLmkbteuw /zfpxJ3jLdnMUZPgHmmt6G9BN11k228S4re2qyAyRRDKbg2Z2aBX0x0r2u1dWBMz dDA924mLi07hvmAdS3nIdVMfuxrg1otZQMZWA0U3D5qs11j/fcYm6sQ7s86hoxl6 Loo+qmu7mF2Kaf1m+08xV0U1cV44C+1hLwvOiRPkLmoV7r5/kQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJfF0qPRZ6iFMLNhSDBytrL0DjihMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDg2MGU0MDAtNTVjZS0z ZTdiLTgxYzUtNjM0ZDcwOTQ2YjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJt MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADxSwSDrNN63u0RgWltAR2jpfU9+xdBIRIXoeZ56jAWN6LcI0na5 PVitetvN5TuDrwmTnW2yGkhkLMTWCS8lIjSsdgXnejueoXaVaf5T1QvoNo8wDkDU 9a1RKkJM6l2R/MYi8Ko7VuQmko+GO2UvRAqipAga815tA9fkgZ/Jdtx/NlbvjlDx p4aJKOAQ9felag6/CXmCVEiDrhFIIiTIkOy9C1DA0osGHP6zB36gl6CFz2Mq/lPb XXvYFheAzx71fS56ZExNY5cPVBqxz1BpAUoohZmA6k8fwjeHlP/2lBfLq0SX4rC5 s1gyfoJHATKpv9RfTuAHq7MmEw/M8eXEjYc= -----END CERTIFICATE-----Generated at Thu Jul 3 09:00:34 2025 by rpki-client