$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/db9060be-b3c3-3eff-9637-506c0f99914c.roa File: db9060be-b3c3-3eff-9637-506c0f99914c.roa (raw, json) Hash identifier: P9Z6+dKZVUOciqmHSPHL8PBBH8GsCvsihcmWEozj82Q= Subject key identifier: 7D:15:2C:E9:0A:FC:E7:5A:EA:E7:C1:1A:CA:BA:24:91:71:0C:46:E6 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A5E6EE66EAD24FB3BD3FD5880 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/db9060be-b3c3-3eff-9637-506c0f99914c.roa Signing time: Tue 01 Jul 2025 01:30:12 +0000 ROA not before: Tue 01 Jul 2025 01:30:12 +0000 ROA not after: Mon 29 Sep 2025 01:30:12 +0000 asID: 199670 IP address blocks: 2001:470:1eb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:6e:e6:6e:ad:24:fb:3b:d3:fd:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jul 1 01:30:12 2025 GMT Not After : Sep 29 01:30:12 2025 GMT Subject: CN=08efce6b-5211-4d16-b413-a63bf5d2ef92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:3b:71:63:bd:6a:95:cf:c9:41:fe:f1:4b:25: 17:7e:38:64:c5:62:81:64:4c:fc:02:8a:75:55:11: df:d1:a4:0c:fb:b6:52:ae:81:58:1b:c4:82:f1:7e: 5a:4a:fe:cb:8b:4b:da:f8:c6:7c:81:d0:ca:06:e8: a8:77:6a:85:b4:81:26:94:80:62:21:6f:a3:9d:45: a4:8b:e9:7c:a0:8b:20:a2:04:34:4e:10:ba:da:12: 62:93:1d:fd:78:51:10:67:14:6a:e5:e4:ab:a9:52: 7a:ee:18:92:ea:5c:9a:9d:fd:c9:93:b1:26:6f:f1: fe:e4:b1:e1:31:10:20:96:60:01:d6:0f:c5:22:ef: ca:39:5e:64:fe:fb:97:36:39:55:6c:fb:0d:7b:5a: 2c:f2:22:94:c9:43:ef:af:50:bf:8d:fc:58:9a:f3: 68:cc:6f:a4:58:d7:c4:56:e3:af:3d:30:0d:d1:c0: 66:fe:6d:61:5a:55:e2:36:f2:a0:df:7d:e6:8c:8d: be:b1:20:81:1a:56:c3:66:a6:08:94:b1:d2:4b:c8: 8b:ce:5a:33:a9:2e:dc:56:ab:8a:29:ec:b8:ec:bf: c5:40:70:1e:ff:5f:85:1a:3c:9d:8b:2d:d0:24:66: d2:69:0a:b9:96:a7:91:32:54:26:74:85:66:8a:81: 3d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:15:2C:E9:0A:FC:E7:5A:EA:E7:C1:1A:CA:BA:24:91:71:0C:46:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/db9060be-b3c3-3eff-9637-506c0f99914c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1eb::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:b5:64:44:e3:97:a1:30:54:08:00:41:0e:5e:17:29:09:7e: b1:7c:3e:4a:5b:8d:99:09:f7:f2:f1:30:e7:fa:39:70:22:6d: 38:33:c8:79:02:fd:67:17:2a:77:dc:36:77:41:47:8a:1b:bd: 2d:d3:5e:0e:4e:12:81:98:ef:31:7b:e0:60:27:2d:79:53:b4: 61:df:88:08:ad:44:9a:4a:7b:29:b6:1f:5b:cb:68:e0:f6:c7: c7:36:93:43:6e:02:13:d6:ed:1c:84:b4:0a:7a:52:71:3c:b5: 97:22:c4:90:05:af:c3:62:61:70:6d:d5:7e:86:8d:53:72:2c: 98:cf:ad:50:25:20:c9:a0:f0:39:e6:e2:19:ef:61:51:87:b0: b8:31:db:d6:8f:87:83:04:29:b8:f9:72:9c:e7:38:dd:1c:55: 10:9a:26:74:b4:38:7b:4f:ac:d7:f9:28:91:94:3f:57:3b:a5: 01:7e:da:a4:b3:16:4a:40:3d:63:19:c0:ec:00:ad:3b:fd:78: 12:94:11:96:a9:fb:f7:1b:59:71:c1:50:b3:f0:e9:de:9f:61: 40:d2:d6:d1:31:fb:e9:72:8a:e9:1f:50:ab:d9:b6:23:1f:55: 96:23:02:62:d2:89:23:ac:8f:bb:6b:98:4c:24:50:c2:d7:3a: 71:f8:0f:c4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpebuZurST7O9P9WIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDcwMTAxMzAxMloXDTI1MDkyOTAxMzAxMlowLzEtMCsGA1UEAxMk MDhlZmNlNmItNTIxMS00ZDE2LWI0MTMtYTYzYmY1ZDJlZjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgztxY71qlc/JQf7xSyUXfjhkxWKBZEz8Aop1 VRHf0aQM+7ZSroFYG8SC8X5aSv7Li0va+MZ8gdDKBuiod2qFtIEmlIBiIW+jnUWk i+l8oIsgogQ0ThC62hJikx39eFEQZxRq5eSrqVJ67hiS6lyanf3Jk7Emb/H+5LHh MRAglmAB1g/FIu/KOV5k/vuXNjlVbPsNe1os8iKUyUPvr1C/jfxYmvNozG+kWNfE VuOvPTAN0cBm/m1hWlXiNvKg333mjI2+sSCBGlbDZqYIlLHSS8iLzlozqS7cVquK Key47L/FQHAe/1+FGjydiy3QJGbSaQq5lqeRMlQmdIVmioE9LQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH0VLOkK/Oda6ufBGsq6JJFxDEbmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZGI5MDYwYmUtYjNjMy0z ZWZmLTk2MzctNTA2YzBmOTk5MTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGW1ZETjl6EwVAgAQQ5eFykJfrF8PkpbjZkJ9/LxMOf6OXAibTgz yHkC/WcXKnfcNndBR4obvS3TXg5OEoGY7zF74GAnLXlTtGHfiAitRJpKeym2H1vL aOD2x8c2k0NuAhPW7RyEtAp6UnE8tZcixJAFr8NiYXBt1X6GjVNyLJjPrVAlIMmg 8Dnm4hnvYVGHsLgx29aPh4MEKbj5cpznON0cVRCaJnS0OHtPrNf5KJGUP1c7pQF+ 2qSzFkpAPWMZwOwArTv9eBKUEZap+/cbWXHBULPw6d6fYUDS1tEx++lyiukfUKvZ tiMfVZYjAmLSiSOsj7trmEwkUMLXOnH4D8Q= -----END CERTIFICATE-----Generated at Thu Jul 3 09:11:23 2025 by rpki-client