$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f1dfff41-259a-363f-8767-1c74571560ee.roa File: f1dfff41-259a-363f-8767-1c74571560ee.roa (raw, json) Hash identifier: FuT0lxodIMNyLWRBlQ1QI0B6eJQaAo5m7hthvifm7k8= Subject key identifier: 44:B9:E4:67:FF:1F:51:B5:AD:0B:E7:DC:76:57:28:04:59:AD:99:D1 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FE9231E1A8FD82501DF60 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f1dfff41-259a-363f-8767-1c74571560ee.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 41568 IP address blocks: 2001:470:2a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:e9:23:1e:1a:8f:d8:25:01:df:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=d133a0cf-4293-449e-a536-adb4200afcf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6f:cb:34:89:57:06:f1:5c:84:fd:d3:ac:d7: c9:71:29:b3:5a:09:3e:0a:67:17:a7:2d:42:9b:5b: b7:d2:29:e6:d9:e8:10:e9:cf:90:58:3c:e2:58:ca: 57:d3:0f:50:24:1d:02:c0:a8:50:6f:4a:10:2f:19: a9:0a:74:0a:52:d0:18:a4:69:39:42:74:5c:64:b8: d5:76:da:11:05:ad:7a:c8:50:71:c1:c9:53:a7:5e: a3:0f:78:e8:6e:bd:5a:a3:d3:79:ac:74:87:97:dd: 15:cc:6d:e0:aa:d2:61:ba:a6:4d:17:54:80:4d:27: 43:9b:3b:ac:8e:f4:d7:30:16:3e:f1:5a:3c:c2:1c: 4f:cc:5c:17:30:74:eb:86:20:62:6d:3d:dc:e4:ae: 50:ab:85:9b:e0:1d:98:c8:67:84:1e:8d:63:ea:f0: 9b:3d:c4:f3:74:31:cf:c6:1f:8b:b9:af:cc:11:c0: 1d:fd:49:02:7f:7f:7b:4b:da:1e:ed:da:e7:89:88: 22:e1:77:f1:bc:a2:c7:8e:83:d1:4c:a1:47:c1:20: 97:96:82:c7:00:c0:57:d6:9d:d6:ac:6c:b4:ce:4b: ae:ae:39:5d:97:e0:90:c4:f5:38:95:14:23:a3:57: 5e:bc:2a:f1:c9:93:ce:b4:cc:30:d7:a8:62:f1:8b: b7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:B9:E4:67:FF:1F:51:B5:AD:0B:E7:DC:76:57:28:04:59:AD:99:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f1dfff41-259a-363f-8767-1c74571560ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:0c:45:4c:20:dd:3e:e3:7f:49:9c:87:67:2f:b7:bc:85:66: b7:e3:be:cb:01:df:1a:96:f0:35:53:0f:93:f4:8e:46:38:ee: e2:5e:bb:40:8c:b9:62:2a:47:d8:27:1c:48:e3:f7:ed:18:2e: 4c:55:a4:87:cb:45:47:5d:32:c9:9e:3f:79:0d:33:5a:de:e9: c4:27:7b:16:cc:84:c0:39:a6:16:2a:78:45:0a:9b:5d:16:46: 91:ea:82:a5:74:66:70:f8:06:0b:d4:eb:7b:ff:23:1d:62:27: 23:cc:9c:f9:53:a4:7b:4a:6b:71:46:91:46:7d:7d:cb:c0:8d: 7e:00:8e:0e:12:74:9f:21:47:02:0c:fe:aa:d0:30:2e:39:82: a1:2e:00:42:05:32:e5:9a:4d:08:23:fb:1a:9d:9c:1e:b7:7a: 7c:0b:49:28:f4:38:d8:d2:11:8e:3c:46:f1:10:f0:a3:b5:a8: 4f:18:eb:23:ce:20:59:40:2b:35:e7:db:04:88:e3:86:a1:7c: 45:e2:c8:32:51:74:90:96:39:ac:80:a3:0a:a8:5c:fa:8b:6e: 5d:3b:a4:34:a3:02:e1:ff:d1:0e:0b:51:fb:6f:1f:be:cf:93: 8f:b9:31:d6:8c:1f:58:54:4a:6a:3f:5a:8c:b8:d5:14:3a:57: db:a2:1a:cc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX+kjHhqP2CUB32AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk ZDEzM2EwY2YtNDI5My00NDllLWE1MzYtYWRiNDIwMGFmY2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxG/LNIlXBvFchP3TrNfJcSmzWgk+CmcXpy1C m1u30inm2egQ6c+QWDziWMpX0w9QJB0CwKhQb0oQLxmpCnQKUtAYpGk5QnRcZLjV dtoRBa16yFBxwclTp16jD3jobr1ao9N5rHSHl90VzG3gqtJhuqZNF1SATSdDmzus jvTXMBY+8Vo8whxPzFwXMHTrhiBibT3c5K5Qq4Wb4B2YyGeEHo1j6vCbPcTzdDHP xh+Lua/MEcAd/UkCf397S9oe7drniYgi4XfxvKLHjoPRTKFHwSCXloLHAMBX1p3W rGy0zkuurjldl+CQxPU4lRQjo1devCrxyZPOtMww16hi8Yu3kQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFES55Gf/H1G1rQvn3HZXKARZrZnRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjFkZmZmNDEtMjU5YS0z NjNmLTg3NjctMWM3NDU3MTU2MGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGwMRUwg3T7jf0mch2cvt7yFZrfjvssB3xqW8DVTD5P0jkY47uJe u0CMuWIqR9gnHEjj9+0YLkxVpIfLRUddMsmeP3kNM1re6cQnexbMhMA5phYqeEUK m10WRpHqgqV0ZnD4BgvU63v/Ix1iJyPMnPlTpHtKa3FGkUZ9fcvAjX4Ajg4SdJ8h RwIM/qrQMC45gqEuAEIFMuWaTQgj+xqdnB63enwLSSj0ONjSEY48RvEQ8KO1qE8Y 6yPOIFlAKzXn2wSI44ahfEXiyDJRdJCWOayAowqoXPqLbl07pDSjAuH/0Q4LUftv H77Pk4+5MdaMH1hUSmo/Woy41RQ6V9uiGsw= -----END CERTIFICATE-----Generated at Sun Jun 8 09:00:16 2025 by rpki-client