$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fdb928f9-5bb3-3cd7-a222-a42e1e9819ce.roa File: fdb928f9-5bb3-3cd7-a222-a42e1e9819ce.roa (raw, json) Hash identifier: RwLTFQ6XvltCIS4ywZgOZSa6RYJky+zA91DeITYzUV4= Subject key identifier: 5F:50:20:D2:E7:F4:13:C7:DD:A3:6D:EE:3C:C0:24:FF:31:82:4D:D8 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FE27D7E5E46E05CCD8500 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fdb928f9-5bb3-3cd7-a222-a42e1e9819ce.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 56246 IP address blocks: 2001:470:203::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:e2:7d:7e:5e:46:e0:5c:cd:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=41265be1-d60b-437e-b393-115a4d9d3a5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6a:1e:31:04:3a:31:02:c4:38:37:16:aa:60: 6e:43:ed:dc:44:24:e5:e1:28:9f:f4:07:28:51:2e: d0:73:fc:91:ea:85:00:e0:81:c7:7c:c5:4a:11:78: 1d:30:d7:f4:19:b6:13:9f:7d:17:6b:31:5c:4d:64: 8d:2d:a1:e8:1d:1b:95:13:77:8f:97:5d:f3:02:28: 30:42:a1:26:6a:f4:8d:4d:84:1a:b0:9c:d8:c0:58: c4:ab:18:18:f5:2a:cb:c7:13:5a:bf:d3:11:85:e7: b8:97:0a:51:20:0a:02:c3:7d:7d:dc:49:9f:97:cf: 8d:ad:8a:89:cc:16:48:b7:3e:24:11:2e:a1:06:b5: 19:48:21:fa:47:0c:8d:f0:a9:b0:86:00:47:d2:1d: 0f:49:fd:a3:9d:a2:99:e6:24:98:61:e8:16:e7:3c: 7c:c5:58:41:d2:e0:63:26:49:d4:a0:06:a0:b0:e3: bc:1d:64:ed:58:2c:d9:cb:7c:6d:4b:b8:be:3f:99: 76:0d:a9:84:7d:83:3c:64:93:a7:35:d2:ef:ab:21: 6f:ec:5c:ca:05:0b:4c:5d:a1:74:31:ab:71:50:88: 74:ce:f8:6b:2d:f5:ac:5e:0a:39:09:09:63:a5:6d: 15:08:b1:e3:46:4e:2b:23:cd:e5:99:a7:73:4b:cb: 9e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:50:20:D2:E7:F4:13:C7:DD:A3:6D:EE:3C:C0:24:FF:31:82:4D:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fdb928f9-5bb3-3cd7-a222-a42e1e9819ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:203::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:b6:ff:73:6a:35:3d:6c:b6:8d:c2:60:73:46:e2:2b:95:b9: 78:ac:3e:69:fe:69:69:63:ee:11:1a:49:21:0d:19:d5:47:73: bd:92:70:0e:8d:e7:aa:cb:a6:6c:71:b4:c4:bd:40:b4:6d:ae: 54:a8:48:27:2d:9b:04:46:8e:f0:75:d7:9a:40:00:c2:e7:97: dd:00:40:39:75:a2:88:d5:60:1b:b8:3d:b7:8e:4e:64:70:61: 60:28:f9:02:84:24:2f:a0:75:6b:37:02:39:2d:5e:64:d5:1d: 8c:16:8d:c9:e4:7e:0a:f9:5b:be:77:6c:b2:8b:41:ce:88:71: 98:66:bb:cf:f2:96:0c:9d:0d:0c:24:f5:81:cf:3d:13:d6:78: 79:13:22:81:89:07:50:c4:23:1a:fa:8a:55:94:8f:b0:2d:0f: e1:77:9d:e2:bd:5b:fa:58:be:ff:3b:11:55:10:2d:a3:cc:1c: 30:c1:b6:d2:98:34:19:52:65:d2:d7:17:cd:08:f3:36:0a:6b: c1:f7:7c:9d:7b:12:f6:0a:8e:0d:d7:1e:0d:b5:e3:89:c7:ae: 81:0b:b9:48:cc:9a:98:90:37:b8:33:1d:b4:0c:62:ea:d6:90: 9b:4c:a6:49:b1:b7:9f:58:e2:ba:d7:72:e8:4c:19:02:58:f1: f7:2d:6c:c5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX+J9fl5G4FzNhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk NDEyNjViZTEtZDYwYi00MzdlLWIzOTMtMTE1YTRkOWQzYTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WoeMQQ6MQLEODcWqmBuQ+3cRCTl4Sif9Aco US7Qc/yR6oUA4IHHfMVKEXgdMNf0GbYTn30XazFcTWSNLaHoHRuVE3ePl13zAigw QqEmavSNTYQasJzYwFjEqxgY9SrLxxNav9MRhee4lwpRIAoCw3193Emfl8+NrYqJ zBZItz4kES6hBrUZSCH6RwyN8KmwhgBH0h0PSf2jnaKZ5iSYYegW5zx8xVhB0uBj JknUoAagsOO8HWTtWCzZy3xtS7i+P5l2DamEfYM8ZJOnNdLvqyFv7FzKBQtMXaF0 MatxUIh0zvhrLfWsXgo5CQljpW0VCLHjRk4rI83lmadzS8uekQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF9QINLn9BPH3aNt7jzAJP8xgk3YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZmRiOTI4ZjktNWJiMy0z Y2Q3LWEyMjItYTQyZTFlOTgxOWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAID MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD+2/3NqNT1sto3CYHNG4iuVuXisPmn+aWlj7hEaSSENGdVHc72S cA6N56rLpmxxtMS9QLRtrlSoSCctmwRGjvB115pAAMLnl90AQDl1oojVYBu4PbeO TmRwYWAo+QKEJC+gdWs3AjktXmTVHYwWjcnkfgr5W753bLKLQc6IcZhmu8/ylgyd DQwk9YHPPRPWeHkTIoGJB1DEIxr6ilWUj7AtD+F3neK9W/pYvv87EVUQLaPMHDDB ttKYNBlSZdLXF80I8zYKa8H3fJ17EvYKjg3XHg2144nHroELuUjMmpiQN7gzHbQM YurWkJtMpkmxt59Y4rrXcuhMGQJY8fctbMU= -----END CERTIFICATE-----Generated at Thu Jun 5 18:17:28 2025 by rpki-client