$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/025732a6-5acc-3d49-a643-af1173ab0c28.roa File: 025732a6-5acc-3d49-a643-af1173ab0c28.roa (raw, json) Hash identifier: LNg/eioSDFQtUlVFIcXbDEIFGhxQZQsMBYn/NXMb9mY= Subject key identifier: C2:7E:F8:B7:8A:8C:90:64:98:84:1A:E8:4C:92:22:57:F1:5C:D1:C5 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A3A23FE322261D613319CAE80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/025732a6-5acc-3d49-a643-af1173ab0c28.roa Signing time: Wed 18 Jun 2025 01:30:10 +0000 ROA not before: Wed 18 Jun 2025 01:30:10 +0000 ROA not after: Tue 16 Sep 2025 01:30:10 +0000 asID: 56554 IP address blocks: 2001:470:44a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:23:fe:32:22:61:d6:13:31:9c:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 18 01:30:10 2025 GMT Not After : Sep 16 01:30:10 2025 GMT Subject: CN=b140436e-c235-48b3-a1bd-95240fcd211a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:06:a1:3f:57:72:0e:6c:6f:3c:2f:be:5b:41: 1c:ef:4b:ca:8f:9c:3d:f9:93:b7:cf:4e:81:e4:33: 98:ce:85:45:e6:ba:5f:99:c7:c7:d2:f4:8b:d0:e8: d6:45:14:2d:27:4a:e8:8d:b1:05:6a:95:43:d5:dd: 9e:37:86:7d:ce:67:0e:67:eb:90:f2:f7:89:04:45: e7:a0:7a:e4:17:4e:14:e5:4b:1b:04:50:d7:63:b1: f8:06:a8:83:dd:29:97:1b:42:3f:31:5e:51:2d:88: f5:2c:47:04:bd:da:30:01:5f:49:86:37:83:1c:04: 6b:08:9e:95:c5:d0:48:ab:42:ae:d6:e3:f9:97:e3: f9:ce:93:01:37:f7:11:67:32:1f:2d:50:42:38:9f: 0b:8f:b1:62:f8:d4:2e:4a:70:5e:0c:06:9b:61:be: f5:7d:56:06:1c:3a:9c:df:18:b7:b3:bb:0c:31:b3: ed:91:44:95:42:85:54:8b:97:4e:1a:f4:7a:2f:22: 5f:05:6f:fd:d9:29:f7:b8:8c:4f:f9:e8:9f:4e:43: 99:44:22:d4:a1:a0:c5:4b:6d:e0:03:b9:b5:91:44: 31:35:f7:f8:cb:14:f4:ca:10:9b:8f:da:1a:b3:bd: 9b:a8:8a:24:27:07:fd:b5:14:85:44:6f:28:b4:59: b2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:7E:F8:B7:8A:8C:90:64:98:84:1A:E8:4C:92:22:57:F1:5C:D1:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/025732a6-5acc-3d49-a643-af1173ab0c28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:44a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:d2:70:33:67:6a:7d:dd:93:55:99:b7:52:2b:98:a4:0c:e6: cd:f0:df:b1:63:56:a0:f6:52:8c:2a:40:f5:d7:f3:43:e1:ee: 8e:cc:27:ac:12:4d:2e:33:ce:5c:25:86:ed:41:50:41:fd:9a: f2:c0:8a:9a:f2:e2:86:45:50:4c:f6:65:17:44:c3:9f:17:6e: ae:01:4b:14:d6:36:c3:39:87:84:a3:13:a8:52:56:1f:bb:9b: ab:da:22:ae:97:ea:bb:ca:5d:e7:a0:4f:67:ad:80:2f:a1:c8: 6f:d5:94:b2:76:2b:13:15:c5:aa:ac:91:ee:64:b7:5b:fa:fa: ba:6a:69:73:4c:be:4c:8e:c0:7f:25:f5:6e:a6:af:8a:d0:ad: 77:6c:fe:2f:ce:99:ad:de:1c:33:da:73:1d:81:57:1d:fd:51: cc:1a:ee:cc:be:a6:2e:13:69:04:f1:dd:55:ae:5a:25:63:90: 03:bd:d8:2a:41:36:18:46:1b:71:96:b5:ce:27:25:49:cc:be: 91:68:e9:29:70:f4:63:63:93:86:1c:17:4d:bd:02:cc:43:8f: eb:81:d0:f5:1a:44:41:1a:41:38:80:b0:e3:82:f0:e2:8a:40: 7e:46:08:66:e3:af:60:80:b9:2d:f7:4c:4e:67:01:89:b7:05: 82:02:45:63 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo6I/4yImHWEzGcroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDYxODAxMzAxMFoXDTI1MDkxNjAxMzAxMFowLzEtMCsGA1UEAxMk YjE0MDQzNmUtYzIzNS00OGIzLWExYmQtOTUyNDBmY2QyMTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowahP1dyDmxvPC++W0Ec70vKj5w9+ZO3z06B 5DOYzoVF5rpfmcfH0vSL0OjWRRQtJ0rojbEFapVD1d2eN4Z9zmcOZ+uQ8veJBEXn oHrkF04U5UsbBFDXY7H4BqiD3SmXG0I/MV5RLYj1LEcEvdowAV9JhjeDHARrCJ6V xdBIq0Ku1uP5l+P5zpMBN/cRZzIfLVBCOJ8Lj7Fi+NQuSnBeDAabYb71fVYGHDqc 3xi3s7sMMbPtkUSVQoVUi5dOGvR6LyJfBW/92Sn3uIxP+eifTkOZRCLUoaDFS23g A7m1kUQxNff4yxT0yhCbj9oas72bqIokJwf9tRSFRG8otFmyqQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMJ++LeKjJBkmIQa6EySIlfxXNHFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDI1NzMyYTYtNWFjYy0z ZDQ5LWE2NDMtYWYxMTczYWIwYzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcARK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADHScDNnan3dk1WZt1IrmKQM5s3w37FjVqD2UowqQPXX80Ph7o7M J6wSTS4zzlwlhu1BUEH9mvLAipry4oZFUEz2ZRdEw58Xbq4BSxTWNsM5h4SjE6hS Vh+7m6vaIq6X6rvKXeegT2etgC+hyG/VlLJ2KxMVxaqske5kt1v6+rpqaXNMvkyO wH8l9W6mr4rQrXds/i/Oma3eHDPacx2BVx39Ucwa7sy+pi4TaQTx3VWuWiVjkAO9 2CpBNhhGG3GWtc4nJUnMvpFo6Slw9GNjk4YcF029AsxDj+uB0PUaREEaQTiAsOOC 8OKKQH5GCGbjr2CAuS33TE5nAYm3BYICRWM= -----END CERTIFICATE-----Generated at Sun Jun 29 13:44:43 2025 by rpki-client