$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1ae39525-8b4d-363d-a852-f5c4060ae384.roa File: 1ae39525-8b4d-363d-a852-f5c4060ae384.roa (raw, json) Hash identifier: /BGGswSBxZZ+7nmeg7AFReKCW3shFQT7orIp05gud+Y= Subject key identifier: BD:52:B6:62:5F:8D:E6:1D:95:3A:4A:F6:48:DA:86:63:88:02:4F:2E Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A3FB95C9D8EBA653709AF5D40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1ae39525-8b4d-363d-a852-f5c4060ae384.roa Signing time: Fri 20 Jun 2025 01:30:10 +0000 ROA not before: Fri 20 Jun 2025 01:30:10 +0000 ROA not after: Thu 18 Sep 2025 01:30:10 +0000 asID: 62838 IP address blocks: 2001:470:44a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3f:b9:5c:9d:8e:ba:65:37:09:af:5d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 20 01:30:10 2025 GMT Not After : Sep 18 01:30:10 2025 GMT Subject: CN=a78848da-b9a1-44a1-820c-d51ab3248b7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:34:da:1f:5c:65:b2:69:6c:97:a4:57:c4:78: 31:ea:d4:e1:0b:a8:3d:df:97:2e:e2:c6:20:b3:51: 18:25:64:61:9c:8b:85:30:39:8e:4b:63:3c:8f:e0: 09:d0:88:56:5c:83:15:75:e3:d9:b6:fa:ac:67:a0: 6e:16:c0:e7:4b:96:b2:23:b1:3f:5c:7d:44:69:57: 9d:73:a2:fc:c7:a3:d1:63:83:df:02:87:e4:c1:1e: b2:b1:c2:6f:ba:17:9d:a0:d2:95:0e:01:f3:e9:61: 39:a9:ae:25:36:fc:3a:a2:0c:73:65:a8:ec:04:2d: 52:80:11:c3:c9:2b:6c:e5:ed:3e:18:23:4a:21:b2: 78:66:89:a4:85:39:a6:35:b2:ae:10:58:e8:a4:81: 5f:32:a1:1e:81:0b:96:e2:e6:d0:22:3f:d7:d1:62: 14:13:bf:8f:4c:c9:41:7b:b8:3d:fb:00:6c:d9:09: 21:b0:cf:7a:f0:5f:ef:35:a3:dc:7e:86:6e:33:6d: bd:87:aa:6f:f5:08:25:05:ca:86:2b:58:aa:35:41: f0:a5:0e:d2:7e:cd:57:ea:69:d9:2b:33:7d:54:14: d3:5f:71:b0:53:aa:54:84:6d:78:6e:61:a8:3b:83: 59:df:ce:bd:2f:fe:8d:01:ee:3c:07:30:6d:58:4d: ad:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:52:B6:62:5F:8D:E6:1D:95:3A:4A:F6:48:DA:86:63:88:02:4F:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1ae39525-8b4d-363d-a852-f5c4060ae384.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:44a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:20:b0:51:d7:fb:d8:37:f5:f0:8d:85:6c:23:2a:44:80:e4: b0:af:06:7b:ad:39:4f:6d:86:bb:c7:55:cd:bd:cc:da:41:17: 80:09:9f:43:2e:6b:79:fd:c6:c0:e5:25:34:04:d9:a0:2c:d5: 14:37:0f:87:f7:6c:93:df:22:fc:92:cc:50:35:c4:99:1c:92: 47:f0:34:2a:86:75:b9:f6:39:ef:ce:0a:cf:60:6b:98:c1:d0: 90:99:74:a9:77:a2:9a:a6:29:78:3f:76:21:b1:77:73:50:15: 4d:28:94:ae:05:1d:4f:7e:3d:9c:fe:f9:d6:ca:5d:d7:3e:eb: c3:be:9f:ad:5e:94:07:7f:0f:ee:67:33:89:54:c3:d3:87:bf: f7:fc:ad:3f:de:c0:70:62:f7:f5:4f:8d:16:72:09:55:0a:56: 7d:44:15:c6:6a:27:79:2b:84:b5:3d:62:9d:02:98:a4:9e:13: a3:bb:ee:cf:93:e3:c5:b7:e6:16:7a:ea:a5:c9:48:38:61:6a: 41:71:a4:1f:a9:2c:b0:b2:95:62:fa:ce:19:95:2d:ac:83:04: 55:cf:f6:ca:2d:df:4a:6f:02:65:34:c2:7d:c6:e0:47:cc:d6: b4:76:e4:4f:c3:f8:b1:b1:94:b6:f5:3f:86:a7:9b:dd:bd:f9: 0d:af:f8:0d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo/uVydjrplNwmvXUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDYyMDAxMzAxMFoXDTI1MDkxODAxMzAxMFowLzEtMCsGA1UEAxMk YTc4ODQ4ZGEtYjlhMS00NGExLTgyMGMtZDUxYWIzMjQ4YjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjTaH1xlsmlsl6RXxHgx6tThC6g935cu4sYg s1EYJWRhnIuFMDmOS2M8j+AJ0IhWXIMVdePZtvqsZ6BuFsDnS5ayI7E/XH1EaVed c6L8x6PRY4PfAofkwR6yscJvuhedoNKVDgHz6WE5qa4lNvw6ogxzZajsBC1SgBHD ySts5e0+GCNKIbJ4ZomkhTmmNbKuEFjopIFfMqEegQuW4ubQIj/X0WIUE7+PTMlB e7g9+wBs2QkhsM968F/vNaPcfoZuM229h6pv9QglBcqGK1iqNUHwpQ7Sfs1X6mnZ KzN9VBTTX3GwU6pUhG14bmGoO4NZ3869L/6NAe48BzBtWE2tXwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL1StmJfjeYdlTpK9kjahmOIAk8uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMWFlMzk1MjUtOGI0ZC0z NjNkLWE4NTItZjVjNDA2MGFlMzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcARK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEEgsFHX+9g39fCNhWwjKkSA5LCvBnutOU9thrvHVc29zNpBF4AJ n0Mua3n9xsDlJTQE2aAs1RQ3D4f3bJPfIvySzFA1xJkckkfwNCqGdbn2Oe/OCs9g a5jB0JCZdKl3opqmKXg/diGxd3NQFU0olK4FHU9+PZz++dbKXdc+68O+n61elAd/ D+5nM4lUw9OHv/f8rT/ewHBi9/VPjRZyCVUKVn1EFcZqJ3krhLU9Yp0CmKSeE6O7 7s+T48W35hZ66qXJSDhhakFxpB+pLLCylWL6zhmVLayDBFXP9sot30pvAmU0wn3G 4EfM1rR25E/D+LGxlLb1P4anm929+Q2v+A0= -----END CERTIFICATE-----Generated at Sun Jun 29 14:29:01 2025 by rpki-client