$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/31456c74-0b59-32aa-8464-8c32c3e0e43e.roa File: 31456c74-0b59-32aa-8464-8c32c3e0e43e.roa (raw, json) Hash identifier: j4xrps5e8JUwK3MEOvYYeB2bkvqS8u23uBfZSM9TQLo= Subject key identifier: D2:40:6D:F0:46:F3:AA:2F:71:17:B0:C3:45:60:86:DA:8B:AE:0A:97 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849AE8DC9CBC5577AA54835F400 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/31456c74-0b59-32aa-8464-8c32c3e0e43e.roa Signing time: Tue 29 Apr 2025 01:30:10 +0000 ROA not before: Tue 29 Apr 2025 01:30:10 +0000 ROA not after: Mon 28 Jul 2025 01:30:10 +0000 asID: 394957 IP address blocks: 2001:470:44d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ae:8d:c9:cb:c5:57:7a:a5:48:35:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 29 01:30:10 2025 GMT Not After : Jul 28 01:30:10 2025 GMT Subject: CN=2d023a40-a752-4d95-b6ea-f7eead52b6db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e8:01:77:b8:5f:de:ef:2e:98:e3:c8:64:4d: c3:1f:60:32:e8:83:9b:e3:d2:4b:27:29:26:d5:30: 99:63:b8:e2:e6:de:04:bf:cd:ca:55:de:e7:17:93: 81:8f:5f:00:87:d4:cd:ed:b9:73:02:43:8f:67:6c: 9d:60:9f:6e:16:df:3e:6a:9a:9d:7f:51:bf:c6:b6: 25:7c:f1:73:4b:87:39:49:58:30:af:f3:0c:e0:99: de:9d:46:1c:b9:42:53:b7:0c:e2:42:7d:b8:f6:90: 86:09:dd:b3:03:88:e6:50:86:e1:d5:03:14:89:20: 16:c3:83:98:2e:76:75:83:45:ee:7d:35:90:a3:be: e0:bc:3b:ca:88:89:68:a0:e9:fb:d9:f9:64:4b:3f: 70:2c:05:f9:5f:20:64:fc:dd:22:f3:d9:99:e5:70: a6:6c:da:ff:05:2e:c4:5d:36:26:66:59:7a:f6:52: 6e:7a:4a:02:71:35:b1:ee:1e:32:a3:dc:4b:98:4b: 41:9a:80:b1:40:e4:7d:13:38:db:60:08:93:ac:b3: 8d:a4:a2:c3:d6:98:f8:90:e2:b5:f5:fe:7e:0f:68: 3a:8c:18:4c:1d:f8:66:88:6a:fa:7e:e5:6e:74:27: b8:99:12:80:79:bf:20:46:29:0d:c3:bd:13:14:42: b3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:40:6D:F0:46:F3:AA:2F:71:17:B0:C3:45:60:86:DA:8B:AE:0A:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/31456c74-0b59-32aa-8464-8c32c3e0e43e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:44d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:e4:a2:43:78:76:e8:20:19:6a:5c:6d:af:c5:c1:7b:5a:c8: 52:b6:49:05:f2:57:84:7c:a3:e1:b6:31:32:1f:7d:b4:7c:e4: 06:59:62:aa:06:7b:85:80:b7:93:1a:86:e0:54:ab:67:95:34: a7:b7:9f:73:63:5e:7f:62:5c:de:bb:99:ad:90:dd:6f:05:89: 6c:99:ab:d0:9e:6a:17:8d:52:54:f1:aa:c2:be:04:a6:44:63: 18:09:51:72:a8:0a:95:9a:6e:23:08:0c:bf:ce:49:05:d1:17: c5:b0:83:d4:5f:8b:93:5a:0a:37:87:ce:de:b1:05:82:ce:82: 86:b9:0e:01:14:dc:d9:fd:6f:95:82:ca:50:b8:4d:e2:e6:b3: 63:d3:1f:82:b4:55:96:05:a2:bf:43:55:b5:3a:2d:28:3a:aa: b4:bc:cf:46:05:3f:2b:a9:61:12:e9:c3:21:8b:58:18:67:09: 16:17:73:3b:5e:a5:e0:21:f9:c5:65:5b:62:fd:d1:d3:43:e2: be:0a:3b:ea:82:85:55:69:45:f9:da:16:fd:4c:0f:32:b6:1e: 2a:73:fe:10:e0:db:fd:e8:48:f3:9d:5f:c2:54:29:43:59:eb: 7d:be:c3:27:8f:9e:e7:f9:2d:62:3c:e1:35:96:82:4c:7b:d5: 2f:61:9b:af -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmujcnLxVd6pUg19AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDQyOTAxMzAxMFoXDTI1MDcyODAxMzAxMFowLzEtMCsGA1UEAxMk MmQwMjNhNDAtYTc1Mi00ZDk1LWI2ZWEtZjdlZWFkNTJiNmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhugBd7hf3u8umOPIZE3DH2Ay6IOb49JLJykm 1TCZY7ji5t4Ev83KVd7nF5OBj18Ah9TN7blzAkOPZ2ydYJ9uFt8+apqdf1G/xrYl fPFzS4c5SVgwr/MM4JnenUYcuUJTtwziQn249pCGCd2zA4jmUIbh1QMUiSAWw4OY LnZ1g0XufTWQo77gvDvKiIlooOn72flkSz9wLAX5XyBk/N0i89mZ5XCmbNr/BS7E XTYmZll69lJuekoCcTWx7h4yo9xLmEtBmoCxQOR9EzjbYAiTrLONpKLD1pj4kOK1 9f5+D2g6jBhMHfhmiGr6fuVudCe4mRKAeb8gRikNw70TFEKzVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNJAbfBG86ovcReww0VghtqLrgqXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzE0NTZjNzQtMGI1OS0z MmFhLTg0NjQtOGMzMmMzZTBlNDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcARN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEfkokN4duggGWpcba/FwXtayFK2SQXyV4R8o+G2MTIffbR85AZZ YqoGe4WAt5MahuBUq2eVNKe3n3NjXn9iXN67ma2Q3W8FiWyZq9CeaheNUlTxqsK+ BKZEYxgJUXKoCpWabiMIDL/OSQXRF8Wwg9Rfi5NaCjeHzt6xBYLOgoa5DgEU3Nn9 b5WCylC4TeLms2PTH4K0VZYFor9DVbU6LSg6qrS8z0YFPyupYRLpwyGLWBhnCRYX cztepeAh+cVlW2L90dND4r4KO+qChVVpRfnaFv1MDzK2Hipz/hDg2/3oSPOdX8JU KUNZ632+wyePnuf5LWI84TWWgkx71S9hm68= -----END CERTIFICATE-----Generated at Tue May 6 03:54:58 2025 by rpki-client