$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/40f27aef-81b2-3ced-9463-eb7550d74c38.roa File: 40f27aef-81b2-3ced-9463-eb7550d74c38.roa (raw, json) Hash identifier: rnbi5YZTZnX/s+rFw91x05jZp8N6JasntBHqyJvG1BE= Subject key identifier: A5:8A:5C:96:AF:FA:3B:C9:81:0B:DA:53:9A:66:60:AE:FA:C5:F8:AA Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A549B27DCAA5D8C8AD995E300 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/40f27aef-81b2-3ced-9463-eb7550d74c38.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 893 IP address blocks: 2001:470:3b6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:27:dc:aa:5d:8c:8a:d9:95:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=3d714827-582b-4467-8e32-c55092986853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a5:2b:9f:93:5f:0e:77:30:fe:b9:f4:cf:94: f7:54:7c:bf:8c:6c:e2:56:3e:27:64:f3:ed:99:72: d1:68:30:0c:a5:59:50:77:b1:26:44:54:3d:4a:88: ce:e8:90:c1:e0:18:96:e1:0c:c8:99:81:93:47:f1: f2:2e:cb:17:a1:8a:80:13:54:af:44:a8:23:c6:88: 39:ae:df:00:e3:90:4f:99:e3:e0:9e:df:27:57:35: 60:db:11:c0:01:be:50:04:c1:eb:5a:53:40:77:79: 27:0d:f9:ac:ed:72:c9:1e:8c:ff:22:b9:f3:04:12: ba:dc:10:82:74:e6:93:b8:b8:50:3c:d4:19:a8:6f: 15:0a:1f:31:57:f9:29:22:eb:5e:d2:1b:12:e7:72: 5d:c3:1f:16:d3:0b:43:f1:b6:73:77:8f:74:2e:ef: 67:1a:bf:64:cb:bb:71:85:b1:b6:d4:d3:e9:1f:6f: ca:c4:f4:cf:44:42:8a:9f:b7:d0:46:b7:43:5f:88: e9:2a:f1:b5:a9:da:20:88:ce:b7:6d:2b:a7:a2:a0: 9a:ef:41:65:d6:43:90:d2:5e:c9:62:1a:1d:c3:d7: 83:ce:ee:2f:69:52:2f:f3:02:68:56:2d:25:9f:d3: b6:4e:f0:71:c5:1a:dc:4b:23:fe:6b:f8:71:cd:99: 75:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:8A:5C:96:AF:FA:3B:C9:81:0B:DA:53:9A:66:60:AE:FA:C5:F8:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/40f27aef-81b2-3ced-9463-eb7550d74c38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3b6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:04:09:67:b2:71:d7:3d:0c:a8:6e:7f:73:ed:1b:89:65:d1: c1:5d:00:b5:33:95:8c:4d:89:f8:9e:d3:7d:fd:4e:a0:bd:9f: 91:8b:c2:61:29:e3:e1:49:78:fd:4c:a0:af:02:71:59:f2:ff: 98:0f:89:ae:d7:21:f9:b8:bd:fe:32:c5:56:a0:29:35:86:6f: 20:47:85:6f:89:db:a4:d9:b6:8f:c2:79:14:e8:a3:cf:1d:3b: 92:74:e4:9d:8f:de:f1:29:51:39:9a:98:47:95:2a:c8:36:b2: 75:f0:41:8e:bc:c9:d1:83:02:76:33:6c:6e:9c:ef:d4:ba:3b: d8:94:bc:93:f9:26:bc:dd:76:e8:6f:23:96:38:38:c1:db:37: 9a:ef:5c:d0:ac:45:4c:11:18:60:70:ad:70:e7:24:a0:ee:93: 4a:69:87:bf:23:3f:77:a6:34:9a:b2:84:35:38:99:6d:9f:d2: 46:20:55:3c:f6:21:55:4c:83:99:5f:c5:38:43:97:cf:2c:0e: 87:73:d0:92:84:c8:e8:73:f3:79:f6:7f:b5:b4:85:fc:a0:62: b1:79:e4:a5:da:5f:1a:76:4d:26:5d:24:c9:ae:65:46:bc:d7: 76:00:68:f8:5b:94:32:bf:9d:bf:2b:0d:96:26:74:9e:e5:51: 86:96:a6:64 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpUmyfcql2MitmV4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk M2Q3MTQ4MjctNTgyYi00NDY3LThlMzItYzU1MDkyOTg2ODUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6Urn5NfDncw/rn0z5T3VHy/jGziVj4nZPPt mXLRaDAMpVlQd7EmRFQ9SojO6JDB4BiW4QzImYGTR/HyLssXoYqAE1SvRKgjxog5 rt8A45BPmePgnt8nVzVg2xHAAb5QBMHrWlNAd3knDfms7XLJHoz/IrnzBBK63BCC dOaTuLhQPNQZqG8VCh8xV/kpIute0hsS53Jdwx8W0wtD8bZzd490Lu9nGr9ky7tx hbG21NPpH2/KxPTPREKKn7fQRrdDX4jpKvG1qdogiM63bSunoqCa70Fl1kOQ0l7J Yhodw9eDzu4vaVIv8wJoVi0ln9O2TvBxxRrcSyP+a/hxzZl1OwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKWKXJav+jvJgQvaU5pmYK76xfiqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDBmMjdhZWYtODFiMi0z Y2VkLTk0NjMtZWI3NTUwZDc0YzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAO2 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK4ECWeycdc9DKhuf3PtG4ll0cFdALUzlYxNifie0339TqC9n5GL wmEp4+FJeP1MoK8CcVny/5gPia7XIfm4vf4yxVagKTWGbyBHhW+J26TZto/CeRTo o88dO5J05J2P3vEpUTmamEeVKsg2snXwQY68ydGDAnYzbG6c79S6O9iUvJP5Jrzd duhvI5Y4OMHbN5rvXNCsRUwRGGBwrXDnJKDuk0pph78jP3emNJqyhDU4mW2f0kYg VTz2IVVMg5lfxThDl88sDodz0JKEyOhz83n2f7W0hfygYrF55KXaXxp2TSZdJMmu ZUa813YAaPhblDK/nb8rDZYmdJ7lUYaWpmQ= -----END CERTIFICATE-----Generated at Sun Jun 29 13:32:18 2025 by rpki-client