$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/43228dc2-fee6-3213-85b8-367652bd3ae7.roa File: 43228dc2-fee6-3213-85b8-367652bd3ae7.roa (raw, json) Hash identifier: HJWOjWZh/lw3BDI3psl316mcCEKNyI126R7zyX2x1RY= Subject key identifier: 0D:28:7F:4A:F4:2A:A4:4A:D4:54:A8:CA:98:02:A9:E9:47:A6:1A:35 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FBEA0767A9C0466516E80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/43228dc2-fee6-3213-85b8-367652bd3ae7.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 217 IP address blocks: 2001:470:22::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:be:a0:76:7a:9c:04:66:51:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=85883cf1-6e5c-4386-a781-ba41e943aa34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:46:3e:08:ba:99:63:60:74:2c:66:a7:07:52: 94:8e:39:0b:10:2a:09:4a:c0:f2:8f:40:4f:dd:3b: 8b:a6:32:b3:f7:58:c9:95:34:a4:46:d9:48:12:f6: 32:fb:f0:9c:4f:64:e4:65:44:39:b1:46:9a:aa:b1: 89:04:c7:ae:13:9b:fc:4e:34:10:78:f7:6e:d7:6c: 82:6a:08:bd:7f:ec:04:43:56:30:63:f6:6e:c2:84: b6:25:d5:3d:f9:aa:14:e8:de:a8:8e:f1:80:14:2d: 13:d5:cb:86:8c:e3:05:3f:5f:c6:c8:21:d6:5b:49: 62:19:39:c9:6e:78:f2:f6:db:cb:88:44:e2:fc:66: bf:2a:36:fa:a1:3c:45:01:86:c5:db:5d:6e:d4:91: 04:67:80:95:fd:e5:d1:2a:18:27:bf:c1:8f:26:71: d8:51:e6:31:59:b0:9b:f9:aa:53:91:fa:59:47:ad: d0:e3:1c:7b:e6:b6:45:8d:6a:20:69:0a:17:03:64: a1:0d:8a:bd:0e:43:ff:0f:4d:12:01:a6:d9:20:45: 42:2e:61:37:fb:e0:22:24:6e:11:6c:47:a7:70:b0: 4e:4c:85:2f:ab:07:3b:47:76:3f:cd:d7:9d:17:a0: 9f:8e:1d:71:34:13:e3:cd:5a:33:3f:af:4d:1d:ab: 32:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:28:7F:4A:F4:2A:A4:4A:D4:54:A8:CA:98:02:A9:E9:47:A6:1A:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/43228dc2-fee6-3213-85b8-367652bd3ae7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:22::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:2e:89:e3:7b:81:11:a5:0c:cd:e0:a8:f4:28:05:23:c4:fe: 18:0a:02:56:50:20:0c:96:5d:c4:1f:d1:8d:7d:41:7a:c2:60: 7b:8c:7b:c5:d2:2a:52:ff:7d:6e:98:80:26:ec:fa:04:b9:8a: fd:b0:a0:6c:31:d1:91:29:0b:a5:48:43:cf:62:cb:b3:04:c0: 1a:c8:c2:c2:22:26:15:ec:98:2c:54:6b:5c:55:07:6b:f9:89: 1a:63:8f:47:05:28:e4:39:fb:ca:f5:fe:28:b5:c2:23:94:a2: ba:1c:d2:90:6b:76:fa:c5:60:16:18:28:1c:88:cf:7e:88:c9: 46:5a:63:7c:11:73:e4:af:b4:bc:74:e0:87:13:4d:11:d8:51: 88:77:f8:0a:4c:5b:33:81:5f:18:00:07:ff:74:43:d5:e4:28: 23:68:9e:43:fc:df:bc:0b:12:da:e7:5a:b4:69:b5:28:55:37: 8e:0f:4d:f4:0b:46:13:59:ec:58:17:94:5c:25:26:37:bc:ec: 7e:3a:94:7e:0e:7e:db:51:39:1d:0b:53:79:05:7a:47:3c:c9: 77:f1:d4:7a:3b:5c:34:b5:32:04:4a:e5:33:0b:8f:35:55:df: cd:d0:1f:31:5a:ec:a0:0d:75:62:83:ef:b7:a2:a7:25:b8:c3: 0b:e7:c8:0f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX76gdnqcBGZRboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk ODU4ODNjZjEtNmU1Yy00Mzg2LWE3ODEtYmE0MWU5NDNhYTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkY+CLqZY2B0LGanB1KUjjkLECoJSsDyj0BP 3TuLpjKz91jJlTSkRtlIEvYy+/CcT2TkZUQ5sUaaqrGJBMeuE5v8TjQQePdu12yC agi9f+wEQ1YwY/ZuwoS2JdU9+aoU6N6ojvGAFC0T1cuGjOMFP1/GyCHWW0liGTnJ bnjy9tvLiETi/Ga/Kjb6oTxFAYbF211u1JEEZ4CV/eXRKhgnv8GPJnHYUeYxWbCb +apTkfpZR63Q4xx75rZFjWogaQoXA2ShDYq9DkP/D00SAabZIEVCLmE3++AiJG4R bEencLBOTIUvqwc7R3Y/zdedF6Cfjh1xNBPjzVozP69NHasy0QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA0of0r0KqRK1FSoypgCqelHpho1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDMyMjhkYzItZmVlNi0z MjEzLTg1YjgtMzY3NjUyYmQzYWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAAi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKcuieN7gRGlDM3gqPQoBSPE/hgKAlZQIAyWXcQf0Y19QXrCYHuM e8XSKlL/fW6YgCbs+gS5iv2woGwx0ZEpC6VIQ89iy7MEwBrIwsIiJhXsmCxUa1xV B2v5iRpjj0cFKOQ5+8r1/ii1wiOUoroc0pBrdvrFYBYYKByIz36IyUZaY3wRc+Sv tLx04IcTTRHYUYh3+ApMWzOBXxgAB/90Q9XkKCNonkP837wLEtrnWrRptShVN44P TfQLRhNZ7FgXlFwlJje87H46lH4OfttROR0LU3kFekc8yXfx1Ho7XDS1MgRK5TML jzVV383QHzFa7KANdWKD77eipyW4wwvnyA8= -----END CERTIFICATE-----Generated at Sun Jun 29 13:53:43 2025 by rpki-client