$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4503d0b0-d408-3c40-80a6-55e35c6f5c9c.roa File: 4503d0b0-d408-3c40-80a6-55e35c6f5c9c.roa (raw, json) Hash identifier: V4dyEcxYFpbQDEvczG+RKvM6WJ8ZjHlUzsj0lfqLuR0= Subject key identifier: EA:2A:BB:05:33:56:7E:99:BE:43:39:88:20:77:65:53:88:72:DB:F2 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849A7849DE5845F77F578B5B600 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4503d0b0-d408-3c40-80a6-55e35c6f5c9c.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 62537 IP address blocks: 2001:470:40d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:9d:e5:84:5f:77:f5:78:b5:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=a85258d6-66e4-42cd-99ff-bf6a0a784ae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d1:86:e3:36:53:3a:90:72:9a:ff:41:b3:fb: 49:8f:a9:e9:b8:7c:d0:e4:ee:cd:fd:06:57:31:6b: da:1b:e9:42:c7:50:4b:0b:7d:e0:69:33:73:c5:48: 22:75:e3:70:99:80:91:8e:af:4b:4a:82:ba:47:f4: e1:83:24:2a:a7:6e:25:32:d6:e8:df:c3:d5:89:c0: a5:aa:7b:db:3a:d2:b3:21:59:6b:fd:63:84:88:3b: ee:9e:5b:0d:4a:24:51:06:5e:da:75:7b:66:4f:d6: 46:f8:ce:b0:4b:3d:71:62:fc:8c:93:ca:66:c5:65: 67:52:3d:d5:2a:55:fb:8e:8e:54:f7:e8:c0:1a:6a: 14:c8:af:58:b9:6b:f0:d5:b4:5c:e7:0d:f3:92:f1: 26:93:da:01:f9:61:f6:8c:98:73:29:a0:ba:0a:f9: c9:7a:84:99:81:fc:42:ef:e7:59:9a:bd:6e:b9:bf: 45:e9:14:44:70:24:d7:20:61:7a:b2:b6:ea:72:0c: d1:f2:cc:4a:7f:3e:d6:0e:32:82:d3:5a:70:ae:18: ac:a9:16:f3:6b:1f:a5:4a:57:4e:f1:42:b1:d7:c7: 69:f5:8b:c7:96:6f:5a:df:94:a9:ed:1f:d1:7e:3c: bb:77:76:f8:2b:a1:28:d0:73:2c:77:ff:c9:50:be: 9f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:2A:BB:05:33:56:7E:99:BE:43:39:88:20:77:65:53:88:72:DB:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4503d0b0-d408-3c40-80a6-55e35c6f5c9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:40d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:73:96:6c:eb:62:0d:ec:1c:52:de:c0:a7:1f:d2:4e:e4:00: 92:ba:25:53:d9:40:17:fb:8a:9c:48:8e:4f:55:36:ee:3e:73: 98:25:7c:33:e9:5e:ec:ba:61:6a:6d:de:6c:68:b8:15:7b:e7: 30:7c:2c:ab:1b:9c:83:20:33:9f:61:c7:e0:90:2c:d7:04:f5: 21:b4:ab:69:18:83:c0:f4:6b:c9:d9:39:31:9f:a9:2a:72:f6: fa:db:92:36:fb:07:a1:61:57:c6:fc:f6:d6:fb:83:bc:8f:fb: 2d:6a:77:6b:bb:c8:53:f7:67:5f:11:53:b2:49:f4:a4:c4:ba: 06:9e:9d:f2:d6:28:51:90:fd:c3:22:5c:f8:12:f3:e5:94:71: 23:43:e6:5e:4b:32:76:59:c9:ce:48:4d:af:4c:7f:a1:87:58: 42:ec:89:2f:e4:5e:7e:78:1c:8b:0c:48:40:eb:70:cf:15:bf: d4:54:73:ea:8b:06:1c:d3:ac:66:b7:6f:0d:11:91:a9:8b:da: 61:81:16:35:ae:f0:d8:49:b1:67:05:5a:62:bf:f6:95:bb:f8: e0:8f:36:eb:ec:08:71:87:7c:77:9c:44:e4:43:84:74:9b:f8: 02:61:33:8d:62:01:94:c6:dc:b2:b1:3f:cc:39:3d:06:9f:bb: b3:8f:f1:53 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmnhJ3lhF939Xi1tgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YTg1MjU4ZDYtNjZlNC00MmNkLTk5ZmYtYmY2YTBhNzg0YWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dGG4zZTOpBymv9Bs/tJj6npuHzQ5O7N/QZX MWvaG+lCx1BLC33gaTNzxUgideNwmYCRjq9LSoK6R/ThgyQqp24lMtbo38PVicCl qnvbOtKzIVlr/WOEiDvunlsNSiRRBl7adXtmT9ZG+M6wSz1xYvyMk8pmxWVnUj3V KlX7jo5U9+jAGmoUyK9YuWvw1bRc5w3zkvEmk9oB+WH2jJhzKaC6CvnJeoSZgfxC 7+dZmr1uub9F6RREcCTXIGF6srbqcgzR8sxKfz7WDjKC01pwrhisqRbzax+lSldO 8UKx18dp9YvHlm9a35Sp7R/Rfjy7d3b4K6Eo0HMsd//JUL6fdQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOoquwUzVn6ZvkM5iCB3ZVOIctvyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDUwM2QwYjAtZDQwOC0z YzQwLTgwYTYtNTVlMzVjNmY1YzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADNzlmzrYg3sHFLewKcf0k7kAJK6JVPZQBf7ipxIjk9VNu4+c5gl fDPpXuy6YWpt3mxouBV75zB8LKsbnIMgM59hx+CQLNcE9SG0q2kYg8D0a8nZOTGf qSpy9vrbkjb7B6FhV8b89tb7g7yP+y1qd2u7yFP3Z18RU7JJ9KTEugaenfLWKFGQ /cMiXPgS8+WUcSND5l5LMnZZyc5ITa9Mf6GHWELsiS/kXn54HIsMSEDrcM8Vv9RU c+qLBhzTrGa3bw0RkamL2mGBFjWu8NhJsWcFWmK/9pW7+OCPNuvsCHGHfHecRORD hHSb+AJhM41iAZTG3LKxP8w5PQafu7OP8VM= -----END CERTIFICATE-----Generated at Mon May 5 04:32:50 2025 by rpki-client