$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4f372e25-8792-3d0a-b8ec-3ab357272dd5.roa File: 4f372e25-8792-3d0a-b8ec-3ab357272dd5.roa (raw, json) Hash identifier: ZG9BJTIkhAKjjVD67KFLvC0YAl+D6yQ0np2FYeJK70Y= Subject key identifier: 64:8A:0C:64:3D:C4:05:08:57:48:60:C3:4A:DE:6C:47:19:BC:AA:06 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A5A3079E5D80F4E3333BCE100 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4f372e25-8792-3d0a-b8ec-3ab357272dd5.roa Signing time: Sun 29 Jun 2025 13:01:03 +0000 ROA not before: Sun 29 Jun 2025 13:01:03 +0000 ROA not after: Sat 27 Sep 2025 13:01:03 +0000 asID: 14713 IP address blocks: 2001:470:3bd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5a:30:79:e5:d8:0f:4e:33:33:bc:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 29 13:01:03 2025 GMT Not After : Sep 27 13:01:03 2025 GMT Subject: CN=1ec862b9-d6a3-466c-ab18-5dfe6d5d9153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e3:9c:b7:9f:23:d0:8c:58:49:cd:09:c0:e0: a0:7c:1b:4e:73:05:fa:df:e9:d5:bb:2f:a1:bb:d5: 87:f4:01:ff:f3:09:6e:79:a5:6c:78:6d:a6:ca:94: 1c:29:f7:62:d0:44:75:61:88:3d:87:55:ba:3c:66: 33:5b:cc:39:97:7a:13:04:b7:48:67:55:96:d7:d7: d7:ce:d4:6e:13:4c:29:68:71:f4:2c:ac:ad:9e:ca: ba:e5:d1:d6:27:1f:ea:c9:81:14:86:5f:02:23:e2: b0:51:b6:7d:6d:8f:29:f8:13:7f:c1:70:23:d2:7c: 59:73:7d:8e:b3:6a:ee:c9:ae:0d:02:08:98:b7:d5: ff:43:0a:bc:be:c0:13:83:29:dc:17:f8:28:96:3c: 82:99:92:69:3d:52:43:ca:b3:16:f3:51:dc:08:c7: 24:7c:67:f7:10:d2:66:f7:c1:3a:8f:c3:32:fd:bb: e0:bd:3e:ab:ed:f9:a8:8f:b2:c4:b8:b0:30:a5:3e: 53:d2:22:4c:33:d2:6b:fa:21:ba:e0:03:4c:e3:50: 01:fb:ec:ae:97:47:3c:5a:e4:7a:45:e7:cb:ab:3e: 80:e8:88:cd:80:14:45:98:5a:1a:b6:a4:c6:88:dd: 6f:21:50:78:af:df:f5:30:8f:fd:c0:f6:02:54:18: 7f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:8A:0C:64:3D:C4:05:08:57:48:60:C3:4A:DE:6C:47:19:BC:AA:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4f372e25-8792-3d0a-b8ec-3ab357272dd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3bd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:b5:8a:d1:48:ff:26:3b:57:0b:29:3a:0b:82:cb:ad:fd:ae: 1a:97:af:a7:b1:d2:d3:0f:17:b0:20:c5:6f:ae:52:03:f3:d6: c9:8e:58:22:1a:f8:7e:73:10:36:dc:6b:2c:8a:cd:88:d1:e5: 99:bb:94:c1:b8:73:b9:d4:8f:61:37:a6:7d:0e:02:c2:2d:4f: b0:1b:30:80:3d:bd:f3:18:98:5f:76:ff:ed:89:b7:79:92:4b: 46:5f:52:2c:d6:40:22:3b:b2:0d:f2:1e:7f:c7:1f:b5:a3:22: cd:4f:35:6a:8e:1f:2c:04:65:05:7f:36:cc:f6:df:83:c9:45: c9:a6:0c:8d:c6:1c:ef:03:24:8d:a9:c2:f1:d8:4c:84:3c:c6: 96:83:96:12:47:45:40:95:33:29:94:cd:f0:39:6d:ba:de:de: b7:13:3b:d4:d3:34:10:ee:08:13:43:0d:d4:cd:2b:49:eb:18: 0d:69:3e:c0:fe:41:52:d3:76:6c:81:c9:95:4a:fa:49:37:69: 7e:2c:3c:79:ad:8c:f1:e0:dc:08:da:ae:bb:01:e2:50:b0:ab: 77:8b:c1:ab:7d:20:67:8e:ce:2f:4a:68:9f:be:2a:29:b9:f3: 91:0d:4d:22:2c:c3:de:db:50:56:7d:62:5f:96:37:96:2c:b5: cd:99:f0:f0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpaMHnl2A9OMzO84QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDYyOTEzMDEwM1oXDTI1MDkyNzEzMDEwM1owLzEtMCsGA1UEAxMk MWVjODYyYjktZDZhMy00NjZjLWFiMTgtNWRmZTZkNWQ5MTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+Oct58j0IxYSc0JwOCgfBtOcwX63+nVuy+h u9WH9AH/8wlueaVseG2mypQcKfdi0ER1YYg9h1W6PGYzW8w5l3oTBLdIZ1WW19fX ztRuE0wpaHH0LKytnsq65dHWJx/qyYEUhl8CI+KwUbZ9bY8p+BN/wXAj0nxZc32O s2ruya4NAgiYt9X/Qwq8vsATgyncF/goljyCmZJpPVJDyrMW81HcCMckfGf3ENJm 98E6j8My/bvgvT6r7fmoj7LEuLAwpT5T0iJMM9Jr+iG64ANM41AB++yul0c8WuR6 RefLqz6A6IjNgBRFmFoatqTGiN1vIVB4r9/1MI/9wPYCVBh/aQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGSKDGQ9xAUIV0hgw0rebEcZvKoGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNGYzNzJlMjUtODc5Mi0z ZDBhLWI4ZWMtM2FiMzU3MjcyZGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAO9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFu1itFI/yY7VwspOguCy639rhqXr6ex0tMPF7AgxW+uUgPz1smO WCIa+H5zEDbcayyKzYjR5Zm7lMG4c7nUj2E3pn0OAsItT7AbMIA9vfMYmF92/+2J t3mSS0ZfUizWQCI7sg3yHn/HH7WjIs1PNWqOHywEZQV/Nsz234PJRcmmDI3GHO8D JI2pwvHYTIQ8xpaDlhJHRUCVMymUzfA5bbre3rcTO9TTNBDuCBNDDdTNK0nrGA1p PsD+QVLTdmyByZVK+kk3aX4sPHmtjPHg3AjarrsB4lCwq3eLwat9IGeOzi9KaJ++ Kim585ENTSIsw97bUFZ9Yl+WN5Ystc2Z8PA= -----END CERTIFICATE-----Generated at Sun Jun 29 18:02:17 2025 by rpki-client