$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/61590fd2-ce3b-31ed-b7d3-c07d7a2fa68a.roa File: 61590fd2-ce3b-31ed-b7d3-c07d7a2fa68a.roa (raw, json) Hash identifier: AEFYeSLiWJQXhHeLOHtVGob6f1V11LyrQe6NyCd1NSE= Subject key identifier: DA:B9:48:92:88:0D:D6:15:1E:E7:C9:B1:9B:A3:94:83:12:DC:5C:EB Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849BDDA3A88B12DDEA56167F780 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/61590fd2-ce3b-31ed-b7d3-c07d7a2fa68a.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 58061 IP address blocks: 2001:470:37e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:3a:88:b1:2d:de:a5:61:67:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=5a232fec-d574-4c9a-a204-9298324b30c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:97:01:8a:6b:10:a6:38:9f:f7:3a:af:01:90: c4:1a:36:67:eb:3f:94:c1:d0:bf:bc:8c:43:0c:a1: 18:be:27:2b:ee:30:b0:89:ad:a3:f1:41:c3:cf:b1: bd:89:d1:1d:f2:29:66:a2:b2:5a:db:6f:a9:82:5d: c8:a3:c2:8f:02:a1:f6:92:47:67:aa:5d:b1:30:19: ff:de:d2:98:86:43:c1:d5:ce:7b:cd:d6:14:25:47: 5b:f0:4e:c8:2d:6b:29:a9:14:3f:79:70:18:82:c1: e8:df:1b:03:7c:30:ac:c7:a4:00:44:14:47:f5:1f: d5:04:9c:2f:e5:62:02:64:83:d6:b7:cf:12:4c:ea: 33:f4:2a:7a:4d:8d:56:2b:10:a6:95:e9:a5:2a:c6: 29:07:64:f5:34:b6:d2:6b:72:2e:7e:45:5d:b7:b0: d5:37:e1:f3:69:ce:e7:9f:a5:ae:93:87:3d:e6:b8: bf:47:92:7f:79:09:16:f6:61:2d:00:d5:79:01:bc: b9:da:f9:12:19:97:56:ac:9f:ba:a8:36:99:54:ce: 42:f7:89:b1:10:40:04:1c:dd:d1:5e:a9:89:e8:5b: bb:6f:e0:79:3b:f9:fa:fb:0e:df:78:5d:40:1f:24: 32:76:e6:b4:42:86:ab:c2:3a:bb:b3:6f:e9:f9:c5: df:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B9:48:92:88:0D:D6:15:1E:E7:C9:B1:9B:A3:94:83:12:DC:5C:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/61590fd2-ce3b-31ed-b7d3-c07d7a2fa68a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:37e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:76:47:32:2c:c0:80:f5:ab:5a:4c:ce:9f:e8:5c:5a:4f:a7: a3:be:2d:a5:53:1d:7f:87:ce:1e:ba:3a:dc:c4:08:21:ab:0e: 5c:80:9d:e0:07:b4:26:f4:58:ba:4e:53:bc:80:95:a8:a2:8b: 77:a5:81:46:81:9b:b1:cc:e2:cb:82:04:74:de:e2:5f:8b:6b: 05:29:36:f7:98:15:6f:08:e0:24:e0:ee:2b:84:bb:05:e3:89: 4c:f3:24:47:60:87:4d:32:22:05:e5:01:ae:30:92:d1:c3:55: 18:a6:30:66:53:72:71:02:cc:77:b8:ec:69:e2:0c:dd:0b:9f: 2e:b2:58:e1:17:44:de:a1:b2:a9:db:a8:08:b9:78:98:a2:48: c6:26:67:90:07:32:9a:ae:df:50:ea:e8:1b:b7:04:17:af:f1: 01:1f:a5:f0:80:e6:25:7f:00:39:87:f1:a4:fa:38:9f:85:c5: 1b:8a:01:a3:b5:c9:bc:3a:c6:a2:ec:96:7f:55:6e:80:50:18: 0d:81:d0:f7:ea:78:79:32:2b:a6:a9:8c:11:c0:05:d7:00:db: 71:87:f0:21:e1:5c:ee:28:bb:47:09:39:c4:b7:83:b7:f6:69: ca:15:aa:64:7f:05:aa:5c:b0:03:0d:90:70:2b:50:62:b2:12: dd:02:2c:40 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm92jqIsS3epWFn94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk NWEyMzJmZWMtZDU3NC00YzlhLWEyMDQtOTI5ODMyNGIzMGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZcBimsQpjif9zqvAZDEGjZn6z+UwdC/vIxD DKEYvicr7jCwia2j8UHDz7G9idEd8ilmorJa22+pgl3Io8KPAqH2kkdnql2xMBn/ 3tKYhkPB1c57zdYUJUdb8E7ILWspqRQ/eXAYgsHo3xsDfDCsx6QARBRH9R/VBJwv 5WICZIPWt88STOoz9Cp6TY1WKxCmlemlKsYpB2T1NLbSa3IufkVdt7DVN+Hzac7n n6Wuk4c95ri/R5J/eQkW9mEtANV5Aby52vkSGZdWrJ+6qDaZVM5C94mxEEAEHN3R XqmJ6Fu7b+B5O/n6+w7feF1AHyQydua0Qoarwjq7s2/p+cXfuQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNq5SJKIDdYVHufJsZujlIMS3FzrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNjE1OTBmZDItY2UzYi0z MWVkLWI3ZDMtYzA3ZDdhMmZhNjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAN+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB92RzIswID1q1pMzp/oXFpPp6O+LaVTHX+Hzh66OtzECCGrDlyA neAHtCb0WLpOU7yAlaiii3elgUaBm7HM4suCBHTe4l+LawUpNveYFW8I4CTg7iuE uwXjiUzzJEdgh00yIgXlAa4wktHDVRimMGZTcnECzHe47GniDN0Lny6yWOEXRN6h sqnbqAi5eJiiSMYmZ5AHMpqu31Dq6Bu3BBev8QEfpfCA5iV/ADmH8aT6OJ+FxRuK AaO1ybw6xqLsln9VboBQGA2B0PfqeHkyK6apjBHABdcA23GH8CHhXO4ou0cJOcS3 g7f2acoVqmR/BapcsAMNkHArUGKyEt0CLEA= -----END CERTIFICATE-----Generated at Mon May 5 09:50:25 2025 by rpki-client