$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/71734e45-1357-34ca-9120-739d113033d8.roa File: 71734e45-1357-34ca-9120-739d113033d8.roa (raw, json) Hash identifier: tBiZQOeDZcm70IozEVQ4TIzS7O5N7jhxtnVNoVA4R5E= Subject key identifier: DB:92:27:1B:7A:68:6C:95:AF:A2:D3:DB:02:5A:3D:C4:3A:E7:E2:44 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A103530ECF0E9964CD4B41200 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/71734e45-1357-34ca-9120-739d113033d8.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 35688 IP address blocks: 2001:470:427::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:30:ec:f0:e9:96:4c:d4:b4:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=862bea01-1fee-46e5-ab84-a857198b7250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3b:32:65:a5:8a:66:68:16:d2:f1:c3:55:63: 38:83:01:0f:68:8c:40:1a:36:ed:f3:80:c3:4f:66: 33:88:bd:cf:28:23:0c:d4:d5:b8:05:a9:b4:ec:23: f3:c3:40:18:9d:ab:48:3b:7f:c5:5d:30:f2:53:5e: f4:67:69:8b:2b:aa:57:4a:aa:d5:d9:3c:bd:e4:9e: 16:24:b2:45:99:e4:31:27:0c:5a:e8:fd:90:86:4c: 17:4c:41:a8:5e:8b:19:dd:c0:28:93:d2:2a:1f:2f: 0e:0a:d7:48:d9:7a:b2:1d:bc:03:25:29:50:e8:62: 98:76:b2:07:d7:2f:5e:9e:eb:db:24:e6:d2:c4:ca: 22:40:94:84:32:86:dc:76:82:61:46:78:26:25:d3: cc:b0:f6:cb:1c:24:cf:1f:be:40:3c:ed:44:94:3c: 7a:41:f3:6d:e3:a0:2d:75:70:f0:e5:de:4d:d2:09: 8f:f3:ac:17:07:94:fb:c6:10:ab:75:f7:f9:38:14: 3a:7a:e5:73:ce:9c:88:82:1a:43:43:2d:4c:f3:b2: 77:e7:f1:ef:d0:b5:68:10:6e:2f:7a:01:e0:f4:64: 11:97:61:17:75:00:7e:99:38:44:4a:00:42:65:cb: f7:6c:ee:89:22:2e:38:a0:f0:2e:cb:14:a9:fe:ec: 26:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:92:27:1B:7A:68:6C:95:AF:A2:D3:DB:02:5A:3D:C4:3A:E7:E2:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/71734e45-1357-34ca-9120-739d113033d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:427::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:86:66:61:07:b5:20:9d:a0:b3:ae:a9:db:bd:d2:a4:02:a2: 83:1d:b5:aa:00:68:6f:00:e3:71:d9:a8:76:a0:f3:bb:57:42: 83:86:13:5c:9c:dd:46:0c:28:08:c5:cc:ad:b7:d4:95:82:bd: 3d:9b:3b:71:3b:e2:c2:8e:c9:55:47:92:70:6e:e7:74:88:bd: 4f:8d:c6:f3:96:bf:14:ac:a0:5a:20:0f:5c:1a:e7:c5:fc:d9: 6c:ee:8e:8e:31:84:81:e2:87:d9:1d:71:7a:11:7c:90:d5:66: b9:fd:71:96:25:0d:78:ae:d1:93:fb:59:ba:fe:f0:26:76:9f: 94:95:fc:ce:7d:76:0b:a0:38:4d:09:db:44:8b:18:46:3e:1c: 02:3b:b6:64:84:99:f6:73:d8:1a:2f:0c:12:e7:cc:d1:3f:d1: d3:fd:03:19:de:03:2f:54:94:b1:db:43:c0:8a:8d:bd:dd:91: ae:2b:79:46:6a:cc:76:d5:41:b3:3c:1b:92:53:96:01:66:3b: 82:04:36:d5:14:e8:ee:5b:22:de:78:9f:90:1a:e4:ce:4d:c8: 11:05:a8:c5:d4:18:15:6f:38:c2:55:ee:4e:05:91:b5:b8:cc: 1c:fd:07:79:f1:87:a4:63:8e:be:67:15:49:47:3f:3d:6a:41: fe:f5:2d:56 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoQNTDs8OmWTNS0EgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk ODYyYmVhMDEtMWZlZS00NmU1LWFiODQtYTg1NzE5OGI3MjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjsyZaWKZmgW0vHDVWM4gwEPaIxAGjbt84DD T2YziL3PKCMM1NW4Bam07CPzw0AYnatIO3/FXTDyU170Z2mLK6pXSqrV2Ty95J4W JLJFmeQxJwxa6P2QhkwXTEGoXosZ3cAok9IqHy8OCtdI2XqyHbwDJSlQ6GKYdrIH 1y9enuvbJObSxMoiQJSEMobcdoJhRngmJdPMsPbLHCTPH75APO1ElDx6QfNt46At dXDw5d5N0gmP86wXB5T7xhCrdff5OBQ6euVzzpyIghpDQy1M87J35/Hv0LVoEG4v egHg9GQRl2EXdQB+mThESgBCZcv3bO6JIi44oPAuyxSp/uwmnwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNuSJxt6aGyVr6LT2wJaPcQ65+JEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNzE3MzRlNDUtMTM1Ny0z NGNhLTkxMjAtNzM5ZDExMzAzM2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALCGZmEHtSCdoLOuqdu90qQCooMdtaoAaG8A43HZqHag87tXQoOG E1yc3UYMKAjFzK231JWCvT2bO3E74sKOyVVHknBu53SIvU+NxvOWvxSsoFogD1wa 58X82Wzujo4xhIHih9kdcXoRfJDVZrn9cZYlDXiu0ZP7Wbr+8CZ2n5SV/M59dgug OE0J20SLGEY+HAI7tmSEmfZz2BovDBLnzNE/0dP9AxneAy9UlLHbQ8CKjb3dka4r eUZqzHbVQbM8G5JTlgFmO4IENtUU6O5bIt54n5Aa5M5NyBEFqMXUGBVvOMJV7k4F kbW4zBz9B3nxh6Rjjr5nFUlHPz1qQf71LVY= -----END CERTIFICATE-----Generated at Tue Jul 1 07:06:12 2025 by rpki-client