$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8a14b687-8752-306a-bdfa-f859c47ad39e.roa File: 8a14b687-8752-306a-bdfa-f859c47ad39e.roa (raw, json) Hash identifier: ftLMV3/3VG0+DSb02dCB1/w9jftNYsFcuk0N9rPVewE= Subject key identifier: DD:E2:70:DD:AC:B1:2E:26:B2:C7:D1:8D:6B:BD:73:53:C5:79:85:5E Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A3A23FECCAD0A4A9036CAED80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8a14b687-8752-306a-bdfa-f859c47ad39e.roa Signing time: Wed 18 Jun 2025 01:30:10 +0000 ROA not before: Wed 18 Jun 2025 01:30:10 +0000 ROA not after: Tue 16 Sep 2025 01:30:10 +0000 asID: 16832 IP address blocks: 2001:470:2e3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:23:fe:cc:ad:0a:4a:90:36:ca:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 18 01:30:10 2025 GMT Not After : Sep 16 01:30:10 2025 GMT Subject: CN=050d76a5-60da-4c52-a44b-103ca9fce185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:62:bc:67:6c:fe:9b:8b:63:ef:ce:59:28:76: 27:f7:57:e8:17:53:bd:8b:70:50:b2:ef:79:80:62: ff:2f:da:e9:7e:e1:a9:d5:5b:f6:44:3e:0b:6d:ff: 08:52:e0:a3:35:21:12:47:f3:74:0b:b4:5f:96:3d: 8c:76:0b:a6:ad:3c:ba:d7:23:68:c0:27:fa:45:fc: a5:de:fa:07:a4:ee:f3:d4:ce:32:8f:ba:8a:97:85: c9:56:9d:5f:6d:e6:d9:35:4a:ba:e0:7e:34:36:dc: 46:50:ca:5b:9a:11:ec:26:e3:c1:8f:e9:c5:a4:30: ab:ca:3c:62:38:a9:b0:a8:35:78:89:d3:4f:72:cb: 5b:5d:cf:18:a1:c0:60:5e:ab:0c:86:54:d4:80:30: fa:01:9c:6b:e1:3e:a6:1f:dc:b7:ca:ec:53:7e:47: 12:f0:72:83:b5:78:bd:35:68:72:13:67:71:40:a0: a1:f3:b2:18:e2:65:24:51:3d:61:bf:0f:e2:38:36: 4f:c1:f7:1b:72:f4:4e:6d:5e:36:01:12:5a:47:fe: e5:3e:27:00:b4:f3:b2:85:f3:a6:13:98:2d:2b:4b: 98:dc:26:1b:cb:0d:8a:18:bd:38:bd:6c:db:80:7e: 0f:c2:1a:df:dc:7c:07:ed:bf:a2:14:a5:f5:d2:2d: 79:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E2:70:DD:AC:B1:2E:26:B2:C7:D1:8D:6B:BD:73:53:C5:79:85:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8a14b687-8752-306a-bdfa-f859c47ad39e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2e3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:2c:0c:6d:ba:5d:a1:c2:23:d1:e7:ee:66:f5:0b:7e:10:dd: 93:24:b6:6e:2a:3b:e0:b3:d9:4d:44:d5:ab:fc:b9:e3:44:ef: bb:49:52:83:5c:69:e7:2b:c5:52:89:7a:27:fa:fc:ba:57:a1: 6a:f5:56:41:a2:09:32:a2:07:6f:78:17:ef:ce:df:b8:a5:da: 8e:df:5c:7c:f4:61:b9:1d:81:5e:0c:35:df:d6:2b:93:a8:22: cb:9f:be:7b:85:08:83:06:38:9b:e0:71:ab:d8:4a:f0:81:11: 15:5d:ee:e2:bc:4d:e0:5a:38:03:c9:c7:a8:d9:cc:a3:c6:0a: 45:69:d2:3a:7a:8e:e2:8b:53:69:44:58:59:60:86:2c:6e:51: 05:fc:0a:d3:9a:14:1a:ec:17:b5:10:56:48:a9:b9:46:f0:45: e4:1a:18:5f:83:de:89:87:e5:25:fc:99:1d:a9:ff:a7:7f:6d: a0:78:7a:72:06:4e:22:d8:5b:cd:2c:7b:db:1e:50:f5:e7:50: ab:84:fc:1c:52:eb:c0:5a:9f:07:8a:75:9f:a6:cb:c2:ac:b1: ee:b1:91:1a:ec:ab:76:d1:53:5a:f9:f5:25:e3:b5:de:95:62: 58:ac:a5:71:07:b5:d3:ba:3b:e4:85:1b:9c:07:7e:ee:0b:a3: b0:f0:8f:e8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo6I/7MrQpKkDbK7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDYxODAxMzAxMFoXDTI1MDkxNjAxMzAxMFowLzEtMCsGA1UEAxMk MDUwZDc2YTUtNjBkYS00YzUyLWE0NGItMTAzY2E5ZmNlMTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWK8Z2z+m4tj785ZKHYn91foF1O9i3BQsu95 gGL/L9rpfuGp1Vv2RD4Lbf8IUuCjNSESR/N0C7Rflj2MdgumrTy61yNowCf6Rfyl 3voHpO7z1M4yj7qKl4XJVp1fbebZNUq64H40NtxGUMpbmhHsJuPBj+nFpDCryjxi OKmwqDV4idNPcstbXc8YocBgXqsMhlTUgDD6AZxr4T6mH9y3yuxTfkcS8HKDtXi9 NWhyE2dxQKCh87IY4mUkUT1hvw/iODZPwfcbcvRObV42ARJaR/7lPicAtPOyhfOm E5gtK0uY3CYbyw2KGL04vWzbgH4Pwhrf3HwH7b+iFKX10i15bwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN3icN2ssS4mssfRjWu9c1PFeYVeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOGExNGI2ODctODc1Mi0z MDZhLWJkZmEtZjg1OWM0N2FkMzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALksDG26XaHCI9Hn7mb1C34Q3ZMktm4qO+Cz2U1E1av8ueNE77tJ UoNcaecrxVKJeif6/LpXoWr1VkGiCTKiB294F+/O37il2o7fXHz0YbkdgV4MNd/W K5OoIsufvnuFCIMGOJvgcavYSvCBERVd7uK8TeBaOAPJx6jZzKPGCkVp0jp6juKL U2lEWFlghixuUQX8CtOaFBrsF7UQVkipuUbwReQaGF+D3omH5SX8mR2p/6d/baB4 enIGTiLYW80se9seUPXnUKuE/BxS68BanweKdZ+my8Ksse6xkRrsq3bRU1r59SXj td6VYlispXEHtdO6O+SFG5wHfu4Lo7Dwj+g= -----END CERTIFICATE-----Generated at Mon Jun 30 17:26:16 2025 by rpki-client