$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8b5aafbb-2d60-357a-8419-82565692d4c4.roa File: 8b5aafbb-2d60-357a-8419-82565692d4c4.roa (raw, json) Hash identifier: Hq1TizlghTAD+H5BhQ9gSu/ES8zUVVS51iXyjtneZOM= Subject key identifier: B0:7D:83:80:E7:5D:4F:6C:FA:BC:32:F1:49:FC:EE:49:A3:10:8E:07 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584996C4B6AAB992840499FD32C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8b5aafbb-2d60-357a-8419-82565692d4c4.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 125 IP address blocks: 2001:470:363::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:b6:aa:b9:92:84:04:99:fd:32:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=65a84f15-100d-486e-ac05-05316220fded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:82:fe:98:56:10:ec:b7:5d:97:6c:e1:b1:14: b6:18:c0:48:f0:ed:8f:e2:82:98:c9:6d:bd:53:de: 48:bc:2f:01:42:e0:a8:95:fb:a1:b8:49:25:3e:a3: 7e:ad:69:f4:3a:ec:90:54:52:72:78:97:9a:c9:ff: 77:93:7e:1a:8c:17:26:44:73:0d:64:be:b1:6a:0f: f1:13:f9:2c:31:6b:3d:34:49:64:ff:f6:c6:3e:53: c9:97:b0:d9:15:18:f8:d4:4d:e4:c1:1e:75:e2:b5: 38:ab:4b:a7:27:51:cb:d7:c1:f3:df:9c:23:2e:11: e8:90:af:8f:71:30:4a:a3:4b:b3:a1:65:0a:c2:f1: 1e:95:7c:bf:8e:ff:52:2f:9b:d2:ac:8a:74:e1:00: 7d:99:c5:91:34:19:4d:4b:2b:1c:08:aa:98:22:75: 14:a4:7b:b0:ed:54:63:4e:69:8b:a2:c3:3a:e8:f8: 18:b3:3f:17:6f:e8:d3:3d:47:bf:b8:b1:80:c0:02: ff:52:f9:30:c8:9c:73:f7:79:7c:0a:c1:81:0c:a9: 3d:55:66:51:15:f3:04:71:5c:48:a2:f8:64:e6:59: 62:94:8f:b4:3c:95:79:9f:2a:18:2c:ca:bc:f6:91: b6:5c:34:54:27:fd:95:75:25:af:3e:e7:91:b5:04: d5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:7D:83:80:E7:5D:4F:6C:FA:BC:32:F1:49:FC:EE:49:A3:10:8E:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8b5aafbb-2d60-357a-8419-82565692d4c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:363::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:c0:f1:00:6f:2f:cb:03:e6:99:9a:28:af:19:03:4c:49:ef: 19:aa:e1:4f:92:32:e7:6b:c8:7d:eb:6b:64:64:76:74:4c:bc: 0a:28:c5:3a:e5:c9:6c:6b:bd:ce:0c:ae:ab:e6:d1:c3:c3:58: 8b:67:a5:c7:bb:d0:81:15:61:36:40:7b:71:1c:67:6f:a2:57: 0b:0c:95:12:e7:31:08:96:94:7b:f1:8b:bf:42:b0:ac:84:e9: 82:d7:24:c7:66:59:89:83:73:3f:1e:1b:6f:5c:f5:03:e0:40: cb:86:29:b7:85:81:28:e0:8e:44:bb:69:79:21:6a:bd:ae:6e: 7d:2e:e5:63:ba:a7:f5:76:b2:7d:9c:ab:46:59:5e:0a:f4:52: 43:d8:3a:f2:14:6f:7d:b5:f1:d4:78:7c:96:eb:e8:47:61:93: 32:6e:9d:33:d7:22:df:7c:37:51:d9:5c:a0:2e:c6:c3:e6:2a: 51:88:f1:74:d2:d0:11:cb:48:ee:f5:ec:ff:ec:0c:1f:e1:9e: e3:2c:7c:8e:12:cb:33:d9:61:fa:4e:bf:92:f1:2e:9e:3b:5b: c5:57:3c:1a:99:af:fc:a5:c3:d3:af:c8:34:5e:21:1f:83:d4: 6a:33:c7:ca:94:e8:dc:09:0e:64:9e:1c:2f:51:2d:47:15:49: ae:7b:93:89 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmWxLaquZKEBJn9MsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk NjVhODRmMTUtMTAwZC00ODZlLWFjMDUtMDUzMTYyMjBmZGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oL+mFYQ7Lddl2zhsRS2GMBI8O2P4oKYyW29 U95IvC8BQuColfuhuEklPqN+rWn0OuyQVFJyeJeayf93k34ajBcmRHMNZL6xag/x E/ksMWs9NElk//bGPlPJl7DZFRj41E3kwR514rU4q0unJ1HL18Hz35wjLhHokK+P cTBKo0uzoWUKwvEelXy/jv9SL5vSrIp04QB9mcWRNBlNSyscCKqYInUUpHuw7VRj TmmLosM66PgYsz8Xb+jTPUe/uLGAwAL/UvkwyJxz93l8CsGBDKk9VWZRFfMEcVxI ovhk5llilI+0PJV5nyoYLMq89pG2XDRUJ/2VdSWvPueRtQTVAQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLB9g4DnXU9s+rwy8Un87kmjEI4HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOGI1YWFmYmItMmQ2MC0z NTdhLTg0MTktODI1NjU2OTJkNGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcANj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAnA8QBvL8sD5pmaKK8ZA0xJ7xmq4U+SMudryH3ra2RkdnRMvAoo xTrlyWxrvc4Mrqvm0cPDWItnpce70IEVYTZAe3EcZ2+iVwsMlRLnMQiWlHvxi79C sKyE6YLXJMdmWYmDcz8eG29c9QPgQMuGKbeFgSjgjkS7aXkhar2ubn0u5WO6p/V2 sn2cq0ZZXgr0UkPYOvIUb3218dR4fJbr6EdhkzJunTPXIt98N1HZXKAuxsPmKlGI 8XTS0BHLSO717P/sDB/hnuMsfI4SyzPZYfpOv5LxLp47W8VXPBqZr/ylw9OvyDRe IR+D1Gozx8qU6NwJDmSeHC9RLUcVSa57k4k= -----END CERTIFICATE-----Generated at Sun May 11 12:42:04 2025 by rpki-client