$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8c838644-8e99-3a27-99e0-cbed35335996.roa File: 8c838644-8e99-3a27-99e0-cbed35335996.roa (raw, json) Hash identifier: /KcJEPOCXuprWW/5nxzDfFgf/XKkv3cSwvVyzAo1qH8= Subject key identifier: 23:DD:1B:9F:4B:67:3E:92:C1:6C:CB:BF:9C:F8:2F:FF:BD:79:9B:FE Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A4F05AFAFA6851A8A6EEB80E0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8c838644-8e99-3a27-99e0-cbed35335996.roa Signing time: Wed 25 Jun 2025 13:01:04 +0000 ROA not before: Wed 25 Jun 2025 13:01:04 +0000 ROA not after: Tue 23 Sep 2025 13:01:04 +0000 asID: 398488 IP address blocks: 2001:470:437::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:05:af:af:a6:85:1a:8a:6e:eb:80:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 25 13:01:04 2025 GMT Not After : Sep 23 13:01:04 2025 GMT Subject: CN=b4dda4e3-d69d-46a1-9c2f-06b501c69869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d3:cc:e5:ca:d5:ea:73:83:8f:35:74:5a:cb: ba:4c:ae:fa:66:85:36:49:63:4b:6e:b4:d1:c7:11: e8:ea:ae:01:9c:fb:24:e8:bf:cb:98:c0:08:86:a1: a1:72:3c:09:a0:6d:95:40:56:75:ab:35:5b:54:ce: 60:49:1a:ed:1e:fb:e2:ab:ed:0a:90:b0:59:db:2c: 01:97:a5:1f:a5:a6:f7:10:f9:87:63:a4:f2:e5:73: a4:b4:b4:8f:e7:1e:f5:30:cf:b9:21:53:58:66:c8: d6:b4:1e:0e:2e:4d:8b:e5:41:19:1c:89:88:87:56: 60:93:ad:b0:14:2e:5e:6b:47:45:c7:3a:93:11:ac: de:7c:4b:b6:cd:7b:86:ee:5d:f3:2e:6c:0b:7d:24: 1d:57:b3:a3:fb:1b:d9:70:32:b1:15:1b:cf:7d:96: 98:0e:38:c0:6f:ea:21:04:27:73:85:d2:53:4b:4a: c3:35:ad:3f:b0:35:51:ba:2a:88:4c:e1:5a:cf:b8: e3:5a:56:81:44:54:e1:de:88:97:25:a9:0a:39:d4: a4:9a:14:4a:73:ca:13:70:28:e0:d9:97:93:d7:bf: da:fb:be:ab:24:b5:ea:52:10:c2:a1:45:0c:2d:26: a9:85:6c:5e:01:7c:b1:6b:c8:b8:40:c9:f1:d8:bf: 8a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:DD:1B:9F:4B:67:3E:92:C1:6C:CB:BF:9C:F8:2F:FF:BD:79:9B:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8c838644-8e99-3a27-99e0-cbed35335996.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:437::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:d9:61:0c:01:f7:1b:20:5f:f0:09:3e:e7:b6:9a:f0:fc:67: 83:6b:f6:ea:3e:e4:c2:4a:8a:dd:c0:ee:75:0b:ad:3f:79:a8: 20:31:fa:04:e2:36:2f:34:f3:9c:e6:49:7d:1b:50:52:c6:b4: eb:27:63:42:a8:7f:fa:f9:42:65:0c:89:d6:aa:87:44:3c:db: 73:40:6d:23:e4:a3:3f:c2:19:fe:05:1a:90:c5:84:6a:7d:65: 24:af:e5:c2:17:30:24:61:47:7b:8b:10:21:dd:31:63:ac:23: a1:bc:97:8d:f7:11:c6:c9:72:8c:1d:db:b6:01:ee:fa:75:96: ea:b8:f8:b2:25:e4:c3:f1:4d:b5:54:06:03:8f:84:c6:c4:61: e5:72:03:de:fa:9a:df:0c:58:04:a3:ab:83:57:1e:70:37:0a: eb:e3:62:2a:76:12:e6:ef:d2:40:83:30:32:7a:cd:72:2f:53: cd:dc:87:22:81:b9:49:0c:7c:8f:31:e5:fb:c2:d9:2c:33:00: 32:32:64:b0:af:63:74:9d:2e:7f:fd:9d:f2:8a:9a:87:c0:58: c3:de:41:c4:db:73:4b:13:26:4b:bf:27:98:d7:7a:86:c6:19: ac:b4:cd:a0:a3:b6:91:c0:e9:1e:21:d6:3c:a9:d1:6c:9f:53: f1:89:7d:b9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpPBa+vpoUaim7rgOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk YjRkZGE0ZTMtZDY5ZC00NmExLTljMmYtMDZiNTAxYzY5ODY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtPM5crV6nODjzV0Wsu6TK76ZoU2SWNLbrTR xxHo6q4BnPsk6L/LmMAIhqGhcjwJoG2VQFZ1qzVbVM5gSRrtHvviq+0KkLBZ2ywB l6Ufpab3EPmHY6Ty5XOktLSP5x71MM+5IVNYZsjWtB4OLk2L5UEZHImIh1Zgk62w FC5ea0dFxzqTEazefEu2zXuG7l3zLmwLfSQdV7Oj+xvZcDKxFRvPfZaYDjjAb+oh BCdzhdJTS0rDNa0/sDVRuiqITOFaz7jjWlaBRFTh3oiXJakKOdSkmhRKc8oTcCjg 2ZeT17/a+76rJLXqUhDCoUUMLSaphWxeAXyxa8i4QMnx2L+KRQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCPdG59LZz6SwWzLv5z4L/+9eZv+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOGM4Mzg2NDQtOGU5OS0z YTI3LTk5ZTAtY2JlZDM1MzM1OTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQ3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAETZYQwB9xsgX/AJPue2mvD8Z4Nr9uo+5MJKit3A7nULrT95qCAx +gTiNi8085zmSX0bUFLGtOsnY0Kof/r5QmUMidaqh0Q823NAbSPkoz/CGf4FGpDF hGp9ZSSv5cIXMCRhR3uLECHdMWOsI6G8l433EcbJcowd27YB7vp1luq4+LIl5MPx TbVUBgOPhMbEYeVyA976mt8MWASjq4NXHnA3CuvjYip2Eubv0kCDMDJ6zXIvU83c hyKBuUkMfI8x5fvC2SwzADIyZLCvY3SdLn/9nfKKmofAWMPeQcTbc0sTJku/J5jX eobGGay0zaCjtpHA6R4h1jyp0WyfU/GJfbk= -----END CERTIFICATE-----Generated at Sun Jun 29 14:34:14 2025 by rpki-client