$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/92b6e178-3b1f-337a-a501-650a3e371e03.roa File: 92b6e178-3b1f-337a-a501-650a3e371e03.roa (raw, json) Hash identifier: 33l6/ReiyO4/Pf4dNdVjV2W5AIA5P5jJi2t7paBwyu4= Subject key identifier: B0:2F:B1:20:AA:DE:84:2B:9D:66:96:F7:C6:CD:B8:D3:A9:69:6E:0A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A35E58530DD040E47261EA9C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/92b6e178-3b1f-337a-a501-650a3e371e03.roa Signing time: Mon 16 Jun 2025 13:01:03 +0000 ROA not before: Mon 16 Jun 2025 13:01:03 +0000 ROA not after: Sun 14 Sep 2025 13:01:03 +0000 asID: 125 IP address blocks: 2001:470:42e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:35:e5:85:30:dd:04:0e:47:26:1e:a9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 16 13:01:03 2025 GMT Not After : Sep 14 13:01:03 2025 GMT Subject: CN=782e3202-9648-454b-9951-43f0a6e55bbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9b:4b:8b:66:eb:b0:13:84:84:5b:46:18:24: 82:cf:db:68:1c:33:1d:7d:8f:cc:90:7a:3c:4d:0c: 6d:67:88:bc:e6:cb:c1:90:b4:af:f7:f0:83:1b:c6: 8a:f8:80:3e:f4:d3:0e:1a:d0:24:1f:bc:63:21:47: fe:e2:2c:46:44:2f:75:ea:df:ad:32:4a:39:fb:98: 59:b9:66:ea:c9:e5:b5:82:12:56:42:88:fe:85:35: 97:05:8e:73:76:1f:95:f6:a2:24:82:24:c5:30:bc: 8d:b9:e9:a9:ac:eb:82:4b:13:0d:8c:d6:6c:00:91: a9:d9:43:da:f3:c7:e6:11:53:ff:c0:7f:4f:83:61: 2e:b0:ff:0c:05:a0:7c:13:9c:e8:34:cd:3b:8e:b0: 5c:61:ac:0f:95:84:c2:d2:e4:0b:4c:31:4f:61:e0: e6:9d:ac:72:d7:0f:64:18:1b:a4:c4:39:32:91:1b: 17:6c:42:4f:c7:11:35:5e:fa:b3:f2:c7:36:8e:d0: 52:22:13:aa:bc:0d:38:54:04:15:74:44:c9:ea:e3: 41:fa:36:b0:65:5e:a6:15:c4:85:90:48:f4:ed:0d: 4f:b6:6e:86:76:fd:44:f3:a1:c3:be:17:23:ca:3f: 9f:a3:69:72:1f:9c:17:80:b5:f5:94:27:1e:97:3f: b3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:2F:B1:20:AA:DE:84:2B:9D:66:96:F7:C6:CD:B8:D3:A9:69:6E:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/92b6e178-3b1f-337a-a501-650a3e371e03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:42e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:f5:1f:20:e8:bd:c5:cf:7d:49:8a:fd:62:a1:c6:05:06:c3: e7:b0:bc:2b:67:4b:83:a0:1a:a3:36:da:63:e7:45:14:05:68: 2b:66:41:96:c1:a6:36:b6:e2:77:87:b9:67:38:5a:a5:09:50: 54:59:9e:33:5d:b0:12:86:f3:de:79:6b:31:f2:27:d5:d9:0a: 4b:d0:af:6f:e5:ad:fa:ae:79:31:f4:ea:35:f6:17:f3:64:92: 71:a2:95:9a:d6:8f:3c:10:a2:33:7f:7b:b2:fe:ae:0a:b2:48: 00:60:4f:dd:ae:ba:45:2e:c4:e7:f5:cd:67:50:64:b8:95:33: e9:fb:b2:6a:c4:2e:40:b2:42:74:cf:8c:28:2b:f1:58:39:0e: 22:73:8c:26:80:c0:ad:17:cf:11:ef:a6:db:3b:d9:f0:24:74: cd:ab:77:a2:7b:ad:45:7c:6c:cf:2e:23:1d:20:43:3c:21:58: c9:08:ee:7d:57:30:ef:81:d2:d8:f3:4a:9a:ee:7b:40:c8:7e: 78:6a:34:80:72:1e:db:17:c0:3a:a5:11:42:dd:5c:09:77:0c: a5:2e:84:b1:9d:5e:9f:d5:19:05:ab:8c:ff:a3:4b:22:c3:81: b8:20:88:b7:2a:49:ef:fe:22:b6:34:3f:7a:0a:0d:76:9e:4d: 2e:31:1a:1e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo15YUw3QQORyYeqcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDYxNjEzMDEwM1oXDTI1MDkxNDEzMDEwM1owLzEtMCsGA1UEAxMk NzgyZTMyMDItOTY0OC00NTRiLTk5NTEtNDNmMGE2ZTU1YmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJtLi2brsBOEhFtGGCSCz9toHDMdfY/MkHo8 TQxtZ4i85svBkLSv9/CDG8aK+IA+9NMOGtAkH7xjIUf+4ixGRC916t+tMko5+5hZ uWbqyeW1ghJWQoj+hTWXBY5zdh+V9qIkgiTFMLyNuemprOuCSxMNjNZsAJGp2UPa 88fmEVP/wH9Pg2EusP8MBaB8E5zoNM07jrBcYawPlYTC0uQLTDFPYeDmnaxy1w9k GBukxDkykRsXbEJPxxE1Xvqz8sc2jtBSIhOqvA04VAQVdETJ6uNB+jawZV6mFcSF kEj07Q1Ptm6Gdv1E86HDvhcjyj+fo2lyH5wXgLX1lCcelz+zzQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLAvsSCq3oQrnWaW98bNuNOpaW4KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTJiNmUxNzgtM2IxZi0z MzdhLWE1MDEtNjUwYTNlMzcxZTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD31HyDovcXPfUmK/WKhxgUGw+ewvCtnS4OgGqM22mPnRRQFaCtm QZbBpja24neHuWc4WqUJUFRZnjNdsBKG8955azHyJ9XZCkvQr2/lrfqueTH06jX2 F/NkknGilZrWjzwQojN/e7L+rgqySABgT92uukUuxOf1zWdQZLiVM+n7smrELkCy QnTPjCgr8Vg5DiJzjCaAwK0XzxHvpts72fAkdM2rd6J7rUV8bM8uIx0gQzwhWMkI 7n1XMO+B0tjzSprue0DIfnhqNIByHtsXwDqlEULdXAl3DKUuhLGdXp/VGQWrjP+j SyLDgbggiLcqSe/+IrY0P3oKDXaeTS4xGh4= -----END CERTIFICATE-----Generated at Sun Jun 29 13:43:42 2025 by rpki-client