$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a1f36030-fa3a-3ad9-9f60-d3d099b05931.roa File: a1f36030-fa3a-3ad9-9f60-d3d099b05931.roa (raw, json) Hash identifier: bB8bBr56sqElqSw/pZr3I/UzPuVDU9aBrVmv6wU9AgY= Subject key identifier: 70:0C:A9:43:FD:51:5E:AB:A3:A2:3D:9A:1D:5B:AD:9C:F0:F5:B3:3B Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A10353199D429B95560A97120 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a1f36030-fa3a-3ad9-9f60-d3d099b05931.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 48006 IP address blocks: 2001:470:427::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:31:99:d4:29:b9:55:60:a9:71:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=27698c11-6e89-4fb8-aa8a-7de65e098352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1a:b9:a4:89:4a:50:11:ab:6f:26:2f:19:c9: a4:c4:06:f9:f1:43:08:fd:f4:ec:54:b0:aa:6c:d1: f0:19:52:28:3b:96:a1:c3:84:55:f3:6a:c7:4d:a1: 94:ec:1e:a5:eb:9f:2e:5a:25:d6:f0:38:8f:70:2d: 7b:45:c8:6c:97:90:0f:ec:23:89:5a:12:0e:0a:bf: f0:20:11:e8:9a:29:0d:62:4d:7f:32:1b:6b:70:18: 15:2c:48:61:07:2b:d0:c9:59:9c:ab:00:b6:a4:15: 8e:1a:eb:e4:24:3c:20:9f:88:d0:34:37:4c:25:a6: 42:d7:24:b0:ad:e7:e6:e0:2d:77:3b:8d:dc:7c:73: d0:2d:5d:07:6d:29:2e:43:0d:53:2d:48:a2:97:89: 56:f9:90:c0:83:59:fb:36:3a:bc:88:8f:95:ce:6f: f7:c4:76:dc:9b:59:b3:c4:ed:c1:74:a3:76:1a:bb: 1c:fc:c5:64:15:f8:43:20:f8:4a:37:3a:c6:aa:f2: 3b:4c:10:62:fc:8b:cb:49:19:31:c0:7a:4d:67:fb: da:cd:9f:2f:f9:ee:d7:5b:dd:c0:39:ea:ad:41:5a: 71:da:f1:62:c0:11:b9:5d:24:51:5b:a8:8d:1c:a6: 08:19:69:6c:81:9f:33:14:f1:5a:a7:6a:c1:2b:94: 1c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:0C:A9:43:FD:51:5E:AB:A3:A2:3D:9A:1D:5B:AD:9C:F0:F5:B3:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a1f36030-fa3a-3ad9-9f60-d3d099b05931.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:427::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:73:b0:cd:5d:f8:8d:79:57:de:32:19:07:ba:bc:1b:50:dd: 8f:c2:22:cb:3f:03:98:5a:5c:27:e0:0d:05:77:f7:66:c9:d0: 7a:4f:b6:e0:e9:e0:83:74:5f:0b:f1:a3:36:60:27:5c:09:7e: 4d:7a:73:39:3b:59:9f:7a:9f:80:1f:0b:37:69:66:7c:bc:76: ad:0b:70:64:67:ea:ca:53:dc:41:86:52:5c:df:24:f9:a7:b5: cc:10:7a:d5:aa:42:59:fb:36:19:eb:27:de:36:aa:b9:b7:93: 87:d2:62:fa:4e:dd:49:bf:eb:06:1e:1d:a3:53:11:bb:a9:8b: d4:33:94:b3:58:52:60:c0:87:46:4b:8b:f1:0b:14:33:15:a7: 8a:cf:3b:38:ef:20:c0:2c:e4:14:6b:a9:e5:39:a3:45:bd:ef: ee:73:b4:6a:b3:ab:9c:43:a5:0a:c5:71:70:3a:ce:69:72:cf: c3:46:98:87:bf:8e:17:57:bf:01:6c:8d:e3:7b:83:d9:c9:69: b6:26:0c:4b:26:a3:d8:ce:c7:6e:5f:fa:73:91:ba:36:d1:8e: d5:fe:8b:e9:16:0c:cc:1e:ca:65:90:6f:cc:58:33:17:47:90: 69:d8:b6:68:8a:b5:d1:55:37:f0:90:4c:42:15:33:13:20:dd: 3d:3f:c7:a0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoQNTGZ1Cm5VWCpcSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk Mjc2OThjMTEtNmU4OS00ZmI4LWFhOGEtN2RlNjVlMDk4MzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRq5pIlKUBGrbyYvGcmkxAb58UMI/fTsVLCq bNHwGVIoO5ahw4RV82rHTaGU7B6l658uWiXW8DiPcC17Rchsl5AP7COJWhIOCr/w IBHomikNYk1/MhtrcBgVLEhhByvQyVmcqwC2pBWOGuvkJDwgn4jQNDdMJaZC1ySw refm4C13O43cfHPQLV0HbSkuQw1TLUiil4lW+ZDAg1n7Njq8iI+Vzm/3xHbcm1mz xO3BdKN2Grsc/MVkFfhDIPhKNzrGqvI7TBBi/IvLSRkxwHpNZ/vazZ8v+e7XW93A OeqtQVpx2vFiwBG5XSRRW6iNHKYIGWlsgZ8zFPFap2rBK5QcdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHAMqUP9UV6ro6I9mh1brZzw9bM7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTFmMzYwMzAtZmEzYS0z YWQ5LTlmNjAtZDNkMDk5YjA1OTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHNzsM1d+I15V94yGQe6vBtQ3Y/CIss/A5haXCfgDQV392bJ0HpP tuDp4IN0XwvxozZgJ1wJfk16czk7WZ96n4AfCzdpZny8dq0LcGRn6spT3EGGUlzf JPmntcwQetWqQln7NhnrJ942qrm3k4fSYvpO3Um/6wYeHaNTEbupi9QzlLNYUmDA h0ZLi/ELFDMVp4rPOzjvIMAs5BRrqeU5o0W97+5ztGqzq5xDpQrFcXA6zmlyz8NG mIe/jhdXvwFsjeN7g9nJabYmDEsmo9jOx25f+nORujbRjtX+i+kWDMweymWQb8xY MxdHkGnYtmiKtdFVN/CQTEIVMxMg3T0/x6A= -----END CERTIFICATE-----Generated at Sun Jun 29 19:26:20 2025 by rpki-client