$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a2e3317b-2a25-3cbb-adf9-bfca91faaf16.roa File: a2e3317b-2a25-3cbb-adf9-bfca91faaf16.roa (raw, json) Hash identifier: Z944LHAwdwGNdHFZPkzzfSx9Bpkc3IGRXf3POM56iR0= Subject key identifier: D7:DD:AD:D8:75:C7:EE:B5:CA:2D:4B:7F:DB:35:40:A1:61:4D:84:80 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849E7BA5CF065B8EAABBF052540 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a2e3317b-2a25-3cbb-adf9-bfca91faaf16.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 394302 IP address blocks: 2001:470:420::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:5c:f0:65:b8:ea:ab:bf:05:25:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=c277853a-8967-4a01-82c7-f515c9e66a5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c4:15:ab:59:ab:ca:71:39:9c:7f:c0:5e:56: 40:bd:e6:c7:c9:6f:f3:2c:12:2f:db:96:9d:a7:91: e2:71:6c:4a:d8:b8:55:14:3a:7b:ec:b9:0d:b3:fb: ad:2b:cd:bb:a3:b4:cb:d9:f6:77:46:b7:8d:fd:79: 7c:f1:5b:fc:0b:49:b6:a0:da:2d:a0:81:80:e3:0d: ce:4a:a3:aa:ca:0c:2b:f2:cc:34:3b:1d:de:8c:8c: 40:66:08:2f:96:8e:1e:f1:8f:8e:c7:3f:da:34:1c: 4d:7a:90:aa:80:3c:41:5f:b4:1b:ec:3f:d4:23:94: f6:e8:a3:28:fe:02:1c:ec:67:4d:d2:b3:56:b2:95: 6b:39:7a:a3:5e:75:60:1f:bc:84:f0:52:0b:ff:32: 2e:99:0c:53:ed:f0:7c:ea:a5:7c:6c:ef:76:45:c6: 42:5b:50:3c:3a:3c:d3:94:3c:99:39:08:93:4c:f1: 17:87:a7:7d:c9:64:5c:8e:4c:d0:22:fe:03:9d:ed: 64:a0:78:85:fe:68:42:ad:3f:98:79:cc:94:38:fe: a1:cd:3c:0b:bc:b2:0a:11:ef:7e:b1:61:f9:7f:28: dc:76:9d:cf:06:cc:bf:a6:f8:f6:fe:17:25:4d:d5: 58:8a:dc:59:13:cc:c2:a3:64:88:e0:67:b5:88:a1: 28:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:DD:AD:D8:75:C7:EE:B5:CA:2D:4B:7F:DB:35:40:A1:61:4D:84:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a2e3317b-2a25-3cbb-adf9-bfca91faaf16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:420::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:e5:6c:d2:e2:e1:79:9d:f7:eb:4a:1a:4d:a6:b9:87:87:07: 9d:52:1d:f7:5e:5c:71:4a:90:02:3d:5c:5d:23:3a:b5:27:e4: 62:bc:f3:d9:07:97:8b:fb:6e:58:c9:7a:53:aa:d3:d6:a8:d2: 93:cc:05:59:79:31:2f:8c:0c:ec:ad:4b:b7:da:59:da:b0:61: fe:55:34:5f:15:cf:c5:63:4d:92:1c:40:b5:32:3c:a0:15:33: d1:61:ed:b7:5e:ac:9f:be:e2:d1:0e:04:df:1f:80:e1:22:8d: ce:eb:f3:5c:57:6e:d2:ec:26:15:13:4c:d0:41:6d:9a:bd:e9: 3c:a6:fa:0a:9a:74:fc:7b:e7:fb:fa:7a:18:8a:b9:26:5e:5a: a4:dc:3b:e3:d7:cf:f0:8e:16:04:46:4e:a3:00:5a:74:4b:8a: 70:c0:3b:e7:43:ef:40:ea:1b:39:2e:3e:a4:00:65:cd:09:5e: 86:d8:bb:9b:3f:eb:a8:53:cb:18:5d:d2:c9:ab:4f:15:a2:1a: 6d:b2:f5:00:06:fd:63:b1:54:73:e4:dc:f1:5e:85:14:89:90: 65:7a:6b:90:53:e3:43:2d:37:48:14:e9:82:4a:f5:8f:e6:9f: 73:1e:29:d7:38:29:ae:5d:f4:85:54:29:89:2b:48:5b:39:87: 54:5b:6e:f7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnnulzwZbjqq78FJUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk YzI3Nzg1M2EtODk2Ny00YTAxLTgyYzctZjUxNWM5ZTY2YTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8QVq1mrynE5nH/AXlZAvebHyW/zLBIv25ad p5HicWxK2LhVFDp77LkNs/utK827o7TL2fZ3RreN/Xl88Vv8C0m2oNotoIGA4w3O SqOqygwr8sw0Ox3ejIxAZggvlo4e8Y+Oxz/aNBxNepCqgDxBX7Qb7D/UI5T26KMo /gIc7GdN0rNWspVrOXqjXnVgH7yE8FIL/zIumQxT7fB86qV8bO92RcZCW1A8OjzT lDyZOQiTTPEXh6d9yWRcjkzQIv4Dne1koHiF/mhCrT+YecyUOP6hzTwLvLIKEe9+ sWH5fyjcdp3PBsy/pvj2/hclTdVYitxZE8zCo2SI4Ge1iKEoswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNfdrdh1x+61yi1Lf9s1QKFhTYSAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTJlMzMxN2ItMmEyNS0z Y2JiLWFkZjktYmZjYTkxZmFhZjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABHlbNLi4Xmd9+tKGk2muYeHB51SHfdeXHFKkAI9XF0jOrUn5GK8 89kHl4v7bljJelOq09ao0pPMBVl5MS+MDOytS7faWdqwYf5VNF8Vz8VjTZIcQLUy PKAVM9Fh7bderJ++4tEOBN8fgOEijc7r81xXbtLsJhUTTNBBbZq96Tym+gqadPx7 5/v6ehiKuSZeWqTcO+PXz/COFgRGTqMAWnRLinDAO+dD70DqGzkuPqQAZc0JXobY u5s/66hTyxhd0smrTxWiGm2y9QAG/WOxVHPk3PFehRSJkGV6a5BT40MtN0gU6YJK 9Y/mn3MeKdc4Ka5d9IVUKYkrSFs5h1Rbbvc= -----END CERTIFICATE-----Generated at Sun Jun 29 19:31:10 2025 by rpki-client