$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a8a2fd88-dfbb-3a50-b278-29a7c9f94977.roa File: a8a2fd88-dfbb-3a50-b278-29a7c9f94977.roa (raw, json) Hash identifier: MpOF5UM1n5u9GhqIM+ym7vvdacmdiFVeDGq6aVOIu8Y= Subject key identifier: 34:4F:0D:7B:01:64:CA:C2:05:8D:C0:1C:28:A3:E2:BE:81:79:EC:87 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849BDDA3A98F8523BCFBA061D00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a8a2fd88-dfbb-3a50-b278-29a7c9f94977.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 58955 IP address blocks: 2001:470:37f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:3a:98:f8:52:3b:cf:ba:06:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=ff563c42-300d-4aa4-96f0-fc805507c1b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a7:54:75:c8:4b:59:40:b6:eb:51:90:83:df: 13:b7:26:26:6a:c8:1e:f4:d0:7e:20:84:7f:a8:74: 78:27:4a:a9:16:e8:ba:95:5f:7b:75:8c:a5:cb:79: 3b:54:da:bc:11:39:d4:f6:82:09:2d:4e:a6:8c:4e: 21:4b:df:66:d4:de:44:10:3e:c2:fa:d8:6f:47:f0: fe:c7:42:e1:43:17:f4:2d:90:e4:4e:86:da:6c:f1: 6e:99:74:ba:d7:e8:53:cf:fc:e0:01:36:b1:f6:ff: 6d:54:8c:1d:e5:ed:f3:ec:17:72:5e:78:f3:2e:0e: 7a:af:27:12:50:12:ba:82:a9:38:20:08:31:02:04: ed:2a:62:92:9e:29:3b:56:07:db:4d:1d:c2:d9:34: 9a:4a:fb:a9:42:d0:c5:f6:a0:36:b6:31:b6:1b:1f: 77:d9:5e:ba:37:fa:a7:24:9f:19:b2:2f:be:81:25: af:b4:58:33:39:ff:a6:a8:9f:60:7a:62:1d:50:d8: 1b:09:b8:5e:28:f7:61:30:2c:90:eb:24:0c:40:aa: 53:2d:75:1a:8f:90:2a:90:13:ee:9f:0a:09:b9:53: 74:3a:23:b0:a0:8d:bb:ed:33:13:46:2a:10:fc:a1: bc:b1:33:39:c6:95:19:1d:a5:99:d7:5d:d3:b1:35: 1c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:4F:0D:7B:01:64:CA:C2:05:8D:C0:1C:28:A3:E2:BE:81:79:EC:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a8a2fd88-dfbb-3a50-b278-29a7c9f94977.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:37f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:71:ba:12:45:d1:7e:87:82:30:d1:d8:2c:06:44:70:ec:9f: 25:80:f3:0d:45:e5:22:47:0d:f6:de:0b:4c:74:dc:09:0b:12: 94:2e:63:64:c6:b0:34:b2:aa:d2:ef:cd:07:1f:52:6a:fb:f0: 34:07:81:82:84:c9:68:e8:25:29:d4:14:24:8a:ff:ee:76:65: fa:4a:85:b9:45:64:42:4a:f7:b5:d9:f6:8b:dc:98:cd:94:14: 79:b4:b4:7b:61:e0:c2:ae:97:2f:ff:73:51:40:40:03:de:5f: 20:84:81:0f:51:86:47:8a:3c:82:4e:e4:39:7b:2a:06:2d:15: c5:e7:b8:82:ef:d9:69:80:2e:88:07:58:75:b0:34:46:ae:c0: cb:11:f1:72:c7:a4:a3:83:cc:00:ed:36:5a:09:7e:dd:a5:12: cc:e1:49:3f:60:79:75:23:ba:e0:ab:cc:e2:9b:2c:4e:58:27: 06:ae:d5:0b:fd:a7:73:b0:c7:bd:24:cd:8e:7b:05:ed:35:12: 6b:ac:d0:c6:70:9b:21:c3:eb:02:29:cb:20:60:50:21:54:c9: 45:ff:37:86:4a:c3:be:92:68:a9:52:8a:e1:5a:19:69:ab:4e: b6:8f:28:e3:ad:2f:69:32:72:a5:17:26:41:f5:50:5b:00:69: 62:c8:dd:4b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm92jqY+FI7z7oGHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk ZmY1NjNjNDItMzAwZC00YWE0LTk2ZjAtZmM4MDU1MDdjMWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKdUdchLWUC261GQg98TtyYmasge9NB+IIR/ qHR4J0qpFui6lV97dYyly3k7VNq8ETnU9oIJLU6mjE4hS99m1N5EED7C+thvR/D+ x0LhQxf0LZDkTobabPFumXS61+hTz/zgATax9v9tVIwd5e3z7BdyXnjzLg56rycS UBK6gqk4IAgxAgTtKmKSnik7VgfbTR3C2TSaSvupQtDF9qA2tjG2Gx932V66N/qn JJ8Zsi++gSWvtFgzOf+mqJ9gemIdUNgbCbheKPdhMCyQ6yQMQKpTLXUaj5AqkBPu nwoJuVN0OiOwoI277TMTRioQ/KG8sTM5xpUZHaWZ113TsTUclQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDRPDXsBZMrCBY3AHCij4r6BeeyHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYThhMmZkODgtZGZiYi0z YTUwLWIyNzgtMjlhN2M5Zjk0OTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAN/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACVxuhJF0X6HgjDR2CwGRHDsnyWA8w1F5SJHDfbeC0x03AkLEpQu Y2TGsDSyqtLvzQcfUmr78DQHgYKEyWjoJSnUFCSK/+52ZfpKhblFZEJK97XZ9ovc mM2UFHm0tHth4MKuly//c1FAQAPeXyCEgQ9RhkeKPIJO5Dl7KgYtFcXnuILv2WmA LogHWHWwNEauwMsR8XLHpKODzADtNloJft2lEszhST9geXUjuuCrzOKbLE5YJwau 1Qv9p3Owx70kzY57Be01Emus0MZwmyHD6wIpyyBgUCFUyUX/N4ZKw76SaKlSiuFa GWmrTraPKOOtL2kycqUXJkH1UFsAaWLI3Us= -----END CERTIFICATE-----Generated at Thu May 8 05:03:45 2025 by rpki-client