$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a9a48928-2461-3b39-a10f-1672d3db066b.roa File: a9a48928-2461-3b39-a10f-1672d3db066b.roa (raw, json) Hash identifier: pcqU+PVnvLcXkT/fltUtwBb6ord5hqB1OyEXtGtnaX8= Subject key identifier: 47:A3:16:9C:13:75:6F:80:12:4C:E1:8C:DE:C2:02:AD:39:D2:E4:E8 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A1F904D73C0D940D6AE215D00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a9a48928-2461-3b39-a10f-1672d3db066b.roa Signing time: Sun 08 Jun 2025 13:01:01 +0000 ROA not before: Sun 08 Jun 2025 13:01:01 +0000 ROA not after: Sat 06 Sep 2025 13:01:01 +0000 asID: 396354 IP address blocks: 2001:470:33f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1f:90:4d:73:c0:d9:40:d6:ae:21:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 8 13:01:01 2025 GMT Not After : Sep 6 13:01:01 2025 GMT Subject: CN=2fbf26d9-c7df-4a76-a824-531a23ea0c2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:26:ba:17:ad:22:e6:0a:ec:bb:1d:8c:9e:8e: 3e:e1:f6:65:37:a3:1c:a7:a9:4c:fc:f0:53:b4:7f: 7d:38:c6:29:37:5c:23:db:fb:18:ed:4f:2b:d5:b0: b6:27:8a:12:43:27:31:66:f1:08:c7:79:11:b8:6f: a5:bc:ee:52:39:0d:c0:04:53:9c:97:08:bc:76:5b: 60:29:fa:85:10:7d:cf:26:f1:fb:09:57:56:1c:15: 79:33:b3:aa:57:0d:55:f8:f9:7f:58:3b:bd:b2:f6: 16:5e:da:1a:2e:64:b3:49:32:ea:f6:35:c9:0a:d7: be:f4:a6:98:63:72:c1:6e:a2:78:1f:7d:82:8b:ee: cd:c6:5c:36:76:9a:80:a6:cc:e8:bc:ce:aa:b8:09: f2:b6:8f:12:e5:1c:61:a9:ea:dd:96:17:32:62:63: 37:ea:59:99:da:1b:eb:c0:73:2e:a9:a7:f5:8a:d7: 18:0e:4e:b0:31:56:b1:63:f2:d4:ba:85:e7:b5:bd: 6c:81:4f:a6:1f:75:95:c9:20:7f:b0:d2:dc:1d:b8: f7:1c:84:99:39:d6:7c:85:ad:66:36:1b:92:4f:40: e4:49:30:39:e9:f8:c2:c2:d3:5a:bb:d3:4b:bd:06: c6:05:12:a3:2c:fd:56:90:26:1d:ab:91:2b:fc:7a: 2f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A3:16:9C:13:75:6F:80:12:4C:E1:8C:DE:C2:02:AD:39:D2:E4:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a9a48928-2461-3b39-a10f-1672d3db066b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:33f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:b3:ea:fe:9a:fb:1e:f5:16:2c:0b:28:da:c3:79:db:7a:e7: 4f:2c:52:80:6a:bb:5e:81:dd:88:6c:45:2d:79:db:f9:20:2d: a0:a6:d8:8d:36:5e:fe:76:1a:f1:66:3f:54:6a:44:53:31:be: 48:55:b6:37:16:f9:ea:0d:f2:18:89:e8:5c:1f:87:cb:4f:b3: 06:eb:ca:61:e8:cb:39:51:c2:06:3d:76:81:5f:f9:e6:74:4d: 72:e6:7f:81:aa:15:76:67:17:82:0d:b5:fa:99:35:e3:c7:b9: e7:1a:64:4f:0d:87:56:2f:a7:63:46:cd:16:be:b2:a6:5c:85: 43:b3:58:53:9c:18:43:01:16:5e:f4:73:12:b3:ef:4a:bb:c3: 45:8d:b2:e6:d1:f2:b4:3d:35:f5:af:b8:51:b3:f4:a5:b8:f0: a9:2f:0b:4a:5b:5c:26:86:53:46:dd:57:50:2f:9e:8e:42:83: 11:b6:07:1c:94:21:e4:5d:2a:69:78:7f:bd:09:38:60:28:68: fd:9c:13:c1:b9:9f:8f:d9:74:ab:06:e2:d0:7c:3c:44:52:ed: 8b:f7:c7:2b:ba:22:4c:e4:ef:08:a0:8e:c0:04:f9:d7:e3:d3: 76:1e:01:3d:f2:02:fd:88:77:67:28:63:7f:b3:33:a3:99:a8: ae:c8:7a:83 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEofkE1zwNlA1q4hXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDYwODEzMDEwMVoXDTI1MDkwNjEzMDEwMVowLzEtMCsGA1UEAxMk MmZiZjI2ZDktYzdkZi00YTc2LWE4MjQtNTMxYTIzZWEwYzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCa6F60i5grsux2Mno4+4fZlN6Mcp6lM/PBT tH99OMYpN1wj2/sY7U8r1bC2J4oSQycxZvEIx3kRuG+lvO5SOQ3ABFOclwi8dltg KfqFEH3PJvH7CVdWHBV5M7OqVw1V+Pl/WDu9svYWXtoaLmSzSTLq9jXJCte+9KaY Y3LBbqJ4H32Ci+7Nxlw2dpqApszovM6quAnyto8S5RxhqerdlhcyYmM36lmZ2hvr wHMuqaf1itcYDk6wMVaxY/LUuoXntb1sgU+mH3WVySB/sNLcHbj3HISZOdZ8ha1m NhuST0DkSTA56fjCwtNau9NLvQbGBRKjLP1WkCYdq5Er/HovnQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEejFpwTdW+AEkzhjN7CAq050uToMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTlhNDg5MjgtMjQ2MS0z YjM5LWExMGYtMTY3MmQzZGIwNjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAM/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEGz6v6a+x71FiwLKNrDedt6508sUoBqu16B3YhsRS152/kgLaCm 2I02Xv52GvFmP1RqRFMxvkhVtjcW+eoN8hiJ6Fwfh8tPswbrymHoyzlRwgY9doFf +eZ0TXLmf4GqFXZnF4INtfqZNePHuecaZE8Nh1Yvp2NGzRa+sqZchUOzWFOcGEMB Fl70cxKz70q7w0WNsubR8rQ9NfWvuFGz9KW48KkvC0pbXCaGU0bdV1Avno5CgxG2 BxyUIeRdKml4f70JOGAoaP2cE8G5n4/ZdKsG4tB8PERS7Yv3xyu6Ikzk7wigjsAE +dfj03YeAT3yAv2Id2coY3+zM6OZqK7IeoM= -----END CERTIFICATE-----Generated at Sun Jun 29 12:51:33 2025 by rpki-client