$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf5f6b61-727e-3e6a-9d8b-063b57b35245.roa File: bf5f6b61-727e-3e6a-9d8b-063b57b35245.roa (raw, json) Hash identifier: YDJr2dwlRi8oN50aBqI+gsRMtMxsq1U00GmXpr63j6E= Subject key identifier: FC:37:DE:F1:33:51:9B:CB:63:D1:FB:32:0E:72:60:BB:D0:F9:A4:FC Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A4AD58BF654619CB0AC1CD200 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf5f6b61-727e-3e6a-9d8b-063b57b35245.roa Signing time: Tue 24 Jun 2025 01:00:50 +0000 ROA not before: Tue 24 Jun 2025 01:00:50 +0000 ROA not after: Mon 22 Sep 2025 01:00:50 +0000 asID: 21512 IP address blocks: 2001:470:385::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4a:d5:8b:f6:54:61:9c:b0:ac:1c:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 24 01:00:50 2025 GMT Not After : Sep 22 01:00:50 2025 GMT Subject: CN=64724748-2cfa-47cf-90a0-a2b192f3dfb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e4:29:57:cf:5f:5c:f3:b7:55:30:bb:15:d0: a1:e5:8e:73:c2:a7:90:a7:9a:cb:a8:7b:8f:17:9b: 23:e0:1c:bc:21:e9:54:ca:cd:14:8b:3a:1e:dc:b4: 61:65:22:0a:cb:cf:a7:6b:be:a3:dd:42:07:5f:44: 42:c2:10:98:c4:a5:5e:b6:3e:d7:a6:19:29:e3:fc: 1f:7e:d7:1b:a1:fb:bb:9e:a0:46:a0:a0:1a:a4:d3: 5c:e5:a2:48:e0:92:7e:7b:bf:c8:4a:88:e2:f2:81: fd:9e:24:03:07:3d:df:42:bf:2f:0a:56:74:c3:b1: d8:56:32:c5:bf:c5:16:7c:1a:e6:28:51:0d:15:39: 6c:2c:ec:4c:ad:8c:4d:0b:bd:ff:6d:30:10:28:89: 36:b9:7f:5c:20:ba:da:2f:66:8f:cd:39:72:83:9f: 70:a4:34:76:90:42:6b:c9:da:c1:2a:a0:87:d7:98: db:02:46:38:01:5f:c2:14:c1:e8:40:d9:c6:69:40: f6:a6:28:7b:17:07:63:3e:65:2a:9a:28:e2:41:ef: fa:28:65:ee:ba:59:ea:7a:ee:83:d9:c2:66:db:79: 6a:f3:7b:8a:7e:9d:85:2b:02:4c:ac:4f:6c:c6:6d: 07:36:91:de:f8:d3:6f:b4:bb:88:b4:46:02:64:df: 98:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:37:DE:F1:33:51:9B:CB:63:D1:FB:32:0E:72:60:BB:D0:F9:A4:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf5f6b61-727e-3e6a-9d8b-063b57b35245.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:385::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:17:a0:9a:e6:25:3f:a9:0c:03:fa:7b:cc:25:c9:b3:36:f4: ba:60:e2:47:df:67:3a:0e:15:ed:b1:7f:87:cc:37:9e:0e:7c: eb:c2:40:27:bd:a7:a0:a5:0a:ba:67:e8:64:64:86:24:b3:a4: 7b:78:a0:c0:35:0d:81:4d:c0:27:1d:20:67:81:b3:40:ec:d8: 84:03:aa:a6:a3:6d:95:31:c8:46:f5:fc:df:04:88:64:40:c8: db:07:a9:3c:63:3e:70:5f:b6:7e:eb:63:cb:12:b7:4b:ca:25: 68:3d:5a:8a:cf:72:ef:91:da:31:8a:b7:34:09:ee:89:09:90: aa:34:3d:ac:8a:5a:de:75:c9:8d:15:84:61:11:19:af:06:99: c9:8e:b6:a0:d8:62:3a:66:02:de:39:86:d7:6d:01:8d:0a:7e: e8:41:8a:14:a9:b5:6f:0f:55:2a:b1:7d:d1:ba:e5:84:c7:6e: d5:e5:94:6a:96:d6:35:3a:eb:27:d2:b4:19:d1:81:4c:8f:a2: ed:a2:7c:11:0c:21:65:c9:57:f7:7b:43:d0:e1:b1:db:40:c7: 78:a9:2a:e5:c9:e4:5f:1d:28:32:6b:d4:45:51:74:cb:04:3e: cd:17:04:b9:57:2d:0e:6f:3a:13:f0:a8:e6:79:e8:68:ca:ec: b1:20:f5:58 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpK1Yv2VGGcsKwc0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDYyNDAxMDA1MFoXDTI1MDkyMjAxMDA1MFowLzEtMCsGA1UEAxMk NjQ3MjQ3NDgtMmNmYS00N2NmLTkwYTAtYTJiMTkyZjNkZmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuQpV89fXPO3VTC7FdCh5Y5zwqeQp5rLqHuP F5sj4By8IelUys0Uizoe3LRhZSIKy8+na76j3UIHX0RCwhCYxKVetj7Xphkp4/wf ftcbofu7nqBGoKAapNNc5aJI4JJ+e7/ISoji8oH9niQDBz3fQr8vClZ0w7HYVjLF v8UWfBrmKFENFTlsLOxMrYxNC73/bTAQKIk2uX9cILraL2aPzTlyg59wpDR2kEJr ydrBKqCH15jbAkY4AV/CFMHoQNnGaUD2pih7FwdjPmUqmijiQe/6KGXuulnqeu6D 2cJm23lq83uKfp2FKwJMrE9sxm0HNpHe+NNvtLuItEYCZN+Y4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPw33vEzUZvLY9H7Mg5yYLvQ+aT8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmY1ZjZiNjEtNzI3ZS0z ZTZhLTlkOGItMDYzYjU3YjM1MjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADkXoJrmJT+pDAP6e8wlybM29Lpg4kffZzoOFe2xf4fMN54OfOvC QCe9p6ClCrpn6GRkhiSzpHt4oMA1DYFNwCcdIGeBs0Ds2IQDqqajbZUxyEb1/N8E iGRAyNsHqTxjPnBftn7rY8sSt0vKJWg9WorPcu+R2jGKtzQJ7okJkKo0PayKWt51 yY0VhGERGa8GmcmOtqDYYjpmAt45htdtAY0KfuhBihSptW8PVSqxfdG65YTHbtXl lGqW1jU66yfStBnRgUyPou2ifBEMIWXJV/d7Q9DhsdtAx3ipKuXJ5F8dKDJr1EVR dMsEPs0XBLlXLQ5vOhPwqOZ56GjK7LEg9Vg= -----END CERTIFICATE-----Generated at Sun Jun 29 13:24:11 2025 by rpki-client