$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8c97ed1-3c86-33be-bfc2-001f656c1b95.roa File: c8c97ed1-3c86-33be-bfc2-001f656c1b95.roa (raw, json) Hash identifier: K9AgYkN4Ku4a0Fkf7Vyg8m9XvKB/9WZbiMquj1lr6xk= Subject key identifier: AD:89:DC:80:5F:CE:C8:05:41:7C:43:A9:34:79:3F:05:C4:69:1C:CC Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849AFE49968FAECE5F33796C400 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8c97ed1-3c86-33be-bfc2-001f656c1b95.roa Signing time: Tue 29 Apr 2025 13:00:52 +0000 ROA not before: Tue 29 Apr 2025 13:00:52 +0000 ROA not after: Mon 28 Jul 2025 13:00:52 +0000 asID: 54004 IP address blocks: 2001:470:411::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:af:e4:99:68:fa:ec:e5:f3:37:96:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 29 13:00:52 2025 GMT Not After : Jul 28 13:00:52 2025 GMT Subject: CN=737be22d-1cf4-438f-ab5f-e5a26d7b4226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cc:39:1b:f2:0c:8a:f7:31:82:43:3a:01:86: 88:21:60:ba:3f:34:9a:cd:36:22:c5:4a:50:c1:cf: 1f:1f:73:6d:3a:30:a7:50:60:4c:87:d6:0d:90:9b: 46:ba:5e:49:32:88:20:48:fc:1f:79:3e:08:5b:c3: 99:e6:47:0a:68:70:10:ad:9d:da:27:ef:f7:2a:f0: 9c:2a:89:e2:93:fd:01:bd:ac:a9:7a:ab:33:23:0a: 88:08:0f:c0:58:4d:3f:3f:39:9e:a3:74:6b:15:97: fa:b9:f3:7d:52:14:20:db:2f:32:0b:8e:d6:1b:9f: 37:10:88:12:b5:9c:39:d2:77:a7:0f:8a:6b:d5:59: cb:ec:47:b2:3f:e3:32:ba:ac:a1:dc:3e:0e:f2:7a: 4c:e7:ff:6c:49:f0:56:90:61:9b:92:83:44:90:93: 6f:25:2f:48:ae:b3:32:83:ed:d6:4b:87:ce:1c:a5: 15:ec:08:06:b8:77:2e:84:f5:cf:3c:0d:96:4e:c9: 55:1d:4c:2c:5b:6b:2a:e7:c0:93:23:76:49:bf:49: 56:81:90:0f:8a:8c:2a:aa:9a:5b:40:72:01:fb:44: bc:0d:4c:f5:a7:d1:62:4b:0a:e6:37:89:b9:48:04: e9:e7:dc:c5:c2:4c:4f:d1:e1:7a:f4:1c:b5:ee:5f: 9b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:89:DC:80:5F:CE:C8:05:41:7C:43:A9:34:79:3F:05:C4:69:1C:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8c97ed1-3c86-33be-bfc2-001f656c1b95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:411::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:e2:de:3d:30:67:88:5b:20:51:67:2d:c0:2a:25:13:77:27: e5:06:01:de:54:59:3f:54:11:90:1a:05:f7:d6:88:ec:2e:21: c5:4b:c6:4e:b6:75:13:03:c9:b6:50:ab:39:bc:0d:14:35:22: 95:a9:e6:61:2a:8b:f0:30:2f:43:a3:78:71:6f:00:d6:a6:7e: 99:7d:30:0f:6f:50:19:24:f4:35:e3:c1:9a:58:ec:74:9b:74: 76:06:c7:09:72:01:f9:74:82:60:1e:0b:78:2a:dd:25:a2:f0: 46:71:2a:f0:3c:d6:96:fb:7a:dd:13:35:68:d4:81:5d:61:42: 7a:2d:8f:01:74:de:27:d5:3b:b3:9a:24:0b:c4:01:d1:14:76: 3f:0a:80:49:df:86:8a:8c:74:b3:29:e0:a8:84:4f:c3:6e:8e: d4:b0:05:bd:69:7b:32:41:3b:c9:b0:70:8d:52:85:ba:79:c4: 1d:24:87:4d:8f:b3:b0:34:21:39:45:89:17:73:70:dc:94:e1: ec:f0:bf:4f:32:32:07:96:43:b4:ad:3f:a6:a8:e1:51:cf:6d: bd:c1:30:5f:e6:34:49:19:1e:09:52:90:03:2b:83:7b:08:3d: 83:8f:83:8a:ea:7b:19:7b:7c:a7:c3:15:42:1c:0c:c9:48:17: 94:7a:29:b8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmv5Jlo+uzl8zeWxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDQyOTEzMDA1MloXDTI1MDcyODEzMDA1MlowLzEtMCsGA1UEAxMk NzM3YmUyMmQtMWNmNC00MzhmLWFiNWYtZTVhMjZkN2I0MjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusw5G/IMivcxgkM6AYaIIWC6PzSazTYixUpQ wc8fH3NtOjCnUGBMh9YNkJtGul5JMoggSPwfeT4IW8OZ5kcKaHAQrZ3aJ+/3KvCc Konik/0BvaypeqszIwqICA/AWE0/Pzmeo3RrFZf6ufN9UhQg2y8yC47WG583EIgS tZw50nenD4pr1VnL7EeyP+Myuqyh3D4O8npM5/9sSfBWkGGbkoNEkJNvJS9IrrMy g+3WS4fOHKUV7AgGuHcuhPXPPA2WTslVHUwsW2sq58CTI3ZJv0lWgZAPiowqqppb QHIB+0S8DUz1p9FiSwrmN4m5SATp59zFwkxP0eF69By17l+bCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK2J3IBfzsgFQXxDqTR5PwXEaRzMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzhjOTdlZDEtM2M4Ni0z M2JlLWJmYzItMDAxZjY1NmMxYjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALbi3j0wZ4hbIFFnLcAqJRN3J+UGAd5UWT9UEZAaBffWiOwuIcVL xk62dRMDybZQqzm8DRQ1IpWp5mEqi/AwL0OjeHFvANamfpl9MA9vUBkk9DXjwZpY 7HSbdHYGxwlyAfl0gmAeC3gq3SWi8EZxKvA81pb7et0TNWjUgV1hQnotjwF03ifV O7OaJAvEAdEUdj8KgEnfhoqMdLMp4KiET8NujtSwBb1pezJBO8mwcI1Shbp5xB0k h02Ps7A0ITlFiRdzcNyU4ezwv08yMgeWQ7StP6ao4VHPbb3BMF/mNEkZHglSkAMr g3sIPYOPg4rqexl7fKfDFUIcDMlIF5R6Kbg= -----END CERTIFICATE-----Generated at Mon May 5 05:12:39 2025 by rpki-client