$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cdfb66e4-27c6-35c1-8af5-d00d02307131.roa File: cdfb66e4-27c6-35c1-8af5-d00d02307131.roa (raw, json) Hash identifier: fA0kBX8dVBZFrNiCRcgKDzpsp4Ah6dOqlKwufN0oRxk= Subject key identifier: F0:44:90:20:80:27:83:4C:C8:DB:D9:2B:A6:62:B4:1E:01:A0:C4:5E Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FC1565D074BCDE9718580 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cdfb66e4-27c6-35c1-8af5-d00d02307131.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 398357 IP address blocks: 2001:470:1ac::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:c1:56:5d:07:4b:cd:e9:71:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=38b69306-d235-46f3-980f-47463994b36a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:66:ae:9b:5c:d7:0c:bd:9e:4a:68:71:23:aa: 61:bb:f5:75:84:01:fe:24:0f:b8:da:c4:61:96:b5: 8d:12:8b:36:dd:1f:e8:09:89:26:c2:ca:1e:d0:26: 8e:92:12:cf:56:41:14:42:91:37:a9:00:1c:ca:ec: 6f:50:49:37:82:2a:22:bc:72:b0:33:25:b6:0e:8f: 31:4f:4a:67:31:31:c1:d1:46:4d:b7:f3:fc:d1:71: 8e:35:63:02:f1:3e:08:1c:88:73:97:36:46:3d:b2: 82:0c:d1:d9:98:e2:7c:99:cf:5c:34:6e:40:f4:f1: b2:c2:06:12:d1:61:c8:70:43:7b:7a:73:0d:e2:82: 6d:2c:00:3d:40:c5:6d:71:66:16:9e:c6:ae:a5:fa: 64:14:c6:3b:50:2e:0e:b0:c3:32:a1:24:04:61:9a: 25:25:dd:4d:1c:72:dd:89:ae:40:76:a0:13:c9:74: 51:5f:14:66:62:c3:60:2e:01:b7:2d:b3:91:65:bf: e9:64:c7:93:36:65:f2:a4:d2:d1:85:c1:90:70:bc: 45:7b:f9:b7:a5:21:61:c4:32:15:a6:4f:e7:08:83: 49:2d:c6:cc:00:da:d7:0e:27:bd:ed:ed:c6:98:d1: 6a:89:4d:3a:8e:ea:42:44:89:01:91:06:19:e8:fc: ff:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:44:90:20:80:27:83:4C:C8:DB:D9:2B:A6:62:B4:1E:01:A0:C4:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cdfb66e4-27c6-35c1-8af5-d00d02307131.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1ac::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:65:f6:ae:72:9d:52:a7:b1:95:fc:9a:e5:d9:cd:05:49:cf: 53:88:e9:9b:98:28:07:84:1b:bc:d0:79:a6:5d:63:69:78:a3: 59:d5:20:d9:f0:85:ea:29:3f:e0:b1:e3:a1:f8:86:51:47:3a: 56:4f:d9:ca:1e:a0:81:a3:a9:f0:73:04:65:b5:4a:ba:43:d6: 9d:59:ce:65:bd:e1:2b:63:0b:56:1a:dc:e3:7e:46:2f:0d:60: de:44:38:9f:1e:1f:89:07:15:53:48:e6:70:40:29:e1:64:f4: a0:ff:0d:20:a7:2b:95:24:30:24:14:ef:7f:d7:99:62:c7:23: 49:38:03:60:a0:7f:d1:22:3b:07:b6:c8:2a:7a:7f:5b:71:4f: fe:0a:53:03:a6:0c:a0:d0:39:85:b9:a0:49:80:e1:cc:63:a4: 84:4e:6b:1b:1d:fc:a7:25:0d:9f:9a:f9:55:a8:f6:e5:ca:ee: 25:0e:b8:b1:ee:f0:f8:90:68:e1:de:ed:7e:4c:a3:bb:63:f2: 4d:82:f9:cb:e6:8a:bb:d9:d7:19:86:45:b9:7d:7a:02:86:c0: 1e:69:1f:df:0c:84:de:24:25:2e:93:0c:37:08:5c:5a:63:35: 9b:58:65:a9:70:96:63:60:ab:7b:0f:b1:2c:af:a0:ba:27:46: 7e:43:a2:9f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX8FWXQdLzelxhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk MzhiNjkzMDYtZDIzNS00NmYzLTk4MGYtNDc0NjM5OTRiMzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmaum1zXDL2eSmhxI6phu/V1hAH+JA+42sRh lrWNEos23R/oCYkmwsoe0CaOkhLPVkEUQpE3qQAcyuxvUEk3gioivHKwMyW2Do8x T0pnMTHB0UZNt/P80XGONWMC8T4IHIhzlzZGPbKCDNHZmOJ8mc9cNG5A9PGywgYS 0WHIcEN7enMN4oJtLAA9QMVtcWYWnsaupfpkFMY7UC4OsMMyoSQEYZolJd1NHHLd ia5AdqATyXRRXxRmYsNgLgG3LbORZb/pZMeTNmXypNLRhcGQcLxFe/m3pSFhxDIV pk/nCINJLcbMANrXDie97e3GmNFqiU06jupCRIkBkQYZ6Pz/JQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPBEkCCAJ4NMyNvZK6ZitB4BoMReMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvY2RmYjY2ZTQtMjdjNi0z NWMxLThhZjUtZDAwZDAyMzA3MTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAGs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKdl9q5ynVKnsZX8muXZzQVJz1OI6ZuYKAeEG7zQeaZdY2l4o1nV INnwheopP+Cx46H4hlFHOlZP2coeoIGjqfBzBGW1SrpD1p1ZzmW94StjC1Ya3ON+ Ri8NYN5EOJ8eH4kHFVNI5nBAKeFk9KD/DSCnK5UkMCQU73/XmWLHI0k4A2Cgf9Ei Owe2yCp6f1txT/4KUwOmDKDQOYW5oEmA4cxjpIROaxsd/KclDZ+a+VWo9uXK7iUO uLHu8PiQaOHe7X5Mo7tj8k2C+cvmirvZ1xmGRbl9egKGwB5pH98MhN4kJS6TDDcI XFpjNZtYZalwlmNgq3sPsSyvoLonRn5Dop8= -----END CERTIFICATE-----Generated at Sun Jun 29 13:23:54 2025 by rpki-client