$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cf1f8b6b-acea-3a99-a170-c2a070cbeaed.roa File: cf1f8b6b-acea-3a99-a170-c2a070cbeaed.roa (raw, json) Hash identifier: 6pxscZzBq91X5p65XKEtklRl00JKzIzXRegI5jA5JOk= Subject key identifier: E0:23:43:F4:C8:CE:8F:04:BE:28:FD:23:B1:6A:BA:55:C9:8A:6A:C4 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849AFE49921ED78BCA2BBD8AE40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cf1f8b6b-acea-3a99-a170-c2a070cbeaed.roa Signing time: Tue 29 Apr 2025 13:00:52 +0000 ROA not before: Tue 29 Apr 2025 13:00:52 +0000 ROA not after: Mon 28 Jul 2025 13:00:52 +0000 asID: 40762 IP address blocks: 2001:470:40f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:af:e4:99:21:ed:78:bc:a2:bb:d8:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 29 13:00:52 2025 GMT Not After : Jul 28 13:00:52 2025 GMT Subject: CN=377d0b97-27ec-439d-a5a8-e61b838e95f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:fd:31:cd:9a:7b:2c:73:25:e1:99:0c:92:8e: 67:7e:d7:28:88:c8:c8:30:3b:58:83:4e:92:8c:5f: be:7c:4c:63:7d:cf:94:14:eb:0e:5c:87:ab:4b:19: 62:9a:19:2b:36:6f:19:aa:5c:d0:7e:10:29:53:10: 00:81:8e:b9:d1:88:21:03:da:37:f0:3a:81:93:a6: ab:aa:b1:bd:fb:9a:d3:c4:ed:49:fe:e4:23:5c:86: 24:9d:f8:c9:71:e9:39:8f:a4:0f:0b:03:64:49:cf: 63:1f:a3:81:08:67:05:4c:8d:32:1f:c2:cd:ff:69: ff:f2:aa:4b:3c:71:f2:85:73:c3:c6:67:22:be:91: 3d:07:d6:c6:79:7c:39:ae:c3:f7:84:78:40:9b:d5: 00:80:48:eb:16:e2:7d:3f:31:a0:ac:0b:fd:98:b1: de:a2:dc:2c:0c:e3:0d:4a:4f:ed:82:39:94:1b:03: ca:75:9e:9d:0c:d0:f0:f7:77:ec:fa:c8:e7:30:80: 29:0b:f1:d2:13:05:4a:4c:c9:85:d3:19:0d:4e:74: e4:39:f0:af:59:0f:99:c8:0d:5b:7a:a4:88:69:28: f6:b8:d2:e4:a2:e6:b5:ba:60:2c:76:ef:b7:cd:a0: ca:70:f1:a6:fc:05:21:5e:2a:7b:ce:b1:7b:94:bd: 43:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:23:43:F4:C8:CE:8F:04:BE:28:FD:23:B1:6A:BA:55:C9:8A:6A:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cf1f8b6b-acea-3a99-a170-c2a070cbeaed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:40f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:e9:ec:e4:aa:1d:01:83:ad:77:45:aa:51:7f:7b:bb:a2:05: db:97:3e:8c:f2:93:87:4c:60:7d:3d:0c:92:2d:6e:5e:f8:8b: 4b:36:96:d3:e5:8e:6d:0d:f5:2d:bb:31:89:0c:12:ca:aa:c7: ed:49:51:83:5f:0b:ae:ad:1b:c4:8d:71:ed:84:e7:25:99:3a: 03:3c:56:93:79:a5:96:4a:c8:d7:53:b0:69:65:15:ab:9d:58: 8c:50:63:ab:c4:e3:15:5b:a5:f1:6e:9a:32:84:50:10:f9:60: 52:f8:e2:3e:71:e4:f4:6f:3e:7d:cf:a7:1a:b8:1b:41:ed:78: 27:2a:74:a6:0f:c5:86:71:a1:5e:49:bf:cf:fc:01:4d:07:6e: b2:54:95:28:e8:49:23:e1:b0:6b:30:98:cb:94:1b:58:ef:ce: 5d:55:25:e3:f6:af:e5:f3:57:d3:d9:dc:55:22:af:d8:6a:e1: 53:2a:f1:b2:24:b5:b2:4a:94:52:15:4c:28:d0:81:55:bb:37: df:35:57:ee:f8:e6:2c:9f:42:37:a0:f6:b3:ef:1e:1d:e6:98: 04:f9:43:93:17:2c:27:da:07:1a:d7:0c:93:fd:8c:bb:83:5c: e5:11:3f:a4:26:ca:75:e3:0e:6d:2a:94:36:a6:84:af:96:ac: 6e:e3:df:19 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmv5Jkh7Xi8orvYrkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDQyOTEzMDA1MloXDTI1MDcyODEzMDA1MlowLzEtMCsGA1UEAxMk Mzc3ZDBiOTctMjdlYy00MzlkLWE1YTgtZTYxYjgzOGU5NWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/0xzZp7LHMl4ZkMko5nftcoiMjIMDtYg06S jF++fExjfc+UFOsOXIerSxlimhkrNm8ZqlzQfhApUxAAgY650YghA9o38DqBk6ar qrG9+5rTxO1J/uQjXIYknfjJcek5j6QPCwNkSc9jH6OBCGcFTI0yH8LN/2n/8qpL PHHyhXPDxmcivpE9B9bGeXw5rsP3hHhAm9UAgEjrFuJ9PzGgrAv9mLHeotwsDOMN Sk/tgjmUGwPKdZ6dDNDw93fs+sjnMIApC/HSEwVKTMmF0xkNTnTkOfCvWQ+ZyA1b eqSIaSj2uNLkoua1umAsdu+3zaDKcPGm/AUhXip7zrF7lL1DAQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOAjQ/TIzo8Evij9I7FqulXJimrEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvY2YxZjhiNmItYWNlYS0z YTk5LWExNzAtYzJhMDcwY2JlYWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHLp7OSqHQGDrXdFqlF/e7uiBduXPozyk4dMYH09DJItbl74i0s2 ltPljm0N9S27MYkMEsqqx+1JUYNfC66tG8SNce2E5yWZOgM8VpN5pZZKyNdTsGll FaudWIxQY6vE4xVbpfFumjKEUBD5YFL44j5x5PRvPn3Ppxq4G0HteCcqdKYPxYZx oV5Jv8/8AU0HbrJUlSjoSSPhsGswmMuUG1jvzl1VJeP2r+XzV9PZ3FUir9hq4VMq 8bIktbJKlFIVTCjQgVW7N981V+745iyfQjeg9rPvHh3mmAT5Q5MXLCfaBxrXDJP9 jLuDXOURP6QmynXjDm0qlDamhK+WrG7j3xk= -----END CERTIFICATE-----Generated at Mon May 5 08:43:48 2025 by rpki-client