$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d0044e76-f3b1-3724-9750-1131ab4b8be3.roa File: d0044e76-f3b1-3724-9750-1131ab4b8be3.roa (raw, json) Hash identifier: mhVLIhBR/ZMWN6ZwP1pK1H2XdHKz44GeXxAaQxl1cv0= Subject key identifier: 27:BE:81:0D:D9:98:6B:2F:0C:4B:60:54:E5:81:FF:4D:3E:56:40:CE Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A5344231D09B7C9EC82889E80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d0044e76-f3b1-3724-9750-1131ab4b8be3.roa Signing time: Fri 27 Jun 2025 01:30:09 +0000 ROA not before: Fri 27 Jun 2025 01:30:09 +0000 ROA not after: Thu 25 Sep 2025 01:30:09 +0000 asID: 22018 IP address blocks: 2001:470:421::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:53:44:23:1d:09:b7:c9:ec:82:88:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 27 01:30:09 2025 GMT Not After : Sep 25 01:30:09 2025 GMT Subject: CN=1708396d-ffef-449f-a811-e1133b135cd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bd:f3:fb:2f:98:21:b7:cc:11:41:27:fb:f8: b6:38:3c:ef:27:80:85:77:b2:8e:cc:9f:b6:f0:cb: fc:41:17:04:b3:0e:f6:ca:71:e8:cd:62:52:74:20: 14:0d:d9:32:2d:fb:92:72:fb:1d:8e:17:38:78:2f: 7f:b8:db:c4:78:37:28:73:39:f2:fd:97:f0:31:b2: a0:9a:c2:22:a5:9f:6c:a9:e3:c9:be:73:6c:64:f6: 85:1a:c1:2d:ec:08:6b:76:24:df:05:fb:3c:63:2e: 43:37:16:9e:b3:40:1c:4b:a6:0c:7d:cd:a7:af:af: 90:2b:28:f4:0a:56:12:ff:fc:54:c4:af:12:5d:3d: fd:e2:58:51:af:66:88:c2:b7:73:de:33:30:dd:6d: f2:5b:61:ce:fd:df:03:7b:23:64:ee:01:a2:e5:23: 98:0b:7c:25:2f:d7:46:c2:3f:65:09:d0:e1:6e:3b: 23:9f:13:cf:7d:3c:4d:59:86:f4:ae:81:cb:ab:b2: b3:2f:eb:0d:e0:7e:af:24:91:1a:5a:02:b1:9b:0a: aa:30:fa:8f:5f:bf:01:72:fb:7d:82:20:a1:dc:6d: 34:8d:e9:4e:c2:9c:9b:44:de:97:62:2e:11:ff:63: 0a:37:59:a9:b2:37:bc:23:ef:bf:15:31:df:d4:94: fb:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:BE:81:0D:D9:98:6B:2F:0C:4B:60:54:E5:81:FF:4D:3E:56:40:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d0044e76-f3b1-3724-9750-1131ab4b8be3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:421::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:19:24:8d:ed:27:3a:bb:5f:18:b6:ec:fa:0c:c5:de:1a:b0: 73:76:61:f3:81:57:56:7d:27:78:41:95:a0:25:3a:f7:48:b9: 1e:71:86:36:57:57:d7:3a:a4:94:bd:f2:54:e2:13:c8:09:ca: f7:a4:bc:9b:cf:de:13:bc:7e:1b:50:0a:fa:4d:9d:8f:1f:8b: 4f:a0:09:1f:2f:6e:c9:5e:e2:22:50:04:43:4a:6c:1e:ae:43: 3c:72:b5:6e:85:c9:08:24:03:a2:8e:99:6e:94:c6:d9:89:6b: f2:e2:05:a7:a6:0e:2f:2b:d1:ab:8f:1e:14:84:42:bb:0b:c9: ae:ad:f8:a5:28:b8:c0:ac:d5:4a:24:61:2d:40:30:58:25:72: 67:e4:c3:66:77:ec:c7:cc:85:1d:f6:c0:b4:eb:b6:f5:ac:53: 99:d7:b2:db:46:4f:a9:ce:c3:85:b4:0f:d7:2f:88:90:1d:ac: 3c:83:2b:b3:e3:e1:a4:ab:1b:d8:2a:c7:cc:36:9e:5d:36:a0: a4:42:eb:47:ea:8b:76:1c:b3:0c:00:3c:8d:ed:a8:23:a7:8a: 22:0e:f6:b4:6f:c9:b4:85:66:51:7b:37:6e:ae:10:6c:ac:d9: 0f:24:8b:09:e4:80:40:37:8a:0b:77:a2:44:72:5c:ff:35:96: 9e:ca:0b:d6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpTRCMdCbfJ7IKInoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDYyNzAxMzAwOVoXDTI1MDkyNTAxMzAwOVowLzEtMCsGA1UEAxMk MTcwODM5NmQtZmZlZi00NDlmLWE4MTEtZTExMzNiMTM1Y2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtL3z+y+YIbfMEUEn+/i2ODzvJ4CFd7KOzJ+2 8Mv8QRcEsw72ynHozWJSdCAUDdkyLfuScvsdjhc4eC9/uNvEeDcoczny/ZfwMbKg msIipZ9sqePJvnNsZPaFGsEt7AhrdiTfBfs8Yy5DNxaes0AcS6YMfc2nr6+QKyj0 ClYS//xUxK8SXT394lhRr2aIwrdz3jMw3W3yW2HO/d8DeyNk7gGi5SOYC3wlL9dG wj9lCdDhbjsjnxPPfTxNWYb0roHLq7KzL+sN4H6vJJEaWgKxmwqqMPqPX78Bcvt9 giCh3G00jelOwpybRN6XYi4R/2MKN1mpsje8I++/FTHf1JT7SQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCe+gQ3ZmGsvDEtgVOWB/00+VkDOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDAwNDRlNzYtZjNiMS0z NzI0LTk3NTAtMTEzMWFiNGI4YmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA8ZJI3tJzq7Xxi27PoMxd4asHN2YfOBV1Z9J3hBlaAlOvdIuR5x hjZXV9c6pJS98lTiE8gJyvekvJvP3hO8fhtQCvpNnY8fi0+gCR8vbsle4iJQBENK bB6uQzxytW6FyQgkA6KOmW6UxtmJa/LiBaemDi8r0auPHhSEQrsLya6t+KUouMCs 1UokYS1AMFglcmfkw2Z37MfMhR32wLTrtvWsU5nXsttGT6nOw4W0D9cviJAdrDyD K7Pj4aSrG9gqx8w2nl02oKRC60fqi3YcswwAPI3tqCOniiIO9rRvybSFZlF7N26u EGys2Q8kiwnkgEA3igt3okRyXP81lp7KC9Y= -----END CERTIFICATE-----Generated at Sun Jun 29 13:34:15 2025 by rpki-client