$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d59d504d-c28c-3f8d-9858-c1f3f4a30c46.roa File: d59d504d-c28c-3f8d-9858-c1f3f4a30c46.roa (raw, json) Hash identifier: BcEstn3Cuem9GO2PpLX7PlA0HYxfwGsnjYFIfq6xHEg= Subject key identifier: B8:B0:2A:2E:9B:30:6A:2E:67:7B:AA:6E:D5:C9:4D:7F:54:35:66:D0 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A49707DDB490FCE20AE9B2D80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d59d504d-c28c-3f8d-9858-c1f3f4a30c46.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 46440 IP address blocks: 2001:470:3f0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:7d:db:49:0f:ce:20:ae:9b:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=b0bbcb83-b9e9-408c-bb91-ccaecd7125d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2b:72:ef:a8:76:06:51:81:9d:e5:4a:36:56: 5e:c5:e0:ce:e7:cf:b6:36:b2:26:fa:91:d3:61:73: 1f:f4:63:a0:a8:16:d9:f7:4b:39:08:75:bc:ed:b0: 4e:c1:1c:a1:bc:97:b6:68:ab:b0:07:77:e9:d0:c0: e5:6b:56:a2:0e:28:9a:5a:5f:47:c8:0f:a8:5e:b9: f4:58:f2:df:7a:cf:b6:cf:f2:1d:44:d6:49:5d:fc: 95:9b:af:bb:11:49:3a:10:ee:21:7e:4d:12:0d:b5: 44:ea:49:da:7b:7f:ad:73:0a:3f:5f:f0:9c:50:07: 0d:99:57:35:bb:a2:67:25:d2:61:bb:5b:83:e8:7b: 05:29:60:99:69:f2:05:23:cc:70:80:3a:c6:14:6b: 9d:f3:4a:b3:ec:0c:3e:f0:24:4e:4f:f6:32:99:e5: 3f:cd:f0:eb:0f:ec:f4:4c:13:6d:01:55:3f:8f:8c: d8:05:71:4c:c1:28:ec:98:63:d8:9c:83:57:29:34: 31:11:cf:f7:94:74:5b:b1:33:13:4f:d3:c3:78:e0: 92:07:5e:5c:99:d0:5a:6c:6c:d5:92:10:54:39:a3: 74:3a:8c:72:8c:d8:3c:e5:70:b2:e3:8e:31:0a:9d: 4b:a8:78:b7:bc:e8:c0:bc:aa:18:2c:3d:91:71:be: 19:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B0:2A:2E:9B:30:6A:2E:67:7B:AA:6E:D5:C9:4D:7F:54:35:66:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d59d504d-c28c-3f8d-9858-c1f3f4a30c46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3f0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:32:6a:df:a6:be:5b:97:b8:b7:5a:5d:0e:7c:d6:69:67:73: e0:b5:5c:95:e2:dc:ed:04:af:84:ed:5b:ab:e4:a9:93:c7:67: 58:46:15:d5:aa:bd:3e:6f:8d:21:91:f7:af:98:5f:fe:9d:c8: 3c:d6:1a:71:17:e7:ad:9b:d0:81:0d:f5:89:30:5e:e3:9c:68: 25:a5:a1:b7:4f:42:dc:9c:0e:02:e4:7c:07:f9:ca:f7:65:2b: 40:f1:bd:e3:0f:c9:e4:a9:ba:08:c6:9b:3a:18:6b:fc:2a:d1: e5:3c:64:66:1c:2c:09:b9:42:39:36:d7:a7:d3:81:83:f3:74: da:e7:b7:7d:be:c5:92:fc:88:58:32:18:b4:3a:b6:6b:5a:cb: 61:d2:77:41:1b:ca:c0:98:9f:01:bb:66:6f:6d:fe:c3:2d:82: 3b:92:90:95:b1:72:53:a4:cb:ce:cb:d8:6f:05:a6:94:65:66: bd:24:59:24:01:70:89:63:ce:ca:f7:5b:20:45:6b:51:e8:3c: 26:4a:80:d1:22:a1:81:77:a4:59:b9:da:03:75:af:4c:ad:0f: 8b:4d:fa:2f:ee:44:fc:86:fc:f3:b8:5d:81:b3:1b:a0:b5:ba: bd:9f:ae:ec:74:6d:44:8d:fa:40:36:8a:5b:db:79:e5:a3:d2: 46:73:bd:89 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpJcH3bSQ/OIK6bLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk YjBiYmNiODMtYjllOS00MDhjLWJiOTEtY2NhZWNkNzEyNWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyity76h2BlGBneVKNlZexeDO58+2NrIm+pHT YXMf9GOgqBbZ90s5CHW87bBOwRyhvJe2aKuwB3fp0MDla1aiDiiaWl9HyA+oXrn0 WPLfes+2z/IdRNZJXfyVm6+7EUk6EO4hfk0SDbVE6knae3+tcwo/X/CcUAcNmVc1 u6JnJdJhu1uD6HsFKWCZafIFI8xwgDrGFGud80qz7Aw+8CROT/YymeU/zfDrD+z0 TBNtAVU/j4zYBXFMwSjsmGPYnINXKTQxEc/3lHRbsTMTT9PDeOCSB15cmdBabGzV khBUOaN0OoxyjNg85XCy444xCp1LqHi3vOjAvKoYLD2Rcb4Z8QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLiwKi6bMGouZ3uqbtXJTX9UNWbQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDU5ZDUwNGQtYzI4Yy0z ZjhkLTk4NTgtYzFmM2Y0YTMwYzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHYyat+mvluXuLdaXQ581mlnc+C1XJXi3O0Er4TtW6vkqZPHZ1hG FdWqvT5vjSGR96+YX/6dyDzWGnEX562b0IEN9YkwXuOcaCWlobdPQtycDgLkfAf5 yvdlK0DxveMPyeSpugjGmzoYa/wq0eU8ZGYcLAm5Qjk216fTgYPzdNrnt32+xZL8 iFgyGLQ6tmtay2HSd0EbysCYnwG7Zm9t/sMtgjuSkJWxclOky87L2G8FppRlZr0k WSQBcIljzsr3WyBFa1HoPCZKgNEioYF3pFm52gN1r0ytD4tN+i/uRPyG/PO4XYGz G6C1ur2frux0bUSN+kA2ilvbeeWj0kZzvYk= -----END CERTIFICATE-----Generated at Sun Jun 29 12:25:50 2025 by rpki-client