$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f4a650a5-f8ae-3060-a3c9-4cc01023e31a.roa File: f4a650a5-f8ae-3060-a3c9-4cc01023e31a.roa (raw, json) Hash identifier: OhbX3cQOGRL0BVhqvbuHuQV0/yy8SZQ4w370MtgUU+0= Subject key identifier: B4:C9:42:20:90:3F:21:A7:91:B6:C1:12:22:D4:9F:E0:1C:04:B9:89 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849BDDA16B2B23BCE1E74D53734 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f4a650a5-f8ae-3060-a3c9-4cc01023e31a.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 150178 IP address blocks: 2001:470:353::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:16:b2:b2:3b:ce:1e:74:d5:37:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=ee2651d4-a157-4d50-a6e3-64e5d2003fa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:31:2d:18:c7:43:f8:a0:e5:47:41:88:26:6d: 79:0d:11:4e:d6:bc:8f:c7:93:e2:8e:4e:0a:a5:0b: 0c:f2:e0:dd:5b:aa:51:78:bc:af:ab:8d:d0:b5:09: 53:8b:f9:08:3c:8a:9c:fb:a2:8b:46:06:2b:1b:b2: 7f:2a:65:c2:18:c4:11:bf:09:26:24:cd:68:8e:b6: ca:39:f0:78:03:35:00:01:48:a2:2e:57:48:43:24: 3f:af:4b:1b:cf:18:79:01:7c:a0:1d:dd:f6:57:46: 7b:79:72:e0:98:c1:0c:9f:38:45:14:b3:5e:3a:26: a9:9f:c9:37:10:47:3e:d7:bb:e0:7e:db:7e:5d:b8: 54:1a:88:14:c0:d9:c2:73:f0:cb:25:a9:c7:23:56: 98:5f:06:52:c1:56:b0:bc:ff:89:b0:bc:4d:33:db: 14:f5:1a:19:dc:65:0f:26:a3:f4:e6:f7:b2:5e:3c: ce:a1:07:fd:7f:b2:60:1b:56:14:e1:49:c0:1a:16: 6b:c9:91:6b:01:e9:5d:2e:e5:1a:97:3e:48:0c:36: 7b:19:cd:3b:50:f4:f0:17:4a:99:a0:f5:32:4c:8f: 5e:bf:8d:25:be:b6:e6:23:fc:b4:9b:d4:7c:0d:1d: 5f:6d:53:4a:08:23:49:ec:b5:d9:1d:14:07:c0:d2: 3c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C9:42:20:90:3F:21:A7:91:B6:C1:12:22:D4:9F:E0:1C:04:B9:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f4a650a5-f8ae-3060-a3c9-4cc01023e31a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:353::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:a3:18:68:55:1e:ce:91:b9:b9:a2:0a:e6:ff:91:32:03:d9: 0d:19:d5:2e:7b:73:78:0d:dd:cf:ab:6f:cc:ff:d7:f4:28:9b: 31:cc:24:43:6c:7c:89:d8:aa:99:07:8c:17:99:02:83:0d:2d: ba:4f:7f:3d:b4:88:b1:4d:44:17:c7:ba:d5:06:0d:af:04:a3: 01:02:13:fe:ad:c1:c5:5e:c6:8e:c1:51:7f:0c:6e:88:bc:d2: 86:51:95:4a:a6:d1:4d:8a:48:ad:9c:f3:1e:bc:67:1f:a5:22: b2:c4:dd:a0:f2:17:67:69:24:84:83:71:70:11:e8:1c:ad:7f: 10:cf:03:4b:6d:16:34:6d:b4:83:a9:c1:51:fb:76:a3:7d:b6: 1d:26:52:e1:a4:22:2a:46:66:f3:db:ba:ac:d4:c9:d8:7c:6b: d3:ef:83:9b:7e:89:07:cf:61:ae:f2:69:23:c9:11:70:19:51: 04:52:cf:06:e5:b1:60:c2:57:65:11:36:89:4a:c5:db:06:44: be:1e:97:aa:91:e1:dd:b5:fc:f9:88:f1:b8:4d:7d:c9:07:1c: e7:02:6b:9e:44:10:56:b3:e3:b9:c5:7a:9a:1b:46:29:01:0c: 09:dc:fe:ef:6e:25:42:af:d4:30:5d:61:28:50:80:4a:2a:94: 10:8f:81:3f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm92haysjvOHnTVNzQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk ZWUyNjUxZDQtYTE1Ny00ZDUwLWE2ZTMtNjRlNWQyMDAzZmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DEtGMdD+KDlR0GIJm15DRFO1ryPx5Pijk4K pQsM8uDdW6pReLyvq43QtQlTi/kIPIqc+6KLRgYrG7J/KmXCGMQRvwkmJM1ojrbK OfB4AzUAAUiiLldIQyQ/r0sbzxh5AXygHd32V0Z7eXLgmMEMnzhFFLNeOiapn8k3 EEc+17vgftt+XbhUGogUwNnCc/DLJanHI1aYXwZSwVawvP+JsLxNM9sU9RoZ3GUP JqP05veyXjzOoQf9f7JgG1YU4UnAGhZryZFrAeldLuUalz5IDDZ7Gc07UPTwF0qZ oPUyTI9ev40lvrbmI/y0m9R8DR1fbVNKCCNJ7LXZHRQHwNI80QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLTJQiCQPyGnkbbBEiLUn+AcBLmJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjRhNjUwYTUtZjhhZS0z MDYwLWEzYzktNGNjMDEwMjNlMzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcANT MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHOjGGhVHs6RubmiCub/kTID2Q0Z1S57c3gN3c+rb8z/1/QomzHM JENsfInYqpkHjBeZAoMNLbpPfz20iLFNRBfHutUGDa8EowECE/6twcVexo7BUX8M boi80oZRlUqm0U2KSK2c8x68Zx+lIrLE3aDyF2dpJISDcXAR6BytfxDPA0ttFjRt tIOpwVH7dqN9th0mUuGkIipGZvPbuqzUydh8a9Pvg5t+iQfPYa7yaSPJEXAZUQRS zwblsWDCV2URNolKxdsGRL4el6qR4d21/PmI8bhNfckHHOcCa55EEFaz47nFepob RikBDAnc/u9uJUKv1DBdYShQgEoqlBCPgT8= -----END CERTIFICATE-----Generated at Mon May 5 11:56:25 2025 by rpki-client