$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f649b64c-b1c8-37c7-a759-999dac11fe16.roa File: f649b64c-b1c8-37c7-a759-999dac11fe16.roa (raw, json) Hash identifier: OTHOaiFqsw1aYoCvhrEh53dJ4eU9k8qlRDuH0UvPrEM= Subject key identifier: 9B:10:A9:72:63:37:93:AC:CB:85:F0:C1:A7:F0:B0:CB:91:40:37:F1 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849BDDA151EDD55EF26A216C700 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f649b64c-b1c8-37c7-a759-999dac11fe16.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 213981 IP address blocks: 2001:470:414::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:15:1e:dd:55:ef:26:a2:16:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=5bf04de1-eaa0-4e9d-aecd-4cac34d89868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:65:df:f5:80:f1:db:05:a2:24:02:49:02:99: 7b:fa:e5:58:d8:16:3f:d3:0f:29:f2:12:9a:71:d6: 16:a1:a2:be:f5:73:c9:e7:65:45:1d:d1:7e:30:6c: 04:90:c9:a1:a6:1f:42:d7:d0:c5:3c:ca:63:ec:7d: 3b:16:f2:ba:5e:d3:15:07:98:a2:f1:a8:e2:4b:07: 39:70:b2:5c:cb:25:26:e1:03:83:29:63:cc:f8:b0: 9c:40:05:42:9c:cf:b5:6c:4b:0e:93:05:f0:3d:01: 9a:fe:09:ea:83:25:34:10:80:3a:4f:94:c5:22:a9: 88:b6:0c:81:97:5f:59:24:49:50:3d:37:d4:97:03: 0f:af:86:cf:2f:ac:1d:e2:5f:d7:11:c9:6c:51:30: f9:29:f0:e0:1a:6d:f3:ba:e7:06:2c:be:54:66:04: f3:1e:4a:6e:d5:e4:f4:5f:5d:4b:2e:a6:b1:cb:67: 36:ea:02:38:f3:8a:53:ca:de:7e:da:78:84:4c:ec: 85:26:93:1d:95:a8:a5:f4:a3:e9:ef:bf:f7:5b:97: ce:90:85:d7:a2:c7:fe:84:46:11:a3:b4:6b:93:49: 4d:3b:ff:e7:49:1d:aa:b1:31:b9:a5:0d:ec:bc:31: 53:0f:a3:ef:1a:14:fe:6b:dd:f7:e7:0d:e1:7a:96: fb:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:10:A9:72:63:37:93:AC:CB:85:F0:C1:A7:F0:B0:CB:91:40:37:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f649b64c-b1c8-37c7-a759-999dac11fe16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:414::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:4e:6e:2c:79:ba:5b:ac:bd:e1:c8:9b:39:8f:d4:68:4e:27: 29:a4:fc:e7:5a:31:2b:98:19:31:30:42:91:48:a0:99:3f:23: 8a:4c:47:f6:04:6f:5b:92:5e:08:59:ae:44:52:90:7e:70:61: cc:01:7e:c1:6a:dc:fd:05:5e:d9:4f:23:91:2a:46:fc:a4:b4: 08:25:34:51:2b:a0:b2:1f:b9:a8:54:0f:7c:58:f0:55:cb:85: 8e:04:c3:26:f2:51:cb:20:cc:80:ac:e2:1f:87:03:9b:33:d9: 72:7e:a9:aa:cb:be:81:ed:32:d2:d5:04:3f:9c:a4:3f:df:e9: aa:5b:4e:b4:db:66:ee:f9:32:01:af:75:54:9b:02:18:d6:f6: 42:55:5c:1e:f9:69:79:fb:bd:c0:24:01:32:00:ef:a1:9c:54: 48:e2:8f:bb:14:c8:e9:11:a2:6d:0f:7e:50:c7:d6:e0:2b:9b: f6:ba:5f:04:60:b1:a7:9c:9f:50:7f:4e:15:05:75:8c:cc:ae: 30:3b:99:79:2a:aa:f3:19:60:2a:40:3d:bc:21:83:52:1a:81: 5a:8d:3a:21:0f:4c:96:67:8b:fb:24:be:90:df:ef:c0:2b:f1: 54:07:26:cc:03:5b:e1:d3:9e:f1:f1:6d:ce:c1:14:bc:11:19: de:ec:0f:03 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm92hUe3VXvJqIWxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk NWJmMDRkZTEtZWFhMC00ZTlkLWFlY2QtNGNhYzM0ZDg5ODY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWXf9YDx2wWiJAJJApl7+uVY2BY/0w8p8hKa cdYWoaK+9XPJ52VFHdF+MGwEkMmhph9C19DFPMpj7H07FvK6XtMVB5ii8ajiSwc5 cLJcyyUm4QODKWPM+LCcQAVCnM+1bEsOkwXwPQGa/gnqgyU0EIA6T5TFIqmItgyB l19ZJElQPTfUlwMPr4bPL6wd4l/XEclsUTD5KfDgGm3zuucGLL5UZgTzHkpu1eT0 X11LLqaxy2c26gI484pTyt5+2niETOyFJpMdlail9KPp77/3W5fOkIXXosf+hEYR o7Rrk0lNO//nSR2qsTG5pQ3svDFTD6PvGhT+a9335w3hepb7vwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJsQqXJjN5Osy4XwwafwsMuRQDfxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjY0OWI2NGMtYjFjOC0z N2M3LWE3NTktOTk5ZGFjMTFmZTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABVObix5ulusveHImzmP1GhOJymk/OdaMSuYGTEwQpFIoJk/I4pM R/YEb1uSXghZrkRSkH5wYcwBfsFq3P0FXtlPI5EqRvyktAglNFEroLIfuahUD3xY 8FXLhY4EwybyUcsgzICs4h+HA5sz2XJ+qarLvoHtMtLVBD+cpD/f6apbTrTbZu75 MgGvdVSbAhjW9kJVXB75aXn7vcAkATIA76GcVEjij7sUyOkRom0PflDH1uArm/a6 XwRgsaecn1B/ThUFdYzMrjA7mXkqqvMZYCpAPbwhg1IagVqNOiEPTJZni/skvpDf 78Ar8VQHJswDW+HTnvHxbc7BFLwRGd7sDwM= -----END CERTIFICATE-----Generated at Tue May 6 02:59:00 2025 by rpki-client