$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f83f3b8c-5b3d-31ad-98a0-5a2366ba9cd2.roa File: f83f3b8c-5b3d-31ad-98a0-5a2366ba9cd2.roa (raw, json) Hash identifier: T3W4mfiZetuRKuQgtue4tFmUbXBlib624On/TSgxuP8= Subject key identifier: 8E:23:39:A8:64:CB:59:40:29:DE:61:F9:E2:B5:4C:A7:42:15:FC:AA Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FE411E77CDF04B86FE400 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f83f3b8c-5b3d-31ad-98a0-5a2366ba9cd2.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 13188 IP address blocks: 2001:470:23d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:e4:11:e7:7c:df:04:b8:6f:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=26caa3fe-cfc1-4960-a45d-f3bb5eb02425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:7f:94:35:27:78:30:7f:c6:11:f9:49:8a:b8: 78:86:ea:0f:61:c6:dc:b6:1a:c7:a5:94:d6:8e:2f: af:f1:2a:46:77:ad:87:9a:2e:0c:24:51:5f:a2:f5: e0:75:89:24:d6:c4:14:3b:6a:94:19:e3:aa:07:e1: ef:b5:50:7e:16:64:a4:a2:23:04:b2:a7:12:85:0a: a5:f0:30:3e:d2:17:e9:da:75:ac:99:15:ab:e7:c5: 65:7d:b6:1b:96:45:ac:fa:9f:2b:25:82:27:bc:f4: d4:e8:cd:44:8f:a5:42:2f:dd:d7:40:c6:39:a8:5e: 78:7a:f9:77:a9:b2:4e:30:40:76:92:a8:95:9c:4d: 96:9a:ff:9b:91:e6:22:88:d5:65:24:17:73:01:40: 21:e4:26:b5:30:96:91:fb:a4:aa:af:85:c6:23:6c: 86:70:d7:08:ea:90:c6:85:d3:31:58:af:8f:6f:19: d6:8a:4d:db:e1:5a:3b:4b:37:a3:2a:7a:d9:8e:1d: e7:84:62:aa:4c:84:36:15:44:5e:8e:2a:3c:6f:b1: 0c:af:2c:b2:3f:36:e0:ec:a2:03:ef:c3:76:07:57: fd:60:92:f6:ac:fd:f9:08:66:e5:2a:bb:25:31:29: 6a:af:d6:c3:77:95:d7:51:c3:cf:4f:df:5b:8a:ff: d1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:23:39:A8:64:CB:59:40:29:DE:61:F9:E2:B5:4C:A7:42:15:FC:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f83f3b8c-5b3d-31ad-98a0-5a2366ba9cd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:23d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:e7:85:81:75:fc:7e:9b:6c:74:2a:fc:ca:61:55:02:d5:dd: a0:64:ef:98:64:fa:de:25:aa:db:e1:69:18:4d:98:19:b6:41: 1a:4b:df:b1:f5:7c:0b:bb:8f:18:bb:8d:40:3c:e7:dd:c1:07: 72:01:e7:00:44:c8:82:ac:12:17:4a:60:d2:f2:49:83:e2:c4: bd:b6:ef:11:8b:b4:3d:58:7b:2d:aa:03:76:db:a7:3f:55:08: 56:34:62:72:11:62:17:85:a2:a1:81:8b:2f:ab:a0:8e:7e:ff: 5a:f6:52:2a:f7:55:ea:a9:b3:5c:bb:ab:d9:eb:08:9a:c0:28: 55:c8:3e:d0:27:f2:7a:d8:e9:a0:c4:ff:5a:3b:9d:e0:17:03: a2:ad:81:c8:e0:d1:ee:37:43:26:b8:30:ff:41:96:48:29:34: 14:9b:11:4a:24:0d:c3:ad:28:f7:d9:87:71:c0:b1:57:43:6e: 79:45:37:32:9d:1e:f3:6c:3d:8f:1c:9a:f5:c7:86:30:7f:18: a6:c5:e5:d1:42:aa:85:5c:d3:a5:35:c3:ab:49:ae:d8:8c:79: 46:ca:f8:ee:42:af:26:cd:58:8c:0e:62:92:44:62:6c:f9:a0: b0:a7:71:4d:68:ae:8d:a7:ee:d4:37:9e:98:a6:e2:62:ff:43: 81:1c:7e:99 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX+QR53zfBLhv5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk MjZjYWEzZmUtY2ZjMS00OTYwLWE0NWQtZjNiYjVlYjAyNDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAin+UNSd4MH/GEflJirh4huoPYcbcthrHpZTW ji+v8SpGd62Hmi4MJFFfovXgdYkk1sQUO2qUGeOqB+HvtVB+FmSkoiMEsqcShQql 8DA+0hfp2nWsmRWr58VlfbYblkWs+p8rJYInvPTU6M1Ej6VCL93XQMY5qF54evl3 qbJOMEB2kqiVnE2Wmv+bkeYiiNVlJBdzAUAh5Ca1MJaR+6Sqr4XGI2yGcNcI6pDG hdMxWK+PbxnWik3b4Vo7SzejKnrZjh3nhGKqTIQ2FURejio8b7EMryyyPzbg7KID 78N2B1f9YJL2rP35CGblKrslMSlqr9bDd5XXUcPPT99biv/RlwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI4jOahky1lAKd5h+eK1TKdCFfyqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjgzZjNiOGMtNWIzZC0z MWFkLTk4YTAtNWEyMzY2YmE5Y2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC7nhYF1/H6bbHQq/MphVQLV3aBk75hk+t4lqtvhaRhNmBm2QRpL 37H1fAu7jxi7jUA8593BB3IB5wBEyIKsEhdKYNLySYPixL227xGLtD1Yey2qA3bb pz9VCFY0YnIRYheFoqGBiy+roI5+/1r2Uir3Veqps1y7q9nrCJrAKFXIPtAn8nrY 6aDE/1o7neAXA6Ktgcjg0e43Qya4MP9BlkgpNBSbEUokDcOtKPfZh3HAsVdDbnlF NzKdHvNsPY8cmvXHhjB/GKbF5dFCqoVc06U1w6tJrtiMeUbK+O5CrybNWIwOYpJE Ymz5oLCncU1oro2n7tQ3npim4mL/Q4Ecfpk= -----END CERTIFICATE-----Generated at Sun Jun 29 13:47:34 2025 by rpki-client