$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/686a3bc1-b910-3fad-b45e-507aac425894.roa File: 686a3bc1-b910-3fad-b45e-507aac425894.roa (raw, json) Hash identifier: DMim9SCXzK6uzX8M3VH8xRezyGsf+HXCp/GD5Ygd0A8= Subject key identifier: 11:04:5B:69:30:91:B8:90:D4:07:B9:39:9C:B8:9A:30:97:0D:4D:3C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A3E45BC5BD16CE8E3CB03A1D0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/686a3bc1-b910-3fad-b45e-507aac425894.roa Signing time: Thu 19 Jun 2025 13:01:02 +0000 ROA not before: Thu 19 Jun 2025 13:01:02 +0000 ROA not after: Wed 17 Sep 2025 13:01:02 +0000 asID: 397376 IP address blocks: 2001:470:254::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:45:bc:5b:d1:6c:e8:e3:cb:03:a1:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 19 13:01:02 2025 GMT Not After : Sep 17 13:01:02 2025 GMT Subject: CN=79745dbf-65f9-4fe0-a704-b1883bb40db2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7b:89:95:e6:a7:e1:e3:b7:84:c9:10:a5:5c: d5:94:58:cb:bd:56:29:e5:80:b4:00:12:bf:69:6a: 3a:1e:7d:66:97:41:c6:f8:19:4c:1a:cd:19:c6:58: 43:49:27:e4:00:f0:ae:89:2a:b4:b1:36:17:ce:e4: 89:3f:7e:47:07:ec:f1:40:5d:c5:37:0d:0a:b3:c8: 7f:5b:34:f0:d1:e7:8e:f5:da:81:cd:0f:fb:82:a9: 42:09:0c:16:9c:8d:84:4e:ea:5f:ed:d4:30:a1:45: cd:81:60:b0:99:f0:03:02:69:31:84:3d:63:a6:c2: f0:d0:93:de:f9:26:5b:06:fc:44:cd:de:06:6b:f4: 1c:fc:cd:f9:b3:52:d2:ce:c8:a9:0f:82:2a:95:7e: a5:83:df:66:38:6a:2b:af:d5:f4:ff:a0:d5:ef:67: cc:2c:46:61:44:b6:07:3a:8e:94:18:8c:2f:10:f8: 41:eb:29:17:75:36:cf:df:b7:5a:4d:22:3e:b4:82: ca:c2:39:15:98:b1:33:a9:88:f6:6a:ab:99:78:5b: 90:6f:e7:e4:43:4f:90:15:a3:03:75:e2:f3:6d:f1: a4:94:20:79:98:aa:31:24:98:51:f6:9d:17:9b:80: bb:80:e3:14:8d:dc:3b:72:4e:fc:c4:cd:47:86:f0: 71:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:04:5B:69:30:91:B8:90:D4:07:B9:39:9C:B8:9A:30:97:0D:4D:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/686a3bc1-b910-3fad-b45e-507aac425894.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:254::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:77:46:3b:a3:7c:b8:e8:c3:d0:2a:05:23:72:e9:42:5f:ed: 35:52:4a:a6:f7:86:d9:ad:7d:4c:b0:52:bb:4f:00:e6:0b:9d: 9d:da:9e:48:a0:85:28:0c:1f:92:9d:77:db:ee:0a:31:12:c6: 7b:4a:85:24:d1:0a:7e:3b:a5:d2:6c:18:f6:32:5b:6f:3e:8e: 8a:a0:02:c0:ef:1d:63:f7:5a:5d:05:09:c9:3a:24:13:81:9d: 56:47:7c:4f:c8:9a:32:00:a0:bc:aa:60:24:4b:8f:3b:c8:af: e9:9e:9a:3c:0a:61:f6:dc:be:f2:c1:cb:24:09:96:fb:b8:b4: 63:ec:ae:ec:6a:59:1b:56:40:bd:9c:6c:72:e8:bf:10:e5:c6: a2:77:2c:eb:6d:e8:01:59:5b:83:d7:09:e2:7c:ce:06:5b:8b: 27:1e:fe:49:c6:63:12:66:31:f8:dc:89:07:de:8c:5a:1c:70: bc:4b:28:bb:a7:37:cb:21:1e:0c:fe:58:72:ff:92:e4:5e:04: d1:2e:66:f8:17:6b:9f:94:12:ab:31:bb:bc:ff:02:a4:73:79: a7:34:6f:21:46:e6:6d:9a:cf:9f:c0:5f:49:54:41:6a:9a:66: 88:b1:5e:33:23:ab:db:05:8e:69:a9:5d:75:e9:aa:8d:2e:e8: 53:a5:40:3f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo+Rbxb0Wzo48sDodAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDYxOTEzMDEwMloXDTI1MDkxNzEzMDEwMlowLzEtMCsGA1UEAxMk Nzk3NDVkYmYtNjVmOS00ZmUwLWE3MDQtYjE4ODNiYjQwZGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHuJlean4eO3hMkQpVzVlFjLvVYp5YC0ABK/ aWo6Hn1ml0HG+BlMGs0ZxlhDSSfkAPCuiSq0sTYXzuSJP35HB+zxQF3FNw0Ks8h/ WzTw0eeO9dqBzQ/7gqlCCQwWnI2ETupf7dQwoUXNgWCwmfADAmkxhD1jpsLw0JPe +SZbBvxEzd4Ga/Qc/M35s1LSzsipD4IqlX6lg99mOGorr9X0/6DV72fMLEZhRLYH Oo6UGIwvEPhB6ykXdTbP37daTSI+tILKwjkVmLEzqYj2aquZeFuQb+fkQ0+QFaMD deLzbfGklCB5mKoxJJhR9p0Xm4C7gOMUjdw7ck78xM1HhvBxgwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBEEW2kwkbiQ1Ae5OZy4mjCXDU08MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNjg2YTNiYzEtYjkxMC0z ZmFkLWI0NWUtNTA3YWFjNDI1ODk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALR3RjujfLjow9AqBSNy6UJf7TVSSqb3htmtfUywUrtPAOYLnZ3a nkighSgMH5Kdd9vuCjESxntKhSTRCn47pdJsGPYyW28+joqgAsDvHWP3Wl0FCck6 JBOBnVZHfE/ImjIAoLyqYCRLjzvIr+memjwKYfbcvvLByyQJlvu4tGPsruxqWRtW QL2cbHLovxDlxqJ3LOtt6AFZW4PXCeJ8zgZbiyce/knGYxJmMfjciQfejFoccLxL KLunN8shHgz+WHL/kuReBNEuZvgXa5+UEqsxu7z/AqRzeac0byFG5m2az5/AX0lU QWqaZoixXjMjq9sFjmmpXXXpqo0u6FOlQD8= -----END CERTIFICATE-----Generated at Sun Jun 29 14:43:05 2025 by rpki-client