$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/604791c3-ca95-3430-bfe1-3667c48bd2ea.roa File: 604791c3-ca95-3430-bfe1-3667c48bd2ea.roa (raw, json) Hash identifier: e4xh0w/UGp0RjOqkzIFyo+wUOKCbHDyXCa+e355kV+0= Subject key identifier: C6:1B:CC:04:92:5C:2F:1C:6F:B6:57:11:06:7F:BC:11:B1:CD:F4:CF Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A130E65EFB8CA87B4EE067260 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/604791c3-ca95-3430-bfe1-3667c48bd2ea.roa Signing time: Wed 04 Jun 2025 01:30:08 +0000 ROA not before: Wed 04 Jun 2025 01:30:08 +0000 ROA not after: Tue 02 Sep 2025 01:30:08 +0000 asID: 210215 IP address blocks: 2001:470:250::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:13:0e:65:ef:b8:ca:87:b4:ee:06:72:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 4 01:30:08 2025 GMT Not After : Sep 2 01:30:08 2025 GMT Subject: CN=53e5d076-4dc5-4950-b3e5-2a3ba3e85e64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2a:15:18:35:bb:6f:41:3f:5b:b8:9d:a3:1e: f0:54:5f:9f:d1:4a:35:26:23:58:e1:a2:22:91:e1: b1:3a:62:b5:f9:bc:b1:2e:f7:95:00:f4:fd:50:e2: 3d:14:54:c4:ed:90:99:29:ac:5e:d4:e0:42:7c:eb: 9d:ba:b1:b3:7d:48:53:e3:05:5a:48:bd:13:69:1b: 5a:76:bf:98:a8:28:42:31:75:b6:ef:95:b3:ed:83: 13:03:b9:55:fd:e0:db:ea:a5:06:f7:20:2a:b2:67: b8:be:74:0a:67:50:b3:5b:05:ce:c3:5c:c7:d8:b5: da:7a:60:8f:fb:fd:4b:6e:1c:d1:74:1f:71:48:86: 9d:38:73:cd:ac:93:a3:4d:df:dc:72:a7:7b:1e:76: 3b:e4:4c:99:af:50:16:b7:90:45:b8:c7:a3:1a:ed: 8e:07:2a:6d:d0:93:99:b4:64:44:52:af:b8:70:13: 69:45:96:1e:f0:9b:2f:99:3f:22:6e:03:c9:d8:d9: d4:90:1b:08:25:07:40:77:71:e6:e3:b1:3e:3c:7c: 4d:25:8b:05:1b:26:56:b1:59:d2:1d:66:29:7d:84: 2f:eb:78:23:93:ac:5d:3e:0d:7d:48:88:28:27:0c: 5a:ea:87:71:d2:86:e8:59:5e:31:f1:27:05:9e:7c: 2b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:1B:CC:04:92:5C:2F:1C:6F:B6:57:11:06:7F:BC:11:B1:CD:F4:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/604791c3-ca95-3430-bfe1-3667c48bd2ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:250::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:51:dd:1d:36:6a:96:4c:d4:a2:13:39:6e:74:f5:a7:ff:a2: 70:5e:cb:0e:b5:1b:b4:f2:b4:3f:e1:1c:c9:1d:63:c9:4a:fc: eb:03:3b:11:6e:69:f2:cc:88:e7:cf:f4:43:7b:8b:68:3e:b8: 58:bb:65:13:dc:ea:ac:fc:0a:95:fd:ed:b6:e2:09:20:f9:c6: 2d:db:90:82:73:d9:98:58:13:d7:fb:a6:5c:e0:50:da:f4:2d: 13:b0:b7:6c:2a:c2:62:71:a8:fa:74:57:f7:30:3d:d2:cd:01: f7:a3:1f:09:cf:89:81:47:e4:e4:c4:bf:2d:15:2e:5f:28:3a: 07:50:93:7e:62:05:b8:9c:7c:80:ad:8f:2a:53:c4:2d:fc:02: 3b:79:55:e0:33:05:42:47:9c:49:a7:cd:9d:78:b9:e1:29:38: bf:bd:8a:ea:ac:54:1a:b8:71:4f:9f:9b:16:79:17:20:ff:2e: 35:94:0c:ff:ff:03:84:6f:eb:7e:f4:a1:b9:72:52:83:70:e1: c7:56:fe:94:bc:c0:63:30:88:9e:8d:12:ca:02:55:57:bf:21: db:b0:c6:b6:36:a2:46:45:6f:88:fd:7a:aa:2d:68:f9:e4:f1: 2a:32:2e:86:5f:06:49:43:2d:a1:5c:b9:5b:0a:b8:dc:d8:35: b0:7d:f2:bc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoTDmXvuMqHtO4GcmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDYwNDAxMzAwOFoXDTI1MDkwMjAxMzAwOFowLzEtMCsGA1UEAxMk NTNlNWQwNzYtNGRjNS00OTUwLWIzZTUtMmEzYmEzZTg1ZTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSoVGDW7b0E/W7idox7wVF+f0Uo1JiNY4aIi keGxOmK1+byxLveVAPT9UOI9FFTE7ZCZKaxe1OBCfOudurGzfUhT4wVaSL0TaRta dr+YqChCMXW275Wz7YMTA7lV/eDb6qUG9yAqsme4vnQKZ1CzWwXOw1zH2LXaemCP +/1LbhzRdB9xSIadOHPNrJOjTd/ccqd7HnY75EyZr1AWt5BFuMejGu2OBypt0JOZ tGREUq+4cBNpRZYe8JsvmT8ibgPJ2NnUkBsIJQdAd3Hm47E+PHxNJYsFGyZWsVnS HWYpfYQv63gjk6xdPg19SIgoJwxa6odx0oboWV4x8ScFnnwrYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMYbzASSXC8cb7ZXEQZ/vBGxzfTPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNjA0NzkxYzMtY2E5NS0z NDMwLWJmZTEtMzY2N2M0OGJkMmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADpR3R02apZM1KITOW509af/onBeyw61G7TytD/hHMkdY8lK/OsD OxFuafLMiOfP9EN7i2g+uFi7ZRPc6qz8CpX97bbiCSD5xi3bkIJz2ZhYE9f7plzg UNr0LROwt2wqwmJxqPp0V/cwPdLNAfejHwnPiYFH5OTEvy0VLl8oOgdQk35iBbic fICtjypTxC38Ajt5VeAzBUJHnEmnzZ14ueEpOL+9iuqsVBq4cU+fmxZ5FyD/LjWU DP//A4Rv6370oblyUoNw4cdW/pS8wGMwiJ6NEsoCVVe/IduwxrY2okZFb4j9eqot aPnk8SoyLoZfBklDLaFcuVsKuNzYNbB98rw= -----END CERTIFICATE-----Generated at Sun Jun 8 04:57:40 2025 by rpki-client