$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6ca5d153-3729-3651-8bee-d8a2635e2780.roa File: 6ca5d153-3729-3651-8bee-d8a2635e2780.roa (raw, json) Hash identifier: 1OmDbNmBEmRfE9zpFyKFfI6Yhu8lq4GrQzhiJzUNv0k= Subject key identifier: 46:28:0C:46:C4:A3:5F:3A:11:92:65:76:12:6A:71:1B:E8:B2:A1:D4 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A103532179C3CEB041DE13C40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6ca5d153-3729-3651-8bee-d8a2635e2780.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 49461 IP address blocks: 2001:470:427::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:32:17:9c:3c:eb:04:1d:e1:3c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=f27ce19a-3212-4207-94ac-4c7250d1c2c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d2:a0:ed:59:74:4f:44:9d:98:5f:9d:77:ca: 1f:5b:dd:0c:7a:5e:a8:c8:2a:f7:c8:0f:e0:04:f7: 50:99:be:88:bc:86:ff:12:fa:ac:c3:70:8d:17:83: 9a:18:b9:30:03:b5:d4:a0:02:a6:bd:fe:af:9b:c5: 67:60:ef:c0:61:e2:d4:a1:19:5f:21:f9:cc:cf:65: 31:e5:fb:a2:52:9e:81:31:c5:93:89:2b:63:8d:4b: 35:4d:5f:0a:52:f0:12:8d:31:85:bc:9c:07:02:c5: e6:75:12:45:e1:cf:b0:9a:31:7e:97:10:dc:82:09: 23:96:66:45:75:f1:3d:0f:e5:f9:bf:7f:8d:56:ee: f9:bc:a1:de:72:90:f6:51:5e:b6:aa:5e:b4:66:d6: 85:83:80:d7:0a:73:4b:3f:cf:31:e9:db:31:d6:e4: 85:3a:b7:e4:4d:6c:d6:3f:00:5b:6c:d8:39:c0:15: 49:c1:08:0e:c1:af:cd:b9:b0:0e:2c:c5:41:a1:7d: 13:c3:c3:f6:67:13:39:61:a1:56:6d:13:61:29:cd: ef:66:de:6e:40:bb:65:1e:e7:93:89:6d:12:f8:88: d4:60:83:75:3c:fa:67:7a:d9:93:32:1d:87:f2:05: f6:30:36:13:f4:9b:c4:26:78:4d:40:0e:20:87:d5: 57:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:28:0C:46:C4:A3:5F:3A:11:92:65:76:12:6A:71:1B:E8:B2:A1:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6ca5d153-3729-3651-8bee-d8a2635e2780.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:427::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:33:35:f3:83:76:2e:ec:6c:11:1b:02:25:36:6e:65:be:b9: 56:c5:d6:6b:6d:40:2c:31:cc:54:a9:32:57:e4:68:d5:0b:8b: f8:cd:80:7a:7d:8e:6a:84:dc:49:d9:55:f1:fc:18:1f:78:5c: 66:0d:7d:ec:86:51:47:b8:42:77:1f:1a:10:8b:a0:9d:ba:4e: a3:b4:19:cd:fc:6c:42:db:60:b1:d9:bb:d7:50:c8:99:5d:f6: 01:20:be:c8:a1:6a:f4:31:b5:e4:05:f0:a9:10:f7:85:da:4c: 7b:f2:77:8f:1e:c7:2e:1a:bf:e0:7a:57:7d:f9:1e:82:f6:4a: 7b:3c:07:d5:ec:5b:d1:aa:1f:05:2b:f5:9f:13:f7:64:4e:05: 14:08:9d:68:61:b3:1c:ab:0b:f8:10:56:a3:b5:c0:7a:e7:7a: 34:ff:2e:a6:18:1f:10:6b:b2:23:d8:d5:72:63:41:a4:1a:e7: d8:3d:b0:15:16:38:39:df:80:47:c5:c7:cd:16:be:41:82:a8: 24:6d:a8:88:4c:86:59:bb:62:5c:32:37:81:0b:22:07:9a:8b: ab:42:5f:11:48:6a:1b:25:4e:e4:72:9d:d2:cf:1b:ce:d3:75: a3:c2:00:a0:c8:11:66:8a:16:78:9f:14:ac:c3:c9:09:93:25: 1d:4a:d1:12 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoQNTIXnDzrBB3hPEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk ZjI3Y2UxOWEtMzIxMi00MjA3LTk0YWMtNGM3MjUwZDFjMmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNKg7Vl0T0SdmF+dd8ofW90Mel6oyCr3yA/g BPdQmb6IvIb/Evqsw3CNF4OaGLkwA7XUoAKmvf6vm8VnYO/AYeLUoRlfIfnMz2Ux 5fuiUp6BMcWTiStjjUs1TV8KUvASjTGFvJwHAsXmdRJF4c+wmjF+lxDcggkjlmZF dfE9D+X5v3+NVu75vKHecpD2UV62ql60ZtaFg4DXCnNLP88x6dsx1uSFOrfkTWzW PwBbbNg5wBVJwQgOwa/NubAOLMVBoX0Tw8P2ZxM5YaFWbRNhKc3vZt5uQLtlHueT iW0S+IjUYIN1PPpnetmTMh2H8gX2MDYT9JvEJnhNQA4gh9VXLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEYoDEbEo186EZJldhJqcRvosqHUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNmNhNWQxNTMtMzcyOS0z NjUxLThiZWUtZDhhMjYzNWUyNzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB8zNfODdi7sbBEbAiU2bmW+uVbF1mttQCwxzFSpMlfkaNULi/jN gHp9jmqE3EnZVfH8GB94XGYNfeyGUUe4QncfGhCLoJ26TqO0Gc38bELbYLHZu9dQ yJld9gEgvsihavQxteQF8KkQ94XaTHvyd48exy4av+B6V335HoL2Sns8B9XsW9Gq HwUr9Z8T92ROBRQInWhhsxyrC/gQVqO1wHrnejT/LqYYHxBrsiPY1XJjQaQa59g9 sBUWODnfgEfFx80WvkGCqCRtqIhMhlm7YlwyN4ELIgeai6tCXxFIahslTuRyndLP G87TdaPCAKDIEWaKFnifFKzDyQmTJR1K0RI= -----END CERTIFICATE-----Generated at Mon Jun 9 22:59:24 2025 by rpki-client